$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa File: 3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa (raw, json) Hash identifier: C9qmiHZKAgaPj35HedpAbC5YV8faQa5xnnyIdNccXhE= Subject key identifier: 4A:87:4B:A9:E9:E0:E3:A5:EA:97:5F:6D:FC:EF:EC:AF:41:28:7B:FE Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 37D3C3B8C9D5860D175D780E9B68F4F6427BCF87 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa Signing time: Thu 17 Sep 2026 05:46:06 +0000 ROA not before: Thu 17 Sep 2026 05:41:06 +0000 ROA not after: Thu 16 Sep 2027 05:46:06 +0000 asID: 210000 IP address blocks: 177.177.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d3:c3:b8:c9:d5:86:0d:17:5d:78:0e:9b:68:f4:f6:42:7b:cf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:06 2026 GMT Not After : Sep 16 05:46:06 2027 GMT Subject: CN=4A874BA9E9E0E3A5EA975F6DFCEFECAF41287BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:fc:e5:73:2f:d8:6f:b6:6a:fc:49:dc:ce: 0e:cd:25:51:e0:61:4c:4e:fc:b7:e1:3d:38:99:ad: b7:39:06:d2:8b:09:34:a0:40:0e:f0:aa:05:02:e6: 55:37:55:69:a3:a8:57:31:be:56:f3:79:1c:4c:be: 3a:f0:26:91:c9:50:97:50:18:a8:31:6f:09:6f:b0: 94:85:39:02:f6:c3:38:34:94:cf:02:5d:f7:e4:f9: 74:f9:9e:7f:27:9a:cb:56:bd:ce:31:44:13:79:5e: dc:fe:1e:60:64:bb:21:df:3d:56:4a:2a:20:71:a8: 51:ae:64:48:a3:a4:00:a6:75:ea:3c:08:f7:b4:d6: 08:86:15:a5:29:ce:94:21:7d:11:0e:26:d9:0e:ca: 32:09:c7:11:02:88:16:82:b5:f8:0d:91:04:a9:c5: ec:9d:c4:34:e9:fe:cf:53:0e:bf:8a:cd:ab:7d:1c: fd:84:a1:6f:e5:4b:6b:51:0e:97:b9:3a:96:1e:55: e5:24:7e:83:c1:d8:29:00:96:38:03:0e:5f:8c:21: 1e:0c:54:3c:64:a6:86:af:e5:9a:45:4e:37:25:8b: a8:f0:39:c0:9b:07:65:00:ff:3d:c2:1f:2c:55:b1: 1b:26:a2:25:c8:e3:7a:d3:22:d3:71:65:18:43:5e: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:4B:A9:E9:E0:E3:A5:EA:97:5F:6D:FC:EF:EC:AF:41:28:7B:FE X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.77.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a5:aa:6b:30:c3:04:75:e1:bb:ea:fb:61:53:d9:73:4d:71: a3:01:1f:a3:7b:30:08:ac:41:f3:43:c2:45:cd:a6:b2:b8:a2: 75:fa:bd:74:cf:80:7a:50:74:bf:e7:3f:e1:e4:37:fc:c8:40: 63:2c:d1:e7:61:a1:66:b8:ab:90:f5:7c:5c:55:a5:41:b3:d0: 6c:42:1d:8c:92:a6:de:fe:19:d6:e3:ad:ab:ab:07:24:1d:05: 08:91:2b:41:7c:b7:fe:0d:51:74:56:12:d0:7a:58:e8:0a:fb: 69:3e:8c:e8:2f:47:d4:c0:b5:c8:2a:88:b4:ca:2d:18:73:52: d7:90:ce:4c:64:e6:a2:03:69:74:7a:b3:40:57:89:d5:e5:1a: e3:21:39:3f:64:19:52:f1:05:ed:a1:2d:6c:60:90:3f:2f:45: 83:3e:1e:bc:cf:f4:e4:94:11:bc:36:75:87:76:ed:67:65:17: 7f:df:6a:b4:5d:a7:41:43:de:87:82:70:0b:20:77:bd:b5:69: e9:14:54:1b:5d:50:28:46:11:42:3a:51:18:c9:3a:eb:6a:64: 6e:8d:72:4e:42:ba:45:09:a3:21:eb:a6:14:c2:f8:e2:ce:a9: a2:6b:7a:64:cd:0d:0f:48:32:79:7f:9c:3a:12:85:a1:38:e7: a2:eb:f8:5e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUN9PDuMnVhg0XXXgOm2j09kJ7z4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDZaFw0yNzA5MTYwNTQ2MDZaMDMxMTAvBgNV BAMTKDRBODc0QkE5RTlFMEUzQTVFQTk3NUY2REZDRUZFQ0FGNDEyODdCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvvzlcy/Yb7Zq/Enczg7NJVHg YUxO/LfhPTiZrbc5BtKLCTSgQA7wqgUC5lU3VWmjqFcxvlbzeRxMvjrwJpHJUJdQ GKgxbwlvsJSFOQL2wzg0lM8CXffk+XT5nn8nmstWvc4xRBN5Xtz+HmBkuyHfPVZK KiBxqFGuZEijpACmdeo8CPe01giGFaUpzpQhfREOJtkOyjIJxxECiBaCtfgNkQSp xeydxDTp/s9TDr+Kzat9HP2EoW/lS2tRDpe5OpYeVeUkfoPB2CkAljgDDl+MIR4M VDxkpoav5ZpFTjcli6jwOcCbB2UA/z3CHyxVsRsmoiXI43rTItNxZRhDXl7nAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUSodLqeng46Xql19t/O/sr0Eoe/4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMxMzczNzJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMDMwMzAz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEALGxTTANBgkqhkiG9w0BAQsFAAOCAQEAUKWqazDDBHXhu+r7 YVPZc01xowEfo3swCKxB80PCRc2msriidfq9dM+AelB0v+c/4eQ3/MhAYyzR52Gh ZrirkPV8XFWlQbPQbEIdjJKm3v4Z1uOtq6sHJB0FCJErQXy3/g1RdFYS0HpY6Ar7 aT6M6C9H1MC1yCqItMotGHNS15DOTGTmogNpdHqzQFeJ1eUa4yE5P2QZUvEF7aEt bGCQPy9Fgz4evM/05JQRvDZ1h3btZ2UXf99qtF2nQUPeh4JwCyB3vbVp6RRUG11Q KEYRQjpRGMk662pkbo1yTkK6RQmjIeumFML44s6pomt6ZM0ND0gyeX+cOhKFoTjn ouv4Xg== -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:05 2026 by rpki-client