$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38322e302f32342d3234203d3e203430393239.roa File: 3137372e3137372e38322e302f32342d3234203d3e203430393239.roa (raw, json) Hash identifier: bj9KaVnjNIyDFaoTLLINKWFjkks3B9JShw+TYOkuMZ4= Subject key identifier: 60:6B:67:53:33:61:A1:21:DA:F0:5C:FC:95:67:A1:AF:FC:DA:CE:7E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 68F06E212E6F15CF85C3EA9DCFFDBEA2E730E094 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38322e302f32342d3234203d3e203430393239.roa Signing time: Thu 17 Sep 2026 05:46:08 +0000 ROA not before: Thu 17 Sep 2026 05:41:08 +0000 ROA not after: Thu 16 Sep 2027 05:46:08 +0000 asID: 40929 IP address blocks: 177.177.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f0:6e:21:2e:6f:15:cf:85:c3:ea:9d:cf:fd:be:a2:e7:30:e0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:08 2026 GMT Not After : Sep 16 05:46:08 2027 GMT Subject: CN=606B67533361A121DAF05CFC9567A1AFFCDACE7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:80:90:b5:5b:03:a4:de:09:22:cb:2c:00:44: 25:9d:d6:01:0d:24:0c:66:fb:74:f4:14:b1:c6:c5: 07:0b:dc:a6:d2:56:b9:95:0c:7b:65:3c:83:de:df: 7b:5d:4d:e8:c5:d0:33:57:a1:66:57:38:97:be:c5: 28:30:46:e4:c0:b2:78:ad:45:83:62:d7:8a:7d:95: 93:79:25:83:b0:35:6d:eb:3d:8d:de:3a:fc:9a:7b: af:e8:e7:ac:49:8d:45:2c:ac:97:4c:36:0c:d8:0e: a8:5f:a2:8d:93:2a:3d:42:08:6a:00:20:ef:40:51: b5:5a:24:11:51:5b:eb:47:4c:c8:e0:b7:59:7b:b2: c3:3d:5f:92:d7:c7:72:0d:b6:06:32:62:ae:e6:11: 40:21:7b:94:26:c2:8b:58:bc:ab:44:06:cf:ac:24: 26:6a:12:30:64:86:f7:b1:6f:5c:d3:c3:ef:0e:29: 1d:1e:6a:0c:77:fd:14:e5:1e:92:cc:0d:e1:8c:87: 72:63:22:8d:b6:be:05:f0:e9:40:51:fe:9c:55:8a: a1:6f:0e:ed:d9:ff:2e:53:e3:d3:9d:94:b8:d4:56: 39:ec:a3:4a:ac:65:40:0c:3c:e3:16:97:bf:5a:f2: 6f:75:d6:d6:92:41:98:4b:3d:88:fc:9c:75:c3:3f: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:67:53:33:61:A1:21:DA:F0:5C:FC:95:67:A1:AF:FC:DA:CE:7E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38322e302f32342d3234203d3e203430393239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.82.0/24 Signature Algorithm: sha256WithRSAEncryption 75:2b:d4:63:d4:51:7f:66:ee:88:5c:f8:b0:29:d4:87:4c:cd: 99:84:b8:05:f3:8b:77:61:f0:63:5a:ec:35:fe:c8:d2:74:a2: cb:07:a6:c5:ea:bc:b0:71:dc:e2:09:f8:8e:cf:45:03:98:ab: b8:c1:7c:de:10:e9:66:fd:ec:55:d6:8d:21:0c:aa:24:37:c9: 69:8b:8c:60:ae:1b:19:0a:5c:0d:be:e9:ee:da:80:cd:f8:33: 73:f0:48:0b:b4:64:b9:79:23:01:d3:e5:58:ba:74:48:ff:f5: 98:e3:28:cc:d0:6a:7b:14:64:a2:13:a3:d3:6d:3d:30:ec:00: 95:b9:72:5d:28:e2:eb:14:28:38:3d:52:12:27:c0:41:ad:c5: d9:63:6a:13:7d:c7:69:0e:53:e7:10:04:39:f3:bc:83:1e:e3: 19:81:88:d7:d2:7a:31:a8:bd:71:13:e7:9b:f0:68:88:31:84: 5b:31:12:0f:be:46:88:6e:19:3b:47:8f:b7:e7:0c:af:71:6f: 06:bf:e1:5a:93:bc:8f:d5:11:0e:a3:8e:b4:98:48:e1:ae:5d: d0:3a:23:cc:81:b5:3e:a3:59:6e:b4:32:34:18:49:26:8a:fc: 89:63:64:77:3c:d0:f1:5b:32:52:14:c8:06:1e:9c:c4:c7:ac: 3f:9d:ed:3e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUaPBuIS5vFc+Fw+qdz/2+oucw4JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDhaFw0yNzA5MTYwNTQ2MDhaMDMxMTAvBgNV BAMTKDYwNkI2NzUzMzM2MUExMjFEQUYwNUNGQzk1NjdBMUFGRkNEQUNFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigJC1WwOk3gkiyywARCWd1gEN JAxm+3T0FLHGxQcL3KbSVrmVDHtlPIPe33tdTejF0DNXoWZXOJe+xSgwRuTAsnit RYNi14p9lZN5JYOwNW3rPY3eOvyae6/o56xJjUUsrJdMNgzYDqhfoo2TKj1CCGoA IO9AUbVaJBFRW+tHTMjgt1l7ssM9X5LXx3INtgYyYq7mEUAhe5QmwotYvKtEBs+s JCZqEjBkhvexb1zTw+8OKR0eagx3/RTlHpLMDeGMh3JjIo22vgXw6UBR/pxViqFv Du3Z/y5T49OdlLjUVjnso0qsZUAMPOMWl79a8m911taSQZhLPYj8nHXDP8ALAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUYGtnUzNhoSHa8Fz8lWehr/zazn4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMxMzczNzJlMzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzOTMyMzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBACxsVIwDQYJKoZIhvcNAQELBQADggEBAHUr1GPUUX9m7ohc+LAp 1IdMzZmEuAXzi3dh8GNa7DX+yNJ0ossHpsXqvLBx3OIJ+I7PRQOYq7jBfN4Q6Wb9 7FXWjSEMqiQ3yWmLjGCuGxkKXA2+6e7agM34M3PwSAu0ZLl5IwHT5Vi6dEj/9Zjj KMzQansUZKITo9NtPTDsAJW5cl0o4usUKDg9UhInwEGtxdljahN9x2kOU+cQBDnz vIMe4xmBiNfSejGovXET55vwaIgxhFsxEg++RohuGTtHj7fnDK9xbwa/4VqTvI/V EQ6jjrSYSOGuXdA6I8yBtT6jWW60MjQYSSaK/IljZHc80PFbMlIUyAYenMTHrD+d 7T4= -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:15 2026 by rpki-client