$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa File: AS402265.roa (raw, json) Hash identifier: aT1cLp7A+LDFlhkAgjVPALlTrzlDSg7nMSwxX7ZV0yw= Subject key identifier: 6B:C1:6E:CA:AB:77:05:CA:FB:AC:2A:3C:13:E2:14:DE:BA:E4:CB:54 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7E526AB459FBA2023B92BCC53CA40F2299E328B0 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa Signing time: Sat 24 Oct 2026 06:36:11 +0000 ROA not before: Sat 24 Oct 2026 06:31:11 +0000 ROA not after: Sat 23 Oct 2027 06:36:11 +0000 asID: 402265 IP address blocks: 191.45.33.0/24 maxlen: 24 191.45.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:52:6a:b4:59:fb:a2:02:3b:92:bc:c5:3c:a4:0f:22:99:e3:28:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 24 06:31:11 2026 GMT Not After : Oct 23 06:36:11 2027 GMT Subject: CN=6BC16ECAAB7705CAFBAC2A3C13E214DEBAE4CB54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:31:b5:1d:eb:4e:2b:40:10:6e:fe:8f:b6: 60:39:ce:fd:88:f2:35:4c:cd:35:29:70:b8:11:fe: 48:b6:9d:36:98:9f:d2:3f:b6:9b:13:23:f6:13:35: ef:a0:f5:7d:76:99:50:84:e1:d8:56:21:85:33:76: de:c3:3e:52:b3:b9:54:f3:ca:89:29:73:e6:53:f8: f2:0e:a9:5a:5b:03:41:b7:f0:2d:d6:fd:fc:38:38: a2:47:02:6f:b9:5e:56:0d:93:5c:02:14:29:d8:0c: d8:2f:9c:d8:25:e0:8b:06:31:c5:fe:aa:10:04:08: f0:b8:36:47:72:3e:ca:23:df:ec:5a:be:91:81:14: 9e:ac:1e:f7:7e:f8:06:03:84:26:49:74:a8:db:78: 0c:6d:6e:85:f4:5f:ae:e3:82:f8:56:23:47:c8:3d: cc:48:56:cb:30:c1:d7:f2:99:06:1c:7a:91:e4:68: 29:90:41:42:23:0d:f7:66:3c:95:2c:8c:9c:02:31: ee:aa:6f:dd:9b:d3:55:60:bc:5b:37:a2:4c:f7:7b: 1c:12:2d:ca:ff:55:d3:d9:e0:8c:89:9c:6f:f8:c1: 37:ce:25:81:78:92:9c:74:a1:81:21:67:3f:17:45: 51:98:31:82:b2:57:e7:b2:29:e2:92:49:59:76:30: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C1:6E:CA:AB:77:05:CA:FB:AC:2A:3C:13:E2:14:DE:BA:E4:CB:54 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.45.33.0/24 191.45.35.0/24 Signature Algorithm: sha256WithRSAEncryption 09:97:0f:14:96:30:ed:4a:e7:21:9d:61:62:5d:76:fa:e9:d9: 92:1a:87:65:48:ac:b0:4f:1a:95:df:1e:7a:08:d3:2b:43:fc: 83:9c:8d:16:d9:2a:74:c5:9f:8a:18:0a:21:43:60:4d:fd:63: d8:cd:4e:40:65:82:bd:03:c1:2b:a9:7f:fd:40:7c:f5:39:4f: 67:71:f9:31:d2:e4:8f:20:b7:1b:cb:c0:cf:6b:07:63:69:68: 99:68:e8:e3:07:e3:a3:37:8a:fd:7c:7c:58:1c:33:c5:5d:e9: f5:93:06:75:00:16:42:22:12:6d:3e:eb:56:0c:be:26:9b:e0: fe:32:dd:b2:11:96:b9:61:63:07:8b:b1:b0:d6:42:b5:e5:a4: 8a:4b:6f:ab:6f:e6:94:94:68:30:6f:c4:4f:27:52:09:49:0d: 00:c4:30:01:3d:0d:56:a0:47:08:31:55:87:5c:30:8a:8f:a4: 6b:db:5a:aa:a4:3c:4e:8f:fb:e5:d1:48:4e:8a:ff:4a:5c:0d: 07:37:53:bc:bf:f3:fe:b2:a2:e8:c4:ab:c6:65:6e:3c:81:15: 54:6c:61:49:17:b7:b1:fa:90:38:a4:79:ca:75:1c:29:fd:2f: c4:c9:b9:cc:87:87:04:8e:91:f4:03:23:b6:42:b8:18:56:67: 90:00:fa:85 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUflJqtFn7ogI7krzFPKQPIpnjKLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjQwNjMxMTFaFw0yNzEwMjMwNjM2MTFaMDMxMTAvBgNV BAMTKDZCQzE2RUNBQUI3NzA1Q0FGQkFDMkEzQzEzRTIxNERFQkFFNENCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4TG1HetOK0AQbv6PtmA5zv2I 8jVMzTUpcLgR/ki2nTaYn9I/tpsTI/YTNe+g9X12mVCE4dhWIYUzdt7DPlKzuVTz yokpc+ZT+PIOqVpbA0G38C3W/fw4OKJHAm+5XlYNk1wCFCnYDNgvnNgl4IsGMcX+ qhAECPC4NkdyPsoj3+xavpGBFJ6sHvd++AYDhCZJdKjbeAxtboX0X67jgvhWI0fI PcxIVsswwdfymQYcepHkaCmQQUIjDfdmPJUsjJwCMe6qb92b01VgvFs3okz3exwS Lcr/VdPZ4IyJnG/4wTfOJYF4kpx0oYEhZz8XRVGYMYKyV+eyKeKSSVl2MKuvAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUa8Fuyqt3Bcr7rCo8E+IU3rrky1QwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDIyNjUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC/LSEDBAC/LSMwDQYJKoZIhvcNAQELBQADggEBAAmXDxSWMO1K5yGd YWJddvrp2ZIah2VIrLBPGpXfHnoI0ytD/IOcjRbZKnTFn4oYCiFDYE39Y9jNTkBl gr0DwSupf/1AfPU5T2dx+THS5I8gtxvLwM9rB2NpaJlo6OMH46M3iv18fFgcM8Vd 6fWTBnUAFkIiEm0+61YMviab4P4y3bIRlrlhYweLsbDWQrXlpIpLb6tv5pSUaDBv xE8nUglJDQDEMAE9DVagRwgxVYdcMIqPpGvbWqqkPE6P++XRSE6K/0pcDQc3U7y/ 8/6youjEq8ZlbjyBFVRsYUkXt7H6kDikecp1HCn9L8TJucyHhwSOkfQDI7ZCuBhW Z5AA+oU= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:34 2026 by rpki-client