$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218968.roa File: AS218968.roa (raw, json) Hash identifier: oXQTZfoVs/PbhZyIoSdbGNdlPZeKqK9yBnDlXs076LM= Subject key identifier: 18:A5:2F:83:4B:AE:2C:27:F1:7E:26:08:C6:27:37:0C:53:30:C5:DD Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7D24107129402FC1F4B94919B506DE98CADBA147 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218968.roa Signing time: Mon 26 Oct 2026 10:38:26 +0000 ROA not before: Mon 26 Oct 2026 10:33:26 +0000 ROA not after: Mon 25 Oct 2027 10:38:26 +0000 asID: 218968 IP address blocks: 189.12.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:24:10:71:29:40:2f:c1:f4:b9:49:19:b5:06:de:98:ca:db:a1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 10:33:26 2026 GMT Not After : Oct 25 10:38:26 2027 GMT Subject: CN=18A52F834BAE2C27F17E2608C627370C5330C5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:7f:1a:19:d9:a5:ab:b4:67:90:20:5b:c0: 4a:12:5c:ea:bf:b1:04:ef:24:2f:83:7b:1a:15:ed: f3:3a:8d:66:c4:68:69:75:5c:32:23:3d:c1:9f:17: 43:c9:34:61:12:f4:fc:f6:4d:ab:15:e1:b7:63:58: 86:c0:55:de:d8:d0:25:1a:5a:83:e7:3d:ec:ff:00: 8c:6b:ae:81:f2:fa:e0:22:bd:fc:a4:99:c2:f8:8b: 12:08:d7:a0:2e:de:c8:dd:4c:c3:bb:a0:13:ec:51: 3d:9f:8d:90:4b:b0:b6:7a:dd:68:79:4d:e7:c4:cf: 26:fd:15:9d:00:bb:3a:d3:db:56:24:e1:91:a1:a6: e8:62:d2:2c:ec:3b:4f:18:45:f5:bc:c2:db:b9:f3: 21:99:62:37:58:80:59:05:2e:1c:a2:57:d6:e3:c0: 88:98:b5:a2:a9:80:9d:e5:df:96:d3:c9:61:53:49: 37:16:8f:0f:e3:d5:b3:2f:34:f4:6c:e7:df:c9:26: 97:64:4f:f4:d9:01:c7:58:31:8c:b2:88:d7:d5:24: b0:88:cf:10:11:63:b4:97:c1:85:25:a2:66:59:7d: a5:0e:f9:e4:0d:40:e2:1a:61:ba:79:e3:b8:a8:2e: 58:c4:ac:f6:db:7f:a4:96:e3:09:63:e4:2c:80:52: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A5:2F:83:4B:AE:2C:27:F1:7E:26:08:C6:27:37:0C:53:30:C5:DD X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS218968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.134.0/24 Signature Algorithm: sha256WithRSAEncryption 11:cf:44:85:81:fb:a6:71:dc:2d:cb:15:db:90:9a:2f:2f:31: 3e:90:ac:d3:a6:48:16:95:07:ad:5c:93:83:01:b2:16:e2:b7: 28:a0:eb:77:50:8e:61:43:91:e0:86:a2:3b:7a:ca:57:da:65: 54:f8:74:e5:6e:6b:e9:2e:57:96:27:30:ea:4d:ba:53:a1:7a: 07:70:64:c0:44:bb:d3:f6:85:54:08:d1:9e:b6:e1:f8:dc:81: c5:19:be:85:20:9d:45:51:fa:ec:3d:4c:ae:05:03:22:f0:68: 1d:12:c1:94:90:b0:3e:74:0e:00:3f:4b:81:8d:fc:08:5f:d6: 97:6d:b5:f8:e5:b7:2f:aa:a5:ed:ee:52:1c:c1:18:35:c9:c2: 80:47:56:e5:6e:51:f9:6b:3e:3a:28:75:eb:29:a3:de:25:0e: 87:78:7c:bd:09:ec:cd:d5:99:71:92:6b:e7:68:f2:a9:9e:7c: 5e:16:c1:5a:43:da:c5:08:02:2a:ee:9b:7f:5d:db:62:c4:ea: c2:c9:40:0a:7c:c8:33:d6:01:3d:c1:5f:f2:19:21:55:1e:5b: f3:0a:72:d9:b9:ad:e8:dd:f6:6b:a4:8d:6d:bc:bc:5a:42:65: fa:79:b1:b9:61:76:dc:77:e2:8e:42:68:9e:bc:f0:7a:4f:6c: 0d:bd:22:19 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUfSQQcSlAL8H0uUkZtQbemMrboUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYxMDMzMjZaFw0yNzEwMjUxMDM4MjZaMDMxMTAvBgNV BAMTKDE4QTUyRjgzNEJBRTJDMjdGMTdFMjYwOEM2MjczNzBDNTMzMEM1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNDX8aGdmlq7RnkCBbwEoSXOq/ sQTvJC+DexoV7fM6jWbEaGl1XDIjPcGfF0PJNGES9Pz2TasV4bdjWIbAVd7Y0CUa WoPnPez/AIxrroHy+uAivfykmcL4ixII16Au3sjdTMO7oBPsUT2fjZBLsLZ63Wh5 TefEzyb9FZ0AuzrT21Yk4ZGhpuhi0izsO08YRfW8wtu58yGZYjdYgFkFLhyiV9bj wIiYtaKpgJ3l35bTyWFTSTcWjw/j1bMvNPRs59/JJpdkT/TZAcdYMYyyiNfVJLCI zxARY7SXwYUlomZZfaUO+eQNQOIaYbp547ioLljErPbbf6SW4wlj5CyAUpgFAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUGKUvg0uuLCfxfiYIxic3DFMwxd0wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTg5Njgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC9DIYwDQYJKoZIhvcNAQELBQADggEBABHPRIWB+6Zx3C3LFduQmi8v MT6QrNOmSBaVB61ck4MBshbityig63dQjmFDkeCGojt6ylfaZVT4dOVua+kuV5Yn MOpNulOhegdwZMBEu9P2hVQI0Z624fjcgcUZvoUgnUVR+uw9TK4FAyLwaB0SwZSQ sD50DgA/S4GN/Ahf1pdttfjlty+qpe3uUhzBGDXJwoBHVuVuUflrPjoodespo94l Dod4fL0J7M3VmXGSa+do8qmefF4WwVpD2sUIAirum39d22LE6sLJQAp8yDPWAT3B X/IZIVUeW/MKctm5rejd9mukjW28vFpCZfp5sblhdtx34o5CaJ688HpPbA29Ihk= -----END CERTIFICATE-----Generated at Thu Nov 5 19:06:38 2026 by rpki-client