$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e20343032363238.roa File: 3138372e352e322e302f32332d3234203d3e20343032363238.roa (raw, json) Hash identifier: JhVpokf1I4P/P1EJiguMGetIJjQMUTExKvNq4ze95fM= Subject key identifier: B6:83:45:8F:C6:43:7F:26:1B:A0:00:2D:D7:E4:5D:21:00:A6:2B:1D Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4D89278C176587794502B3171D00499D081C2035 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e20343032363238.roa Signing time: Thu 17 Sep 2026 05:46:08 +0000 ROA not before: Thu 17 Sep 2026 05:41:08 +0000 ROA not after: Thu 16 Sep 2027 05:46:08 +0000 asID: 402628 IP address blocks: 187.5.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:89:27:8c:17:65:87:79:45:02:b3:17:1d:00:49:9d:08:1c:20:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:08 2026 GMT Not After : Sep 16 05:46:08 2027 GMT Subject: CN=B683458FC6437F261BA0002DD7E45D2100A62B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:6f:5c:f0:0c:d8:40:d4:f8:69:d9:2c:98: 07:e2:93:10:4b:4c:64:1b:0f:a7:e7:89:57:16:21: 02:91:cc:3c:d0:10:68:f9:bb:91:0f:ac:d9:31:36: c4:5c:5a:8d:b8:1f:a0:78:fa:6c:72:87:a3:61:ce: d1:29:f5:23:98:ca:50:cf:06:27:54:5c:6e:b3:80: 86:0d:24:4b:84:9a:a2:e0:0a:cf:6d:9a:d9:23:42: 17:11:79:6e:2e:cb:58:58:95:42:29:c4:b0:62:47: 5a:f4:ad:a1:df:43:44:e3:0f:86:ea:d8:3a:0e:e0: 8f:b6:f3:30:6d:00:08:16:a5:75:79:51:28:6d:af: 72:67:84:5f:c2:ed:1a:24:52:aa:89:c5:b9:f6:8a: 4f:74:0c:8d:fa:40:4b:f0:06:03:41:c2:b0:49:ee: 44:85:0d:6b:4e:22:80:df:ec:a5:4a:90:f9:3f:53: 6c:38:89:82:c9:32:9a:b8:cc:b7:0f:77:35:be:76: d1:23:ac:fe:50:e5:3c:27:65:ae:c6:6a:56:3e:a3: 52:19:50:6e:39:d2:83:88:79:f5:ba:80:f1:dc:16: e3:d1:e7:b5:2c:e1:d3:53:d2:c6:a0:b8:ca:c0:12: 8f:c2:aa:6e:0f:25:d9:ab:ac:67:45:63:8c:10:d4: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:83:45:8F:C6:43:7F:26:1B:A0:00:2D:D7:E4:5D:21:00:A6:2B:1D X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e322e302f32332d3234203d3e20343032363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.2.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:cf:2a:5d:8a:2d:df:01:58:ff:ec:6d:51:fb:7c:10:01:d8: 0c:50:c3:02:f4:d0:ea:44:4f:37:a5:40:52:90:d5:2c:c0:f4: 45:a5:05:83:e7:8f:dc:e2:e1:50:e9:2f:14:6c:36:78:f0:95: f9:a8:e2:53:a6:79:fc:c4:f4:c2:bd:63:86:a1:78:7c:61:82: 2f:c9:6f:51:fe:af:80:28:65:3b:c3:29:e8:c2:46:65:b4:6f: 48:26:c7:de:f9:1c:0b:be:c4:60:e0:a6:1a:eb:84:32:11:15: 66:64:65:f9:0a:2f:b0:b8:82:3d:d2:e8:80:57:d4:3f:b5:69: c7:71:46:56:85:7f:8d:51:6e:13:7a:8a:6a:e9:11:80:51:e1: 5d:1f:10:73:77:48:da:d5:d2:5f:a5:ee:59:b3:ee:75:61:c4: a7:2e:0e:0a:53:71:4d:b9:f2:4e:6e:01:79:f9:bb:ff:be:a9: 1c:4d:6a:30:4e:7d:d0:b2:b8:1c:e0:cd:d2:bf:ff:7f:ab:69: 85:31:86:b4:d4:16:7e:e1:5d:2c:1c:68:d9:5c:93:78:2b:35: 89:26:de:d5:cb:e0:69:5b:0c:5c:35:6b:15:a9:43:8b:88:9b: 11:16:05:70:df:a6:69:ac:34:48:b7:bd:7f:8d:03:a4:9a:a0: 40:b6:59:f2 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUTYknjBdlh3lFArMXHQBJnQgcIDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDhaFw0yNzA5MTYwNTQ2MDhaMDMxMTAvBgNV BAMTKEI2ODM0NThGQzY0MzdGMjYxQkEwMDAyREQ3RTQ1RDIxMDBBNjJCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCblW9c8AzYQNT4adksmAfikxBL TGQbD6fniVcWIQKRzDzQEGj5u5EPrNkxNsRcWo24H6B4+mxyh6NhztEp9SOYylDP BidUXG6zgIYNJEuEmqLgCs9tmtkjQhcReW4uy1hYlUIpxLBiR1r0raHfQ0TjD4bq 2DoO4I+28zBtAAgWpXV5UShtr3JnhF/C7RokUqqJxbn2ik90DI36QEvwBgNBwrBJ 7kSFDWtOIoDf7KVKkPk/U2w4iYLJMpq4zLcPdzW+dtEjrP5Q5TwnZa7GalY+o1IZ UG450oOIefW6gPHcFuPR57Us4dNT0saguMrAEo/Cqm4PJdmrrGdFY4wQ1OkhAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUtoNFj8ZDfyYboAAt1+RdIQCmKx0wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzAzMjM2MzIzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAbsFAjANBgkqhkiG9w0BAQsFAAOCAQEAD88qXYot3wFY/+xtUft8EAHY DFDDAvTQ6kRPN6VAUpDVLMD0RaUFg+eP3OLhUOkvFGw2ePCV+ajiU6Z5/MT0wr1j hqF4fGGCL8lvUf6vgChlO8Mp6MJGZbRvSCbH3vkcC77EYOCmGuuEMhEVZmRl+Qov sLiCPdLogFfUP7Vpx3FGVoV/jVFuE3qKaukRgFHhXR8Qc3dI2tXSX6XuWbPudWHE py4OClNxTbnyTm4Befm7/76pHE1qME590LK4HODN0r//f6tphTGGtNQWfuFdLBxo 2VyTeCs1iSbe1cvgaVsMXDVrFalDi4ibERYFcN+maaw0SLe9f40DpJqgQLZZ8g== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:38 2026 by rpki-client