$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa File: AS402899.roa (raw, json) Hash identifier: dc1TmYDIAEtLh7U/25T8Ex9cOuo6+g5MvVOQuWVMyUA= Subject key identifier: B2:4A:56:E3:27:6B:05:22:E3:6B:E4:49:2C:95:CF:B3:41:E6:FA:4F Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 105087788D9A0827465F20CB6AA24CE80DC50D12 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa Signing time: Fri 30 Oct 2026 09:25:11 +0000 ROA not before: Fri 30 Oct 2026 09:20:11 +0000 ROA not after: Fri 29 Oct 2027 09:25:11 +0000 asID: 402899 IP address blocks: 177.201.196.0/24 maxlen: 24 179.254.195.0/24 maxlen: 24 187.14.133.0/24 maxlen: 24 187.14.150.0/24 maxlen: 24 187.14.155.0/24 maxlen: 24 187.14.160.0/24 maxlen: 24 187.15.224.0/24 maxlen: 24 187.15.232.0/24 maxlen: 24 187.15.238.0/24 maxlen: 24 187.15.250.0/24 maxlen: 24 187.55.10.0/24 maxlen: 24 187.55.29.0/24 maxlen: 24 189.12.148.0/24 maxlen: 24 189.30.65.0/24 maxlen: 24 189.30.103.0/24 maxlen: 24 200.138.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:50:87:78:8d:9a:08:27:46:5f:20:cb:6a:a2:4c:e8:0d:c5:0d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 30 09:20:11 2026 GMT Not After : Oct 29 09:25:11 2027 GMT Subject: CN=B24A56E3276B0522E36BE4492C95CFB341E6FA4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:4b:4b:62:07:78:90:43:da:1e:72:5a:a1: af:a1:80:a0:cb:b4:70:9a:7b:2d:7c:8b:ea:5c:7a: cd:be:f8:c7:1d:5d:11:b1:ba:c9:a6:9f:95:c7:ec: 57:50:d7:e0:f3:c3:82:45:4d:10:f9:48:ef:c7:b1: 63:84:39:7b:98:c7:56:6d:78:2e:d8:54:5e:ca:9e: c8:78:bc:ca:cc:56:96:5c:5f:07:ad:14:09:22:78: 2e:0c:3a:8d:11:c3:82:61:ff:46:84:6e:70:62:ba: 35:ba:1c:df:b4:f4:06:12:ff:3d:7a:81:92:e0:87: 1d:d0:10:a0:55:2d:c4:bb:ed:12:c0:eb:fd:da:27: fd:92:67:38:09:d2:c3:22:0f:ff:ba:04:01:0c:0a: f2:c5:51:ea:96:8d:c7:fb:48:6e:e9:b4:b1:8b:58: 6b:f4:55:d2:bf:e8:3b:3f:a0:9b:dc:2b:c5:ab:56: 6e:62:74:44:9c:03:13:d1:24:c5:fb:3e:74:1d:dd: 6b:13:7b:ac:c2:5b:32:9f:4f:98:fe:58:ce:b2:5e: 93:88:44:2b:9d:81:7a:3a:01:4b:1b:33:c1:61:1d: f1:3d:5a:e5:b0:05:d8:95:e5:0f:39:13:2d:ea:b1: e7:cf:08:72:e5:a6:5d:a9:7b:9d:0f:3f:05:56:73: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4A:56:E3:27:6B:05:22:E3:6B:E4:49:2C:95:CF:B3:41:E6:FA:4F X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.196.0/24 179.254.195.0/24 187.14.133.0/24 187.14.150.0/24 187.14.155.0/24 187.14.160.0/24 187.15.224.0/24 187.15.232.0/24 187.15.238.0/24 187.15.250.0/24 187.55.10.0/24 187.55.29.0/24 189.12.148.0/24 189.30.65.0/24 189.30.103.0/24 200.138.36.0/24 Signature Algorithm: sha256WithRSAEncryption a3:e5:eb:13:cb:eb:47:5e:96:97:89:4d:68:7c:f8:e8:2b:28: 0d:c1:20:57:e9:6a:4c:0d:81:37:d6:01:ef:8a:fd:9e:69:47: 63:08:7f:be:2f:40:ab:9d:44:dd:46:1d:e3:fe:f7:2c:fb:01: 6e:de:c0:1d:fd:bc:2f:31:3e:9b:e8:98:8a:e6:2f:bc:41:43: f0:e4:13:94:9d:58:ab:a7:d0:40:02:f0:de:80:47:8f:8b:65: d4:ed:d9:81:5c:bf:d3:95:1d:eb:ca:23:83:b9:ff:87:0c:80: a0:e8:de:78:04:30:b8:5e:0f:f1:4c:65:3b:ec:53:a1:cf:93: 52:6d:a7:84:93:72:8c:1b:15:13:51:ee:a3:12:c9:47:d0:49: d1:7d:71:70:5b:7f:49:c9:93:6b:29:82:26:23:10:7a:61:37: 3d:3c:69:56:13:d5:e4:65:a0:70:b6:1f:93:7c:b1:4b:90:c0: 75:90:b0:eb:f1:c6:b6:ab:cd:3c:01:8a:cb:53:d9:cb:e3:55: be:5f:36:94:a0:04:f7:aa:21:65:0c:84:4e:23:5f:e2:4b:34: e4:18:16:a3:13:ca:44:95:35:22:f7:ce:b0:2d:9a:59:89:c5: 54:d9:37:8a:df:bc:5a:39:86:63:a3:27:05:d8:03:e2:37:57: b6:60:87:28 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUEFCHeI2aCCdGXyDLaqJM6A3FDRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMzAwOTIwMTFaFw0yNzEwMjkwOTI1MTFaMDMxMTAvBgNV BAMTKEIyNEE1NkUzMjc2QjA1MjJFMzZCRTQ0OTJDOTVDRkIzNDFFNkZBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFUtLYgd4kEPaHnJaoa+hgKDL tHCaey18i+pces2++McdXRGxusmmn5XH7FdQ1+Dzw4JFTRD5SO/HsWOEOXuYx1Zt eC7YVF7Knsh4vMrMVpZcXwetFAkieC4MOo0Rw4Jh/0aEbnBiujW6HN+09AYS/z16 gZLghx3QEKBVLcS77RLA6/3aJ/2SZzgJ0sMiD/+6BAEMCvLFUeqWjcf7SG7ptLGL WGv0VdK/6Ds/oJvcK8WrVm5idEScAxPRJMX7PnQd3WsTe6zCWzKfT5j+WM6yXpOI RCudgXo6AUsbM8FhHfE9WuWwBdiV5Q85Ey3qsefPCHLlpl2pe50PPwVWc0xHAgMB AAGjggKfMIICmzAdBgNVHQ4EFgQUskpW4ydrBSLja+RJLJXPs0Hm+k8wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0MDI4OTkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIweQYIKwYBBQUHAQcBAf8EajBoMGYE AgABMGADBACxycQDBACz/sMDBAC7DoUDBAC7DpYDBAC7DpsDBAC7DqADBAC7D+AD BAC7D+gDBAC7D+4DBAC7D/oDBAC7NwoDBAC7Nx0DBAC9DJQDBAC9HkEDBAC9HmcD BADIiiQwDQYJKoZIhvcNAQELBQADggEBAKPl6xPL60delpeJTWh8+OgrKA3BIFfp akwNgTfWAe+K/Z5pR2MIf74vQKudRN1GHeP+9yz7AW7ewB39vC8xPpvomIrmL7xB Q/DkE5SdWKun0EAC8N6AR4+LZdTt2YFcv9OVHevKI4O5/4cMgKDo3ngEMLheD/FM ZTvsU6HPk1Jtp4STcowbFRNR7qMSyUfQSdF9cXBbf0nJk2spgiYjEHphNz08aVYT 1eRloHC2H5N8sUuQwHWQsOvxxrarzTwBistT2cvjVb5fNpSgBPeqIWUMhE4jX+JL NOQYFqMTykSVNSL3zrAtmlmJxVTZN4rfvFo5hmOjJwXYA+I3V7Zghyg= -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:36 2026 by rpki-client