$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa File: 3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: fk2HrZyeO1zts+c5YHdwcO1XRK1v4AAJVlsMdoYr6dc= Subject key identifier: 44:97:EA:E6:72:EC:97:AE:1E:24:F3:A6:07:04:7A:41:6E:31:3A:4B Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4343665D826FCC479174AA4004161886526245CA Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:12 +0000 ROA not before: Thu 17 Sep 2026 05:41:12 +0000 ROA not after: Thu 16 Sep 2027 05:46:12 +0000 asID: 214483 IP address blocks: 177.201.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:66:5d:82:6f:cc:47:91:74:aa:40:04:16:18:86:52:62:45:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:12 2026 GMT Not After : Sep 16 05:46:12 2027 GMT Subject: CN=4497EAE672EC97AE1E24F3A607047A416E313A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:70:43:e4:cb:8f:1e:33:f9:11:4f:54:93: dd:a0:b1:5c:dc:ab:44:69:0d:f7:e0:db:2b:59:9c: d5:63:2d:60:1d:75:95:3c:a9:02:ed:24:3b:ea:35: df:55:36:ab:69:a2:27:c5:66:9b:ab:62:c0:cf:cd: ba:94:7c:3b:7c:58:5b:d8:ac:af:36:83:fb:c9:82: d6:34:ce:20:79:0a:fc:fb:af:cd:cb:f4:aa:a7:82: 5c:52:d5:82:67:e6:09:7a:02:04:5d:9e:44:65:28: 34:6e:ed:8d:a7:1a:06:98:dd:70:e5:e9:17:2b:51: 06:5b:60:65:b4:df:d2:b9:e8:12:27:7b:6f:64:c2: de:2b:f8:01:28:0a:05:6e:68:77:99:a1:49:10:2f: fd:94:4b:83:2d:95:a7:63:3b:ec:42:28:47:7d:46: b8:b7:9d:ab:dc:7d:bb:dc:63:00:0a:55:72:c9:fa: a1:9a:6b:69:ea:98:9d:68:58:8d:a7:7a:fb:15:99: f0:56:8c:2f:a9:42:72:b1:08:f4:01:2d:d8:a4:14: 43:ca:94:aa:d7:e8:21:90:38:a8:71:bb:04:ef:ff: 75:52:10:2a:ae:fa:8c:3a:af:57:d0:98:cc:95:bb: 84:0b:a3:0a:5a:e9:0d:40:ac:2b:5c:d8:9d:aa:7f: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:97:EA:E6:72:EC:97:AE:1E:24:F3:A6:07:04:7A:41:6E:31:3A:4B X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.201.221.0/24 Signature Algorithm: sha256WithRSAEncryption bf:53:5c:b9:31:70:d5:0f:65:6a:1d:76:9e:7a:74:1c:2c:0b: e1:39:a5:f4:83:45:b6:f3:e7:d2:ea:79:a3:94:30:e3:2b:7f: 68:1f:11:27:45:87:93:15:f5:2b:82:98:c9:f4:c8:49:5f:f3: 1c:da:89:3c:71:4d:53:0e:56:41:7f:4a:1a:76:52:c9:03:45: 27:c0:d6:e7:4d:80:82:27:6b:f8:e0:bb:d0:8f:64:50:75:b7: 53:38:f6:2a:2e:a7:71:b2:11:50:ab:b0:a0:96:ec:3e:f2:6f: bc:03:e7:43:47:95:b3:17:af:4c:7e:fa:33:4d:0e:4d:05:fa: 67:3f:e3:4d:d2:ac:8d:33:23:e0:bc:f0:c4:4d:76:42:d2:c9: 33:84:70:2b:f4:4b:8d:6b:c6:c3:e6:09:a3:b9:63:e6:2d:51: 92:2b:67:e1:a5:cd:d4:2d:15:f0:c0:8c:2c:fa:a7:25:26:b2: 84:49:c8:dd:7d:4b:5a:d0:8e:bf:fe:48:01:a5:92:06:1d:eb: 59:f7:d2:e5:e7:8f:0a:fe:80:85:59:49:05:04:fc:ff:64:18: 87:b6:13:bb:06:e1:7b:bb:1d:1a:ed:d1:72:9c:63:83:99:93: 6b:24:4f:f7:ee:4e:e1:11:7b:09:8d:3d:26:a2:04:26:d8:a7: 08:40:5b:3d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUQ0NmXYJvzEeRdKpABBYYhlJiRcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTJaFw0yNzA5MTYwNTQ2MTJaMDMxMTAvBgNV BAMTKDQ0OTdFQUU2NzJFQzk3QUUxRTI0RjNBNjA3MDQ3QTQxNkUzMTNBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TXBD5MuPHjP5EU9Uk92gsVzc q0RpDffg2ytZnNVjLWAddZU8qQLtJDvqNd9VNqtpoifFZpurYsDPzbqUfDt8WFvY rK82g/vJgtY0ziB5Cvz7r83L9KqnglxS1YJn5gl6AgRdnkRlKDRu7Y2nGgaY3XDl 6RcrUQZbYGW039K56BIne29kwt4r+AEoCgVuaHeZoUkQL/2US4MtladjO+xCKEd9 Rri3navcfbvcYwAKVXLJ+qGaa2nqmJ1oWI2nevsVmfBWjC+pQnKxCPQBLdikFEPK lKrX6CGQOKhxuwTv/3VSECqu+ow6r1fQmMyVu4QLowpa6Q1ArCtc2J2qf/uPAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQURJfq5nLsl64eJPOmBwR6QW4xOkswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM3Mzcy ZTMyMzAzMTJlMzIzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAscndMA0GCSqGSIb3DQEBCwUAA4IBAQC/U1y5MXDVD2Vq HXaeenQcLAvhOaX0g0W28+fS6nmjlDDjK39oHxEnRYeTFfUrgpjJ9MhJX/Mc2ok8 cU1TDlZBf0oadlLJA0UnwNbnTYCCJ2v44LvQj2RQdbdTOPYqLqdxshFQq7Cgluw+ 8m+8A+dDR5WzF69MfvozTQ5NBfpnP+NN0qyNMyPgvPDETXZC0skzhHAr9EuNa8bD 5gmjuWPmLVGSK2fhpc3ULRXwwIws+qclJrKEScjdfUta0I6//kgBpZIGHetZ99Ll 548K/oCFWUkFBPz/ZBiHthO7BuF7ux0a7dFynGODmZNrJE/37k7hEXsJjT0mogQm 2KcIQFs9 -----END CERTIFICATE-----Generated at Sat Sep 19 04:00:40 2026 by rpki-client