$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa File: 3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: Gi2zFgFqHckUx5oX6IPDnjqOYt44xydNXH6k3RnXvBY= Subject key identifier: 38:CF:70:5A:FA:9D:3B:94:A1:E6:68:82:91:B7:21:11:FA:03:1B:A8 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6E592B9E67616915F67F21389103B14EDA974AC8 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:10 +0000 ROA not before: Thu 17 Sep 2026 05:41:10 +0000 ROA not after: Thu 16 Sep 2027 05:46:10 +0000 asID: 214483 IP address blocks: 177.201.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:59:2b:9e:67:61:69:15:f6:7f:21:38:91:03:b1:4e:da:97:4a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:10 2026 GMT Not After : Sep 16 05:46:10 2027 GMT Subject: CN=38CF705AFA9D3B94A1E6688291B72111FA031BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:c8:12:6f:b5:ff:82:28:9e:e3:cb:26:81: 2b:e5:d0:bd:87:5f:cd:0b:23:56:ce:b9:9c:fe:91: ae:a4:49:d4:fe:c5:15:c9:d5:00:3c:9b:04:08:11: cf:65:e3:d9:4c:d8:a4:9a:b8:35:76:26:8d:d0:7b: c9:97:33:f7:c0:dd:02:89:f1:ba:ad:c9:7a:4b:31: 46:1c:39:44:01:1d:58:a7:91:f5:9e:8c:0c:ff:0a: b1:bf:f1:6e:09:5e:a4:96:a7:c1:37:70:fd:bf:3e: af:f6:db:ef:83:6d:d4:9a:8e:1a:ce:1f:d6:54:83: 0a:b4:51:33:6b:7e:fc:3a:f1:f6:9e:58:50:b8:5d: bf:85:cb:e5:b8:60:59:4c:2a:f2:96:93:bc:c5:36: 52:d2:55:4a:de:c7:70:9f:ce:ee:19:84:46:1a:32: a8:5c:89:47:1e:8e:38:0a:85:c9:05:76:a6:a6:bd: eb:d8:8e:dd:43:45:e4:61:5d:08:fc:08:73:ca:81: df:0e:f7:08:d1:1b:92:ce:5f:0f:ec:10:11:d8:16: 9e:8d:9a:13:2e:52:cd:d4:91:6c:fd:8c:f4:b2:df: 5e:95:06:78:0e:44:1e:9f:a3:d6:af:08:5e:37:a1: 56:59:53:06:d6:d2:6d:1c:c7:39:e6:51:5d:94:27: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:70:5A:FA:9D:3B:94:A1:E6:68:82:91:B7:21:11:FA:03:1B:A8 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.214.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:7d:0a:16:d6:f8:e5:7a:62:05:02:a4:24:d5:3e:ae:5d:de: 60:30:85:40:6f:51:be:5b:c0:c3:5b:ff:57:f7:06:c5:86:71: d7:c9:10:f9:d8:d9:ee:57:df:d6:57:c1:cd:95:50:07:81:b5: 23:64:f0:64:01:ed:c0:a1:65:90:9d:0b:6e:bc:a6:90:86:4e: 93:d1:66:19:c5:dc:f3:45:96:fb:95:ae:51:dd:54:0f:09:d9: f5:80:78:8f:ba:d8:23:2e:61:50:cb:f2:88:9c:5c:7c:4a:59: d2:81:93:d8:01:f6:0d:60:c1:c4:e7:5d:e4:e3:59:89:3f:14: 64:7c:3e:13:d4:62:1d:57:3c:68:74:ee:61:72:bd:62:05:4f: 47:d2:c0:57:ad:3a:c8:22:be:e0:94:9d:9b:48:08:94:37:8c: ab:87:15:54:c8:54:82:2e:c3:8b:43:66:c3:88:ec:71:f6:55: 8f:50:c7:26:d2:73:f9:57:c3:28:9d:7f:0e:cf:b6:68:32:a1: 63:70:a5:be:ad:94:73:af:65:bb:b6:0f:2d:7e:c2:24:94:3b: 4e:9d:99:c8:13:7a:f6:f4:3e:81:68:e9:bd:43:23:9f:55:ea: d1:70:d1:a6:fb:9a:01:54:7c:89:3c:27:ec:39:be:cb:e0:86: 8b:00:ae:c5 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUblkrnmdhaRX2fyE4kQOxTtqXSsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTBaFw0yNzA5MTYwNTQ2MTBaMDMxMTAvBgNV BAMTKDM4Q0Y3MDVBRkE5RDNCOTRBMUU2Njg4MjkxQjcyMTExRkEwMzFCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xsgSb7X/giie48smgSvl0L2H X80LI1bOuZz+ka6kSdT+xRXJ1QA8mwQIEc9l49lM2KSauDV2Jo3Qe8mXM/fA3QKJ 8bqtyXpLMUYcOUQBHVinkfWejAz/CrG/8W4JXqSWp8E3cP2/Pq/22++DbdSajhrO H9ZUgwq0UTNrfvw68faeWFC4Xb+Fy+W4YFlMKvKWk7zFNlLSVUrex3Cfzu4ZhEYa MqhciUcejjgKhckFdqamvevYjt1DReRhXQj8CHPKgd8O9wjRG5LOXw/sEBHYFp6N mhMuUs3UkWz9jPSy316VBngORB6fo9avCF43oVZZUwbW0m0cxznmUV2UJ227AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUOM9wWvqdO5Sh5miCkbchEfoDG6gwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscnWMA0GCSqGSIb3DQEBCwUAA4IBAQBffQoW1vjlemIF AqQk1T6uXd5gMIVAb1G+W8DDW/9X9wbFhnHXyRD52NnuV9/WV8HNlVAHgbUjZPBk Ae3AoWWQnQtuvKaQhk6T0WYZxdzzRZb7la5R3VQPCdn1gHiPutgjLmFQy/KInFx8 SlnSgZPYAfYNYMHE513k41mJPxRkfD4T1GIdVzxodO5hcr1iBU9H0sBXrTrIIr7g lJ2bSAiUN4yrhxVUyFSCLsOLQ2bDiOxx9lWPUMcm0nP5V8MonX8Oz7ZoMqFjcKW+ rZRzr2W7tg8tfsIklDtOnZnIE3r29D6BaOm9QyOfVerRcNGm+5oBVHyJPCfsOb7L 4IaLAK7F -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:41 2026 by rpki-client