$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401362.roa File: AS401362.roa (raw, json) Hash identifier: andxbrMdPiuEM+N6D9J68el7cg5BI9uO7VUIoVr06J4= Subject key identifier: 50:B5:EA:57:8D:03:79:2C:E3:CE:E9:01:54:99:6E:3C:22:A9:54:6A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 71C0306CEC5C946623CF8716D728FBA83267621A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401362.roa Signing time: Sun 25 Oct 2026 11:17:35 +0000 ROA not before: Sun 25 Oct 2026 11:12:35 +0000 ROA not after: Sun 24 Oct 2027 11:17:35 +0000 asID: 401362 IP address blocks: 191.0.89.0/24 maxlen: 24 200.141.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:30:6c:ec:5c:94:66:23:cf:87:16:d7:28:fb:a8:32:67:62:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 25 11:12:35 2026 GMT Not After : Oct 24 11:17:35 2027 GMT Subject: CN=50B5EA578D03792CE3CEE90154996E3C22A9546A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:84:19:1a:f8:3c:17:64:31:8b:af:be:40: 11:d2:3a:1e:a4:73:b0:e7:93:f8:28:e4:1d:84:17: 2c:50:a2:51:59:7c:88:8b:4b:a0:96:e2:72:4c:bd: b7:41:db:fc:a5:be:06:01:f1:6b:45:50:d0:57:9c: 06:52:c8:64:c6:07:65:25:55:eb:dc:ae:79:da:9c: d7:fc:28:e5:58:ed:af:48:f0:4d:00:9b:e9:2b:e5: 1d:11:ed:da:1f:46:a8:b5:97:98:de:17:2e:b7:d7: 07:fd:59:bc:47:f5:31:61:3b:db:65:28:0c:f3:44: d7:75:81:94:05:da:ad:e6:b9:8b:98:f5:25:74:37: de:cf:cd:4d:27:b5:89:65:c7:b0:cc:83:cc:bf:da: df:b6:7e:6b:f8:7f:64:36:8b:6b:4c:e6:a4:88:bf: df:25:ac:f2:64:93:2a:2b:16:86:a2:97:8c:0b:34: c6:c6:84:43:e6:49:2f:ab:f2:e0:fd:de:ce:28:d4: cf:16:cd:d7:a0:f0:3b:f3:28:d3:f1:da:a2:ff:eb: 31:71:0e:5e:2e:81:81:07:1d:3b:4a:ec:a9:b8:ec: 25:4a:8e:02:10:f7:54:1a:73:a0:06:05:9e:16:4f: e2:e4:f6:84:d1:5f:f3:48:13:a5:10:f3:37:7f:c2: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B5:EA:57:8D:03:79:2C:E3:CE:E9:01:54:99:6E:3C:22:A9:54:6A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401362.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.0.89.0/24 200.141.52.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:61:5b:26:1e:2d:6f:05:4b:e6:65:ea:da:b1:eb:76:b9:3d: 82:94:09:eb:e7:39:0b:06:32:03:42:d9:a1:4e:9d:98:31:16: a5:4c:31:16:5a:18:a8:c1:a8:aa:07:fc:1c:30:ab:59:d3:55: 12:6d:24:1f:66:5f:78:8f:5c:15:80:b3:3a:e2:0a:20:71:48: c8:33:ba:6e:9e:bb:71:23:4a:29:d3:bd:57:0f:dc:d4:0e:84: ad:27:37:04:cc:3c:12:b8:3a:05:e8:8c:e5:ea:d2:8a:24:97: 64:c3:e7:56:84:15:1b:13:d0:dd:dc:05:c7:1e:16:b7:7f:57: 3f:66:ab:34:7d:11:2b:73:50:1b:25:5a:66:c3:43:34:38:b6: 87:29:42:8d:6f:c9:22:c6:fa:1c:0e:6b:f0:c0:19:76:b2:1f: e9:d0:c1:fb:da:3f:28:6f:1f:71:f2:02:0e:a6:5f:2c:e5:37: 0a:6f:37:03:5d:41:a7:ba:41:87:2e:80:5e:5d:85:66:01:2a: 8b:98:6b:1d:14:fb:22:0b:91:5c:c7:70:27:a3:a0:9f:33:13: eb:a5:35:63:b4:ba:e2:2c:cc:41:dd:9a:3d:b6:6e:3c:56:9e: 3b:55:1c:65:dd:6e:86:0c:2a:07:e9:82:84:f0:9b:0b:54:97: f5:16:a4:d0 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUccAwbOxclGYjz4cW1yj7qDJnYhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjUxMTEyMzVaFw0yNzEwMjQxMTE3MzVaMDMxMTAvBgNV BAMTKDUwQjVFQTU3OEQwMzc5MkNFM0NFRTkwMTU0OTk2RTNDMjJBOTU0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGYQZGvg8F2Qxi6++QBHSOh6k c7Dnk/go5B2EFyxQolFZfIiLS6CW4nJMvbdB2/ylvgYB8WtFUNBXnAZSyGTGB2Ul VevcrnnanNf8KOVY7a9I8E0Am+kr5R0R7dofRqi1l5jeFy631wf9WbxH9TFhO9tl KAzzRNd1gZQF2q3muYuY9SV0N97PzU0ntYllx7DMg8y/2t+2fmv4f2Q2i2tM5qSI v98lrPJkkyorFoail4wLNMbGhEPmSS+r8uD93s4o1M8Wzdeg8DvzKNPx2qL/6zFx Dl4ugYEHHTtK7Km47CVKjgIQ91Qac6AGBZ4WT+Lk9oTRX/NIE6UQ8zd/wuebAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUULXqV40DeSzjzukBVJluPCKpVGowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDEzNjIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC/AFkDBADIjTQwDQYJKoZIhvcNAQELBQADggEBAA1hWyYeLW8FS+Zl 6tqx63a5PYKUCevnOQsGMgNC2aFOnZgxFqVMMRZaGKjBqKoH/Bwwq1nTVRJtJB9m X3iPXBWAszriCiBxSMgzum6eu3EjSinTvVcP3NQOhK0nNwTMPBK4OgXojOXq0ook l2TD51aEFRsT0N3cBcceFrd/Vz9mqzR9EStzUBslWmbDQzQ4tocpQo1vySLG+hwO a/DAGXayH+nQwfvaPyhvH3HyAg6mXyzlNwpvNwNdQae6QYcugF5dhWYBKouYax0U +yILkVzHcCejoJ8zE+ulNWO0uuIszEHdmj22bjxWnjtVHGXdboYMKgfpgoTwmwtU l/UWpNA= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:43 2026 by rpki-client