$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa File: 3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: szagDnfv/4sKNnYmxmkGVKGDVt6qFRXokP5CCK5+Gxo= Subject key identifier: 18:13:F8:85:C6:6E:81:54:78:14:0C:BC:A4:AF:9D:C7:71:6D:90:F7 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1F25217C02C3F886E7B1BABCC16DB890E6B44E6E Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:14 +0000 ROA not before: Thu 17 Sep 2026 05:41:14 +0000 ROA not after: Thu 16 Sep 2027 05:46:14 +0000 asID: 214483 IP address blocks: 177.201.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:25:21:7c:02:c3:f8:86:e7:b1:ba:bc:c1:6d:b8:90:e6:b4:4e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:14 2026 GMT Not After : Sep 16 05:46:14 2027 GMT Subject: CN=1813F885C66E815478140CBCA4AF9DC7716D90F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:71:0b:2b:67:37:30:b0:66:02:6c:69:64: a3:0d:b9:5b:0f:1c:5a:25:aa:1e:30:63:e8:3d:68: e8:3e:5b:38:5f:bb:6a:2b:f7:47:da:c2:b9:00:0b: da:c6:76:bf:09:2c:b3:89:a6:29:b0:b4:c9:9d:d5: 63:8b:b4:cc:c7:7f:35:28:6e:c4:0c:98:49:b5:67: 96:52:51:50:f8:02:78:41:6c:2c:c6:e8:5d:76:b4: 06:38:c8:2b:4e:cb:5a:fa:01:6a:38:c8:60:d1:7b: d8:21:01:08:29:15:b1:80:e9:77:73:27:dd:fd:50: 60:e3:4f:ae:0b:88:d0:e0:44:91:ca:82:1f:21:43: a5:d4:d0:1a:c1:5f:b4:cc:22:c6:ff:43:56:19:c8: e4:d5:3c:dc:30:b3:cc:2b:f9:70:2a:da:f9:b1:e8: 4b:c0:2d:4b:7f:72:88:61:98:a4:4d:bc:a4:5d:ee: 21:33:01:98:ed:0d:33:09:7d:d3:d5:77:3a:75:7c: 7d:60:f2:22:98:38:98:12:56:be:bb:be:5e:4f:c0: 7e:03:21:b9:19:ae:0f:58:49:67:90:23:a8:a8:2e: 5c:e4:2c:33:92:a2:ec:11:2d:cd:26:0b:4f:4a:cf: 42:4b:7e:a3:5d:67:6d:b0:17:46:b8:e8:ea:8c:15: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:13:F8:85:C6:6E:81:54:78:14:0C:BC:A4:AF:9D:C7:71:6D:90:F7 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.217.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:fd:f3:55:8c:f9:b3:d2:19:a1:da:71:95:11:6e:2d:fa:64: 8b:03:b4:92:4d:f3:4c:c4:5f:6f:a5:59:31:f0:7a:20:a9:e6: 6f:f5:ae:c1:38:2f:0d:fb:11:a8:ab:f2:3a:5d:7e:8f:86:29: 17:a9:ca:94:ba:51:a4:59:83:90:54:c7:90:1c:38:1f:e1:74: fd:15:ef:18:ea:cc:93:71:ac:10:38:05:d9:8b:da:99:cc:34: e3:82:92:48:b4:de:69:10:58:3d:7d:ed:73:cb:b6:a7:ff:32: 87:c9:27:b9:ef:8e:1e:12:cb:82:9c:51:d5:ff:4b:5e:34:ec: bd:9b:f0:38:63:75:e9:97:d5:0f:75:a4:08:b0:78:b7:ba:99: 39:2b:dd:c4:56:04:38:20:b6:30:48:06:80:59:67:83:48:c2: 48:f3:c0:13:8f:15:92:5c:93:43:6b:09:c3:5a:1e:13:e4:4c: 05:91:21:d8:54:35:1c:62:d1:0b:f3:e5:af:83:d8:53:4b:7f: ed:ac:90:64:3c:84:95:c4:59:5c:ec:82:0d:f7:1b:11:fd:f0: 63:94:86:96:28:60:39:85:2e:76:94:f4:4d:5d:87:ee:2d:79: 9f:be:12:8a:42:a6:f4:28:6e:20:52:00:25:cb:a5:39:53:a4: 70:fa:f0:7e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUHyUhfALD+Ibnsbq8wW24kOa0Tm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTRaFw0yNzA5MTYwNTQ2MTRaMDMxMTAvBgNV BAMTKDE4MTNGODg1QzY2RTgxNTQ3ODE0MENCQ0E0QUY5REM3NzE2RDkwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WXELK2c3MLBmAmxpZKMNuVsP HFolqh4wY+g9aOg+Wzhfu2or90fawrkAC9rGdr8JLLOJpimwtMmd1WOLtMzHfzUo bsQMmEm1Z5ZSUVD4AnhBbCzG6F12tAY4yCtOy1r6AWo4yGDRe9ghAQgpFbGA6Xdz J939UGDjT64LiNDgRJHKgh8hQ6XU0BrBX7TMIsb/Q1YZyOTVPNwws8wr+XAq2vmx 6EvALUt/cohhmKRNvKRd7iEzAZjtDTMJfdPVdzp1fH1g8iKYOJgSVr67vl5PwH4D IbkZrg9YSWeQI6ioLlzkLDOSouwRLc0mC09Kz0JLfqNdZ22wF0a46OqMFbMbAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUGBP4hcZugVR4FAy8pK+dx3FtkPcwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscnZMA0GCSqGSIb3DQEBCwUAA4IBAQBN/fNVjPmz0hmh 2nGVEW4t+mSLA7SSTfNMxF9vpVkx8HogqeZv9a7BOC8N+xGoq/I6XX6PhikXqcqU ulGkWYOQVMeQHDgf4XT9Fe8Y6syTcawQOAXZi9qZzDTjgpJItN5pEFg9fe1zy7an /zKHySe5744eEsuCnFHV/0teNOy9m/A4Y3Xpl9UPdaQIsHi3upk5K93EVgQ4ILYw SAaAWWeDSMJI88ATjxWSXJNDawnDWh4T5EwFkSHYVDUcYtEL8+Wvg9hTS3/trJBk PISVxFlc7IIN9xsR/fBjlIaWKGA5hS52lPRNXYfuLXmfvhKKQqb0KG4gUgAly6U5 U6Rw+vB+ -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:28 2026 by rpki-client