$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e203336353330.roa File: 3138372e352e342e302f32332d3234203d3e203336353330.roa (raw, json) Hash identifier: 8Z+qW5XOKVj+s8tFqhLr0z4JfQJ68XAu/Xhg2CnKSR4= Subject key identifier: 1B:7D:D2:7D:24:1D:4B:40:CD:57:C7:77:A4:16:25:E5:5F:F6:42:CC Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3C77D19ECBF09DB3212803C78023BEB45422A92F Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e203336353330.roa Signing time: Thu 17 Sep 2026 05:46:18 +0000 ROA not before: Thu 17 Sep 2026 05:41:18 +0000 ROA not after: Thu 16 Sep 2027 05:46:18 +0000 asID: 36530 IP address blocks: 187.5.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:77:d1:9e:cb:f0:9d:b3:21:28:03:c7:80:23:be:b4:54:22:a9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:18 2026 GMT Not After : Sep 16 05:46:18 2027 GMT Subject: CN=1B7DD27D241D4B40CD57C777A41625E55FF642CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:7f:68:c8:18:09:39:cd:70:4c:5d:e6:91: 14:f0:d9:06:9c:e7:57:bc:dc:51:60:07:bf:99:94: 13:44:64:93:c3:6a:b4:0a:b3:b0:d9:a7:8a:ce:e3: a0:75:c6:50:83:9b:7f:9b:f8:05:8f:95:5a:b9:72: 6e:22:12:8d:8a:58:71:ac:ae:8e:3b:99:79:03:13: ac:ee:49:41:49:9f:ef:53:08:97:07:1a:39:4c:7e: 65:b9:61:bc:58:42:c4:31:d6:1f:65:41:ea:c0:d4: 5c:13:7e:9e:6e:72:10:bf:7a:8c:0b:12:6f:8d:d8: a0:10:bc:a0:7b:0d:17:bb:23:e2:95:f1:65:7c:39: 4d:a8:d7:a4:1e:3d:a6:f4:2c:99:01:a9:26:03:f3: 11:2a:a1:17:86:de:37:c4:d4:80:88:2c:6d:a2:02: 5a:dc:33:e9:ce:6b:b0:f5:db:96:4d:ff:1c:a5:ad: d5:97:b1:e2:c8:3a:f5:3d:78:29:c9:16:19:48:03: 3a:bf:d1:67:dd:55:04:eb:c4:df:32:86:0e:f4:53: 4b:59:89:eb:8f:cf:6b:92:4b:7c:dd:e2:6d:fe:4c: f4:0c:42:9b:a2:d0:19:ca:76:f2:df:ef:10:f2:e4: b2:6d:5f:ae:ed:cc:e2:dc:71:08:5d:80:24:cf:6e: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7D:D2:7D:24:1D:4B:40:CD:57:C7:77:A4:16:25:E5:5F:F6:42:CC X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e203336353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.4.0/23 Signature Algorithm: sha256WithRSAEncryption 51:f3:ed:05:53:cb:a0:b0:27:6f:22:8f:e2:0b:35:9e:c4:14: 67:c8:68:51:36:2a:b1:5e:49:57:be:08:1a:89:62:fe:96:67: 5c:47:47:f8:27:0d:8e:1c:a9:17:d9:aa:cb:13:e3:b9:d0:b4: d4:68:bb:6b:95:8e:ac:cd:85:5b:44:fd:88:0a:ae:f3:f7:7e: 6c:88:59:e2:59:a7:c8:03:9f:e3:78:c3:9b:50:3a:4e:97:81: 77:2a:68:a3:a4:0b:74:d0:dd:af:e4:75:4f:a5:36:b0:ce:25: 30:84:df:f9:86:8e:6d:ee:f1:cc:d3:6e:3f:14:99:1a:b9:89: a5:3d:8e:64:da:e5:dd:91:b4:7c:f9:e6:41:91:73:90:74:1d: 01:15:c7:57:78:2f:cc:c7:0c:f9:e2:58:a3:66:e9:eb:c0:9a: 0b:06:ea:92:89:7d:3e:5f:1b:f1:e1:ca:f2:0b:89:d8:4b:f2: 37:3f:34:03:5f:ea:61:03:18:16:bc:17:99:f9:d4:e7:b8:03: d3:3b:f9:5d:40:2b:c8:0f:e2:32:55:bc:45:e2:e9:c4:3a:84: ee:d1:72:d8:6d:aa:9e:7c:8d:df:bf:06:2b:ac:3f:7e:17:d8: 31:af:28:e5:1e:61:74:46:60:ac:64:39:33:00:8f:5c:e6:91: 6d:31:83:e9 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUPHfRnsvwnbMhKAPHgCO+tFQiqS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMThaFw0yNzA5MTYwNTQ2MThaMDMxMTAvBgNV BAMTKDFCN0REMjdEMjQxRDRCNDBDRDU3Qzc3N0E0MTYyNUU1NUZGNjQyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbn9oyBgJOc1wTF3mkRTw2Qac 51e83FFgB7+ZlBNEZJPDarQKs7DZp4rO46B1xlCDm3+b+AWPlVq5cm4iEo2KWHGs ro47mXkDE6zuSUFJn+9TCJcHGjlMfmW5YbxYQsQx1h9lQerA1FwTfp5uchC/eowL Em+N2KAQvKB7DRe7I+KV8WV8OU2o16QePab0LJkBqSYD8xEqoReG3jfE1ICILG2i AlrcM+nOa7D125ZN/xylrdWXseLIOvU9eCnJFhlIAzq/0WfdVQTrxN8yhg70U0tZ ieuPz2uSS3zd4m3+TPQMQpui0BnKdvLf7xDy5LJtX67tzOLccQhdgCTPbqvdAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUG33SfSQdS0DNV8d3pBYl5V/2QswwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUF BzALhoGHcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMzMzYzNTMzMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG7BQQwDQYJKoZIhvcNAQELBQADggEBAFHz7QVTy6CwJ28ij+ILNZ7EFGfI aFE2KrFeSVe+CBqJYv6WZ1xHR/gnDY4cqRfZqssT47nQtNRou2uVjqzNhVtE/YgK rvP3fmyIWeJZp8gDn+N4w5tQOk6XgXcqaKOkC3TQ3a/kdU+lNrDOJTCE3/mGjm3u 8czTbj8UmRq5iaU9jmTa5d2RtHz55kGRc5B0HQEVx1d4L8zHDPniWKNm6evAmgsG 6pKJfT5fG/HhyvILidhL8jc/NANf6mEDGBa8F5n51Oe4A9M7+V1AK8gP4jJVvEXi 6cQ6hO7Rcthtqp58jd+/BiusP34X2DGvKOUeYXRGYKxkOTMAj1zmkW0xg+k= -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:10 2026 by rpki-client