$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: J/XZb+D2oyufU4bh/E0TqIiPrhKs9/gWptlzZJN04O0= Subject key identifier: B1:DA:65:8F:C6:DF:2B:ED:F7:8B:75:BB:EC:2A:44:D9:51:CB:99:B3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 06FC0F16A5C234FAE680868FF7B5AA26CFBB4FB7 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25198.roa Signing time: Mon 02 Nov 2026 17:55:32 +0000 ROA not before: Mon 02 Nov 2026 17:50:32 +0000 ROA not after: Mon 01 Nov 2027 17:55:32 +0000 asID: 25198 IP address blocks: 179.69.80.0/24 maxlen: 24 179.69.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 20:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fc:0f:16:a5:c2:34:fa:e6:80:86:8f:f7:b5:aa:26:cf:bb:4f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 2 17:50:32 2026 GMT Not After : Nov 1 17:55:32 2027 GMT Subject: CN=B1DA658FC6DF2BEDF78B75BBEC2A44D951CB99B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:f8:3f:81:08:a0:1d:94:7d:f1:ee:e9:d0: 36:62:c6:1b:e3:fb:5c:36:f9:7f:03:a7:29:96:8a: 61:8d:f4:64:71:8c:5f:7e:1d:06:d6:86:c6:7b:2b: d7:b1:0f:65:3d:d3:6d:d2:12:59:ec:2b:f0:69:8c: af:ff:45:56:cc:9c:bd:99:9f:24:6c:23:86:a7:9c: d4:b9:47:fe:61:5e:72:4a:b5:ba:36:85:57:7a:60: 18:ba:c9:a3:fe:24:96:05:85:7d:d1:9d:92:69:62: 3f:23:3f:50:64:c4:6b:8e:13:67:59:cc:03:55:b4: e0:0d:e5:e5:22:bf:98:cb:d8:8b:67:67:5e:ab:e6: a5:69:7e:57:56:fd:9d:54:40:ca:15:74:28:56:46: 5e:08:ad:cc:3b:a2:88:d5:3a:fd:31:d2:b0:78:b1: 3b:52:5a:1f:8a:56:9d:66:f6:a8:e3:cc:75:6f:5d: 3b:c4:1f:88:2c:17:24:95:fe:aa:a8:8c:97:b8:2e: 95:db:3b:f1:7c:5c:e3:a1:fa:25:c9:0c:9d:78:a1: 6e:37:35:86:94:9a:01:72:8b:e5:8d:d4:c4:18:34: 49:b6:ff:c3:c3:07:d6:18:63:71:6a:dd:1a:a1:6e: 8f:6c:3e:03:01:25:58:45:3f:b6:3c:0b:50:10:d0: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DA:65:8F:C6:DF:2B:ED:F7:8B:75:BB:EC:2A:44:D9:51:CB:99:B3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.69.80.0/24 179.69.112.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:32:77:3b:1b:d7:ed:4e:66:5c:eb:a1:29:b9:0c:40:5f:37: 02:43:3a:79:a4:67:4f:13:47:f6:da:65:ad:86:75:be:0e:a0: 34:4b:1f:5c:d0:13:19:23:db:52:82:42:f6:ff:39:64:5a:05: 31:4c:a2:bc:ee:29:b8:52:e8:14:0a:9a:04:91:6f:dc:57:50: b2:ab:3c:a1:d0:bc:b9:03:29:21:88:57:c3:73:65:21:82:b8: 03:14:f1:3f:62:60:b3:ea:d2:96:b9:28:12:80:70:2b:b5:1a: eb:3e:78:e4:6f:9d:f0:c0:1f:4b:1a:92:f4:3b:e4:83:40:c7: 4e:be:30:9e:f1:fe:eb:10:ec:d3:3c:1f:4c:0a:ce:00:b7:87: 89:8e:cb:b4:e6:75:cc:cc:21:8f:2c:28:f9:46:9d:c4:70:85: ed:ce:2f:ed:06:87:5d:0c:2f:5a:48:15:04:a2:b9:7c:99:23: fd:00:5a:4c:d1:d4:e6:8f:33:7c:96:8d:e1:35:e3:c8:eb:0e: 6f:23:47:03:12:bc:47:8c:e9:fe:ac:26:2e:bb:51:7c:4b:d0: ba:13:83:5d:15:97:4c:f4:27:19:79:9c:69:6b:2c:d1:4d:55: 8c:b5:f7:a1:0b:1f:16:79:b4:7b:a7:dc:30:7f:0a:74:aa:ba: 03:b0:d8:e2 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIUBvwPFqXCNPrmgIaP97WqJs+7T7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDIxNzUwMzJaFw0yNzExMDExNzU1MzJaMDMxMTAvBgNV BAMTKEIxREE2NThGQzZERjJCRURGNzhCNzVCQkVDMkE0NEQ5NTFDQjk5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrPg/gQigHZR98e7p0DZixhvj +1w2+X8DpymWimGN9GRxjF9+HQbWhsZ7K9exD2U9023SElnsK/BpjK//RVbMnL2Z nyRsI4annNS5R/5hXnJKtbo2hVd6YBi6yaP+JJYFhX3RnZJpYj8jP1BkxGuOE2dZ zANVtOAN5eUiv5jL2ItnZ16r5qVpfldW/Z1UQMoVdChWRl4Ircw7oojVOv0x0rB4 sTtSWh+KVp1m9qjjzHVvXTvEH4gsFySV/qqojJe4LpXbO/F8XOOh+iXJDJ14oW43 NYaUmgFyi+WN1MQYNEm2/8PDB9YYY3Fq3Rqhbo9sPgMBJVhFP7Y8C1AQ0NHHAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUsdplj8bfK+33i3W77CpE2VHLmbMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVMyNTE5OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQC AAEwDAMEALNFUAMEALNFcDANBgkqhkiG9w0BAQsFAAOCAQEAXzJ3OxvX7U5mXOuh KbkMQF83AkM6eaRnTxNH9tplrYZ1vg6gNEsfXNATGSPbUoJC9v85ZFoFMUyivO4p uFLoFAqaBJFv3FdQsqs8odC8uQMpIYhXw3NlIYK4AxTxP2Jgs+rSlrkoEoBwK7Ua 6z545G+d8MAfSxqS9Dvkg0DHTr4wnvH+6xDs0zwfTArOALeHiY7LtOZ1zMwhjywo +UadxHCF7c4v7QaHXQwvWkgVBKK5fJkj/QBaTNHU5o8zfJaN4TXjyOsObyNHAxK8 R4zp/qwmLrtRfEvQuhODXRWXTPQnGXmcaWss0U1VjLX3oQsfFnm0e6fcMH8KdKq6 A7DY4g== -----END CERTIFICATE-----Generated at Sun Nov 8 05:57:30 2026 by rpki-client