$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e20343032363238.roa File: 3138372e352e302e302f32332d3234203d3e20343032363238.roa (raw, json) Hash identifier: 8LrzJ2noHCiHOTlTYlduYqhSw5dOweWJNM4teNC6gPA= Subject key identifier: 33:D1:1D:7E:F2:FB:AC:80:3D:AF:F4:60:32:FA:31:27:74:0F:AD:71 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0B796CC3FCE2CBC767B3A341005D43C7EC1181A7 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e20343032363238.roa Signing time: Thu 17 Sep 2026 05:46:08 +0000 ROA not before: Thu 17 Sep 2026 05:41:08 +0000 ROA not after: Thu 16 Sep 2027 05:46:08 +0000 asID: 402628 IP address blocks: 187.5.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:79:6c:c3:fc:e2:cb:c7:67:b3:a3:41:00:5d:43:c7:ec:11:81:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:08 2026 GMT Not After : Sep 16 05:46:08 2027 GMT Subject: CN=33D11D7EF2FBAC803DAFF46032FA3127740FAD71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:5d:3a:c1:3c:32:e5:af:0a:5d:97:e4:b6: 31:36:10:49:36:79:b4:6a:88:30:6e:71:c8:9a:7d: 3f:26:4f:e6:40:33:55:4e:26:9e:5f:fa:fc:75:fb: 10:79:26:80:f9:23:9f:a5:c6:77:c2:fa:24:7e:bb: 68:1d:d7:ce:ff:d2:60:d0:a9:a8:6a:78:fb:04:c0: ab:12:c9:a3:4c:23:4e:85:e5:03:c0:16:94:71:df: 02:87:e5:94:65:39:91:51:6f:97:61:29:ad:3b:2d: fe:69:d6:ea:2b:66:0d:3b:44:d4:9a:fd:7f:f6:fc: b5:da:67:6c:38:3d:bb:d2:ce:b9:f2:61:db:82:04: 26:74:2a:79:83:82:68:7e:cc:59:79:63:61:26:ac: 2a:b3:ac:c6:57:33:5d:16:ef:f8:9d:2f:ea:bf:ad: 6b:21:cd:56:cb:97:24:06:65:5f:47:49:8c:f2:f7: d6:c2:55:c1:3a:cc:f6:4f:12:1c:4f:2a:1a:72:d6: b3:fe:31:7d:a1:4a:76:30:78:d8:7a:7f:5f:cc:41: 1b:bd:bd:76:6c:7a:10:1c:e5:66:79:24:4a:a7:0e: 2e:30:55:dc:f8:5b:f5:63:38:9f:d3:cf:27:4b:f3: e8:e7:05:49:61:4e:cf:7e:e7:4f:e2:25:eb:12:84: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:1D:7E:F2:FB:AC:80:3D:AF:F4:60:32:FA:31:27:74:0F:AD:71 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e302e302f32332d3234203d3e20343032363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.0.0/23 Signature Algorithm: sha256WithRSAEncryption b5:40:af:c5:cc:2b:ef:f7:0f:69:0f:48:1c:d5:5e:f1:15:61: 64:f6:78:1f:26:71:f7:31:bb:63:41:55:7c:54:1a:82:77:f5: c1:13:cc:ad:91:9f:6e:33:df:3a:e5:32:f3:2c:ac:31:c2:5d: 45:6b:3f:de:c4:41:ea:ab:83:25:57:f6:aa:81:c0:89:e6:30: 72:b0:4b:6d:aa:87:f6:f8:a8:46:03:02:bf:8e:a7:4d:e9:23: 4f:ca:57:9f:21:f1:3f:cd:19:43:06:da:5f:90:82:1a:0b:82: 23:79:64:62:90:2f:f2:8f:f8:65:5d:3b:67:fd:da:19:ec:91: 35:45:f6:93:f7:83:89:11:f4:c2:e6:91:f1:90:99:dc:b1:0b: 67:88:5d:83:1c:7d:b3:9c:a0:b7:4c:f2:86:5f:ba:a2:9d:df: 16:18:9f:95:c2:81:5b:c0:39:63:61:29:7c:d8:9b:50:a5:8e: a5:fa:5f:1e:b6:c1:84:8b:0c:a3:0e:5a:7f:4d:ec:d7:b6:5a: 74:91:3f:f9:d7:ab:05:82:83:a5:6c:d6:57:85:81:9b:09:ee: 39:9b:27:4a:ba:fd:83:04:a4:e9:9e:74:dd:2d:06:75:f0:6f: 3b:83:f4:fe:b3:70:d6:31:60:f5:57:1a:8f:cb:96:fc:4a:57: a9:02:b5:86 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUC3lsw/ziy8dns6NBAF1Dx+wRgacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDhaFw0yNzA5MTYwNTQ2MDhaMDMxMTAvBgNV BAMTKDMzRDExRDdFRjJGQkFDODAzREFGRjQ2MDMyRkEzMTI3NzQwRkFENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6V06wTwy5a8KXZfktjE2EEk2 ebRqiDBucciafT8mT+ZAM1VOJp5f+vx1+xB5JoD5I5+lxnfC+iR+u2gd187/0mDQ qahqePsEwKsSyaNMI06F5QPAFpRx3wKH5ZRlOZFRb5dhKa07Lf5p1uorZg07RNSa /X/2/LXaZ2w4PbvSzrnyYduCBCZ0KnmDgmh+zFl5Y2EmrCqzrMZXM10W7/idL+q/ rWshzVbLlyQGZV9HSYzy99bCVcE6zPZPEhxPKhpy1rP+MX2hSnYweNh6f1/MQRu9 vXZsehAc5WZ5JEqnDi4wVdz4W/VjOJ/TzydL8+jnBUlhTs9+50/iJesShMnhAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUM9EdfvL7rIA9r/RgMvoxJ3QPrXEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzAzMjM2MzIzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAbsFADANBgkqhkiG9w0BAQsFAAOCAQEAtUCvxcwr7/cPaQ9IHNVe8RVh ZPZ4HyZx9zG7Y0FVfFQagnf1wRPMrZGfbjPfOuUy8yysMcJdRWs/3sRB6quDJVf2 qoHAieYwcrBLbaqH9vioRgMCv46nTekjT8pXnyHxP80ZQwbaX5CCGguCI3lkYpAv 8o/4ZV07Z/3aGeyRNUX2k/eDiRH0wuaR8ZCZ3LELZ4hdgxx9s5ygt0zyhl+6op3f FhiflcKBW8A5Y2EpfNibUKWOpfpfHrbBhIsMow5af03s17ZadJE/+derBYKDpWzW V4WBmwnuOZsnSrr9gwSk6Z503S0GdfBvO4P0/rNw1jFg9Vcaj8uW/EpXqQK1hg== -----END CERTIFICATE-----Generated at Sat Sep 19 05:03:10 2026 by rpki-client