$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa File: 3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: TBazJOva0EG1mzlXGFM5R/Vvz0OZbaUutMMo0j20nSE= Subject key identifier: 3F:06:FB:99:16:D1:52:D2:91:98:F2:56:54:3A:27:21:87:DC:35:FD Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1D2F86E361457FA2E1EFC68B9BAA0D1180A4B000 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa Signing time: Thu 17 Sep 2026 05:46:18 +0000 ROA not before: Thu 17 Sep 2026 05:41:18 +0000 ROA not after: Thu 16 Sep 2027 05:46:18 +0000 asID: 152179 IP address blocks: 189.12.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:86:e3:61:45:7f:a2:e1:ef:c6:8b:9b:aa:0d:11:80:a4:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:18 2026 GMT Not After : Sep 16 05:46:18 2027 GMT Subject: CN=3F06FB9916D152D29198F256543A272187DC35FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:56:06:8e:45:44:1c:5b:2c:0d:62:a6:96: cd:bd:d0:50:09:cf:30:71:7a:35:04:85:d2:28:34: 3f:63:55:23:e1:3d:42:06:ac:1f:89:0f:c7:87:b2: 3b:76:2c:e7:41:f3:fc:53:22:4f:16:21:8d:43:ba: 58:85:87:0d:a9:7a:24:c5:70:6e:72:81:46:95:40: 1f:22:04:bc:24:d0:2d:4e:82:e6:42:e6:f4:bb:21: b2:87:89:f7:a7:f7:2e:25:f2:ad:c5:61:60:1d:e6: 2f:bc:89:e5:6f:e0:f7:9a:43:f4:6b:2c:69:5b:14: 03:c1:71:f9:04:51:7d:6e:ff:6c:ca:19:07:59:66: 6a:eb:66:bd:67:ea:0d:7d:27:c8:00:7d:a9:d8:25: 74:56:31:38:bb:27:97:66:1b:52:90:b4:b6:fd:eb: c6:72:92:26:fb:77:e0:dc:99:a2:b9:ec:a7:d8:eb: 8c:51:29:3a:c2:12:aa:2c:bd:2c:57:61:b6:3a:8f: cc:77:13:6c:73:fb:4d:5d:0a:18:94:f0:c1:29:29: 11:55:a2:e3:5e:b8:5f:cd:35:08:02:0c:db:31:10: 2b:0d:bb:a4:71:35:be:1e:3b:8b:a9:73:c1:3f:14: a5:4e:46:ce:36:67:73:3b:b6:2e:1c:04:74:f4:23: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:06:FB:99:16:D1:52:D2:91:98:F2:56:54:3A:27:21:87:DC:35:FD X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.129.0/24 Signature Algorithm: sha256WithRSAEncryption 02:57:d9:7b:29:62:f8:17:51:5e:65:61:2e:3d:14:22:3c:3d: f0:95:02:9b:96:e9:65:c7:76:4d:e3:af:34:5e:6c:09:f0:d7: b7:19:1d:86:7d:64:ce:68:7c:b7:fc:10:8c:5a:ef:3a:45:6c: 94:23:32:6e:3d:0f:ba:3f:d2:d6:08:35:07:42:0a:43:f1:2b: e4:67:42:e8:80:50:21:4e:ff:77:97:ef:63:bd:e6:ca:1d:f1: 6e:40:2f:a9:2c:f4:03:c2:0a:e6:bd:36:07:2f:ae:38:60:2e: 1b:56:7a:fe:65:9a:27:76:dd:bd:ba:50:80:63:d6:fc:c0:b4: 49:8f:31:22:0c:08:64:80:36:5a:0d:5f:60:87:95:21:71:4e: f4:6d:ca:c7:6b:22:6c:4e:d0:ca:2c:0d:49:da:66:9d:be:fa: 03:d6:d7:bc:59:5e:ed:f7:34:c7:82:10:e9:4f:f0:ec:fc:2a: c0:46:d2:79:cb:ba:ef:b5:b8:a7:5a:cb:d2:1e:0b:40:ad:05: c4:97:96:be:b6:24:88:d8:1a:19:49:f7:ea:f3:ec:4e:6a:58: c2:1a:d2:66:7f:8a:c1:d6:36:a5:88:5e:f9:a1:f1:76:05:99: 19:01:b3:8d:74:4b:5d:53:d4:bd:eb:a2:a1:13:f7:33:d2:f2: 56:a6:d1:9f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUHS+G42FFf6Lh78aLm6oNEYCksAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMThaFw0yNzA5MTYwNTQ2MThaMDMxMTAvBgNV BAMTKDNGMDZGQjk5MTZEMTUyRDI5MTk4RjI1NjU0M0EyNzIxODdEQzM1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmelYGjkVEHFssDWKmls290FAJ zzBxejUEhdIoND9jVSPhPUIGrB+JD8eHsjt2LOdB8/xTIk8WIY1DuliFhw2peiTF cG5ygUaVQB8iBLwk0C1OguZC5vS7IbKHifen9y4l8q3FYWAd5i+8ieVv4PeaQ/Rr LGlbFAPBcfkEUX1u/2zKGQdZZmrrZr1n6g19J8gAfanYJXRWMTi7J5dmG1KQtLb9 68Zykib7d+DcmaK57KfY64xRKTrCEqosvSxXYbY6j8x3E2xz+01dChiU8MEpKRFV ouNeuF/NNQgCDNsxECsNu6RxNb4eO4upc8E/FKVORs42Z3M7ti4cBHT0I34/AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUPwb7mRbRUtKRmPJWVDonIYfcNf0wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzcz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAL0MgTANBgkqhkiG9w0BAQsFAAOCAQEAAlfZeyli+BdRXmVh Lj0UIjw98JUCm5bpZcd2TeOvNF5sCfDXtxkdhn1kzmh8t/wQjFrvOkVslCMybj0P uj/S1gg1B0IKQ/Er5GdC6IBQIU7/d5fvY73myh3xbkAvqSz0A8IK5r02By+uOGAu G1Z6/mWaJ3bdvbpQgGPW/MC0SY8xIgwIZIA2Wg1fYIeVIXFO9G3Kx2sibE7QyiwN Sdpmnb76A9bXvFle7fc0x4IQ6U/w7PwqwEbSecu677W4p1rL0h4LQK0FxJeWvrYk iNgaGUn36vPsTmpYwhrSZn+KwdY2pYhe+aHxdgWZGQGzjXRLXVPUveuioRP3M9Ly VqbRnw== -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:54 2026 by rpki-client