$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa File: 3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa (raw, json) Hash identifier: FW/Ssiz+8KqhT6Cr2TTesCvlO6f91XLRynqu9mBHR+Y= Subject key identifier: E0:6B:57:44:40:83:B3:6B:03:02:66:AE:15:5A:B2:5B:43:9F:D4:2A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4E50468F08AF4BABB97564D7C839C441D9182BA1 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa Signing time: Thu 17 Sep 2026 05:46:15 +0000 ROA not before: Thu 17 Sep 2026 05:41:15 +0000 ROA not after: Thu 16 Sep 2027 05:46:15 +0000 asID: 401362 IP address blocks: 177.201.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:50:46:8f:08:af:4b:ab:b9:75:64:d7:c8:39:c4:41:d9:18:2b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:15 2026 GMT Not After : Sep 16 05:46:15 2027 GMT Subject: CN=E06B57444083B36B030266AE155AB25B439FD42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:98:04:43:dd:17:87:ad:0a:62:f1:2f:6f:58: e1:14:55:ef:30:c5:df:39:bd:9b:d2:27:2b:e7:16: 6e:48:82:16:47:2f:4f:93:ee:30:f6:3b:62:57:ff: be:ae:3f:67:f9:5c:ed:72:77:ed:50:84:e2:b2:fa: 69:24:2f:df:90:8b:8a:60:ae:a5:32:92:f6:53:37: 92:18:d8:2f:89:37:7f:6b:9c:ff:dd:15:6d:30:cc: 4d:3b:da:4b:d2:11:13:a3:29:57:ce:00:44:27:cd: 04:0f:87:b5:f0:c9:7a:df:c7:c3:96:63:3f:8f:f7: 85:b3:64:ba:66:0e:0a:83:03:45:c3:03:25:d3:07: 7a:f7:08:65:d0:6c:8b:f2:3d:cf:f5:bd:00:8b:ca: 16:d5:b1:46:8f:c9:52:79:e4:82:f8:99:c4:fe:40: 21:e0:c8:d7:61:d0:8a:f0:6a:34:37:26:87:03:23: d1:dc:ea:80:d9:fd:59:6a:99:57:e7:e5:ea:58:85: 65:ef:fd:10:84:c5:92:b6:d2:1a:83:8d:e1:8d:d7: 8d:f5:c7:15:af:f0:26:63:27:5a:b0:9e:ee:d9:de: cb:82:25:f1:0f:66:40:5b:a9:9f:17:ac:7a:45:31: 81:f7:af:32:fe:f3:60:4d:96:3a:57:54:6a:94:55: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:57:44:40:83:B3:6B:03:02:66:AE:15:5A:B2:5B:43:9F:D4:2A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.208.0/24 Signature Algorithm: sha256WithRSAEncryption 31:85:0a:8f:43:1f:92:dd:e4:0f:da:4c:df:b7:d6:ea:a1:00: 8d:4a:f0:e6:9b:2f:e1:be:7f:5a:bd:cb:90:12:f2:0a:fb:38: 25:5e:d8:1b:f9:bb:92:c1:d3:30:6b:a8:d4:12:db:28:5f:10: c7:21:95:6c:b8:d8:fb:3c:a3:3d:f5:db:ae:c8:1c:2a:5a:2c: 28:ac:23:db:c9:be:d8:2a:94:39:e5:1a:8d:d2:b7:f2:9d:81: 97:b0:ac:12:75:37:f4:fe:c5:ff:b0:02:37:3e:ea:f8:1e:a2: ad:bd:45:39:67:2f:93:75:c0:0e:28:05:b7:42:e9:c3:3b:d5: 94:6c:52:d5:82:81:a8:6d:50:b4:ff:b2:12:4c:5a:bc:96:da: b2:29:25:f7:c3:c5:07:52:f5:f4:2c:fc:f9:1e:c9:9e:22:4f: d7:6b:8f:de:5e:28:c2:5e:af:4c:4a:7e:42:73:06:1b:ad:3e: b3:d8:d7:ef:02:37:79:84:c5:6e:19:9a:85:ab:91:7e:20:cd: 5f:90:fc:76:29:4f:e4:79:57:78:2e:ca:df:66:bf:bd:57:78: c2:62:c0:1d:fb:9b:be:3a:73:5c:4a:e8:23:6d:67:43:b1:b0: 17:5e:16:53:de:b1:2f:69:c0:98:44:df:16:0a:8f:1b:53:f2: 64:5c:f0:1d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUTlBGjwivS6u5dWTXyDnEQdkYK6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTVaFw0yNzA5MTYwNTQ2MTVaMDMxMTAvBgNV BAMTKEUwNkI1NzQ0NDA4M0IzNkIwMzAyNjZBRTE1NUFCMjVCNDM5RkQ0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmARD3ReHrQpi8S9vWOEUVe8w xd85vZvSJyvnFm5IghZHL0+T7jD2O2JX/76uP2f5XO1yd+1QhOKy+mkkL9+Qi4pg rqUykvZTN5IY2C+JN39rnP/dFW0wzE072kvSEROjKVfOAEQnzQQPh7XwyXrfx8OW Yz+P94WzZLpmDgqDA0XDAyXTB3r3CGXQbIvyPc/1vQCLyhbVsUaPyVJ55IL4mcT+ QCHgyNdh0IrwajQ3JocDI9Hc6oDZ/VlqmVfn5epYhWXv/RCExZK20hqDjeGN1431 xxWv8CZjJ1qwnu7Z3suCJfEPZkBbqZ8XrHpFMYH3rzL+82BNljpXVGqUVbx3AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU4GtXRECDs2sDAmauFVqyW0Of1CowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzMz NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscnQMA0GCSqGSIb3DQEBCwUAA4IBAQAxhQqPQx+S3eQP 2kzft9bqoQCNSvDmmy/hvn9avcuQEvIK+zglXtgb+buSwdMwa6jUEtsoXxDHIZVs uNj7PKM99duuyBwqWiworCPbyb7YKpQ55RqN0rfynYGXsKwSdTf0/sX/sAI3Pur4 HqKtvUU5Zy+TdcAOKAW3QunDO9WUbFLVgoGobVC0/7ISTFq8ltqyKSX3w8UHUvX0 LPz5HsmeIk/Xa4/eXijCXq9MSn5CcwYbrT6z2NfvAjd5hMVuGZqFq5F+IM1fkPx2 KU/keVd4LsrfZr+9V3jCYsAd+5u+OnNcSugjbWdDsbAXXhZT3rEvacCYRN8WCo8b U/JkXPAd -----END CERTIFICATE-----Generated at Sat Sep 19 04:01:09 2026 by rpki-client