$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa File: 3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa (raw, json) Hash identifier: PcxeHFTQmMhS99nsSB6pOA+CTpHmQU5IBWNjrv8ahyE= Subject key identifier: 5E:7F:77:B0:50:A9:5D:21:B3:E2:2F:29:C7:49:0A:58:94:50:FD:E7 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0216A10A8E75A725B54A16801E14185981A41B78 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa Signing time: Thu 17 Sep 2026 05:46:16 +0000 ROA not before: Thu 17 Sep 2026 05:41:16 +0000 ROA not after: Thu 16 Sep 2027 05:46:16 +0000 asID: 204921 IP address blocks: 177.177.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:16:a1:0a:8e:75:a7:25:b5:4a:16:80:1e:14:18:59:81:a4:1b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:16 2026 GMT Not After : Sep 16 05:46:16 2027 GMT Subject: CN=5E7F77B050A95D21B3E22F29C7490A589450FDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:fc:41:96:ce:af:f1:a2:dc:19:b2:6e:a0: c5:36:48:e0:2f:f5:ee:e0:23:b7:38:dc:bf:93:34: dc:d4:42:35:b4:22:de:bd:0d:1e:7f:f2:8a:d5:b7: f9:39:f8:77:83:b2:92:ed:76:fb:6a:5c:81:37:98: ec:14:34:07:03:48:a1:d4:a3:a5:96:14:7f:15:ed: c6:33:eb:98:c6:05:72:dc:39:2e:95:02:35:48:0f: d5:93:52:2d:77:b4:fb:29:bd:f1:2d:d3:af:03:c4: 03:b1:52:d3:e3:a6:36:71:5f:41:33:6d:1a:09:18: b6:2a:61:a0:b8:db:69:2b:f8:97:bb:d8:30:a4:36: 3b:ca:d9:a4:73:8a:6d:c4:a7:45:d1:84:0b:4d:b7: 7b:7b:60:47:ea:b8:10:59:a2:df:dd:f7:09:37:18: 7e:3a:19:5c:79:30:37:f9:fc:2d:cc:78:f0:05:23: a9:b4:c2:b3:bb:87:42:8f:de:f0:94:f4:19:83:5e: fa:9f:c8:ac:fa:4a:7f:17:ba:b0:aa:93:96:a5:ee: e2:42:6e:fe:3e:78:d2:bf:cf:23:2e:9a:9a:50:3c: 8d:9c:14:55:4f:02:9b:21:a1:e2:6b:7e:f2:ae:42: 22:68:33:b6:04:21:cf:81:a0:74:1c:0e:9f:93:25: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7F:77:B0:50:A9:5D:21:B3:E2:2F:29:C7:49:0A:58:94:50:FD:E7 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.80.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:bd:b3:4e:53:66:1e:21:36:c1:79:21:cb:25:4b:3d:c9:33: 4a:d0:15:0e:d3:11:e2:62:c0:ae:a5:67:98:05:16:61:7f:e4: 94:99:a5:25:24:a0:2b:7c:f3:9e:e7:5c:e1:61:39:6d:a3:11: 09:f1:46:76:9e:a4:4a:a2:08:6f:7f:c4:c7:89:14:df:57:3a: 82:43:c9:50:70:54:23:de:21:8a:b7:f6:ad:e1:40:1b:be:61: cb:a9:ed:92:58:41:fb:af:fc:1b:96:72:76:af:de:39:19:21: 34:cd:7f:53:4b:a3:9e:c2:f1:57:85:3f:79:c1:bf:e6:09:cc: 1d:b6:dd:89:9d:61:33:3d:a4:a8:ce:fd:c5:3e:f3:3e:ec:db: 17:9d:48:6c:4b:05:3b:50:39:ab:47:2b:4c:05:88:41:47:b6: 3d:86:26:61:5b:c2:6a:23:3c:d6:27:4c:e6:98:96:bf:03:1b: 4d:5a:de:bc:f4:73:50:d4:84:a9:33:b0:81:23:4d:ec:df:b9: a5:52:87:45:0e:6a:92:e9:eb:6b:3e:ac:3b:ba:e5:8f:9f:42: 52:fd:ea:38:f2:39:6e:41:7f:be:4c:c8:fd:0b:f9:94:1e:de: dd:61:de:70:98:bb:02:d2:f3:c8:d3:0e:68:e8:6d:6f:d3:25: 66:b0:5a:a5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUAhahCo51pyW1ShaAHhQYWYGkG3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTZaFw0yNzA5MTYwNTQ2MTZaMDMxMTAvBgNV BAMTKDVFN0Y3N0IwNTBBOTVEMjFCM0UyMkYyOUM3NDkwQTU4OTQ1MEZERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkfxBls6v8aLcGbJuoMU2SOAv 9e7gI7c43L+TNNzUQjW0It69DR5/8orVt/k5+HeDspLtdvtqXIE3mOwUNAcDSKHU o6WWFH8V7cYz65jGBXLcOS6VAjVID9WTUi13tPspvfEt068DxAOxUtPjpjZxX0Ez bRoJGLYqYaC422kr+Je72DCkNjvK2aRzim3Ep0XRhAtNt3t7YEfquBBZot/d9wk3 GH46GVx5MDf5/C3MePAFI6m0wrO7h0KP3vCU9BmDXvqfyKz6Sn8XurCqk5al7uJC bv4+eNK/zyMumppQPI2cFFVPApshoeJrfvKuQiJoM7YEIc+BoHQcDp+TJYBDAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUXn93sFCpXSGz4i8px0kKWJRQ/ecwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMxMzczNzJlMzgzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM5MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEArGxUDANBgkqhkiG9w0BAQsFAAOCAQEAjb2zTlNmHiE2wXkh yyVLPckzStAVDtMR4mLArqVnmAUWYX/klJmlJSSgK3zznudc4WE5baMRCfFGdp6k SqIIb3/Ex4kU31c6gkPJUHBUI94hirf2reFAG75hy6ntklhB+6/8G5Zydq/eORkh NM1/U0ujnsLxV4U/ecG/5gnMHbbdiZ1hMz2kqM79xT7zPuzbF51IbEsFO1A5q0cr TAWIQUe2PYYmYVvCaiM81idM5piWvwMbTVrevPRzUNSEqTOwgSNN7N+5pVKHRQ5q kunraz6sO7rlj59CUv3qOPI5bkF/vkzI/Qv5lB7e3WHecJi7AtLzyNMOaOhtb9Ml ZrBapQ== -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:03 2026 by rpki-client