$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa File: 3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa (raw, json) Hash identifier: yDzVgWMMe5SsRDReo1dx6BkpNpFonzMN8HyQRhv94Wk= Subject key identifier: D8:A6:DF:8A:3C:EF:DF:5D:E1:42:93:32:AB:ED:EC:9A:91:4C:0D:88 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4129DE6E818CFC87059E91218E7966A24B558545 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa Signing time: Thu 17 Sep 2026 05:46:08 +0000 ROA not before: Thu 17 Sep 2026 05:41:08 +0000 ROA not after: Thu 16 Sep 2027 05:46:08 +0000 asID: 402288 IP address blocks: 177.201.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:29:de:6e:81:8c:fc:87:05:9e:91:21:8e:79:66:a2:4b:55:85:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:08 2026 GMT Not After : Sep 16 05:46:08 2027 GMT Subject: CN=D8A6DF8A3CEFDF5DE1429332ABEDEC9A914C0D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:28:8d:c4:33:ad:cd:f7:3d:b5:4f:1f:72: 76:66:31:dd:44:68:5c:c0:d7:81:49:3f:36:56:d4: da:8e:5a:da:a9:7d:c5:73:c8:af:6c:d7:a9:db:aa: 8e:41:22:28:0c:67:53:52:82:91:18:2d:6d:85:61: 38:ae:f5:79:f3:ac:bc:a8:65:70:ae:af:df:c6:5f: ac:fc:8f:62:d0:88:48:76:67:1d:39:fc:2e:f0:13: e6:f3:3e:aa:4d:42:25:7d:34:03:48:04:1b:48:b6: 59:7e:56:e5:36:02:cd:79:91:a8:7a:fb:ba:74:29: 3b:9c:ee:6d:12:51:09:51:85:0f:67:ca:07:e8:89: 46:9c:f8:f1:ae:ba:bf:f6:0c:bb:8c:b6:31:63:9c: bd:11:51:d5:9b:b6:02:d0:ee:2f:80:e4:07:32:b2: bb:fe:44:17:d7:5e:c9:37:7c:84:f7:0b:fb:32:45: 89:03:f5:ba:79:c0:35:68:40:c6:d4:32:12:8e:ec: ee:a4:ad:45:af:57:43:86:38:7a:a5:69:fe:e5:f0: da:1f:26:40:4c:09:67:09:25:af:52:c9:1b:f7:ed: 42:d1:0b:67:15:64:38:48:c9:2f:cb:fb:7c:cf:5a: 22:76:a6:da:83:61:d5:b7:3d:91:76:a9:46:d7:d6: 7e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A6:DF:8A:3C:EF:DF:5D:E1:42:93:32:AB:ED:EC:9A:91:4C:0D:88 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.216.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f1:4c:6e:18:3d:03:a9:81:c2:b8:30:52:b5:75:30:58:b1: 6b:f7:b6:0c:b4:1a:87:af:90:60:84:48:ba:81:ef:b3:1e:f5: 93:26:9f:46:88:58:6a:87:c8:a5:46:29:06:51:ca:a1:2f:a8: 1c:5f:a4:7b:4a:43:c1:20:77:91:49:05:77:60:9b:cf:73:a2: 03:cc:5a:f8:3a:4a:53:79:59:67:c5:75:2e:e0:ec:8f:26:6d: 8b:59:8b:7f:74:28:3a:26:cb:12:0b:13:11:68:d4:f1:b6:dd: 26:44:74:4f:62:32:0d:a9:2d:86:e2:34:04:0a:16:bf:80:2f: 28:75:f3:1a:c6:b3:79:ca:9f:38:20:58:9f:96:ad:37:fb:4b: d2:48:2e:07:e1:3b:d6:81:a4:50:aa:b9:aa:88:87:1a:0b:57: cf:c0:1f:c4:81:64:7c:e3:bb:4f:39:43:1c:6f:2e:da:50:e8: 78:21:e8:92:5b:6b:c0:83:0b:d4:68:1d:e4:73:dd:00:df:08: 0a:3b:64:59:e2:fb:7b:ca:95:32:0c:f2:ba:24:4a:af:e0:3f: b6:61:58:17:bf:b6:44:b1:41:a1:dd:5b:f2:04:08:10:2a:3d: f8:ff:95:a2:9c:ed:96:eb:a8:45:e9:cd:d6:8b:05:3d:36:63: 37:73:27:f6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUQSneboGM/IcFnpEhjnlmoktVhUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDhaFw0yNzA5MTYwNTQ2MDhaMDMxMTAvBgNV BAMTKEQ4QTZERjhBM0NFRkRGNURFMTQyOTMzMkFCRURFQzlBOTE0QzBEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6yiNxDOtzfc9tU8fcnZmMd1E aFzA14FJPzZW1NqOWtqpfcVzyK9s16nbqo5BIigMZ1NSgpEYLW2FYTiu9XnzrLyo ZXCur9/GX6z8j2LQiEh2Zx05/C7wE+bzPqpNQiV9NANIBBtItll+VuU2As15kah6 +7p0KTuc7m0SUQlRhQ9nygfoiUac+PGuur/2DLuMtjFjnL0RUdWbtgLQ7i+A5Acy srv+RBfXXsk3fIT3C/syRYkD9bp5wDVoQMbUMhKO7O6krUWvV0OGOHqlaf7l8Nof JkBMCWcJJa9SyRv37ULRC2cVZDhIyS/L+3zPWiJ2ptqDYdW3PZF2qUbX1n4vAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU2Kbfijzv313hQpMyq+3smpFMDYgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIz ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscnYMA0GCSqGSIb3DQEBCwUAA4IBAQBy8UxuGD0DqYHC uDBStXUwWLFr97YMtBqHr5BghEi6ge+zHvWTJp9GiFhqh8ilRikGUcqhL6gcX6R7 SkPBIHeRSQV3YJvPc6IDzFr4OkpTeVlnxXUu4OyPJm2LWYt/dCg6JssSCxMRaNTx tt0mRHRPYjINqS2G4jQECha/gC8odfMaxrN5yp84IFiflq03+0vSSC4H4TvWgaRQ qrmqiIcaC1fPwB/EgWR847tPOUMcby7aUOh4IeiSW2vAgwvUaB3kc90A3wgKO2RZ 4vt7ypUyDPK6JEqv4D+2YVgXv7ZEsUGh3VvyBAgQKj34/5WinO2W66hF6c3WiwU9 NmM3cyf2 -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:52 2026 by rpki-client