$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133302e302f32342d3234203d3e20383334.roa File: 3138392e31322e3133302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: tvIYhRWC0kudleL/w1hHQal/KO4HiZnxWLP7PEzwJgw= Subject key identifier: 1F:6F:2C:C5:11:15:46:95:63:68:E7:F7:55:D8:F2:D0:45:2A:D8:D6 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2E1B43CBA3373ECB015A535656CCE4F78F5CB017 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133302e302f32342d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:06 +0000 ROA not before: Thu 17 Sep 2026 05:41:06 +0000 ROA not after: Thu 16 Sep 2027 05:46:06 +0000 asID: 834 IP address blocks: 189.12.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1b:43:cb:a3:37:3e:cb:01:5a:53:56:56:cc:e4:f7:8f:5c:b0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:06 2026 GMT Not After : Sep 16 05:46:06 2027 GMT Subject: CN=1F6F2CC5111546956368E7F755D8F2D0452AD8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:61:38:5b:29:90:b0:b4:96:71:0e:39:59: 1c:8e:22:c3:51:f0:cc:f6:ea:35:21:fc:20:2a:9b: 30:a8:b1:1d:6a:a4:08:05:2a:c8:e8:20:fe:70:d8: 5a:8e:e0:fd:cd:fb:8b:93:4e:5b:58:a9:45:4a:66: b0:16:0d:2e:92:dc:86:0c:16:63:fb:d1:a9:a1:09: fc:47:5f:e8:51:23:e0:82:5b:d0:75:21:21:39:8d: ae:9c:4a:92:f4:a2:57:0e:d2:f9:39:01:d8:4f:11: 50:2e:14:2f:a2:2c:26:64:88:0d:fe:e9:db:5b:93: e9:b2:ca:5a:69:30:b8:bb:81:6f:70:03:b5:93:aa: a3:3f:76:80:a9:82:ca:04:48:2a:e4:4a:40:f2:6a: 25:91:2a:61:7d:7b:d9:0e:36:49:58:d6:f7:16:91: 78:f2:3e:4f:4d:6e:92:6c:87:38:62:86:c7:1b:0a: 8b:41:ac:4b:41:e3:64:2c:0d:2c:66:70:77:50:1e: 70:d4:59:00:a4:e8:4e:ed:19:ab:2b:fc:bf:f1:be: 4b:8f:07:05:a0:c1:1d:d5:13:95:0a:31:7f:a6:57: 3d:54:8b:89:e5:fd:10:93:70:c8:6d:1b:4f:7d:c4: 76:c2:5f:44:08:06:41:21:0c:7d:34:66:12:02:2a: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6F:2C:C5:11:15:46:95:63:68:E7:F7:55:D8:F2:D0:45:2A:D8:D6 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.130.0/24 Signature Algorithm: sha256WithRSAEncryption 63:94:9a:96:18:af:43:c0:0d:6a:46:32:c8:67:5e:2f:2b:38: 7d:b5:5f:5a:77:10:52:d0:b8:ce:b7:8e:cb:1d:22:fa:f7:8a: 32:11:39:4c:64:a3:5d:a7:5d:d2:da:74:0b:b8:66:bc:2c:dd: 12:ed:98:b9:68:c2:89:b3:86:21:d4:4b:64:c9:e1:52:93:40: ae:6d:89:d9:66:c3:c3:77:13:b0:4d:65:8e:1a:a8:60:ea:9e: f6:70:34:2d:a8:c2:75:de:17:19:20:54:99:7f:68:d5:d3:ae: 7b:9c:ca:3e:fa:c2:1b:7c:8b:09:52:85:61:71:6e:13:ec:7b: 55:5d:af:d4:30:5a:84:cb:32:36:0d:b4:45:b3:47:06:61:96: e1:e0:e8:b0:64:ef:85:3d:a1:8a:76:61:9f:15:fe:d7:e6:9b: c1:f6:b0:36:0e:db:35:9d:6c:95:fd:b8:52:df:8c:ae:64:8b: bd:01:b9:bd:ed:17:e5:2d:7e:2f:b0:65:45:a7:59:e8:db:6a: 91:b5:33:89:6f:a3:f0:04:42:e2:e9:b3:c3:5c:db:08:5d:22: 9c:4f:6c:1a:1c:6e:89:b2:f7:43:e3:e3:47:4a:7e:8b:94:b2: 83:cf:f9:84:9e:6e:61:e9:c1:33:91:25:d7:76:49:77:b8:55: ce:cd:62:32 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIULhtDy6M3PssBWlNWVszk949csBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDZaFw0yNzA5MTYwNTQ2MDZaMDMxMTAvBgNV BAMTKDFGNkYyQ0M1MTExNTQ2OTU2MzY4RTdGNzU1RDhGMkQwNDUyQUQ4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQGE4WymQsLSWcQ45WRyOIsNR 8Mz26jUh/CAqmzCosR1qpAgFKsjoIP5w2FqO4P3N+4uTTltYqUVKZrAWDS6S3IYM FmP70amhCfxHX+hRI+CCW9B1ISE5ja6cSpL0olcO0vk5AdhPEVAuFC+iLCZkiA3+ 6dtbk+myylppMLi7gW9wA7WTqqM/doCpgsoESCrkSkDyaiWRKmF9e9kONklY1vcW kXjyPk9NbpJshzhihscbCotBrEtB42QsDSxmcHdQHnDUWQCk6E7tGasr/L/xvkuP BwWgwR3VE5UKMX+mVz1Ui4nl/RCTcMhtG099xHbCX0QIBkEhDH00ZhICKvsHAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUH28sxREVRpVjaOf3Vdjy0EUq2NYwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAL0MgjANBgkqhkiG9w0BAQsFAAOCAQEAY5SalhivQ8ANakYyyGdeLys4 fbVfWncQUtC4zreOyx0i+veKMhE5TGSjXadd0tp0C7hmvCzdEu2YuWjCibOGIdRL ZMnhUpNArm2J2WbDw3cTsE1ljhqoYOqe9nA0LajCdd4XGSBUmX9o1dOue5zKPvrC G3yLCVKFYXFuE+x7VV2v1DBahMsyNg20RbNHBmGW4eDosGTvhT2hinZhnxX+1+ab wfawNg7bNZ1slf24Ut+MrmSLvQG5ve0X5S1+L7BlRadZ6NtqkbUziW+j8ARC4umz w1zbCF0inE9sGhxuibL3Q+PjR0p+i5Syg8/5hJ5uYenBM5El13ZJd7hVzs1iMg== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:40 2026 by rpki-client