
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa
File: 3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: H8sXtNsDnt4aK8qlOtA/1tW9qreHqd1NE4kkpLWYt5Y=
Subject key identifier: 1E:5E:15:95:8D:EA:A5:BA:2F:6F:D3:D3:93:2C:A2:E5:D4:88:15:70
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 09A9F784C20290C49B9F2F882871FB2E33BC5917
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa
Signing time: Thu 17 Sep 2026 05:46:06 +0000
ROA not before: Thu 17 Sep 2026 05:41:06 +0000
ROA not after: Thu 16 Sep 2027 05:46:06 +0000
asID: 152179
IP address blocks: 177.201.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a9:f7:84:c2:02:90:c4:9b:9f:2f:88:28:71:fb:2e:33:bc:59:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 17 05:41:06 2026 GMT
Not After : Sep 16 05:46:06 2027 GMT
Subject: CN=1E5E15958DEAA5BA2F6FD3D3932CA2E5D4881570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:ce:54:95:60:55:27:b1:04:1f:5d:e4:82:
13:8b:e9:0d:5a:55:9e:72:ea:5d:e5:f4:3a:25:40:
1b:ce:23:e5:cb:95:16:2e:21:1d:0a:a9:e6:d3:4b:
fc:0f:de:3a:9c:2c:ba:ff:d8:a0:1d:24:75:5b:75:
9e:e2:f8:b1:55:50:c9:08:fc:b6:fd:78:28:e8:10:
de:eb:f1:08:68:72:e5:e3:1d:7e:c4:db:06:3b:a8:
24:d4:f0:34:07:7a:60:97:70:a0:95:65:38:e1:bb:
c8:50:23:10:48:9e:3d:a1:1a:eb:43:78:de:6a:c2:
f8:1e:77:4f:0f:47:b3:bb:6c:a6:19:9e:95:3c:f1:
9b:f4:e2:05:58:78:1d:ea:03:4e:88:92:30:e6:15:
08:b4:d3:be:ae:10:cd:f4:26:3d:30:f9:5a:21:02:
6a:07:0e:b0:c3:69:66:62:f3:e6:56:6a:8f:66:73:
25:b2:7a:7f:05:9f:32:22:1d:52:72:c7:f4:f1:45:
91:47:9c:66:d3:4d:18:67:66:76:eb:1f:e1:3b:8b:
22:c2:b7:e3:43:7a:af:6a:11:b6:bc:e8:da:50:75:
8a:a6:c7:85:c6:b4:87:7e:f4:6e:e6:54:ae:46:02:
53:7c:a2:90:55:1f:f0:e7:d8:60:5f:7b:e5:37:80:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:15:95:8D:EA:A5:BA:2F:6F:D3:D3:93:2C:A2:E5:D4:88:15:70
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.210.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2a:3c:1f:61:a2:81:35:b1:39:e4:54:8a:08:e6:db:aa:3b:
af:9c:af:5e:c6:58:55:d5:49:8b:d3:2f:29:8d:7f:fc:55:e0:
bd:5a:2b:07:c3:7d:6e:93:11:c0:08:75:10:0d:51:4a:0f:76:
fe:8e:4f:91:1d:9a:e9:8e:9d:31:f4:31:36:35:56:d8:cf:bd:
85:5a:75:78:0e:15:aa:ab:60:59:7b:90:ab:1c:fb:07:7b:66:
1b:d4:61:00:7e:cd:96:aa:ca:27:d7:44:58:39:95:7a:a0:1e:
69:e2:0e:b2:57:05:bd:da:05:0e:fc:b5:ed:5d:8d:0a:94:e9:
23:df:9b:b0:3b:9f:6a:96:3b:6e:9c:be:3f:ee:a8:f1:7d:13:
eb:e4:36:5e:2e:f0:d9:66:ad:ed:5b:cf:8d:00:14:76:4a:b5:
ac:3a:a2:63:78:09:74:fb:61:f6:dc:ba:10:07:d8:88:19:73:
6f:1d:70:0d:dd:e9:6a:f9:f4:b8:23:47:bc:59:01:a2:be:16:
57:bc:64:28:f2:2a:96:d5:27:17:55:67:b0:12:9c:72:6f:b3:
27:bb:fa:a0:5e:12:e0:3a:d6:9f:25:7e:94:f0:e5:2d:0b:ba:
11:68:4a:31:0c:89:ce:bf:09:83:65:f8:b7:a5:ef:e8:67:aa:
3d:7c:b5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:53 2026 by rpki-client