$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e20343032363238.roa File: 3138372e352e342e302f32332d3234203d3e20343032363238.roa (raw, json) Hash identifier: D8pb5TJ++sjtmQRi2vXEIDNEDiozwvubiOV/3X7UsP8= Subject key identifier: EE:78:27:68:2C:18:0E:4D:30:14:5D:8B:6F:E9:D7:4A:CB:11:D8:43 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4FF38A0550E55CED28D0C724171B06E9FF7EE1C7 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e20343032363238.roa Signing time: Thu 17 Sep 2026 05:46:10 +0000 ROA not before: Thu 17 Sep 2026 05:41:10 +0000 ROA not after: Thu 16 Sep 2027 05:46:10 +0000 asID: 402628 IP address blocks: 187.5.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f3:8a:05:50:e5:5c:ed:28:d0:c7:24:17:1b:06:e9:ff:7e:e1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:10 2026 GMT Not After : Sep 16 05:46:10 2027 GMT Subject: CN=EE7827682C180E4D30145D8B6FE9D74ACB11D843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3e:74:25:8e:5b:06:26:f5:00:6f:46:7a:18: 93:84:ab:88:3f:e5:31:01:e1:2e:aa:42:03:18:79: 78:a7:1e:3f:26:d5:b0:a0:a7:ff:de:7e:7c:e2:1a: 15:8f:c6:f6:38:3f:bc:5c:cc:3a:7c:96:6c:92:02: c4:c3:3d:1f:18:66:bc:98:d3:6c:aa:28:57:7d:ae: 89:5f:10:1b:bb:5e:24:d3:25:1c:c5:68:ac:c5:52: be:a3:b0:10:b1:a8:b7:5a:dc:da:b1:dc:77:37:76: a6:77:42:4a:f3:39:00:17:e2:de:89:77:c1:23:3b: a2:b6:de:e5:27:c1:bb:c0:d6:a4:ac:51:ad:e2:f2: 60:36:c3:9f:ce:0d:2a:eb:1e:00:51:4b:96:9e:1a: ae:5a:37:2a:dc:95:61:75:26:ac:b7:6f:6d:b6:33: ae:9c:cf:a5:c1:dd:5a:22:f0:73:29:4e:d7:33:eb: 07:e8:13:9c:14:89:47:7a:f8:b5:ec:d3:9d:d7:54: a1:eb:77:00:af:ba:e0:f0:c7:b9:a1:46:c8:67:b9: 6c:13:fd:48:c4:90:24:28:9d:84:36:d6:a9:10:a0: a7:1b:fd:f9:c2:12:dd:24:21:08:4d:b6:d7:30:aa: 46:46:1a:30:c0:bd:7c:20:d7:e8:52:9a:55:1a:4a: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:78:27:68:2C:18:0E:4D:30:14:5D:8B:6F:E9:D7:4A:CB:11:D8:43 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138372e352e342e302f32332d3234203d3e20343032363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.5.4.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:56:55:46:9d:c4:05:04:2e:87:6f:84:89:d6:28:ee:2e:d5: 9c:0e:1a:f1:e2:e2:83:d5:08:b9:b5:09:ff:0b:3a:d4:62:42: 3d:06:44:5e:11:e0:02:ad:c4:2e:53:b7:42:49:86:28:db:23: 40:63:1e:96:79:c5:5e:d1:60:b2:6b:d1:e8:81:fe:90:bb:70: a2:dd:ec:78:50:d3:85:52:fb:67:06:cb:cf:9a:c6:3a:87:54: 92:a0:9d:d6:81:ca:7c:3d:95:8e:31:24:12:de:25:fe:55:94: 12:3f:b0:14:46:5d:62:e4:6c:5b:31:65:8b:ad:0a:d7:c0:31: cd:e0:4d:0e:ae:cb:5b:b7:69:2b:41:c8:cc:d9:81:ed:18:6d: 62:f3:f8:ec:49:5b:3a:b9:c7:ff:20:7e:65:d3:94:8a:23:66: 72:41:1a:c3:07:93:b5:3f:83:14:4b:96:76:db:62:4c:3c:1d: 53:f7:1b:0e:3b:05:ba:1f:73:98:2c:87:21:0c:22:d6:7f:1f: a3:1b:3b:1f:11:3c:12:92:eb:b5:5d:f1:64:68:43:b6:a2:83: f0:6c:50:50:a1:fe:90:a4:a6:f9:f5:46:4a:c7:b7:df:e6:82: 41:fa:44:71:a3:93:ae:dc:8e:7d:ed:c6:38:f5:f4:a4:3d:eb: 18:93:a3:93 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUT/OKBVDlXO0o0MckFxsG6f9+4ccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTBaFw0yNzA5MTYwNTQ2MTBaMDMxMTAvBgNV BAMTKEVFNzgyNzY4MkMxODBFNEQzMDE0NUQ4QjZGRTlENzRBQ0IxMUQ4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFPnQljlsGJvUAb0Z6GJOEq4g/ 5TEB4S6qQgMYeXinHj8m1bCgp//efnziGhWPxvY4P7xczDp8lmySAsTDPR8YZryY 02yqKFd9rolfEBu7XiTTJRzFaKzFUr6jsBCxqLda3Nqx3Hc3dqZ3QkrzOQAX4t6J d8EjO6K23uUnwbvA1qSsUa3i8mA2w5/ODSrrHgBRS5aeGq5aNyrclWF1Jqy3b222 M66cz6XB3Voi8HMpTtcz6wfoE5wUiUd6+LXs053XVKHrdwCvuuDwx7mhRshnuWwT /UjEkCQonYQ21qkQoKcb/fnCEt0kIQhNttcwqkZGGjDAvXwg1+hSmlUaSgUhAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQU7ngnaCwYDk0wFF2Lb+nXSssR2EMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzcy ZTM1MmUzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzAzMjM2MzIzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAbsFBDANBgkqhkiG9w0BAQsFAAOCAQEATVZVRp3EBQQuh2+EidYo7i7V nA4a8eLig9UIubUJ/ws61GJCPQZEXhHgAq3ELlO3QkmGKNsjQGMelnnFXtFgsmvR 6IH+kLtwot3seFDThVL7ZwbLz5rGOodUkqCd1oHKfD2VjjEkEt4l/lWUEj+wFEZd YuRsWzFli60K18AxzeBNDq7LW7dpK0HIzNmB7RhtYvP47ElbOrnH/yB+ZdOUiiNm ckEawweTtT+DFEuWdttiTDwdU/cbDjsFuh9zmCyHIQwi1n8foxs7HxE8EpLrtV3x ZGhDtqKD8GxQUKH+kKSm+fVGSse33+aCQfpEcaOTrtyOfe3GOPX0pD3rGJOjkw== -----END CERTIFICATE-----Generated at Sat Sep 19 05:03:11 2026 by rpki-client