$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e20343031373736.roa File: 3138372e352e342e302f32332d3234203d3e20343031373736.roa (raw, json) Hash identifier: LFQd6ob5C27zaO3/fhCGxTvVl2TxXx8oOyRVSg3IOTc= Subject key identifier: 8D:4F:76:2A:6A:74:AE:7D:95:A4:98:1C:BE:8F:92:E3:D1:C1:B5:57 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 655A9E5D3B3060C4CED5B7DBD00C255CE6EC3976 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e20343031373736.roa Signing time: Thu 17 Sep 2026 05:46:10 +0000 ROA not before: Thu 17 Sep 2026 05:41:10 +0000 ROA not after: Thu 16 Sep 2027 05:46:10 +0000 asID: 401776 IP address blocks: 187.5.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5a:9e:5d:3b:30:60:c4:ce:d5:b7:db:d0:0c:25:5c:e6:ec:39:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:10 2026 GMT Not After : Sep 16 05:46:10 2027 GMT Subject: CN=8D4F762A6A74AE7D95A4981CBE8F92E3D1C1B557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:c2:b5:3b:97:79:80:e2:a7:0b:08:90:0e: 61:fd:dd:93:c6:94:85:3e:89:99:49:14:da:c4:0c: a7:1a:bd:44:78:f2:de:f3:c2:c9:21:fd:43:72:2f: 95:12:3b:94:ed:f6:3d:d7:c8:d0:b1:60:fc:bc:63: 38:64:f9:10:c3:00:f6:98:8b:88:e1:68:eb:1d:37: 36:ff:fa:44:b1:a8:2e:9d:da:78:8f:3d:af:e9:97: d3:39:a2:e3:77:7c:7a:31:c6:dd:85:45:8d:57:82: 82:e6:40:03:6e:75:e5:a1:13:cd:98:98:f8:51:65: 44:97:63:35:a0:59:84:95:78:d5:58:89:60:db:aa: 61:6b:d9:d2:16:93:28:92:8f:0f:6d:89:fe:77:89: 32:1f:2d:a2:6f:cf:38:b2:ae:e5:94:ad:cd:91:03: ad:67:e4:23:cb:7f:4f:0f:fc:88:d9:1f:05:cb:02: 7c:f2:de:08:95:15:75:02:e2:0f:b0:26:a8:62:e4: 5b:68:ba:13:69:b6:2d:08:7c:96:b6:2b:39:d4:78: da:65:cf:fa:f5:bb:b5:c5:53:63:42:48:b9:69:cf: 69:4e:19:2c:f4:2e:5e:b2:3b:bd:ee:30:77:84:45: ee:a8:0c:06:76:bd:5d:06:16:d9:dd:aa:18:4b:51: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:76:2A:6A:74:AE:7D:95:A4:98:1C:BE:8F:92:E3:D1:C1:B5:57 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e20343031373736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.4.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:14:b6:9e:81:9b:a3:82:ee:d6:15:21:d8:c6:db:e7:f7:93: 95:12:4e:ae:b8:9c:66:69:73:f1:05:97:5f:8d:84:56:09:fd: ca:9a:c4:aa:f7:74:ef:7c:2e:b3:43:99:82:bc:97:6e:3e:9d: a7:c6:91:b6:9b:68:dd:7a:9d:07:d6:86:9f:c0:9f:d0:2b:df: 71:79:14:63:76:1b:fd:a7:09:45:fc:59:d2:18:38:44:19:0b: 2f:72:f6:19:5a:75:a1:25:d1:28:99:34:52:73:b9:40:9f:ed: 85:79:72:10:e2:25:2f:3e:20:de:b0:c0:1d:98:6e:cc:52:be: ad:c2:ac:1c:1d:54:1e:81:b3:50:0e:0e:73:12:81:96:4e:47: 4e:8c:ee:09:64:71:95:14:c3:a0:65:35:fe:01:27:f5:ef:f7: 86:41:97:d7:4a:fb:79:77:4c:bc:9f:db:82:49:9c:18:d2:e5: 13:e9:da:6d:ec:1a:b7:3f:22:fc:4b:93:a0:d0:65:e6:28:f4: fd:29:07:f1:b4:6c:67:31:69:66:59:29:de:9f:e8:31:ce:ff: 1a:b6:44:c3:70:09:d5:17:0c:e7:37:2f:56:ff:6d:7d:f4:23: 60:f8:b8:26:dc:e9:47:89:a9:00:f4:40:36:5b:bd:4a:aa:b4: 12:2f:09:51 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUZVqeXTswYMTO1bfb0AwlXObsOXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTBaFw0yNzA5MTYwNTQ2MTBaMDMxMTAvBgNV BAMTKDhENEY3NjJBNkE3NEFFN0Q5NUE0OTgxQ0JFOEY5MkUzRDFDMUI1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUasK1O5d5gOKnCwiQDmH93ZPG lIU+iZlJFNrEDKcavUR48t7zwskh/UNyL5USO5Tt9j3XyNCxYPy8Yzhk+RDDAPaY i4jhaOsdNzb/+kSxqC6d2niPPa/pl9M5ouN3fHoxxt2FRY1XgoLmQANudeWhE82Y mPhRZUSXYzWgWYSVeNVYiWDbqmFr2dIWkyiSjw9tif53iTIfLaJvzziyruWUrc2R A61n5CPLf08P/IjZHwXLAnzy3giVFXUC4g+wJqhi5FtouhNpti0IfJa2KznUeNpl z/r1u7XFU2NCSLlpz2lOGSz0Ll6yO73uMHeERe6oDAZ2vV0GFtndqhhLUbVBAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUjU92Kmp0rn2VpJgcvo+S49HBtVcwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzAzMTM3MzczNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAbsFBDANBgkqhkiG9w0BAQsFAAOCAQEADRS2noGbo4Lu1hUh2Mbb5/eT lRJOrricZmlz8QWXX42EVgn9yprEqvd073wus0OZgryXbj6dp8aRtpto3XqdB9aG n8Cf0CvfcXkUY3Yb/acJRfxZ0hg4RBkLL3L2GVp1oSXRKJk0UnO5QJ/thXlyEOIl Lz4g3rDAHZhuzFK+rcKsHB1UHoGzUA4OcxKBlk5HTozuCWRxlRTDoGU1/gEn9e/3 hkGX10r7eXdMvJ/bgkmcGNLlE+nabewatz8i/EuToNBl5ij0/SkH8bRsZzFpZlkp 3p/oMc7/GrZEw3AJ1RcM5zcvVv9tffQjYPi4JtzpR4mpAPRANlu9Sqq0Ei8JUQ== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:23 2026 by rpki-client