
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa
File: 3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa (raw, json)
Hash identifier: v8hZ0VFMo4pRZ6zDBL4LBkos6xCLq84/IY2JkNolhi8=
Subject key identifier: AF:B4:C3:FC:52:63:82:88:5E:B0:3C:A1:D9:A2:A9:82:E6:5C:1F:D3
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 26170E124BCC7348E6460766ED49C382C902E178
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa
Signing time: Thu 17 Sep 2026 05:46:11 +0000
ROA not before: Thu 17 Sep 2026 05:41:11 +0000
ROA not after: Thu 16 Sep 2027 05:46:11 +0000
asID: 218869
IP address blocks: 177.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:17:0e:12:4b:cc:73:48:e6:46:07:66:ed:49:c3:82:c9:02:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 17 05:41:11 2026 GMT
Not After : Sep 16 05:46:11 2027 GMT
Subject: CN=AFB4C3FC526382885EB03CA1D9A2A982E65C1FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:79:b3:34:aa:ab:f1:45:fc:24:09:f2:19:
5d:a6:60:41:04:f5:1a:d8:15:d6:27:24:cc:bf:d3:
4c:17:39:84:38:17:76:b8:c0:71:ef:4e:57:3c:23:
65:e2:c2:7a:ae:c8:15:06:3d:9a:88:89:51:62:31:
ef:81:72:fe:b1:f1:1b:d3:96:dd:ed:7b:9c:00:48:
0e:c5:36:24:6e:41:18:c4:0c:1b:7d:39:90:60:7d:
a6:24:c6:26:f5:f2:52:b4:ef:52:91:a4:2c:af:60:
f9:ae:e2:b0:26:a2:94:ba:9e:c2:e0:29:04:1f:bc:
57:86:7e:7c:90:ef:5a:08:4c:1d:18:b7:06:99:5a:
47:49:6c:e6:78:a9:b8:e1:b6:4b:b1:bc:09:4b:91:
c4:0e:95:11:c9:80:75:26:9c:0e:69:70:86:90:b1:
1c:1f:11:6b:69:b7:e4:59:06:bb:82:f4:1a:57:a1:
b3:2f:9f:17:65:1b:01:9c:fd:95:91:10:b4:1c:66:
3f:1f:a2:bd:29:30:9b:1f:5f:b9:86:13:38:39:3e:
d6:70:0d:66:42:a3:4f:46:a2:64:3d:c3:f1:c0:2d:
8e:1a:b1:0c:35:c3:63:ce:1f:80:4a:df:30:43:59:
16:e1:93:0a:a3:a5:89:04:56:d3:d4:2d:71:57:dc:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B4:C3:FC:52:63:82:88:5E:B0:3C:A1:D9:A2:A9:82:E6:5C:1F:D3
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0f:ba:ec:5b:91:16:23:f4:b2:9d:81:2a:e6:34:7f:cb:fd:
84:19:66:4d:37:39:93:a9:f1:dc:b2:84:ed:65:e5:92:5d:6c:
5c:c1:49:63:6d:3e:dd:0e:7b:da:8f:45:da:89:0f:cb:e7:db:
d5:48:64:fb:7c:97:6d:dc:05:b9:45:5a:ee:f0:06:7a:44:f8:
8f:c1:16:cb:16:ce:28:92:aa:1b:af:22:e1:f3:c9:22:fb:45:
79:76:34:24:8e:68:8c:a6:64:f3:e6:0b:7e:63:55:81:a7:fb:
11:41:21:9a:43:d7:a8:c8:86:ba:04:2a:7a:d3:ba:77:5a:92:
d7:c7:c2:97:f4:33:3d:6a:60:f7:93:41:cc:af:1f:48:0a:dd:
82:a3:eb:34:69:bd:38:25:5d:fc:38:98:51:94:cf:89:68:85:
50:2e:55:45:f1:d3:12:fc:68:f4:a0:84:08:6e:08:2c:45:9c:
f5:45:18:6e:84:ed:4a:e3:5f:c9:92:cf:c3:5e:83:05:06:86:
b3:f5:70:b5:45:30:d2:bd:f7:6e:2a:38:a0:f7:08:2e:0f:0a:
6f:80:33:6d:67:d0:63:ca:b8:b8:32:b3:01:ca:49:50:72:90:
03:19:54:99:75:8c:7a:72:fe:a3:54:5c:f5:3d:e9:1a:6a:41:
e1:ff:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:39 2026 by rpki-client