$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa File: 3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: TkclsMv6B3Dr+0L3D3ipEZxb2NJmFT2p1B1XXlnSDrU= Subject key identifier: 57:A7:03:89:9D:01:E5:60:87:2D:41:00:18:D6:7C:EA:FC:A7:D5:9C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 575DE34DCEEAD934FD73544E5D788FF1366F3F0A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:07 +0000 ROA not before: Thu 17 Sep 2026 05:41:07 +0000 ROA not after: Thu 16 Sep 2027 05:46:07 +0000 asID: 214483 IP address blocks: 177.201.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5d:e3:4d:ce:ea:d9:34:fd:73:54:4e:5d:78:8f:f1:36:6f:3f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:07 2026 GMT Not After : Sep 16 05:46:07 2027 GMT Subject: CN=57A703899D01E560872D410018D67CEAFCA7D59C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:db:5a:cf:66:e5:7d:bc:9b:ce:69:f7:d4: 11:99:4f:7c:ad:62:1c:47:94:31:b7:0e:23:53:c7: a5:bf:d2:31:e1:ce:33:0c:95:df:ee:5e:09:1c:f9: 0f:ec:41:ff:03:eb:dd:9b:2e:93:26:b6:ab:b6:fc: 87:53:34:a4:4f:30:f6:5b:70:3a:ff:ae:f0:f8:b3: da:55:58:64:db:8b:e5:e4:21:e1:cb:27:38:37:2c: f1:18:3e:ac:6f:77:41:d7:a5:ee:90:72:e9:f3:ae: 3b:04:cb:8c:50:25:1f:06:88:fc:2e:5a:bb:97:d7: 57:5a:42:19:5a:16:86:fd:0f:54:e8:4b:54:c2:1a: 9b:fb:96:1e:43:bf:a2:d7:3f:d6:be:20:7b:be:7a: 44:86:ae:7b:3e:0b:14:14:3a:36:38:2e:3c:77:c4: 5d:51:7a:3e:f9:d5:d8:3e:5e:7d:fd:d2:1a:c3:55: 9a:92:b7:9d:fa:21:d1:16:19:02:50:01:a0:17:d4: c4:43:16:ed:95:3c:13:fc:46:7b:49:ac:d8:2f:33: ff:5f:d4:b2:83:b5:71:d8:3a:3d:1f:4d:f9:f1:46: 0c:20:b0:90:e3:ac:9a:75:f4:9a:fb:2d:50:87:a6: 29:aa:9d:9d:11:dd:0d:5f:07:68:5a:8c:ec:e3:86: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:03:89:9D:01:E5:60:87:2D:41:00:18:D6:7C:EA:FC:A7:D5:9C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.220.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ed:d9:1b:75:ed:47:d7:a8:37:97:36:77:21:7e:68:9e:df: ca:2d:b9:ed:b8:45:89:7b:86:e6:3f:cb:32:d3:b5:b8:f4:50: ce:0c:e7:e4:c7:86:ca:21:ff:03:96:96:75:2b:5f:e2:20:e6: 77:97:32:6c:c4:3d:41:3c:8d:ff:95:8b:9c:4a:fb:4d:e9:31: a2:79:2c:3a:81:4d:9d:9d:5a:06:1d:34:b2:ba:8d:84:79:26: 98:7c:37:7d:4f:4b:2c:6c:1e:41:c2:af:43:d3:bb:57:ee:87: a1:11:d9:9b:c1:e1:95:e4:64:56:f6:21:63:ef:a4:8f:5d:c3: 65:77:63:14:7e:3f:7e:c7:f4:ab:d3:af:df:30:7b:29:38:4c: 73:c1:d6:cd:b2:79:5d:ef:0e:de:df:0d:09:58:52:69:89:d5: 65:67:f4:a6:39:5c:a2:45:b3:14:47:87:0b:46:7f:30:d2:4c: b9:ef:72:1e:cf:2d:4f:86:0f:cd:49:ec:5a:de:c8:7d:b3:c3: da:57:4a:e9:70:69:75:b7:38:b6:22:87:88:08:6b:7d:05:04: 73:22:b6:49:f5:0a:e7:97:d9:9f:d3:2d:b4:49:01:5a:ac:52: 2d:c4:c2:03:dc:da:5f:63:af:92:de:60:b3:f6:4e:ed:d2:bb: ea:93:15:b4 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUV13jTc7q2TT9c1ROXXiP8TZvPwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDdaFw0yNzA5MTYwNTQ2MDdaMDMxMTAvBgNV BAMTKDU3QTcwMzg5OUQwMUU1NjA4NzJENDEwMDE4RDY3Q0VBRkNBN0Q1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQdtaz2blfbybzmn31BGZT3yt YhxHlDG3DiNTx6W/0jHhzjMMld/uXgkc+Q/sQf8D692bLpMmtqu2/IdTNKRPMPZb cDr/rvD4s9pVWGTbi+XkIeHLJzg3LPEYPqxvd0HXpe6QcunzrjsEy4xQJR8GiPwu WruX11daQhlaFob9D1ToS1TCGpv7lh5Dv6LXP9a+IHu+ekSGrns+CxQUOjY4Ljx3 xF1Rej751dg+Xn390hrDVZqSt536IdEWGQJQAaAX1MRDFu2VPBP8RntJrNgvM/9f 1LKDtXHYOj0fTfnxRgwgsJDjrJp19Jr7LVCHpimqnZ0R3Q1fB2hajOzjhrUpAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUV6cDiZ0B5WCHLUEAGNZ86vyn1ZwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscncMA0GCSqGSIb3DQEBCwUAA4IBAQAz7dkbde1H16g3 lzZ3IX5ont/KLbntuEWJe4bmP8sy07W49FDODOfkx4bKIf8DlpZ1K1/iIOZ3lzJs xD1BPI3/lYucSvtN6TGieSw6gU2dnVoGHTSyuo2EeSaYfDd9T0ssbB5Bwq9D07tX 7oehEdmbweGV5GRW9iFj76SPXcNld2MUfj9+x/Sr06/fMHspOExzwdbNsnld7w7e 3w0JWFJpidVlZ/SmOVyiRbMUR4cLRn8w0ky573Iezy1Phg/NSexa3sh9s8PaV0rp cGl1tzi2IoeICGt9BQRzIrZJ9Qrnl9mf0y20SQFarFItxMID3NpfY6+S3mCz9k7t 0rvqkxW0 -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:14 2026 by rpki-client