$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa File: AS219447.roa (raw, json) Hash identifier: /lFsIAuCk7wGH4XvX/1lva0+d1Zgoeqf9a3CiMdcbjo= Subject key identifier: 83:F3:73:D5:D4:F9:A0:04:FF:FE:54:26:F1:3C:D8:1E:DC:28:2E:CC Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 73B5FC243968202089FE6C50AE095C838150AC82 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa Signing time: Tue 03 Nov 2026 16:02:45 +0000 ROA not before: Tue 03 Nov 2026 15:57:45 +0000 ROA not after: Tue 02 Nov 2027 16:02:45 +0000 asID: 219447 IP address blocks: 152.234.134.0/24 maxlen: 24 187.14.182.0/24 maxlen: 24 187.14.183.0/24 maxlen: 24 189.12.130.0/24 maxlen: 24 189.12.133.0/24 maxlen: 24 189.12.135.0/24 maxlen: 24 189.12.136.0/24 maxlen: 24 189.12.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b5:fc:24:39:68:20:20:89:fe:6c:50:ae:09:5c:83:81:50:ac:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 3 15:57:45 2026 GMT Not After : Nov 2 16:02:45 2027 GMT Subject: CN=83F373D5D4F9A004FFFE5426F13CD81EDC282ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:2b:a9:df:07:00:9b:7c:c7:01:81:7c:90: 4a:0d:d9:b5:41:c2:5c:76:00:e6:8c:c7:1c:8e:9e: 33:01:a9:6f:c4:dc:e1:58:68:cd:f8:5c:a8:52:83: 95:bb:18:d3:78:18:dc:20:c8:d8:d0:12:b7:69:ae: cc:3f:3c:94:bb:b9:9d:06:f3:3d:e3:25:76:59:ba: e1:bd:77:c1:23:92:41:de:d5:40:bb:9c:74:4d:f8: 90:ae:1a:bb:d4:0d:48:02:7b:36:9f:1b:89:f8:96: 96:17:13:90:dc:f5:46:ac:a1:a1:f0:32:47:7b:63: 29:46:71:c6:7c:d8:f8:ca:9e:c4:23:51:76:c4:be: ff:f5:1e:06:eb:c7:ec:0b:83:c0:2d:53:89:3d:f8: 8c:dc:8d:85:b3:98:15:d3:30:e2:10:9e:b6:df:6f: a6:91:40:24:ba:69:a4:a8:c6:9c:d1:01:ee:06:57: 2f:ee:98:23:ce:ce:15:37:aa:39:20:c9:00:6a:7a: 38:7a:13:2c:4f:e0:55:6d:26:67:3e:4a:ce:78:c7: 13:5d:9f:24:48:b2:55:66:26:b9:f4:06:41:0e:30: 36:5a:7d:94:fa:98:f1:16:1e:01:09:39:61:23:7a: a6:82:6f:16:9f:a7:52:6e:c3:62:e1:23:f9:e4:b0: a0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:73:D5:D4:F9:A0:04:FF:FE:54:26:F1:3C:D8:1E:DC:28:2E:CC X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS219447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.134.0/24 187.14.182.0/23 189.12.130.0/24 189.12.133.0/24 189.12.135.0-189.12.136.255 189.12.139.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:38:69:95:5b:c3:2a:e2:de:63:11:cf:ed:05:62:2c:4f:74: d1:9b:ea:e6:7b:84:bd:61:75:55:a2:59:1f:2e:8b:09:97:fb: 97:ae:f0:67:86:c6:e4:ff:2d:f0:ee:82:62:34:e2:5c:ba:04: ab:db:34:34:60:79:e2:76:90:65:89:c5:4c:e1:1c:33:9b:8e: 22:72:9d:c6:9b:86:8d:72:6c:6d:7f:cb:f0:9f:15:cf:05:22: 77:4b:38:02:7f:b1:41:89:e4:7b:89:3c:4e:ba:3a:6e:16:a8: 79:44:eb:d6:b0:71:67:66:f8:4e:9a:c1:77:c1:d2:52:27:f1: b5:ce:e7:e9:8f:8c:93:e3:1b:7c:1a:89:d2:2c:3c:cd:99:8a: cb:04:91:2b:59:2c:94:58:98:e8:54:d1:10:52:68:c3:78:64: 68:54:be:4b:39:f6:68:14:16:97:ad:52:6c:ed:61:4f:8a:4e: ae:b8:7c:09:0f:a8:17:c6:68:1b:eb:ee:be:f0:9a:39:fa:6c: be:0a:9f:28:e5:34:4e:01:d8:5c:73:6c:55:9e:82:05:31:0f: 50:77:12:77:d3:ab:12:08:d2:13:fb:4c:90:9c:34:c1:f4:8f: 38:90:7d:80:3a:98:87:c9:5c:e9:12:ae:de:4b:12:ea:50:77: a3:57:b2:39 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUc7X8JDloICCJ/mxQrglcg4FQrIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDMxNTU3NDVaFw0yNzExMDIxNjAyNDVaMDMxMTAvBgNV BAMTKDgzRjM3M0Q1RDRGOUEwMDRGRkZFNTQyNkYxM0NEODFFREMyODJFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOyiup3wcAm3zHAYF8kEoN2bVB wlx2AOaMxxyOnjMBqW/E3OFYaM34XKhSg5W7GNN4GNwgyNjQErdprsw/PJS7uZ0G 8z3jJXZZuuG9d8EjkkHe1UC7nHRN+JCuGrvUDUgCezafG4n4lpYXE5Dc9UasoaHw Mkd7YylGccZ82PjKnsQjUXbEvv/1Hgbrx+wLg8AtU4k9+IzcjYWzmBXTMOIQnrbf b6aRQCS6aaSoxpzRAe4GVy/umCPOzhU3qjkgyQBqejh6EyxP4FVtJmc+Ss54xxNd nyRIslVmJrn0BkEOMDZafZT6mPEWHgEJOWEjeqaCbxafp1Juw2LhI/nksKBZAgMB AAGjggJrMIICZzAdBgNVHQ4EFgQUg/Nz1dT5oAT//lQm8TzYHtwoLswwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyMTk0NDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUHAQcBAf8ENjA0MDIE AgABMCwDBACY6oYDBAG7DrYDBAC9DIIDBAC9DIUwDAMEAL0MhwMEAL0MiAMEAL0M izANBgkqhkiG9w0BAQsFAAOCAQEATDhplVvDKuLeYxHP7QViLE900Zvq5nuEvWF1 VaJZHy6LCZf7l67wZ4bG5P8t8O6CYjTiXLoEq9s0NGB54naQZYnFTOEcM5uOInKd xpuGjXJsbX/L8J8VzwUid0s4An+xQYnke4k8Tro6bhaoeUTr1rBxZ2b4TprBd8HS Uifxtc7n6Y+Mk+MbfBqJ0iw8zZmKywSRK1kslFiY6FTREFJow3hkaFS+Szn2aBQW l61SbO1hT4pOrrh8CQ+oF8ZoG+vuvvCaOfpsvgqfKOU0TgHYXHNsVZ6CBTEPUHcS d9OrEgjSE/tMkJw0wfSPOJB9gDqYh8lc6RKu3ksS6lB3o1eyOQ== -----END CERTIFICATE-----Generated at Thu Nov 5 13:28:04 2026 by rpki-client