$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS43878.roa File: AS43878.roa (raw, json) Hash identifier: 5xRAhu4fXkVY33VMFR/P8mlpVdbn15VReY/nqqEPwMg= Subject key identifier: 1B:56:51:6D:F3:06:68:94:9C:A3:FA:9E:33:AD:90:DD:4C:20:45:5F Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 633DB2B884534BF6FD52561FA9220976A2CBCC91 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS43878.roa Signing time: Mon 26 Oct 2026 12:10:57 +0000 ROA not before: Mon 26 Oct 2026 12:05:57 +0000 ROA not after: Mon 25 Oct 2027 12:10:57 +0000 asID: 43878 IP address blocks: 189.12.145.0/24 maxlen: 24 189.12.147.0/24 maxlen: 24 189.30.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 03:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3d:b2:b8:84:53:4b:f6:fd:52:56:1f:a9:22:09:76:a2:cb:cc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Oct 26 12:05:57 2026 GMT Not After : Oct 25 12:10:57 2027 GMT Subject: CN=1B56516DF30668949CA3FA9E33AD90DD4C20455F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1a:54:4d:10:94:0e:6d:0b:e1:a5:d9:42:6f: a4:2b:e0:92:35:18:a9:a0:c0:04:ef:f9:4d:db:d9: 40:d8:28:39:6d:25:3d:a5:97:a7:a7:28:b7:c3:03: 9e:42:c3:8f:e7:1e:2f:45:57:4f:36:04:25:76:f1: 07:11:bc:8f:6c:fc:d6:c5:a0:f9:94:77:5a:94:02: 13:0d:d6:87:c8:e9:12:ba:9f:10:6e:a0:28:7f:e7: 2b:df:8f:ef:01:76:b9:75:f3:ae:90:34:c2:ec:d1: 13:c3:c7:84:02:0b:c8:f8:26:3a:d6:d3:f9:13:77: ec:2d:12:c8:c4:6e:b0:3d:b4:69:f6:83:30:62:e0: f5:5e:2b:42:bf:71:10:00:7f:fe:18:6a:ca:cf:cc: e3:29:bc:3c:c5:ba:6e:57:92:db:49:62:69:0c:9f: 80:98:9e:85:b8:1c:78:61:3b:04:90:af:5f:31:dd: 8a:7c:e9:25:b1:1b:4a:43:c8:fc:6f:7e:48:19:46: 5e:59:29:b1:88:23:3c:bf:3c:d5:0b:e4:67:96:0a: 7a:28:e7:91:bb:d4:d0:24:f0:a2:09:a2:8f:34:a2: d9:3c:c4:97:0f:c2:39:44:ee:f7:33:94:b9:37:5d: ba:ad:3e:f7:9d:f2:d1:36:7a:31:ee:96:83:bc:28: 15:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:56:51:6D:F3:06:68:94:9C:A3:FA:9E:33:AD:90:DD:4C:20:45:5F X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS43878.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.145.0/24 189.12.147.0/24 189.30.119.0/24 Signature Algorithm: sha256WithRSAEncryption ab:1b:a1:08:77:e2:9d:dc:2e:94:ad:04:76:b4:cf:ac:ca:01: ab:5e:41:14:ea:da:af:c8:0f:25:ae:58:3d:2b:9d:e9:a9:9f: 16:71:a8:8c:b6:7e:2e:8d:5c:3f:62:dc:a0:aa:69:1d:4e:60: 9e:aa:65:70:4f:b8:e0:6f:52:cd:e1:44:2e:fb:fc:1d:09:0d: 24:7b:23:3b:31:20:c4:cd:e9:0c:eb:71:53:3a:56:af:74:26: ab:0d:bf:16:d7:32:72:69:97:84:b7:45:a7:84:03:4f:12:c8: 12:89:50:35:50:f5:05:25:cc:14:68:ce:ab:ca:6e:af:d8:07: 0c:99:88:7d:3d:72:5f:f2:b9:4d:10:39:93:61:8b:dc:94:98: 68:fe:9b:19:50:f5:60:92:b2:2d:27:ee:91:7b:5e:eb:c1:93: b0:a2:2a:a1:29:a3:4f:76:3e:53:80:ac:0d:2e:5c:21:9b:5b: 00:6b:cc:47:39:a8:c2:30:37:42:73:46:14:ca:7b:7b:b0:9b: e2:ce:7b:c6:36:8e:12:90:3a:54:8c:4e:97:ad:9c:22:51:14: ce:e8:d7:2a:90:08:64:e4:f0:72:ff:6d:0c:ab:8b:ec:5f:74: a8:be:a2:72:ab:85:e7:54:de:d0:ca:41:41:8e:06:c4:68:1f: 5e:0d:b0:93 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUYz2yuIRTS/b9UlYfqSIJdqLLzJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjEwMjYxMjA1NTdaFw0yNzEwMjUxMjEwNTdaMDMxMTAvBgNV BAMTKDFCNTY1MTZERjMwNjY4OTQ5Q0EzRkE5RTMzQUQ5MERENEMyMDQ1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGlRNEJQObQvhpdlCb6Qr4JI1 GKmgwATv+U3b2UDYKDltJT2ll6enKLfDA55Cw4/nHi9FV082BCV28QcRvI9s/NbF oPmUd1qUAhMN1ofI6RK6nxBuoCh/5yvfj+8Bdrl1866QNMLs0RPDx4QCC8j4JjrW 0/kTd+wtEsjEbrA9tGn2gzBi4PVeK0K/cRAAf/4YasrPzOMpvDzFum5XkttJYmkM n4CYnoW4HHhhOwSQr18x3Yp86SWxG0pDyPxvfkgZRl5ZKbGIIzy/PNUL5GeWCnoo 55G71NAk8KIJoo80otk8xJcPwjlE7vczlLk3XbqtPved8tE2ejHuloO8KBU/AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUG1ZRbfMGaJSco/qeM62Q3UwgRV8wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuG XnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTdj ODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1NzU0LzAvQVM0Mzg3OC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC AAEwEgMEAL0MkQMEAL0MkwMEAL0edzANBgkqhkiG9w0BAQsFAAOCAQEAqxuhCHfi ndwulK0EdrTPrMoBq15BFOrar8gPJa5YPSud6amfFnGojLZ+Lo1cP2LcoKppHU5g nqplcE+44G9SzeFELvv8HQkNJHsjOzEgxM3pDOtxUzpWr3Qmqw2/FtcycmmXhLdF p4QDTxLIEolQNVD1BSXMFGjOq8pur9gHDJmIfT1yX/K5TRA5k2GL3JSYaP6bGVD1 YJKyLSfukXte68GTsKIqoSmjT3Y+U4CsDS5cIZtbAGvMRzmowjA3QnNGFMp7e7Cb 4s57xjaOEpA6VIxOl62cIlEUzujXKpAIZOTwcv9tDKuL7F90qL6icquF51Te0MpB QY4GxGgfXg2wkw== -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:44 2026 by rpki-client