
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa
File: 3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa (raw, json)
Hash identifier: BgpFZTbrOOYTHp50+fRRKQjd0ep7l+ObE/SrMUgS08Y=
Subject key identifier: 73:26:74:92:AE:DA:12:E1:15:0D:00:41:3B:93:4A:C9:0A:F7:E5:C8
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 6F48BD6268EB35AED5D49B1EC031987012E2FCD1
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa
Signing time: Thu 17 Sep 2026 05:46:10 +0000
ROA not before: Thu 17 Sep 2026 05:41:10 +0000
ROA not after: Thu 16 Sep 2027 05:46:10 +0000
asID: 204244
IP address blocks: 177.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:48:bd:62:68:eb:35:ae:d5:d4:9b:1e:c0:31:98:70:12:e2:fc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 17 05:41:10 2026 GMT
Not After : Sep 16 05:46:10 2027 GMT
Subject: CN=73267492AEDA12E1150D00413B934AC90AF7E5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:b8:df:d6:7c:1f:c0:f1:21:c4:48:10:ce:
8d:6b:de:99:c9:ea:e2:10:5a:0e:ff:b5:a2:7d:05:
27:a2:22:0d:ff:94:34:23:6b:ac:9d:cd:f8:92:49:
4e:23:cc:ca:39:89:91:78:95:66:22:26:c4:6d:78:
5a:02:e0:e0:4e:65:18:6d:2a:ae:cd:6f:4b:1a:17:
d3:b3:52:18:b6:b0:8b:93:da:5e:9c:dc:a1:01:f7:
fb:5c:2f:3c:27:38:8e:f7:6a:97:36:1d:ca:80:52:
81:a7:b6:b1:3b:b9:07:60:20:f7:f8:a7:43:d8:72:
27:a4:59:d7:5f:1c:33:63:5e:92:90:d7:97:37:45:
4c:11:6c:e8:26:64:2a:7a:21:17:1a:fa:18:58:39:
98:a5:7f:2d:68:2b:2d:ca:40:7a:7d:04:10:be:5c:
b7:9f:cc:c7:aa:40:78:d8:69:4a:72:81:df:5a:c0:
fc:18:36:cd:f2:2f:61:7f:da:ff:14:e9:b2:e9:4c:
f9:95:98:cf:cb:60:31:ee:e1:25:ca:d0:73:44:21:
29:cf:83:c9:7d:9c:46:d8:1d:33:43:b3:05:8e:54:
a2:a9:c9:39:ff:30:2f:f2:9d:47:fe:1a:e6:53:f5:
96:ff:25:45:c9:92:c1:2e:d2:b9:ea:3f:6d:1a:c1:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:74:92:AE:DA:12:E1:15:0D:00:41:3B:93:4A:C9:0A:F7:E5:C8
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
23:17:28:01:c2:66:8e:29:fe:e7:c0:cd:99:66:8d:26:8b:08:
36:d0:60:d2:ef:0f:8b:5b:e6:05:9f:80:b5:53:cc:58:9b:0c:
f3:b1:e3:76:cf:88:7a:7b:f1:8e:67:22:23:6a:28:c8:e8:01:
ce:a4:18:5a:49:4a:8a:42:26:f1:ae:ec:2d:9f:eb:0f:a2:aa:
30:86:f2:3c:b4:7e:ec:a9:3b:11:6a:83:81:09:8d:9c:8b:0f:
d3:77:b2:55:04:fb:17:b3:99:9b:87:f4:fa:df:7f:71:fb:12:
64:4d:5a:c6:42:a1:04:ab:99:2d:97:d1:d8:f4:19:b0:b9:d4:
cd:30:b6:75:89:f9:a4:d6:11:ed:55:48:70:2a:20:b1:34:d0:
74:dc:3e:a2:4b:2d:f9:4e:24:50:4a:42:05:4d:b5:90:d8:2c:
e6:89:13:f1:69:74:91:33:2b:10:c7:a6:b3:f6:4e:b9:1a:7a:
61:66:5f:85:b1:42:72:ef:90:21:6f:dc:09:4a:67:89:d3:fd:
9f:11:57:b7:d1:71:ff:8a:69:72:41:d6:aa:24:62:82:5f:46:
76:38:2a:08:a0:6d:13:89:b8:8b:03:15:21:20:65:9c:8c:06:
4f:d8:e5:2e:db:01:92:8b:64:87:fa:32:31:65:1f:4b:fc:e1:
58:58:20:a9
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUb0i9YmjrNa7V1JsewDGYcBLi/NEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC
MzJBODFERjAeFw0yNjA5MTcwNTQxMTBaFw0yNzA5MTYwNTQ2MTBaMDMxMTAvBgNV
BAMTKDczMjY3NDkyQUVEQTEyRTExNTBEMDA0MTNCOTM0QUM5MEFGN0U1QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbCbjf1nwfwPEhxEgQzo1r3pnJ
6uIQWg7/taJ9BSeiIg3/lDQja6ydzfiSSU4jzMo5iZF4lWYiJsRteFoC4OBOZRht
Kq7Nb0saF9OzUhi2sIuT2l6c3KEB9/tcLzwnOI73apc2HcqAUoGntrE7uQdgIPf4
p0PYciekWddfHDNjXpKQ15c3RUwRbOgmZCp6IRca+hhYOZilfy1oKy3KQHp9BBC+
XLefzMeqQHjYaUpygd9awPwYNs3yL2F/2v8U6bLpTPmVmM/LYDHu4SXK0HNEISnP
g8l9nEbYHTNDswWOVKKpyTn/MC/ynUf+GuZT9Zb/JUXJksEu0rnqP20awbjFAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUcyZ0kq7aEuEVDQBBO5NKyQr35cgwHwYDVR0j
BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1
NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw
MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3
NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF
BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy
ZTMxMzczNzJlMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMyMzQz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALGxUzANBgkqhkiG9w0BAQsFAAOCAQEAIxcoAcJmjin+58DN
mWaNJosINtBg0u8Pi1vmBZ+AtVPMWJsM87Hjds+IenvxjmciI2ooyOgBzqQYWklK
ikIm8a7sLZ/rD6KqMIbyPLR+7Kk7EWqDgQmNnIsP03eyVQT7F7OZm4f0+t9/cfsS
ZE1axkKhBKuZLZfR2PQZsLnUzTC2dYn5pNYR7VVIcCogsTTQdNw+okst+U4kUEpC
BU21kNgs5okT8Wl0kTMrEMems/ZOuRp6YWZfhbFCcu+QIW/cCUpnidP9nxFXt9Fx
/4ppckHWqiRigl9GdjgqCKBtE4m4iwMVISBlnIwGT9jlLtsBkotkh/oyMWUfS/zh
WFggqQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:37 2026 by rpki-client