$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e203336353330.roa File: 3138372e352e302e302f32332d3234203d3e203336353330.roa (raw, json) Hash identifier: SLkj5mwta2Id/pEgFk+fou3i56dkjIEhkto8NURGon0= Subject key identifier: 10:01:E9:F8:8F:02:7E:EA:46:3F:72:FD:AB:FC:B2:48:F2:17:E7:E9 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3DECAA41085905BC7B13235879DB44A017D63ACE Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e203336353330.roa Signing time: Thu 17 Sep 2026 05:46:19 +0000 ROA not before: Thu 17 Sep 2026 05:41:19 +0000 ROA not after: Thu 16 Sep 2027 05:46:19 +0000 asID: 36530 IP address blocks: 187.5.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ec:aa:41:08:59:05:bc:7b:13:23:58:79:db:44:a0:17:d6:3a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:19 2026 GMT Not After : Sep 16 05:46:19 2027 GMT Subject: CN=1001E9F88F027EEA463F72FDABFCB248F217E7E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:2f:45:ad:2e:fb:e3:9d:02:76:65:0a:13: 57:fa:58:1f:5a:b8:a8:3d:c2:08:68:ee:c8:12:29: 78:bd:85:8e:ce:ad:bf:a2:f2:92:33:a2:98:53:df: 32:f9:e2:91:fe:54:01:b4:41:25:69:de:58:54:43: d0:e8:44:74:b2:92:76:c4:0d:56:32:36:2c:7d:f7: 3e:e3:20:2a:7a:02:a5:9b:76:96:3e:50:6e:80:79: 9a:79:59:5b:a1:4d:54:e1:bc:a5:7a:2a:7e:68:09: b7:15:45:91:83:ea:bc:33:fb:6f:38:a7:d6:01:53: e7:a6:9d:c6:c3:d2:30:f9:00:a1:e0:97:82:9e:75: 30:11:94:96:bd:85:9e:5f:db:98:4d:5c:71:f9:79: 0d:e1:8b:37:06:ec:01:b2:d2:40:c8:79:67:89:dc: ba:09:a9:f4:43:ff:8d:28:07:b8:e9:b5:99:46:3f: da:13:12:97:a9:dd:6d:09:e4:3b:21:75:a5:ca:21: 91:69:2f:8d:51:c2:82:f0:6d:81:41:3e:1c:61:af: 72:28:67:0c:3a:45:6c:6b:98:11:3e:cd:fb:7e:af: 49:cb:4f:99:69:45:ef:06:6e:6d:f3:b0:2f:07:62: 30:25:40:64:d6:3c:39:1b:69:21:25:8b:4c:22:7e: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:01:E9:F8:8F:02:7E:EA:46:3F:72:FD:AB:FC:B2:48:F2:17:E7:E9 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e203336353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.0.0/23 Signature Algorithm: sha256WithRSAEncryption 36:a8:6f:2b:df:e1:48:a2:b9:9e:2b:23:48:00:f8:a1:75:73: f6:8a:6b:ec:0f:5f:0d:b7:86:d2:74:8a:ce:48:76:4e:f9:e6: 13:4f:6d:54:55:0e:a7:47:35:ee:b1:ea:29:72:0e:ef:1e:18: 80:a0:66:32:05:af:17:5c:90:a8:69:74:82:85:3c:a6:1c:25: 63:e3:87:b3:a0:fb:91:b6:ac:2c:29:a2:79:38:69:34:c1:fa: 01:0f:8d:07:d8:ac:de:46:02:c1:73:b2:3b:c7:2c:18:5b:f1: 31:22:17:aa:e1:d4:fa:af:c6:19:3b:98:5e:94:ed:95:bb:7c: 3b:6c:8f:56:c0:1d:09:ac:b4:2d:8e:7f:31:40:40:d5:4e:4a: 40:79:aa:1f:af:36:d8:36:ab:3f:eb:6d:df:59:d9:4b:67:c0: ae:1b:7b:27:ad:e6:6d:1f:81:62:3d:c4:27:35:38:4c:58:4b: d3:bf:27:80:5a:07:cb:0b:93:94:4a:2c:10:e7:31:ed:66:48: 2c:07:b2:84:97:75:1f:40:9c:68:76:76:34:fa:15:4c:18:e8: 6f:06:5d:87:47:00:3b:4b:47:af:f6:f2:b5:d0:16:0f:1f:1c: 83:21:93:28:40:e0:5c:82:30:ab:c2:32:0a:ed:00:de:90:03: d0:70:1a:3e -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUPeyqQQhZBbx7EyNYedtEoBfWOs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTlaFw0yNzA5MTYwNTQ2MTlaMDMxMTAvBgNV BAMTKDEwMDFFOUY4OEYwMjdFRUE0NjNGNzJGREFCRkNCMjQ4RjIxN0U3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkS9FrS77450CdmUKE1f6WB9a uKg9wgho7sgSKXi9hY7Orb+i8pIzophT3zL54pH+VAG0QSVp3lhUQ9DoRHSyknbE DVYyNix99z7jICp6AqWbdpY+UG6AeZp5WVuhTVThvKV6Kn5oCbcVRZGD6rwz+284 p9YBU+emncbD0jD5AKHgl4KedTARlJa9hZ5f25hNXHH5eQ3hizcG7AGy0kDIeWeJ 3LoJqfRD/40oB7jptZlGP9oTEpep3W0J5DshdaXKIZFpL41RwoLwbYFBPhxhr3Io Zww6RWxrmBE+zft+r0nLT5lpRe8Gbm3zsC8HYjAlQGTWPDkbaSEli0wifs7hAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUEAHp+I8CfupGP3L9q/yySPIX5+kwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUF BzALhoGHcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMzMzYzNTMzMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG7BQAwDQYJKoZIhvcNAQELBQADggEBADaobyvf4UiiuZ4rI0gA+KF1c/aK a+wPXw23htJ0is5Idk755hNPbVRVDqdHNe6x6ilyDu8eGICgZjIFrxdckKhpdIKF PKYcJWPjh7Og+5G2rCwponk4aTTB+gEPjQfYrN5GAsFzsjvHLBhb8TEiF6rh1Pqv xhk7mF6U7ZW7fDtsj1bAHQmstC2OfzFAQNVOSkB5qh+vNtg2qz/rbd9Z2UtnwK4b eyet5m0fgWI9xCc1OExYS9O/J4BaB8sLk5RKLBDnMe1mSCwHsoSXdR9AnGh2djT6 FUwY6G8GXYdHADtLR6/28rXQFg8fHIMhkyhA4FyCMKvCMgrtAN6QA9BwGj4= -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:07 2026 by rpki-client