$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218911.roa File: AS218911.roa (raw, json) Hash identifier: RX1zTBXvR3R1MlOqFj3ZDarG4KSy/9qJ924CvBoyf4Y= Subject key identifier: 1A:F8:BA:B6:DC:98:15:AE:35:74:CA:52:96:26:51:92:D4:18:81:F5 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 296FE23BB6AB44651E20128315B508DF31141172 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218911.roa Signing time: Mon 26 Oct 2026 13:24:14 +0000 ROA not before: Mon 26 Oct 2026 13:19:14 +0000 ROA not after: Mon 25 Oct 2027 13:24:14 +0000 asID: 218911 IP address blocks: 187.55.7.0/24 maxlen: 24 189.31.3.0/24 maxlen: 24 200.149.180.0/24 maxlen: 24 200.149.181.0/24 maxlen: 24 200.149.182.0/24 maxlen: 24 200.149.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6f:e2:3b:b6:ab:44:65:1e:20:12:83:15:b5:08:df:31:14:11:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 13:19:14 2026 GMT Not After : Oct 25 13:24:14 2027 GMT Subject: CN=1AF8BAB6DC9815AE3574CA5296265192D41881F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:75:62:38:4c:bf:59:3d:17:b4:7e:20:f8: 02:b1:b1:99:72:8c:10:74:ce:6e:54:f8:0c:58:a4: 12:9d:e6:83:25:74:6a:dc:7b:ba:11:57:1a:8b:68: af:34:1c:c2:b9:94:df:bd:59:cd:7f:6e:8a:5a:d4: 1e:6f:5f:7b:a5:93:10:48:fa:eb:75:ce:ec:14:20: b3:5c:44:7d:80:2c:d1:03:29:1c:c9:16:cd:2b:fc: 20:ef:a1:d9:a4:6f:c2:1b:b6:df:50:2a:78:fe:05: 44:bc:82:00:c7:15:d5:75:14:c6:c3:fd:3d:53:77: b8:8f:1f:fe:67:c6:1d:d4:03:09:21:52:03:8b:39: e9:6b:6b:c5:2b:69:1a:ca:c4:e6:7d:1e:cf:f8:36: 68:b0:e0:43:63:5c:83:1a:71:dd:ed:17:1f:4c:90: bc:6f:21:cc:c4:63:24:46:58:8f:56:2c:ef:7c:af: cf:d9:04:23:52:79:8e:38:27:06:9a:f0:4d:74:a0: 62:14:0f:f2:e8:28:b0:1c:77:bd:af:c2:4d:45:b0: 5e:92:8a:7d:6d:0f:93:ef:16:2d:a5:fc:50:58:d6: 94:17:e3:23:0f:7b:8c:50:1c:e0:68:93:7a:81:f5: e7:31:35:65:6e:06:fa:b1:8a:bc:81:2b:0b:37:8f: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F8:BA:B6:DC:98:15:AE:35:74:CA:52:96:26:51:92:D4:18:81:F5 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218911.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.55.7.0/24 189.31.3.0/24 200.149.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:db:49:26:f4:12:5c:9c:5e:8b:29:a8:16:24:71:f2:71:47: 98:f3:ec:0e:52:df:e7:1f:93:75:c1:31:f1:63:e3:a0:f3:74: 80:7b:14:be:be:68:9b:38:ee:6b:26:a2:7c:ae:be:9c:49:62: c0:2b:a1:92:13:3c:aa:53:17:66:36:c5:e5:47:8a:9f:77:e3: ca:0e:49:9d:d5:8d:d9:5b:40:94:4d:85:12:11:7c:c0:36:2f: 3c:a4:86:a5:31:a3:cf:e0:c9:85:d3:cb:a3:06:0a:da:de:7d: 54:38:88:7a:35:21:89:27:ab:58:3f:d5:69:49:dc:f7:e7:d8: c0:34:5d:86:2e:16:c6:97:c6:80:87:c0:b7:a4:97:b9:3b:6a: ec:15:ff:49:2d:23:76:60:72:90:c8:98:22:d5:e7:ce:81:ea: e0:3a:f9:f1:5a:b1:9a:50:68:db:be:62:37:ac:96:8f:89:47: 8e:58:84:9e:50:9d:1c:df:8d:78:ad:28:f7:d1:1b:27:ac:ec: e0:e0:86:99:df:79:fc:e4:d1:c1:bb:79:32:ce:47:68:4e:f5: 23:6a:01:6b:a4:14:68:cc:3a:aa:b0:46:fe:73:32:b2:0e:b9: ab:6a:28:fd:43:b3:8e:ce:09:33:36:34:0d:66:05:76:b8:1e: c4:57:02:d6 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUKW/iO7arRGUeIBKDFbUI3zEUEXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYxMzE5MTRaFw0yNzEwMjUxMzI0MTRaMDMxMTAvBgNV BAMTKDFBRjhCQUI2REM5ODE1QUUzNTc0Q0E1Mjk2MjY1MTkyRDQxODgxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwHViOEy/WT0XtH4g+AKxsZly jBB0zm5U+AxYpBKd5oMldGrce7oRVxqLaK80HMK5lN+9Wc1/bopa1B5vX3ulkxBI +ut1zuwUILNcRH2ALNEDKRzJFs0r/CDvodmkb8Ibtt9QKnj+BUS8ggDHFdV1FMbD /T1Td7iPH/5nxh3UAwkhUgOLOelra8UraRrKxOZ9Hs/4Nmiw4ENjXIMacd3tFx9M kLxvIczEYyRGWI9WLO98r8/ZBCNSeY44Jwaa8E10oGIUD/LoKLAcd72vwk1FsF6S in1tD5PvFi2l/FBY1pQX4yMPe4xQHOBok3qB9ecxNWVuBvqxiryBKws3jyxfAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUGvi6ttyYFa41dMpSliZRktQYgfUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg5MTEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAC7NwcDBAC9HwMDBALIlbQwDQYJKoZIhvcNAQELBQADggEBAErbSSb0 ElycXospqBYkcfJxR5jz7A5S3+cfk3XBMfFj46DzdIB7FL6+aJs47msmonyuvpxJ YsAroZITPKpTF2Y2xeVHip9348oOSZ3VjdlbQJRNhRIRfMA2LzykhqUxo8/gyYXT y6MGCtrefVQ4iHo1IYknq1g/1WlJ3Pfn2MA0XYYuFsaXxoCHwLekl7k7auwV/0kt I3ZgcpDImCLV586B6uA6+fFasZpQaNu+Yjeslo+JR45YhJ5QnRzfjXitKPfRGyes 7ODghpnfefzk0cG7eTLOR2hO9SNqAWukFGjMOqqwRv5zMrIOuatqKP1Ds47OCTM2 NA1mBXa4HsRXAtY= -----END CERTIFICATE-----Generated at Thu Nov 5 19:07:19 2026 by rpki-client