$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa File: 3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: 4Ngc8+LCwPV9T6TUYCGkZ7mWe/m710oWszvaVZ+jqy4= Subject key identifier: F4:48:94:09:C2:19:4B:FC:13:62:3B:7B:8B:4B:C7:DD:05:6D:F8:3C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 156F24F88EFF20CEAD32CF61BC495B0043746ACB Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa Signing time: Thu 17 Sep 2026 05:46:09 +0000 ROA not before: Thu 17 Sep 2026 05:41:09 +0000 ROA not after: Thu 16 Sep 2027 05:46:09 +0000 asID: 152179 IP address blocks: 177.201.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6f:24:f8:8e:ff:20:ce:ad:32:cf:61:bc:49:5b:00:43:74:6a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:09 2026 GMT Not After : Sep 16 05:46:09 2027 GMT Subject: CN=F4489409C2194BFC13623B7B8B4BC7DD056DF83C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9a:27:f5:0b:07:7a:5f:c9:44:0d:45:59:8c: 0c:96:fe:ff:a2:6c:d4:fc:f9:62:73:f2:22:a7:d7: a5:f2:62:60:94:8e:0f:f5:75:ba:3e:f7:db:e5:86: 71:47:69:3c:1e:81:48:3f:d9:05:41:79:d0:17:e1: 2e:c1:a4:8b:9e:68:d6:9d:eb:1c:8b:40:19:77:1c: de:5b:50:c7:ef:f3:8e:c8:e8:a6:69:4f:e9:31:d4: 30:6e:a5:88:b7:51:88:00:17:20:ab:28:5d:8b:28: ba:e9:5b:80:e9:1d:08:77:73:08:41:d8:cc:45:07: 5f:50:4b:85:37:54:bd:b2:6b:43:fb:58:27:fe:d5: 93:ac:4d:21:6c:06:bd:86:0a:39:1e:7a:39:e7:95: 62:39:34:2e:f1:ab:a8:13:ca:96:f5:ed:45:54:aa: c6:f0:56:bf:d8:89:b0:d1:7e:2c:bc:21:a3:a3:14: d0:78:29:b2:15:74:25:5b:f6:1e:c4:c6:d4:8b:a3: c1:9f:ac:82:06:fd:1a:1e:48:0e:93:d3:cb:39:e2: 78:ff:9e:11:fa:2d:60:11:0d:17:9a:7e:e3:de:75: 65:37:31:5e:2b:e9:3e:81:3a:af:c4:d5:ef:ef:49: a8:33:8a:99:50:46:23:8d:25:df:27:91:d0:6f:d8: e0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:48:94:09:C2:19:4B:FC:13:62:3B:7B:8B:4B:C7:DD:05:6D:F8:3C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.209.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:fc:5b:0c:e3:02:bf:90:16:9f:ec:64:a6:36:9e:84:25:af: 51:e5:2a:05:db:32:93:31:d9:19:c2:cd:ea:66:eb:c5:3d:1a: fe:51:7b:23:e6:5a:29:d7:aa:bb:d3:ad:59:ce:66:5e:2b:ea: a1:9f:e7:13:f4:b1:11:e9:eb:a5:73:81:33:29:51:47:35:3b: 4b:97:0f:ea:fb:54:93:1f:f2:00:fe:99:5c:77:a2:dd:fe:a9: 9f:8e:26:86:c0:51:17:64:ec:26:fc:85:9d:04:4c:a7:5f:74: 9f:a5:ed:9a:cb:bd:52:86:03:64:92:15:6d:79:21:46:3f:57: 24:c0:09:00:ca:12:86:9d:9f:3c:ba:ed:ba:b7:07:8d:5f:46: b8:68:a1:d8:0b:b0:ed:e1:a8:12:b1:17:e2:67:a6:34:b5:c8: 7b:38:c2:80:5d:c1:df:7c:4c:e7:c4:4a:d6:68:89:9e:94:5f: 15:24:c2:88:0a:c9:07:5c:34:4f:ad:20:6c:b2:c3:03:d8:b6: c0:b9:aa:c1:90:fb:cf:fd:f8:53:4e:3d:4d:da:10:ef:19:4b: 05:24:b2:a5:84:4f:d7:4f:69:ca:7e:f6:40:d9:d0:a8:af:b2: fb:15:56:41:59:8d:52:4d:84:e6:c1:11:ab:da:89:4c:42:6c: 7c:c8:c0:c0 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUFW8k+I7/IM6tMs9hvElbAEN0asswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDlaFw0yNzA5MTYwNTQ2MDlaMDMxMTAvBgNV BAMTKEY0NDg5NDA5QzIxOTRCRkMxMzYyM0I3QjhCNEJDN0REMDU2REY4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCImif1Cwd6X8lEDUVZjAyW/v+i bNT8+WJz8iKn16XyYmCUjg/1dbo+99vlhnFHaTwegUg/2QVBedAX4S7BpIueaNad 6xyLQBl3HN5bUMfv847I6KZpT+kx1DBupYi3UYgAFyCrKF2LKLrpW4DpHQh3cwhB 2MxFB19QS4U3VL2ya0P7WCf+1ZOsTSFsBr2GCjkeejnnlWI5NC7xq6gTypb17UVU qsbwVr/YibDRfiy8IaOjFNB4KbIVdCVb9h7ExtSLo8GfrIIG/RoeSA6T08s54nj/ nhH6LWARDReafuPedWU3MV4r6T6BOq/E1e/vSagziplQRiONJd8nkdBv2OABAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU9EiUCcIZS/wTYjt7i0vH3QVt+DwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEz NzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscnRMA0GCSqGSIb3DQEBCwUAA4IBAQBO/FsM4wK/kBaf 7GSmNp6EJa9R5SoF2zKTMdkZws3qZuvFPRr+UXsj5lop16q7061ZzmZeK+qhn+cT 9LER6eulc4EzKVFHNTtLlw/q+1STH/IA/plcd6Ld/qmfjiaGwFEXZOwm/IWdBEyn X3Sfpe2ay71ShgNkkhVteSFGP1ckwAkAyhKGnZ88uu26tweNX0a4aKHYC7Dt4agS sRfiZ6Y0tch7OMKAXcHffEznxErWaImelF8VJMKICskHXDRPrSBsssMD2LbAuarB kPvP/fhTTj1N2hDvGUsFJLKlhE/XT2nKfvZA2dCor7L7FVZBWY1STYTmwRGr2olM Qmx8yMDA -----END CERTIFICATE-----Generated at Sat Sep 19 04:01:21 2026 by rpki-client