
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: y1OzYnFH9yDBjN0wy96uNpL0hEDNZy6mpBaeBSSVyNQ=
Subject key identifier: FC:38:20:48:68:4E:DE:06:60:BC:D4:82:EF:87:3B:7D:32:48:15:2E
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 103CBE57434CAE3B1F971F6088A61EACC37946F1
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa
Signing time: Thu 17 Sep 2026 05:46:07 +0000
ROA not before: Thu 17 Sep 2026 05:41:07 +0000
ROA not after: Thu 16 Sep 2027 05:46:07 +0000
asID: 214483
IP address blocks: 177.201.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:3c:be:57:43:4c:ae:3b:1f:97:1f:60:88:a6:1e:ac:c3:79:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 17 05:41:07 2026 GMT
Not After : Sep 16 05:46:07 2027 GMT
Subject: CN=FC382048684EDE0660BCD482EF873B7D3248152E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:54:e8:76:65:c9:92:82:c8:bc:37:1a:32:73:
71:01:f4:05:86:cd:9b:0c:34:04:bb:1e:cf:84:02:
df:a9:89:a3:ce:9e:36:cd:9d:fc:9a:66:01:83:58:
d2:f5:6b:eb:66:b3:96:e3:8c:9d:9d:d7:a0:55:43:
15:81:d5:0f:21:ce:78:dc:b9:24:df:7a:aa:ab:ed:
4e:34:b7:e9:72:6c:fb:27:03:ac:59:b7:0a:f3:f4:
cb:6d:2a:0f:61:f4:05:8a:b2:f4:4e:cc:f0:65:50:
13:76:a9:ce:8e:42:fa:3e:dd:bf:a7:07:2d:3f:c0:
fd:76:c8:03:b0:50:87:f3:0e:c5:86:4d:4b:27:d7:
4f:5d:84:48:a9:86:09:85:4e:3e:6c:c1:fe:ce:25:
b9:ab:53:3f:59:ad:f8:c4:5a:16:9a:d8:07:b8:d7:
cd:65:46:58:d6:5b:ea:e8:bb:6d:d4:fa:e1:63:10:
ca:38:10:a1:7d:07:10:5f:13:cd:e6:12:88:c1:25:
c9:f2:46:3e:1c:61:cc:8d:33:ca:8a:d1:e0:2a:b7:
84:23:c2:0a:58:84:d5:5a:0c:fa:c5:a9:d6:ea:06:
49:6a:0c:12:6a:69:9d:d5:31:22:c1:79:64:ad:c1:
97:66:6f:85:bc:be:7d:99:72:4a:a3:8f:f4:b4:e6:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:38:20:48:68:4E:DE:06:60:BC:D4:82:EF:87:3B:7D:32:48:15:2E
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.215.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ef:85:b2:19:cc:d3:c2:58:d1:2a:67:e7:fa:68:ac:25:73:
3a:e5:6f:9f:cc:5d:6e:ac:67:03:b5:7c:23:cb:bb:7f:c5:dd:
3d:88:ea:08:da:47:a4:ca:ea:95:be:9f:26:20:cd:06:87:a0:
08:7e:39:0a:a0:3c:ba:a6:80:0f:59:f3:70:23:fd:8f:73:ec:
ff:ed:c3:ce:6f:42:c8:46:56:15:23:f2:2f:f9:3b:86:39:de:
8f:8a:3a:1c:f7:e1:85:2a:70:55:a8:78:c6:0e:1c:b7:0c:ee:
1d:f8:63:db:ef:0d:38:6c:7f:e6:36:20:66:e9:a3:30:0c:11:
b1:f9:56:59:d6:f4:5a:de:f2:ed:44:a1:04:3c:9b:af:ce:bf:
55:1a:48:a8:33:dd:1f:76:87:c1:7e:d2:fe:a8:ec:bd:2c:10:
38:a0:f0:dd:df:3d:a4:b7:9b:1d:e4:eb:09:89:3e:e5:38:63:
1e:38:f3:6d:8b:fd:a5:6e:1a:b1:d5:a9:06:70:40:f7:66:9a:
26:51:44:96:8f:ee:8d:65:b3:a2:da:bd:09:0b:af:5f:ec:4f:
4e:02:26:a5:7a:81:a6:02:6d:78:3f:8b:9f:d0:9e:cf:2c:53:
fe:7e:63:4f:50:6b:5f:4d:44:a4:49:d4:b0:47:4e:f2:ea:26:
b1:90:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:30 2026 by rpki-client