$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133332e302f32342d3234203d3e20383334.roa File: 3138392e31322e3133332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: pWWAkxCWIDG/OJqZ5OFIfELi5ncqysfT2bYEuUkcydw= Subject key identifier: A3:F3:D9:3F:62:2D:2D:A2:6E:FA:2E:31:1C:42:A6:BD:CA:2E:A9:CB Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5B9F76082DCC80B07294135CA14CA90469BBD6D8 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133332e302f32342d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:17 +0000 ROA not before: Thu 17 Sep 2026 05:41:17 +0000 ROA not after: Thu 16 Sep 2027 05:46:17 +0000 asID: 834 IP address blocks: 189.12.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9f:76:08:2d:cc:80:b0:72:94:13:5c:a1:4c:a9:04:69:bb:d6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:17 2026 GMT Not After : Sep 16 05:46:17 2027 GMT Subject: CN=A3F3D93F622D2DA26EFA2E311C42A6BDCA2EA9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:a9:72:a3:bd:a9:4c:f8:25:76:7d:06:d1: f6:ce:66:aa:2c:a8:fb:a1:83:cb:4c:89:cb:5d:84: 0c:a4:e0:7c:e6:5a:49:d7:08:b4:ba:c6:8e:d4:8d: 08:ae:c2:0b:1e:d3:90:c6:09:3c:ab:8f:a8:ec:2d: ee:f3:61:11:e5:c8:53:1f:aa:13:74:9e:f8:99:04: 67:0c:14:33:92:d1:d9:4a:84:f2:46:b5:39:42:a8: 09:e7:56:e0:56:3f:63:8a:ea:44:73:e5:6b:1c:f2: 1f:3a:95:8f:22:ec:0b:b7:ec:94:3c:9b:0a:53:53: b0:8e:20:f6:c3:ed:14:1a:77:3d:47:32:71:b4:0d: 3e:60:79:3a:96:93:88:9a:28:37:24:70:9f:00:d5: e7:50:e1:78:62:f8:02:2f:98:62:57:d0:c0:3e:77: 8b:38:47:44:06:d2:f9:a6:c4:4d:59:78:fe:32:87: 96:6b:b2:7e:30:44:1a:d0:7b:80:cc:b9:26:b3:82: 04:73:5a:89:c4:92:7c:c7:26:91:5e:5c:e1:a3:f3: bc:12:52:82:a8:91:39:c2:c8:b7:97:e4:ec:f6:f8: d7:56:f9:eb:e0:58:78:8f:97:c3:95:c6:1f:ec:8d: 3b:b1:f8:01:05:5b:93:15:ff:96:43:b3:d1:05:3a: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F3:D9:3F:62:2D:2D:A2:6E:FA:2E:31:1C:42:A6:BD:CA:2E:A9:CB X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.133.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:74:7f:b6:7e:d7:4a:67:d3:60:71:8c:2b:4f:31:5b:99:c3: 6f:57:e2:69:c2:87:60:94:f8:53:cd:d6:76:78:52:d3:ef:ab: 2c:41:16:7a:d0:fb:c6:e8:ea:56:6b:6e:f5:45:c2:88:62:67: e7:cc:cc:d2:6a:47:bf:ea:d0:a9:21:e6:eb:4d:71:6c:42:f2: bf:c3:e4:45:39:b7:ac:5c:01:be:0d:f5:64:13:63:89:ae:5b: 00:53:c2:52:b2:11:18:f8:dd:88:7f:70:af:2a:ed:a7:6a:38: 30:bc:07:61:8e:94:11:4e:f4:eb:59:ca:77:cd:87:35:cf:a9: a3:3c:02:11:b0:95:de:0c:59:bf:f3:ee:13:11:83:e3:ea:29: 8d:f3:92:9c:ca:c8:e0:a3:be:c7:08:2a:b6:b9:2c:09:ca:be: 2f:9e:88:71:4e:97:0e:aa:5f:ae:d1:f4:3f:08:cd:14:4f:7d: 6e:15:7e:7f:4f:a8:bc:8f:2f:a7:3d:96:48:43:e8:bf:2f:4e: 50:ad:d9:b6:95:26:2f:06:bc:a2:f9:ca:5e:5d:7c:e4:ba:59: 98:36:81:7b:d8:5a:da:53:71:a1:c9:35:12:85:75:7f:08:f3: 18:60:a9:29:a6:e4:bd:81:8c:87:5e:eb:f0:e3:c2:83:eb:7c: c8:0a:42:ff -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUW592CC3MgLBylBNcoUypBGm71tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTdaFw0yNzA5MTYwNTQ2MTdaMDMxMTAvBgNV BAMTKEEzRjNEOTNGNjIyRDJEQTI2RUZBMkUzMTFDNDJBNkJEQ0EyRUE5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi8qlyo72pTPgldn0G0fbOZqos qPuhg8tMictdhAyk4HzmWknXCLS6xo7UjQiuwgse05DGCTyrj6jsLe7zYRHlyFMf qhN0nviZBGcMFDOS0dlKhPJGtTlCqAnnVuBWP2OK6kRz5Wsc8h86lY8i7Au37JQ8 mwpTU7COIPbD7RQadz1HMnG0DT5geTqWk4iaKDckcJ8A1edQ4Xhi+AIvmGJX0MA+ d4s4R0QG0vmmxE1ZeP4yh5Zrsn4wRBrQe4DMuSazggRzWonEknzHJpFeXOGj87wS UoKokTnCyLeX5Oz2+NdW+evgWHiPl8OVxh/sjTux+AEFW5MV/5ZDs9EFOrE3AgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUo/PZP2ItLaJu+i4xHEKmvcouqcswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAL0MhTANBgkqhkiG9w0BAQsFAAOCAQEAHnR/tn7XSmfTYHGMK08xW5nD b1fiacKHYJT4U83WdnhS0++rLEEWetD7xujqVmtu9UXCiGJn58zM0mpHv+rQqSHm 601xbELyv8PkRTm3rFwBvg31ZBNjia5bAFPCUrIRGPjdiH9wryrtp2o4MLwHYY6U EU7061nKd82HNc+pozwCEbCV3gxZv/PuExGD4+opjfOSnMrI4KO+xwgqtrksCcq+ L56IcU6XDqpfrtH0PwjNFE99bhV+f0+ovI8vpz2WSEPovy9OUK3ZtpUmLwa8ovnK Xl185LpZmDaBe9ha2lNxock1EoV1fwjzGGCpKabkvYGMh17r8OPCg+t8yApC/w== -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:06 2026 by rpki-client