$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e20343031373736.roa File: 3138372e352e322e302f32332d3234203d3e20343031373736.roa (raw, json) Hash identifier: 0ODwb5Qf3P9SuVFk8efcTeuMxaovcSF6w39HPns9mqA= Subject key identifier: E6:E9:65:8B:70:7F:16:8A:28:DA:44:5B:28:C0:01:41:5D:70:20:E3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0EB6DB7334FBBD13C91A33D31E0E408B513AE8D3 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e20343031373736.roa Signing time: Thu 17 Sep 2026 05:46:16 +0000 ROA not before: Thu 17 Sep 2026 05:41:16 +0000 ROA not after: Thu 16 Sep 2027 05:46:16 +0000 asID: 401776 IP address blocks: 187.5.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b6:db:73:34:fb:bd:13:c9:1a:33:d3:1e:0e:40:8b:51:3a:e8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:16 2026 GMT Not After : Sep 16 05:46:16 2027 GMT Subject: CN=E6E9658B707F168A28DA445B28C001415D7020E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:89:e9:ef:88:f1:cc:e9:59:07:e3:c3:3e: ee:8c:66:d3:72:38:bc:8b:a4:d1:4c:9d:23:31:59: a6:53:98:16:88:76:a0:35:97:76:34:8d:67:f4:a5: bb:2f:82:1a:2d:1e:28:c1:c4:eb:06:c2:40:0c:58: 11:55:24:17:ec:36:4c:68:02:13:0a:6c:17:a2:21: 70:c2:cd:02:b6:09:f3:19:5c:6f:de:00:84:f5:36: 19:51:2e:86:9c:74:6e:c3:b2:c3:87:01:88:87:20: 32:46:d5:f2:82:38:00:54:2c:bb:1f:ca:78:87:c1: 4c:2c:15:59:5e:ed:71:c0:14:f5:c8:cd:5f:30:7a: 36:ba:b5:92:81:99:71:79:73:61:6f:3c:c6:29:04: c4:ed:e3:f1:aa:fd:05:b5:e7:1a:01:d4:8e:d1:51: 22:99:4d:e5:b3:c8:5a:3b:69:7a:83:87:18:d2:66: bf:ca:34:f5:b6:fd:b0:a9:4c:8b:31:3b:37:87:88: db:93:4d:a3:c4:47:1e:f6:3e:8c:5b:95:e1:35:2d: ac:12:ef:84:63:e8:91:e2:2c:48:48:16:a5:8a:bd: 49:1d:bd:8c:04:4c:d0:eb:ac:01:ae:2b:93:1c:5f: 75:37:b3:76:8e:df:1a:92:ee:40:f5:72:60:ea:26: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E9:65:8B:70:7F:16:8A:28:DA:44:5B:28:C0:01:41:5D:70:20:E3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e20343031373736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.2.0/23 Signature Algorithm: sha256WithRSAEncryption 33:92:cf:bb:2e:01:1c:54:8e:f1:bc:c1:c4:39:43:b8:91:ec: 86:2e:c0:e7:46:4f:25:53:b8:0f:14:9d:17:40:d9:00:1c:5a: 58:f9:80:88:a3:f5:5d:44:48:80:7c:e7:c5:ee:78:f2:9b:3d: e7:6a:81:96:9f:1c:e7:d8:4a:5d:90:e8:08:72:01:7a:40:16: fe:bb:33:e8:f3:7e:68:69:ef:7e:7d:95:dc:e0:68:e6:48:07: 80:e4:f7:e0:ac:78:30:98:da:0f:a6:7f:85:54:40:05:49:58: 5d:0d:7a:35:e2:6d:3d:99:dd:11:45:2c:e0:05:81:8c:8c:e4: 2c:33:3f:fd:2d:54:ac:da:84:d6:d4:2e:25:90:62:7f:a5:7e: 78:e3:ea:a5:77:44:db:25:0b:36:3e:4f:40:10:41:36:41:8c: 55:56:bc:4a:e5:ec:04:96:5a:cc:3e:d4:8f:c4:4b:65:a4:e3: 4f:0d:2f:98:b7:e0:6e:70:3c:4c:c1:e6:db:3e:a8:d5:40:84: 92:4a:d5:84:ea:25:a8:c5:5f:b4:b1:a0:2d:4e:ab:4b:2d:3e: 05:ff:b4:d0:29:49:57:f2:ae:01:21:9b:3d:d6:b0:23:6f:de: 77:97:fd:15:bf:1c:61:db:b4:37:9d:7d:a2:8a:64:a7:fc:38: 6a:b4:ae:34 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUDrbbczT7vRPJGjPTHg5Ai1E66NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTZaFw0yNzA5MTYwNTQ2MTZaMDMxMTAvBgNV BAMTKEU2RTk2NThCNzA3RjE2OEEyOERBNDQ1QjI4QzAwMTQxNUQ3MDIwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCYnp74jxzOlZB+PDPu6MZtNy OLyLpNFMnSMxWaZTmBaIdqA1l3Y0jWf0pbsvghotHijBxOsGwkAMWBFVJBfsNkxo AhMKbBeiIXDCzQK2CfMZXG/eAIT1NhlRLoacdG7DssOHAYiHIDJG1fKCOABULLsf yniHwUwsFVle7XHAFPXIzV8weja6tZKBmXF5c2FvPMYpBMTt4/Gq/QW15xoB1I7R USKZTeWzyFo7aXqDhxjSZr/KNPW2/bCpTIsxOzeHiNuTTaPERx72PoxbleE1LawS 74Rj6JHiLEhIFqWKvUkdvYwETNDrrAGuK5McX3U3s3aO3xqS7kD1cmDqJm3LAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQU5ulli3B/Fooo2kRbKMABQV1wIOMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzAzMTM3MzczNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAbsFAjANBgkqhkiG9w0BAQsFAAOCAQEAM5LPuy4BHFSO8bzBxDlDuJHs hi7A50ZPJVO4DxSdF0DZABxaWPmAiKP1XURIgHznxe548ps952qBlp8c59hKXZDo CHIBekAW/rsz6PN+aGnvfn2V3OBo5kgHgOT34Kx4MJjaD6Z/hVRABUlYXQ16NeJt PZndEUUs4AWBjIzkLDM//S1UrNqE1tQuJZBif6V+eOPqpXdE2yULNj5PQBBBNkGM VVa8SuXsBJZazD7Uj8RLZaTjTw0vmLfgbnA8TMHm2z6o1UCEkkrVhOolqMVftLGg LU6rSy0+Bf+00ClJV/KuASGbPdawI2/ed5f9Fb8cYdu0N519oopkp/w4arSuNA== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:39 2026 by rpki-client