$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e20343031373736.roa File: 3138372e352e302e302f32332d3234203d3e20343031373736.roa (raw, json) Hash identifier: Xtq6vkcJFh2yCWfWi1kCXhYc5NPjNzQpmgFVPcgAxHg= Subject key identifier: 68:E6:66:9E:08:4B:36:E0:19:60:67:49:F3:FF:35:0A:B9:43:67:7C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 481A0A3AAEC4471145AB29882C2E5E623841F465 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e20343031373736.roa Signing time: Thu 17 Sep 2026 05:46:17 +0000 ROA not before: Thu 17 Sep 2026 05:41:17 +0000 ROA not after: Thu 16 Sep 2027 05:46:17 +0000 asID: 401776 IP address blocks: 187.5.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1a:0a:3a:ae:c4:47:11:45:ab:29:88:2c:2e:5e:62:38:41:f4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:17 2026 GMT Not After : Sep 16 05:46:17 2027 GMT Subject: CN=68E6669E084B36E019606749F3FF350AB943677C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:29:8b:f5:d2:f2:8d:fd:e4:67:cd:62:a0: 1d:4c:33:4f:7f:b9:4d:50:13:f9:8f:d8:31:85:4e: fc:80:cb:c1:32:aa:29:d5:8f:96:58:07:8c:ea:dc: ac:fa:20:75:87:05:ff:4a:08:d2:96:da:23:ef:c2: 41:51:24:e6:0f:09:12:62:56:e9:29:af:8f:97:94: 68:92:47:91:5e:61:99:bb:59:86:3c:50:a6:a4:ac: 62:cf:e6:03:5c:e2:b8:97:5f:77:a2:c1:30:26:92: 08:4d:f8:13:97:bf:bf:33:d1:1f:37:07:fc:03:0c: 74:74:86:48:7f:d5:38:9f:72:de:3d:66:2f:7c:fd: e0:17:43:af:0c:7f:84:ab:92:08:fb:a0:b8:44:59: 76:68:3f:c6:b0:0e:3a:b9:34:dd:f3:07:cf:60:87: 4a:94:d6:d6:1b:4d:5e:e5:34:ad:39:de:d9:b5:76: 9d:52:0d:e8:2e:69:6a:33:37:b0:7c:81:c1:d4:58: 23:a8:c7:4c:8f:08:81:50:32:86:d9:c4:92:9b:6c: 6a:83:be:40:1f:a5:12:0c:8a:fe:b5:ef:8e:b2:19: 60:b0:53:24:be:7d:1b:c4:31:89:fb:42:52:9c:53: 11:0d:e6:fd:22:d9:fe:05:30:1b:48:2e:65:23:29: 30:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E6:66:9E:08:4B:36:E0:19:60:67:49:F3:FF:35:0A:B9:43:67:7C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e20343031373736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.0.0/23 Signature Algorithm: sha256WithRSAEncryption 45:ce:ec:44:c9:b8:f4:1a:ba:2d:d6:cf:77:7d:ed:71:b1:76: 0f:64:9b:02:0c:39:31:00:ca:cf:af:8c:84:29:51:f1:06:7c: d6:6b:9f:d9:73:1b:bb:87:43:be:f8:3e:41:15:1a:ef:df:5f: a4:34:fb:9f:3f:c0:3c:cc:17:48:38:3d:d5:d4:7a:65:30:a0: d9:28:8a:e6:63:9c:20:5b:9e:e2:c2:17:d1:07:e2:59:cd:4e: a2:ba:26:96:19:14:cf:ce:06:61:1b:2c:93:0b:c2:ea:97:c2: 09:bb:cd:e1:84:76:7e:87:68:1a:e0:d9:f2:64:36:14:a3:21: 86:31:f2:38:37:1f:bf:23:ab:70:4a:37:ca:af:df:9b:80:e9: e6:e5:d0:80:bc:7c:34:14:ca:02:03:39:57:61:11:c9:a7:fe: a3:87:e8:7c:28:b7:4c:3f:5e:75:2c:30:1a:02:f8:56:6c:34: ef:06:36:eb:4c:a9:20:e9:b2:58:08:15:44:86:72:f6:e9:4e: 08:09:66:59:5c:cd:d6:0b:9c:18:bd:90:fb:75:94:34:2c:5b: 8e:65:45:0d:07:32:ec:9f:df:c0:49:3a:09:d0:7d:67:6a:b8: e5:60:fa:37:71:d6:34:27:69:b8:da:84:8a:69:34:83:5b:86: 61:4f:2b:fc -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUSBoKOq7ERxFFqymILC5eYjhB9GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTdaFw0yNzA5MTYwNTQ2MTdaMDMxMTAvBgNV BAMTKDY4RTY2NjlFMDg0QjM2RTAxOTYwNjc0OUYzRkYzNTBBQjk0MzY3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mimL9dLyjf3kZ81ioB1MM09/ uU1QE/mP2DGFTvyAy8EyqinVj5ZYB4zq3Kz6IHWHBf9KCNKW2iPvwkFRJOYPCRJi Vukpr4+XlGiSR5FeYZm7WYY8UKakrGLP5gNc4riXX3eiwTAmkghN+BOXv78z0R83 B/wDDHR0hkh/1Tifct49Zi98/eAXQ68Mf4Srkgj7oLhEWXZoP8awDjq5NN3zB89g h0qU1tYbTV7lNK053tm1dp1SDeguaWozN7B8gcHUWCOox0yPCIFQMobZxJKbbGqD vkAfpRIMiv61746yGWCwUyS+fRvEMYn7QlKcUxEN5v0i2f4FMBtILmUjKTDFAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUaOZmnghLNuAZYGdJ8/81CrlDZ3wwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzAzMTM3MzczNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAbsFADANBgkqhkiG9w0BAQsFAAOCAQEARc7sRMm49Bq6LdbPd33tcbF2 D2SbAgw5MQDKz6+MhClR8QZ81muf2XMbu4dDvvg+QRUa799fpDT7nz/APMwXSDg9 1dR6ZTCg2SiK5mOcIFue4sIX0QfiWc1OoromlhkUz84GYRsskwvC6pfCCbvN4YR2 fodoGuDZ8mQ2FKMhhjHyODcfvyOrcEo3yq/fm4Dp5uXQgLx8NBTKAgM5V2ERyaf+ o4fofCi3TD9edSwwGgL4Vmw07wY260ypIOmyWAgVRIZy9ulOCAlmWVzN1gucGL2Q +3WUNCxbjmVFDQcy7J/fwEk6CdB9Z2q45WD6N3HWNCdpuNqEimk0g1uGYU8r/A== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:23 2026 by rpki-client