$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa File: 3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa (raw, json) Hash identifier: wVh9xbRCdOOijuizWO5wr7gFPYuYPRWJuAbsSjt6oAA= Subject key identifier: DE:B4:D6:FD:A4:4E:B4:F9:9C:9B:6C:A3:D5:F3:54:AA:29:51:BD:2C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0529459699B1A19A0F8B6A6F89D03B223B6E2D6A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa Signing time: Thu 17 Sep 2026 05:46:19 +0000 ROA not before: Thu 17 Sep 2026 05:41:19 +0000 ROA not after: Thu 16 Sep 2027 05:46:19 +0000 asID: 275723 IP address blocks: 177.201.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:29:45:96:99:b1:a1:9a:0f:8b:6a:6f:89:d0:3b:22:3b:6e:2d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:19 2026 GMT Not After : Sep 16 05:46:19 2027 GMT Subject: CN=DEB4D6FDA44EB4F99C9B6CA3D5F354AA2951BD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:9c:4b:6d:d9:45:2b:17:d6:a4:a4:36:ae: 48:55:a0:ab:17:14:f8:41:f9:ce:a7:26:0e:23:6c: 37:83:95:a0:3b:fb:a9:59:4d:67:b5:31:3f:20:6f: 40:60:84:d0:a3:32:22:3b:5f:b2:e0:6f:0f:db:e1: 11:ba:3a:68:ea:0d:f4:08:eb:d2:c6:aa:6d:f4:6d: d2:7b:a5:38:b2:92:8d:c0:2d:c6:93:23:85:d7:a9: 76:a2:6e:0c:f5:5a:32:d4:dc:9e:1a:f3:ca:d3:16: a3:f3:a5:82:97:1c:81:09:49:e0:6f:66:24:c1:6f: 25:ac:05:7c:ef:68:f0:b2:7e:d6:f6:52:52:12:5c: e9:30:78:4d:64:07:a2:b9:6e:d8:32:24:d1:da:ac: 33:fd:26:2a:14:82:dc:ca:60:08:06:2f:b6:65:a1: ac:07:41:1b:14:c3:62:d5:bd:84:51:8d:82:c9:6c: 83:c8:38:cb:76:ca:13:df:fe:7c:43:2d:d9:13:45: 16:64:15:09:90:44:8f:13:02:c3:e7:fb:46:42:2e: fd:06:de:51:67:73:f2:10:97:91:9f:c5:64:39:81: 1f:d3:08:d9:72:5f:58:55:57:bb:82:fe:a5:80:68: 84:15:97:e5:4c:40:29:51:13:d0:70:40:9c:b0:0a: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B4:D6:FD:A4:4E:B4:F9:9C:9B:6C:A3:D5:F3:54:AA:29:51:BD:2C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.211.0/24 Signature Algorithm: sha256WithRSAEncryption 79:7a:c2:27:20:7f:1f:38:36:56:b7:ab:b0:3d:a0:86:27:7c: 11:3e:92:04:24:0e:a8:a4:14:a0:8a:0e:5d:c1:4b:dc:cb:2b: 1e:56:7e:72:70:75:b4:67:a1:b3:c3:f6:40:ef:23:03:3d:47: 8a:4d:0f:8f:55:37:13:41:e5:85:b8:e4:ed:d6:d7:38:8f:e1: 9f:4e:52:2d:38:42:34:62:c8:d2:26:b2:86:fd:a6:b8:93:7a: a6:27:c7:45:83:0b:88:bc:73:a6:2e:60:e4:95:94:5f:e9:98: dd:3a:ea:bd:d9:9c:aa:67:bb:2e:9f:de:f8:9c:71:2c:60:27: 08:b3:09:3f:ed:9e:cc:bd:64:46:df:8e:91:f8:7a:19:2b:f8: f3:5e:a9:ee:a5:23:73:99:9e:88:e7:d3:c2:85:4d:5b:27:2e: 9a:72:71:1f:1a:d5:2c:f8:a9:e2:b5:68:f2:bc:da:ae:e9:9a: 73:d0:ff:9a:74:61:40:cb:98:09:a2:68:45:c2:8f:e9:cd:75: 3a:ee:2c:b7:e1:36:a7:6f:21:17:55:2e:d9:f8:cd:b7:72:8c: ca:84:64:5e:a6:ac:52:73:86:c6:6d:02:ac:02:77:35:a6:68: 1b:49:1e:ca:70:0f:28:7b:d3:3b:d8:3f:fe:af:1b:c8:47:55: 91:3e:a4:61 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUBSlFlpmxoZoPi2pvidA7IjtuLWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTlaFw0yNzA5MTYwNTQ2MTlaMDMxMTAvBgNV BAMTKERFQjRENkZEQTQ0RUI0Rjk5QzlCNkNBM0Q1RjM1NEFBMjk1MUJEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujpxLbdlFKxfWpKQ2rkhVoKsX FPhB+c6nJg4jbDeDlaA7+6lZTWe1MT8gb0BghNCjMiI7X7Lgbw/b4RG6OmjqDfQI 69LGqm30bdJ7pTiyko3ALcaTI4XXqXaibgz1WjLU3J4a88rTFqPzpYKXHIEJSeBv ZiTBbyWsBXzvaPCyftb2UlISXOkweE1kB6K5btgyJNHarDP9JioUgtzKYAgGL7Zl oawHQRsUw2LVvYRRjYLJbIPIOMt2yhPf/nxDLdkTRRZkFQmQRI8TAsPn+0ZCLv0G 3lFnc/IQl5GfxWQ5gR/TCNlyX1hVV7uC/qWAaIQVl+VMQClRE9BwQJywChnZAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU3rTW/aROtPmcm2yj1fNUqilRvSwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM1Mzcz MjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscnTMA0GCSqGSIb3DQEBCwUAA4IBAQB5esInIH8fODZW t6uwPaCGJ3wRPpIEJA6opBSgig5dwUvcyyseVn5ycHW0Z6Gzw/ZA7yMDPUeKTQ+P VTcTQeWFuOTt1tc4j+GfTlItOEI0YsjSJrKG/aa4k3qmJ8dFgwuIvHOmLmDklZRf 6ZjdOuq92ZyqZ7sun974nHEsYCcIswk/7Z7MvWRG346R+HoZK/jzXqnupSNzmZ6I 59PChU1bJy6acnEfGtUs+KnitWjyvNqu6Zpz0P+adGFAy5gJomhFwo/pzXU67iy3 4TanbyEXVS7Z+M23cozKhGRepqxSc4bGbQKsAnc1pmgbSR7KcA8oe9M72D/+rxvI R1WRPqRh -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:16 2026 by rpki-client