$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219427.roa File: AS219427.roa (raw, json) Hash identifier: O2wqdqQ8prsY0Zsg9/X+VDVddrXPO/q8PMv/3v4Stg8= Subject key identifier: F4:BF:F2:5D:7F:B3:9D:FD:54:21:17:D1:2F:0D:BC:8A:74:30:7D:F7 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6385332CF7E289379742210A71D4523C83C72A43 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219427.roa Signing time: Sat 24 Oct 2026 04:32:12 +0000 ROA not before: Sat 24 Oct 2026 04:27:12 +0000 ROA not after: Sat 23 Oct 2027 04:32:12 +0000 asID: 219427 IP address blocks: 200.138.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:85:33:2c:f7:e2:89:37:97:42:21:0a:71:d4:52:3c:83:c7:2a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 24 04:27:12 2026 GMT Not After : Oct 23 04:32:12 2027 GMT Subject: CN=F4BFF25D7FB39DFD542117D12F0DBC8A74307DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:a4:10:05:cc:0d:c9:04:f3:4e:3b:28:24: 96:2a:cb:cf:22:4c:1b:2d:e5:55:78:ec:97:7f:f2: e7:3a:af:d1:41:1c:45:b8:e2:25:d8:f3:16:68:f7: 89:54:9d:8e:e0:ec:d6:be:47:b6:39:85:3e:23:de: fa:a6:95:b1:5d:9f:32:9d:2f:6a:32:94:e6:7c:b0: 7f:52:19:09:7f:0b:46:6f:13:de:32:58:81:14:a8: e1:8b:06:98:34:ef:ab:66:af:a6:84:59:70:14:22: e3:97:ce:0d:79:eb:ba:73:38:a2:71:3e:83:a7:06: 8d:9f:44:c9:65:2a:d8:1e:8d:f6:9d:e9:5a:c0:01: 02:1e:65:ce:54:93:42:00:0b:eb:10:e8:d6:7c:da: 9f:10:cc:46:b1:bb:72:b3:ee:34:4a:04:30:57:29: 83:f8:bf:6b:57:16:84:30:ea:3d:ef:ec:f9:3f:75: 40:37:b6:ae:01:4a:b5:ed:b2:72:d3:43:ab:4c:5a: a4:a7:9a:d4:58:ee:51:d0:aa:51:d9:c0:14:75:67: 88:ec:51:11:6d:9f:be:31:ac:3f:d6:cc:3e:97:6a: 26:71:bf:86:f1:a0:46:38:4f:8d:75:15:4b:54:68: 0c:d2:b1:c2:f2:22:ba:75:22:3c:fb:ed:02:bd:19: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BF:F2:5D:7F:B3:9D:FD:54:21:17:D1:2F:0D:BC:8A:74:30:7D:F7 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.138.24.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ad:bc:a5:ea:5d:17:bc:1f:ec:82:81:92:45:bf:09:8b:30: 5f:0f:26:47:6f:7a:f8:d8:89:7b:62:a6:a4:b6:0d:0b:89:f6: 38:47:e0:cb:f4:36:08:68:af:b9:34:03:36:f3:3e:09:c3:00: 53:c0:0f:90:43:fe:c2:41:d1:c1:2d:e7:ab:a7:f3:81:64:8c: 01:61:41:b0:ff:42:d1:ba:ad:79:15:64:3b:8f:bd:5f:62:fa: 02:34:13:88:be:62:8c:0e:3b:ea:fe:19:f1:24:ca:1d:d7:b8: 3a:1f:6c:0f:63:2e:44:e5:40:66:43:55:d7:a1:69:33:d5:96: f0:3f:f4:f9:0a:67:7c:f6:95:01:4d:a6:cf:6b:b2:a7:26:5c: 10:6b:a4:f4:84:ed:96:f1:45:37:a4:05:6a:6d:6e:69:75:1f: 7c:dc:d5:1a:21:3a:0b:d9:c4:fd:0a:f4:20:fe:04:21:29:79: 99:ad:b3:d3:2c:30:3d:87:5f:18:10:f1:1f:68:21:96:e4:d6: b9:cc:79:7c:4e:7d:41:23:59:48:30:59:61:42:e5:30:f6:d2: b1:aa:ac:ec:74:5f:37:ad:be:ac:76:2f:23:0e:f9:ae:2c:aa: 06:3c:46:91:1e:55:f8:e6:90:d9:39:2d:74:94:c9:80:7f:87: 86:87:41:2c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUY4UzLPfiiTeXQiEKcdRSPIPHKkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjQwNDI3MTJaFw0yNzEwMjMwNDMyMTJaMDMxMTAvBgNV BAMTKEY0QkZGMjVEN0ZCMzlERkQ1NDIxMTdEMTJGMERCQzhBNzQzMDdERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrKQQBcwNyQTzTjsoJJYqy88i TBst5VV47Jd/8uc6r9FBHEW44iXY8xZo94lUnY7g7Na+R7Y5hT4j3vqmlbFdnzKd L2oylOZ8sH9SGQl/C0ZvE94yWIEUqOGLBpg076tmr6aEWXAUIuOXzg1567pzOKJx PoOnBo2fRMllKtgejfad6VrAAQIeZc5Uk0IAC+sQ6NZ82p8QzEaxu3Kz7jRKBDBX KYP4v2tXFoQw6j3v7Pk/dUA3tq4BSrXtsnLTQ6tMWqSnmtRY7lHQqlHZwBR1Z4js URFtn74xrD/WzD6XaiZxv4bxoEY4T411FUtUaAzSscLyIrp1Ijz77QK9GZ2HAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU9L/yXX+znf1UIRfRLw28inQwffcwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTk0Mjcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADIihgwDQYJKoZIhvcNAQELBQADggEBAIatvKXqXRe8H+yCgZJFvwmL MF8PJkdvevjYiXtipqS2DQuJ9jhH4Mv0Nghor7k0AzbzPgnDAFPAD5BD/sJB0cEt 56un84FkjAFhQbD/QtG6rXkVZDuPvV9i+gI0E4i+YowOO+r+GfEkyh3XuDofbA9j LkTlQGZDVdehaTPVlvA/9PkKZ3z2lQFNps9rsqcmXBBrpPSE7ZbxRTekBWptbml1 H3zc1RohOgvZxP0K9CD+BCEpeZmts9MsMD2HXxgQ8R9oIZbk1rnMeXxOfUEjWUgw WWFC5TD20rGqrOx0Xzetvqx2LyMO+a4sqgY8RpEeVfjmkNk5LXSUyYB/h4aHQSw= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:53 2026 by rpki-client