$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e203336353330.roa File: 3138372e352e322e302f32332d3234203d3e203336353330.roa (raw, json) Hash identifier: 4umBICqC73Wq5OdmqhnojQW04DrWp4R1MWPm3dmUMAY= Subject key identifier: DE:38:EE:C0:5D:3B:F0:50:19:27:41:2F:7F:E7:E0:03:DC:24:4C:88 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5F0927525BDAB5942A42DEDE4A89F3CD5CD2C407 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e203336353330.roa Signing time: Thu 17 Sep 2026 05:46:14 +0000 ROA not before: Thu 17 Sep 2026 05:41:14 +0000 ROA not after: Thu 16 Sep 2027 05:46:14 +0000 asID: 36530 IP address blocks: 187.5.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:09:27:52:5b:da:b5:94:2a:42:de:de:4a:89:f3:cd:5c:d2:c4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:14 2026 GMT Not After : Sep 16 05:46:14 2027 GMT Subject: CN=DE38EEC05D3BF0501927412F7FE7E003DC244C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:ab:5d:14:f8:12:16:66:da:b1:73:40:01: 3e:6f:d4:7f:f1:95:25:05:e1:91:e3:c6:7d:92:ee: 4b:7f:3f:cd:f9:3a:23:f7:56:6a:63:4a:26:1a:14: 15:c0:da:be:08:34:cf:7d:bb:2b:5f:36:84:a5:6e: c0:9f:62:48:c7:d9:97:03:15:8b:f4:15:55:61:63: f5:58:27:d1:20:c0:3d:3c:f7:5d:a0:e9:26:f6:6a: 50:ef:e3:86:8d:e3:b0:7a:90:6f:a4:50:50:73:f0: 8a:f9:5d:04:1d:f0:1a:42:6d:41:c3:18:a9:49:fd: 6f:81:c5:9c:7e:f3:6a:e1:0a:6b:c5:d8:6e:9f:77: b9:e9:fe:71:94:0d:3b:c7:93:de:3a:ab:8b:63:66: 14:94:1c:24:09:1d:f3:30:e4:46:70:1e:05:68:fc: 9f:3e:05:8b:be:8b:a2:6c:e9:34:ac:a4:8b:aa:2b: 34:10:00:1e:d6:22:99:ee:c3:b7:9d:4d:2a:9d:b4: e8:2a:1b:a2:46:c6:63:10:65:ff:ba:e7:c5:70:53: 7b:cf:62:b3:04:37:5b:e4:c6:82:31:69:7c:fc:11: 77:f5:7e:7a:35:95:0d:3a:51:16:56:d5:02:3d:d9: 55:6a:87:c4:8d:96:45:88:1a:50:99:af:b7:9e:a7: d7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:EE:C0:5D:3B:F0:50:19:27:41:2F:7F:E7:E0:03:DC:24:4C:88 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e203336353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.2.0/23 Signature Algorithm: sha256WithRSAEncryption 45:5d:68:cd:98:3b:9d:91:be:63:b8:83:f0:51:f2:8a:48:b7: 96:ec:5c:d9:94:8c:e1:51:f9:27:6a:ce:45:83:31:a2:8a:f5: 10:ec:d9:a1:c3:ff:28:89:57:61:f1:be:de:88:78:92:3d:a8: b6:33:2b:ef:af:7e:e4:49:0f:97:c3:1b:46:8f:bd:84:3d:e6: c8:5e:e6:98:a7:ee:b3:d2:0f:30:85:d7:d8:29:af:99:89:a0: 26:3d:0f:55:82:bb:c7:46:9b:09:80:61:64:3c:b5:ab:3f:e2: a3:e4:46:a3:0d:ae:62:34:3f:90:49:c2:b9:c3:94:55:07:35: 37:9d:d3:2b:4e:01:7a:cc:0a:77:93:06:18:9f:54:95:a6:75: f6:33:a6:44:c7:e2:0c:c8:f4:84:7b:1e:fc:17:49:19:0e:d6: 5f:97:2a:f4:f1:52:2b:64:52:4e:f0:d1:cf:25:39:d9:55:67: 13:bc:b4:4b:a8:89:bc:09:37:06:cb:8e:76:9d:f4:77:d5:75: d8:45:37:88:61:0d:e3:23:70:f4:77:f5:26:f4:be:2a:ee:e7: 62:92:e3:ed:6b:02:60:d3:10:cf:ca:f3:40:fe:2b:72:91:f5: 49:4e:8a:b4:71:c3:74:a3:04:ef:7f:06:d0:bf:e9:b0:61:eb: 18:14:23:93 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUXwknUlvatZQqQt7eSonzzVzSxAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTRaFw0yNzA5MTYwNTQ2MTRaMDMxMTAvBgNV BAMTKERFMzhFRUMwNUQzQkYwNTAxOTI3NDEyRjdGRTdFMDAzREMyNDRDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTatdFPgSFmbasXNAAT5v1H/x lSUF4ZHjxn2S7kt/P835OiP3VmpjSiYaFBXA2r4INM99uytfNoSlbsCfYkjH2ZcD FYv0FVVhY/VYJ9EgwD08912g6Sb2alDv44aN47B6kG+kUFBz8Ir5XQQd8BpCbUHD GKlJ/W+BxZx+82rhCmvF2G6fd7np/nGUDTvHk946q4tjZhSUHCQJHfMw5EZwHgVo /J8+BYu+i6Js6TSspIuqKzQQAB7WIpnuw7edTSqdtOgqG6JGxmMQZf+658VwU3vP YrMEN1vkxoIxaXz8EXf1fno1lQ06URZW1QI92VVqh8SNlkWIGlCZr7eep9elAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQU3jjuwF078FAZJ0Evf+fgA9wkTIgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUF BzALhoGHcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMzMzYzNTMzMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG7BQIwDQYJKoZIhvcNAQELBQADggEBAEVdaM2YO52RvmO4g/BR8opIt5bs XNmUjOFR+SdqzkWDMaKK9RDs2aHD/yiJV2Hxvt6IeJI9qLYzK++vfuRJD5fDG0aP vYQ95she5pin7rPSDzCF19gpr5mJoCY9D1WCu8dGmwmAYWQ8tas/4qPkRqMNrmI0 P5BJwrnDlFUHNTed0ytOAXrMCneTBhifVJWmdfYzpkTH4gzI9IR7HvwXSRkO1l+X KvTxUitkUk7w0c8lOdlVZxO8tEuoibwJNwbLjnad9HfVddhFN4hhDeMjcPR39Sb0 viru52KS4+1rAmDTEM/K80D+K3KR9UlOirRxw3SjBO9/BtC/6bBh6xgUI5M= -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:15 2026 by rpki-client