$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3132382e302f32342d3234203d3e20383334.roa File: 3138392e31322e3132382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: lo55hrrv0ufYnez0SUNEwpJh0GC52pGkf8T/qpe9sAs= Subject key identifier: 84:DD:44:F9:BB:6E:4B:46:4B:4D:4F:0C:05:D4:08:B8:D2:A8:57:20 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 52FD58E7D8AC9DCCA2CCE6D25D0A05FCB4EC4878 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3132382e302f32342d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:12 +0000 ROA not before: Thu 17 Sep 2026 05:41:12 +0000 ROA not after: Thu 16 Sep 2027 05:46:12 +0000 asID: 834 IP address blocks: 189.12.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fd:58:e7:d8:ac:9d:cc:a2:cc:e6:d2:5d:0a:05:fc:b4:ec:48:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:12 2026 GMT Not After : Sep 16 05:46:12 2027 GMT Subject: CN=84DD44F9BB6E4B464B4D4F0C05D408B8D2A85720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:ed:c0:31:89:fa:fa:e2:84:7e:f9:0e:fd: ad:fb:47:1d:0f:53:16:20:bf:6a:9e:bf:ed:40:ba: 1c:3e:72:2d:7b:65:f2:fa:0c:f9:a2:7a:ef:ac:97: 52:a7:fe:aa:a8:75:cd:25:fc:c3:91:2a:09:9f:3b: 9f:f6:76:d8:d1:fa:e3:83:5f:2c:38:d0:fa:2c:c0: 7a:9c:a3:e4:35:65:16:61:da:e9:8a:d0:3e:50:e5: d4:d4:b4:b6:72:20:01:63:a6:b4:e1:ae:c0:c8:6f: ec:97:83:70:53:19:f9:ae:d3:0e:c0:38:fb:48:ef: 90:a5:62:1a:f3:f8:26:8a:b1:1a:e0:6e:f4:0a:39: de:ce:97:13:e3:80:9e:05:7a:6e:94:08:fa:19:77: 28:d5:48:d3:b9:c2:7f:c5:d9:bf:9c:7a:37:4f:bf: 88:1a:ab:d2:ad:1e:ac:91:be:a2:5f:bd:fe:4a:dc: ca:07:9c:62:6e:9c:42:6a:cb:03:53:ce:26:a1:01: 8d:92:57:ea:f0:ca:ba:78:bc:82:86:b2:1f:1a:35: cb:f6:ce:c4:d9:e0:ae:92:63:19:c2:09:f4:4f:70: a0:0f:75:ef:ee:31:d0:51:5d:78:00:f7:70:05:41: 62:89:67:4b:c1:e9:8f:1d:c5:7d:b5:e5:0d:ce:e6: 7d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DD:44:F9:BB:6E:4B:46:4B:4D:4F:0C:05:D4:08:B8:D2:A8:57:20 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3132382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.128.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:62:22:b6:e1:28:e5:f0:9b:43:ac:8b:c0:8e:35:24:04:ff: 2a:c9:22:4e:42:6c:b2:c6:31:b9:32:2d:8e:90:f6:6d:95:0b: 87:ac:ca:23:49:95:10:dc:17:49:59:9d:d1:3a:67:ba:84:23: 3d:88:2c:f0:9a:05:f4:10:ec:eb:44:90:05:59:e4:a3:ce:72: 80:95:fc:84:5f:bb:9a:5c:ea:75:3f:3d:7d:7a:2b:ac:d7:71: 19:c7:0f:54:7a:da:f8:3e:20:1d:68:49:d5:a5:bb:79:ce:5f: 94:62:bc:94:8b:7d:5f:bf:d1:73:4f:73:16:53:ae:2e:fd:02: 82:cf:d5:6a:e9:82:6b:b8:70:2b:97:d1:b8:d1:6c:dc:b5:e2: a5:d9:a8:40:e0:70:36:8b:9b:5a:91:0f:89:f6:21:06:e5:ed: 29:bd:8d:88:66:e5:e7:a2:70:86:1a:2d:17:a7:b3:f6:1e:b8: 7a:28:fc:72:72:a2:81:e2:c5:62:d1:22:ea:57:e5:83:e3:e2: 49:86:24:78:d7:be:d5:4d:65:1d:7a:6b:a4:07:5c:35:fb:05: 01:64:7b:5e:2d:79:36:40:3a:93:ed:ad:95:ee:db:b3:73:f4: 7a:8f:9f:4e:4a:61:09:67:3c:76:7b:01:18:2d:e3:21:dd:2e: 6f:2c:95:25 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUUv1Y59isncyizObSXQoF/LTsSHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTJaFw0yNzA5MTYwNTQ2MTJaMDMxMTAvBgNV BAMTKDg0REQ0NEY5QkI2RTRCNDY0QjRENEYwQzA1RDQwOEI4RDJBODU3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5s+3AMYn6+uKEfvkO/a37Rx0P UxYgv2qev+1Auhw+ci17ZfL6DPmieu+sl1Kn/qqodc0l/MORKgmfO5/2dtjR+uOD Xyw40PoswHqco+Q1ZRZh2umK0D5Q5dTUtLZyIAFjprThrsDIb+yXg3BTGfmu0w7A OPtI75ClYhrz+CaKsRrgbvQKOd7OlxPjgJ4Fem6UCPoZdyjVSNO5wn/F2b+cejdP v4gaq9KtHqyRvqJfvf5K3MoHnGJunEJqywNTziahAY2SV+rwyrp4vIKGsh8aNcv2 zsTZ4K6SYxnCCfRPcKAPde/uMdBRXXgA93AFQWKJZ0vB6Y8dxX215Q3O5n3vAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUhN1E+btuS0ZLTU8MBdQIuNKoVyAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAL0MgDANBgkqhkiG9w0BAQsFAAOCAQEAfGIituEo5fCbQ6yLwI41JAT/ KskiTkJsssYxuTItjpD2bZULh6zKI0mVENwXSVmd0TpnuoQjPYgs8JoF9BDs60SQ BVnko85ygJX8hF+7mlzqdT89fXorrNdxGccPVHra+D4gHWhJ1aW7ec5flGK8lIt9 X7/Rc09zFlOuLv0Cgs/VaumCa7hwK5fRuNFs3LXipdmoQOBwNoubWpEPifYhBuXt Kb2NiGbl56JwhhotF6ez9h64eij8cnKigeLFYtEi6lflg+PiSYYkeNe+1U1lHXpr pAdcNfsFAWR7Xi15NkA6k+2tle7bs3P0eo+fTkphCWc8dnsBGC3jId0ubyyVJQ== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:26 2026 by rpki-client