$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa File: AS402671.roa (raw, json) Hash identifier: Hozwap9g/Kr7V/QEVuvwJvZ4McNT8JTZCY5KZ6Br3hw= Subject key identifier: 59:14:6D:61:7F:FE:91:1E:52:4C:0E:C1:94:BB:2D:22:02:4B:5A:D3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3011033FE047BC998A4E992BE702038D84E8628B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa Signing time: Wed 04 Nov 2026 06:28:29 +0000 ROA not before: Wed 04 Nov 2026 06:23:29 +0000 ROA not after: Wed 03 Nov 2027 06:28:29 +0000 asID: 402671 IP address blocks: 152.234.159.0/24 maxlen: 24 179.69.104.0/24 maxlen: 24 179.253.51.0/24 maxlen: 24 179.254.205.0/24 maxlen: 24 187.15.208.0/24 maxlen: 24 187.55.33.0/24 maxlen: 24 189.30.72.0/24 maxlen: 24 189.30.82.0/24 maxlen: 24 189.30.92.0/24 maxlen: 24 189.30.118.0/24 maxlen: 24 189.30.120.0/24 maxlen: 24 189.31.5.0/24 maxlen: 24 189.31.25.0/24 maxlen: 24 191.0.91.0/24 maxlen: 24 191.45.38.0/24 maxlen: 24 200.138.35.0/24 maxlen: 24 200.141.63.0/24 maxlen: 24 200.180.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:11:03:3f:e0:47:bc:99:8a:4e:99:2b:e7:02:03:8d:84:e8:62:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Nov 4 06:23:29 2026 GMT Not After : Nov 3 06:28:29 2027 GMT Subject: CN=59146D617FFE911E524C0EC194BB2D22024B5AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:2c:92:51:a3:e8:0e:b1:8c:2d:b7:35:24: 91:ad:b2:d9:a3:99:2c:d2:23:ff:02:51:41:37:29: 40:78:c2:b1:6b:4c:5d:0c:13:93:33:3d:dd:cc:c9: f0:aa:27:21:8c:43:6a:72:bb:0b:95:4c:ae:4d:ee: 42:a7:5b:d6:f2:67:4a:cd:28:f6:83:84:ce:67:14: 36:17:cb:96:43:1f:38:de:bf:67:25:c0:cd:e3:21: 6d:9e:8d:ff:d7:48:16:f6:9f:7a:63:57:67:fa:95: 5f:39:12:37:36:5c:ea:84:27:d9:9e:c5:94:8f:8c: 87:63:98:54:31:19:0f:de:56:54:ee:be:2c:07:35: c0:b8:1f:c5:a3:6e:ba:5f:22:85:7f:26:b6:be:ed: 24:26:fb:94:67:34:4d:84:92:20:b9:05:fa:32:f6: 57:67:52:6d:47:31:92:fc:85:70:9c:58:35:5a:e0: c8:26:09:ea:b6:35:44:e4:e7:d5:f8:47:b1:13:aa: 74:dc:82:92:e1:6b:f9:45:69:48:34:03:98:28:35: e0:b5:e9:66:a6:89:7c:2e:13:ba:5d:b4:76:ef:46: 81:00:04:39:8b:d7:79:3e:90:80:61:ed:e1:1a:a4: 0a:2c:94:94:50:e3:2a:35:67:2a:c3:c8:8b:b3:44: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:14:6D:61:7F:FE:91:1E:52:4C:0E:C1:94:BB:2D:22:02:4B:5A:D3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402671.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.234.159.0/24 179.69.104.0/24 179.253.51.0/24 179.254.205.0/24 187.15.208.0/24 187.55.33.0/24 189.30.72.0/24 189.30.82.0/24 189.30.92.0/24 189.30.118.0/24 189.30.120.0/24 189.31.5.0/24 189.31.25.0/24 191.0.91.0/24 191.45.38.0/24 200.138.35.0/24 200.141.63.0/24 200.180.188.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:69:bf:bc:58:c8:85:94:a9:a7:66:31:4e:e8:c4:49:6f:a0: a7:d7:8f:69:a3:ce:b8:12:38:87:cf:37:0d:77:16:64:40:4d: e3:86:3f:a4:d1:d6:d6:36:28:c3:1e:55:65:a4:83:04:c4:79: 6e:8b:aa:70:23:d2:5e:09:21:4a:40:c4:f0:7f:2b:6e:45:9d: ed:0e:f3:39:91:3c:2e:cf:68:ee:e7:47:22:3c:84:c1:b5:a5: 27:e7:76:5b:b7:68:41:52:10:e2:f2:e2:40:25:a6:cc:08:28: 3c:73:ba:b8:39:52:e6:7b:88:bc:ba:06:a5:d8:9b:fe:df:5e: 9a:94:fe:5a:4f:0f:1f:05:b5:82:aa:b8:23:dd:87:2f:ee:3f: fa:47:26:39:7f:a7:f1:83:90:36:9f:96:e8:2d:08:2d:f2:61: 23:da:bc:2d:dd:f0:85:b6:b5:df:be:71:64:a1:8c:68:d6:88: 5e:2f:d8:2c:89:2d:5f:b1:ec:c0:cf:36:ea:45:2a:7a:d2:2c: 78:15:8a:08:75:b5:5f:4f:ee:fb:cb:87:79:c1:1f:2f:af:47: 4a:5a:1a:3b:ea:9a:ea:a4:c3:17:35:be:8a:0d:55:ab:48:1d: 3b:11:20:0d:a9:c0:0f:d4:07:89:d5:c3:61:14:b8:93:a0:c6: b4:d6:90:2b -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUMBEDP+BHvJmKTpkr5wIDjYToYoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjExMDQwNjIzMjlaFw0yNzExMDMwNjI4MjlaMDMxMTAvBgNV BAMTKDU5MTQ2RDYxN0ZGRTkxMUU1MjRDMEVDMTk0QkIyRDIyMDI0QjVBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcyySUaPoDrGMLbc1JJGtstmj mSzSI/8CUUE3KUB4wrFrTF0ME5MzPd3MyfCqJyGMQ2pyuwuVTK5N7kKnW9byZ0rN KPaDhM5nFDYXy5ZDHzjev2clwM3jIW2ejf/XSBb2n3pjV2f6lV85Ejc2XOqEJ9me xZSPjIdjmFQxGQ/eVlTuviwHNcC4H8WjbrpfIoV/Jra+7SQm+5RnNE2EkiC5Bfoy 9ldnUm1HMZL8hXCcWDVa4MgmCeq2NUTk59X4R7ETqnTcgpLha/lFaUg0A5goNeC1 6WamiXwuE7pdtHbvRoEABDmL13k+kIBh7eEapAoslJRQ4yo1ZyrDyIuzRHTZAgMB AAGjggKsMIICqDAdBgNVHQ4EFgQUWRRtYX/+kR5STA7BlLstIgJLWtMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI2NzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYUGCCsGAQUFBwEHAQH/BHYwdDBy BAIAATBsAwQAmOqfAwQAs0VoAwQAs/0zAwQAs/7NAwQAuw/QAwQAuzchAwQAvR5I AwQAvR5SAwQAvR5cAwQAvR52AwQAvR54AwQAvR8FAwQAvR8ZAwQAvwBbAwQAvy0m AwQAyIojAwQAyI0/AwQAyLS8MA0GCSqGSIb3DQEBCwUAA4IBAQAvab+8WMiFlKmn ZjFO6MRJb6Cn149po864EjiHzzcNdxZkQE3jhj+k0dbWNijDHlVlpIMExHlui6pw I9JeCSFKQMTwfytuRZ3tDvM5kTwuz2ju50ciPITBtaUn53Zbt2hBUhDi8uJAJabM CCg8c7q4OVLme4i8ugal2Jv+316alP5aTw8fBbWCqrgj3Ycv7j/6RyY5f6fxg5A2 n5boLQgt8mEj2rwt3fCFtrXfvnFkoYxo1oheL9gsiS1fsezAzzbqRSp60ix4FYoI dbVfT+77y4d5wR8vr0dKWho76prqpMMXNb6KDVWrSB07ESANqcAP1AeJ1cNhFLiT oMa01pAr -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:41 2026 by rpki-client