$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: ICT9dX2JxUvWY8EfSrDGuHdIwCmuy53R9M9wnXDMxGQ= Subject key identifier: DC:59:F7:4F:D6:F1:AC:EA:FD:8E:72:AB:E9:E8:68:3F:66:E6:DF:3E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 309E7B8F3C2468B4EB5685CFD7CFB4C0BF08DC79 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa Signing time: Fri 30 Oct 2026 09:23:17 +0000 ROA not before: Fri 30 Oct 2026 09:18:17 +0000 ROA not after: Fri 29 Oct 2027 09:23:17 +0000 asID: 401776 IP address blocks: 152.234.145.0/24 maxlen: 24 152.234.146.0/24 maxlen: 24 177.201.198.0/24 maxlen: 24 177.201.203.0/24 maxlen: 24 179.69.70.0/24 maxlen: 24 179.69.76.0/24 maxlen: 24 179.69.97.0/24 maxlen: 24 179.69.108.0/24 maxlen: 24 179.253.43.0/24 maxlen: 24 187.5.0.0/23 maxlen: 24 187.5.2.0/23 maxlen: 24 187.5.4.0/23 maxlen: 24 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 20:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9e:7b:8f:3c:24:68:b4:eb:56:85:cf:d7:cf:b4:c0:bf:08:dc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 30 09:18:17 2026 GMT Not After : Oct 29 09:23:17 2027 GMT Subject: CN=DC59F74FD6F1ACEAFD8E72ABE9E8683F66E6DF3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:b3:4c:16:de:2d:2a:f7:cf:5a:54:13:d2: 9a:3d:9d:d2:5d:d2:84:22:ce:f9:7a:82:fa:7f:2f: 5f:a8:00:e4:94:e6:69:00:84:29:55:3d:18:74:c9: 80:b6:18:b7:f7:b3:03:d8:64:e6:e3:6e:c0:ed:39: 31:85:bd:16:31:39:f1:e4:7e:43:30:11:24:5d:25: 5e:33:5b:a3:d2:f0:e1:48:66:17:b8:d9:06:c7:f8: 99:59:63:ba:e5:41:40:da:f3:91:13:ee:29:5f:2b: ac:b9:b6:61:f9:27:56:4b:84:9b:c2:ae:5e:fa:8a: 37:6b:07:b0:b6:d2:23:a3:ed:9d:32:6c:2d:ae:39: dd:39:1b:79:c5:48:a0:10:3f:15:0d:75:9e:7f:0b: ac:3d:d5:e2:91:83:3b:bb:cf:bf:e4:e9:f0:96:4b: 89:d4:33:e2:11:fd:b6:18:ff:5a:08:55:22:b1:f3: 03:6d:67:36:e7:e7:b4:55:e4:dd:ea:92:30:fa:93: 8b:a3:4a:ad:56:88:30:8f:1c:be:32:b8:47:06:cd: 0b:d7:25:2f:26:e9:05:49:80:21:77:1d:bc:99:67: d0:74:84:ab:02:bf:a7:23:50:3f:40:84:01:58:18: b3:e0:33:de:3b:1b:cc:d6:1b:ac:fd:ad:d8:b4:39: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:59:F7:4F:D6:F1:AC:EA:FD:8E:72:AB:E9:E8:68:3F:66:E6:DF:3E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.145.0-152.234.146.255 177.201.198.0/24 177.201.203.0/24 179.69.70.0/24 179.69.76.0/24 179.69.97.0/24 179.69.108.0/24 179.253.43.0/24 187.5.0.0-187.5.5.255 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 07:45:ff:d7:06:0c:f9:8a:a5:27:5c:1e:90:6d:d1:b3:36:83: 96:33:99:95:2a:b5:d7:bb:19:2f:80:71:d8:48:fb:1c:d7:22: fd:9b:64:e8:f0:60:0d:40:d6:62:7c:8e:fb:0c:21:87:d2:d0: 20:ae:f0:27:45:77:f3:91:c1:a4:42:8e:e8:2c:77:67:4a:d4: 24:c7:57:ce:17:94:73:81:b2:74:f8:ff:52:7b:81:7a:b3:db: f2:bf:39:c9:41:7d:79:8d:b4:fb:6c:45:03:b7:5a:bc:a6:15: 28:73:89:8f:eb:34:a4:be:83:4b:6d:49:bd:cc:cf:98:63:c7: 4b:fc:7d:40:b8:e6:6a:b5:51:c9:24:c5:2f:9c:22:c6:a6:a5: d2:96:a2:62:11:b1:e2:00:d7:de:02:e1:55:a2:07:1e:a5:b4: c2:83:56:e0:cc:77:76:f8:9b:5a:b8:e7:45:94:af:44:af:6f: 1e:c1:5e:12:d6:9c:60:f7:0e:cc:14:71:4e:ba:e1:03:dd:56: b8:88:b2:cc:15:bc:00:ef:ac:df:b4:e5:6b:0e:b1:0e:84:00: 84:40:22:b0:54:fd:38:4c:b6:ae:8c:21:ac:18:9d:d9:9f:5f: 52:9b:17:f9:a7:14:5c:4e:ea:ed:b6:b4:9b:ef:bf:cd:6e:78: b8:74:a7:a5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIUMJ57jzwkaLTrVoXP18+0wL8I3HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMzAwOTE4MTdaFw0yNzEwMjkwOTIzMTdaMDMxMTAvBgNV BAMTKERDNTlGNzRGRDZGMUFDRUFGRDhFNzJBQkU5RTg2ODNGNjZFNkRGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76rNMFt4tKvfPWlQT0po9ndJd 0oQizvl6gvp/L1+oAOSU5mkAhClVPRh0yYC2GLf3swPYZObjbsDtOTGFvRYxOfHk fkMwESRdJV4zW6PS8OFIZhe42QbH+JlZY7rlQUDa85ET7ilfK6y5tmH5J1ZLhJvC rl76ijdrB7C20iOj7Z0ybC2uOd05G3nFSKAQPxUNdZ5/C6w91eKRgzu7z7/k6fCW S4nUM+IR/bYY/1oIVSKx8wNtZzbn57RV5N3qkjD6k4ujSq1WiDCPHL4yuEcGzQvX JS8m6QVJgCF3HbyZZ9B0hKsCv6cjUD9AhAFYGLPgM947G8zWG6z9rdi0OWHbAgMB AAGjggKKMIIChjAdBgNVHQ4EFgQU3Fn3T9bxrOr9jnKr6ehoP2bm3z4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDE3NzYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYIKwYBBQUHAQcBAf8EVTBTMFEE AgABMEswDAMEAJjqkQMEAJjqkgMEALHJxgMEALHJywMEALNFRgMEALNFTAMEALNF YQMEALNFbAMEALP9KzALAwMAuwUDBAG7BQQDBAPItKAwDQYJKoZIhvcNAQELBQAD ggEBAAdF/9cGDPmKpSdcHpBt0bM2g5YzmZUqtde7GS+AcdhI+xzXIv2bZOjwYA1A 1mJ8jvsMIYfS0CCu8CdFd/ORwaRCjugsd2dK1CTHV84XlHOBsnT4/1J7gXqz2/K/ OclBfXmNtPtsRQO3WrymFShziY/rNKS+g0ttSb3Mz5hjx0v8fUC45mq1UckkxS+c IsampdKWomIRseIA194C4VWiBx6ltMKDVuDMd3b4m1q450WUr0Svbx7BXhLWnGD3 DswUcU664QPdVriIsswVvADvrN+05WsOsQ6EAIRAIrBU/ThMtq6MIawYndmfX1Kb F/mnFFxO6u22tJvvv81ueLh0p6U= -----END CERTIFICATE-----Generated at Sun Nov 8 05:59:42 2026 by rpki-client