$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218616.roa File: AS218616.roa (raw, json) Hash identifier: IOFrAAZK/imgxgYm7fdcAUg/2AdKi7V1FTYlt0jyEqs= Subject key identifier: 78:E8:D3:C1:D8:1C:C3:94:73:D8:A8:31:EE:F2:F3:8C:DA:0F:C3:00 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1A5EC98CBA5277AEFC6095A8692D1DFD26EFD7EA Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218616.roa Signing time: Wed 04 Nov 2026 06:53:55 +0000 ROA not before: Wed 04 Nov 2026 06:48:55 +0000 ROA not after: Wed 03 Nov 2027 06:53:55 +0000 asID: 218616 IP address blocks: 187.14.163.0/24 maxlen: 24 187.55.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5e:c9:8c:ba:52:77:ae:fc:60:95:a8:69:2d:1d:fd:26:ef:d7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 4 06:48:55 2026 GMT Not After : Nov 3 06:53:55 2027 GMT Subject: CN=78E8D3C1D81CC39473D8A831EEF2F38CDA0FC300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:e5:a4:5a:48:31:b8:c0:9d:86:00:7e:35: 68:7d:7a:6c:39:a8:9c:22:ce:38:6e:5c:75:b9:08: c0:b8:65:5a:0d:ab:f2:7c:9b:90:1f:06:55:25:b8: c8:c3:48:f5:7e:bd:29:e7:66:08:d0:60:94:9a:bd: 72:00:1d:13:cd:b2:4f:8c:2d:32:f9:bf:51:2c:e2: 05:24:e1:b4:05:4c:fb:bc:44:09:55:5a:83:83:e0: 01:e8:fd:78:46:70:c3:08:78:1f:cf:29:29:6e:d0: fe:98:a3:5b:1f:b9:b2:fe:01:4b:f9:0e:84:ae:be: a3:89:e3:e9:f5:f5:8e:b6:15:75:65:d7:bc:70:97: 85:8f:51:8e:44:02:d4:78:94:31:c4:f7:dc:0c:95: ea:73:70:de:57:f3:f7:93:16:8c:96:ea:6b:36:d7: a6:9b:8f:df:c5:09:84:36:10:60:41:95:57:77:03: e1:4c:01:78:af:7e:ce:f7:9f:db:fc:60:27:2d:c5: 5c:b4:bd:60:2f:61:63:27:47:3f:ec:9c:0f:89:bc: 13:a3:b1:58:f3:4e:0d:89:9a:62:0e:36:2c:ae:2a: b3:0a:9e:2b:04:38:4c:e2:dd:d0:e0:e1:b6:b4:16: e7:a9:93:3e:9d:e3:8c:9c:18:81:57:35:f3:4f:13: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E8:D3:C1:D8:1C:C3:94:73:D8:A8:31:EE:F2:F3:8C:DA:0F:C3:00 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218616.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.14.163.0/24 187.55.34.0/24 Signature Algorithm: sha256WithRSAEncryption 79:e7:04:71:24:c1:d9:3f:be:2f:93:65:88:e1:c1:1c:f9:68: 94:68:3d:88:51:f6:e7:f4:1e:fb:ba:49:08:c0:3d:1c:2e:de: 9a:cc:41:58:fb:82:9b:1e:1a:bb:da:cb:81:c9:ba:ca:8a:e7: a7:2b:7a:c7:08:39:2b:65:68:af:66:86:c5:c9:91:6d:01:be: 93:5d:0f:84:e9:48:51:84:c1:29:d3:36:f8:68:84:19:84:ea: 5d:83:00:5a:b7:fd:07:05:85:d7:0e:a2:db:26:9d:3a:00:a6: ce:9e:ab:4e:50:dc:7f:d5:58:fb:9b:0c:4a:d9:51:4f:4b:8e: 24:60:cb:37:4a:c1:b3:63:d2:ab:52:26:d3:c8:a0:83:de:e4: 2b:c9:2e:63:4e:7c:c3:ba:43:cf:af:7c:7b:31:10:3f:b4:42: 09:5c:9c:4a:42:d7:0b:bb:7a:bf:e5:d2:4f:45:c9:0d:9a:2c: 89:3c:5a:91:b9:30:b2:23:6c:f6:7b:ae:2e:6a:a6:ce:0e:01: 46:90:ea:4e:6f:cf:b5:2a:5c:d6:75:d7:25:c2:9f:db:d7:bf: 54:25:1a:96:87:c7:51:85:77:9d:48:4c:e4:70:63:0e:95:fb: 79:90:83:d1:cc:76:7d:66:45:7c:cd:82:9e:1d:b2:cd:6a:12: d5:31:9a:3d -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUGl7JjLpSd678YJWoaS0d/Sbv1+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDQwNjQ4NTVaFw0yNzExMDMwNjUzNTVaMDMxMTAvBgNV BAMTKDc4RThEM0MxRDgxQ0MzOTQ3M0Q4QTgzMUVFRjJGMzhDREEwRkMzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhOWkWkgxuMCdhgB+NWh9emw5 qJwizjhuXHW5CMC4ZVoNq/J8m5AfBlUluMjDSPV+vSnnZgjQYJSavXIAHRPNsk+M LTL5v1Es4gUk4bQFTPu8RAlVWoOD4AHo/XhGcMMIeB/PKSlu0P6Yo1sfubL+AUv5 DoSuvqOJ4+n19Y62FXVl17xwl4WPUY5EAtR4lDHE99wMlepzcN5X8/eTFoyW6ms2 16abj9/FCYQ2EGBBlVd3A+FMAXivfs73n9v8YCctxVy0vWAvYWMnRz/snA+JvBOj sVjzTg2JmmIONiyuKrMKnisEOEzi3dDg4ba0Fuepkz6d44ycGIFXNfNPE/GxAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUeOjTwdgcw5Rz2Kgx7vLzjNoPwwAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg2MTYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC7DqMDBAC7NyIwDQYJKoZIhvcNAQELBQADggEBAHnnBHEkwdk/vi+T ZYjhwRz5aJRoPYhR9uf0Hvu6SQjAPRwu3prMQVj7gpseGrvay4HJusqK56crescI OStlaK9mhsXJkW0BvpNdD4TpSFGEwSnTNvhohBmE6l2DAFq3/QcFhdcOotsmnToA ps6eq05Q3H/VWPubDErZUU9LjiRgyzdKwbNj0qtSJtPIoIPe5CvJLmNOfMO6Q8+v fHsxED+0QglcnEpC1wu7er/l0k9FyQ2aLIk8WpG5MLIjbPZ7ri5qps4OAUaQ6k5v z7UqXNZ11yXCn9vXv1QlGpaHx1GFd51ITORwYw6V+3mQg9HMdn1mRXzNgp4dss1q EtUxmj0= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:44 2026 by rpki-client