$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa File: AS402857.roa (raw, json) Hash identifier: dNOw39BsQ5OGEYW9II9mcx6dFeTq1EDh2d1kAUGNxpk= Subject key identifier: 9F:4B:96:FE:79:29:15:C0:14:C5:22:83:FE:CD:90:48:F4:C3:D5:78 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7EE7EBD4FBB51DFFFF6129ED101BF47BAA53CFEC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa Signing time: Tue 27 Oct 2026 01:37:42 +0000 ROA not before: Tue 27 Oct 2026 01:32:42 +0000 ROA not after: Tue 26 Oct 2027 01:37:42 +0000 asID: 402857 IP address blocks: 201.24.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e7:eb:d4:fb:b5:1d:ff:ff:61:29:ed:10:1b:f4:7b:aa:53:cf:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 27 01:32:42 2026 GMT Not After : Oct 26 01:37:42 2027 GMT Subject: CN=9F4B96FE792915C014C52283FECD9048F4C3D578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:39:f9:33:9b:48:1c:ff:02:4a:9b:59:24: 80:d9:b7:94:01:95:3d:68:8d:b8:96:34:54:08:b9: f9:63:db:85:b8:83:a7:c7:8a:49:16:6a:15:78:dc: ee:39:33:f9:09:05:85:da:c9:9f:07:29:64:bc:89: 46:62:96:34:ea:8e:c1:d2:92:10:8c:fc:ad:a6:16: b8:c0:2b:e1:cb:a7:73:ec:3f:db:92:f3:aa:3c:f7: a6:7e:10:1f:77:d7:94:7d:ea:e0:68:ec:6c:2f:45: a6:93:b9:b8:45:ef:d5:89:08:e7:49:6c:74:6c:2f: 01:1b:6c:e8:5f:e0:c0:8b:52:8c:b6:a2:4f:8a:d6: e5:c0:90:b6:8d:ea:40:1a:a3:13:08:24:44:48:cb: 02:db:a4:cb:a8:71:47:19:4f:84:f2:a7:72:5a:4d: bd:e7:83:cd:ff:93:d4:12:c8:72:3a:bd:29:6c:7b: 3f:cd:a9:88:cb:1f:ee:ab:d7:bc:7d:9b:d0:c0:39: 1e:fe:bb:49:38:79:db:83:5f:f1:4e:f8:87:a5:59: 28:ef:6f:36:18:58:a7:d3:50:ed:96:b1:18:e9:c5: b0:59:49:7a:69:d1:80:b1:47:60:cf:f4:9b:5b:dc: 6e:0a:a0:11:f6:ae:bb:92:21:c9:06:fd:de:6e:80: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:96:FE:79:29:15:C0:14:C5:22:83:FE:CD:90:48:F4:C3:D5:78 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402857.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.230.0/24 Signature Algorithm: sha256WithRSAEncryption 09:75:89:af:54:af:cf:83:69:e5:26:8f:dc:13:bf:92:5c:eb: 18:3c:21:79:9b:b9:43:b4:52:d0:e6:bf:c9:e0:da:c4:61:b7: 61:9e:6f:fb:3b:b2:14:aa:c7:35:62:c2:60:2f:09:f3:ab:eb: 4e:d3:6d:51:7f:ce:e3:a1:6f:e0:e1:cd:b0:72:25:13:83:82: c5:3b:99:27:37:2b:a6:d0:ce:21:57:71:a9:d4:2c:33:85:25: 92:59:f0:15:88:55:08:b4:f7:91:e2:a8:e2:45:20:1f:3f:a1: f2:56:ee:79:36:be:3a:2d:26:80:69:89:1a:b9:c0:23:e4:03: c7:b2:1c:5e:c1:04:cd:5a:07:00:af:91:8a:98:ca:c1:38:37: 11:2f:24:12:0e:2e:5d:10:f0:88:28:8a:5f:51:a9:67:25:56: e2:b4:3c:d1:36:02:ed:e5:2d:03:3e:86:e6:f4:2c:99:36:01: 3f:3f:a3:2b:a1:d1:26:7a:f3:00:5e:dd:f6:ee:9f:a9:de:61: 4a:63:24:f8:ad:7c:5e:b1:d2:da:5a:14:ff:55:6c:e2:b4:e2: c7:73:e5:9c:55:80:e8:aa:12:84:f4:7e:80:79:20:fb:19:1f: d2:9c:a5:81:eb:7f:bc:93:5f:ab:97:63:cd:28:50:b7:26:b9: 91:a2:f2:50 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUfufr1Pu1Hf//YSntEBv0e6pTz+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjcwMTMyNDJaFw0yNzEwMjYwMTM3NDJaMDMxMTAvBgNV BAMTKDlGNEI5NkZFNzkyOTE1QzAxNEM1MjI4M0ZFQ0Q5MDQ4RjRDM0Q1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPzn5M5tIHP8CSptZJIDZt5QB lT1ojbiWNFQIuflj24W4g6fHikkWahV43O45M/kJBYXayZ8HKWS8iUZiljTqjsHS khCM/K2mFrjAK+HLp3PsP9uS86o896Z+EB9315R96uBo7GwvRaaTubhF79WJCOdJ bHRsLwEbbOhf4MCLUoy2ok+K1uXAkLaN6kAaoxMIJERIywLbpMuocUcZT4Typ3Ja Tb3ng83/k9QSyHI6vSlsez/NqYjLH+6r17x9m9DAOR7+u0k4eduDX/FO+IelWSjv bzYYWKfTUO2WsRjpxbBZSXpp0YCxR2DP9Jtb3G4KoBH2rruSIckG/d5ugLJfAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUn0uW/nkpFcAUxSKD/s2QSPTD1XgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4NTcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADJGOYwDQYJKoZIhvcNAQELBQADggEBAAl1ia9Ur8+DaeUmj9wTv5Jc 6xg8IXmbuUO0UtDmv8ng2sRht2Geb/s7shSqxzViwmAvCfOr607TbVF/zuOhb+Dh zbByJRODgsU7mSc3K6bQziFXcanULDOFJZJZ8BWIVQi095HiqOJFIB8/ofJW7nk2 vjotJoBpiRq5wCPkA8eyHF7BBM1aBwCvkYqYysE4NxEvJBIOLl0Q8Igoil9RqWcl VuK0PNE2Au3lLQM+hub0LJk2AT8/oyuh0SZ68wBe3fbun6neYUpjJPitfF6x0tpa FP9VbOK04sdz5ZxVgOiqEoT0foB5IPsZH9KcpYHrf7yTX6uXY80oULcmuZGi8lA= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:55 2026 by rpki-client