$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133342e302f32332d3234203d3e20383334.roa File: 3138392e31322e3133342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: PzHqb0y49k6Tq8ufPqIPJUQS51aYBzoAOJMyRM5FDYo= Subject key identifier: 0D:81:FB:99:6A:91:DF:50:21:DA:22:00:79:71:34:9A:4E:4E:6C:F8 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3888FB65659613765866C445D5AB575009292D68 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133342e302f32332d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:19 +0000 ROA not before: Thu 17 Sep 2026 05:41:19 +0000 ROA not after: Thu 16 Sep 2027 05:46:19 +0000 asID: 834 IP address blocks: 189.12.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:88:fb:65:65:96:13:76:58:66:c4:45:d5:ab:57:50:09:29:2d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:19 2026 GMT Not After : Sep 16 05:46:19 2027 GMT Subject: CN=0D81FB996A91DF5021DA22007971349A4E4E6CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:1b:0d:2c:93:ad:e6:17:d5:0d:88:d4:f8: 8b:04:e5:55:71:c4:ca:a7:ba:68:93:ef:59:88:2e: dc:01:0d:9b:bb:f3:e2:ea:3f:45:0e:24:73:97:38: 97:3f:6f:f1:6a:d0:a5:01:4c:9b:b2:2c:53:77:ef: 83:16:46:92:09:fa:c4:c3:5f:af:ca:c8:a0:ee:2e: 51:0f:81:67:34:96:ae:9a:fd:0e:40:9e:09:ec:d5: ab:41:3e:68:3b:97:b0:3a:2d:c5:02:97:2a:bd:6f: f5:dd:d9:e8:ca:e0:1d:1f:b2:06:ef:f8:f6:c8:29: 27:1f:3d:9f:28:53:87:9e:dd:4e:8e:d0:05:93:a0: 56:4c:f5:c5:25:78:b7:2e:e6:fa:ba:87:33:d4:71: d9:08:c7:d8:72:65:b8:a2:7d:02:ec:59:9f:ff:43: ea:a9:6c:bf:d8:49:f6:a0:c1:de:e7:6e:4a:d5:3f: 99:f0:55:c8:9e:eb:ec:0d:a3:ab:57:00:b8:90:35: b2:6c:f7:17:87:e8:c9:4f:c5:88:c5:60:80:b7:ae: 7a:6b:1d:7b:24:4f:f2:30:9f:cf:b0:42:75:09:d2: 24:de:f0:ab:92:69:2e:4f:ab:22:ff:ce:60:99:3d: de:f6:36:9d:69:b4:4e:ee:1b:d7:76:0e:38:5d:a2: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:81:FB:99:6A:91:DF:50:21:DA:22:00:79:71:34:9A:4E:4E:6C:F8 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.134.0/23 Signature Algorithm: sha256WithRSAEncryption 67:3e:98:0c:49:45:b4:53:7d:4a:31:4d:fc:71:90:bc:0c:3e: 62:65:25:84:a5:6e:a5:d8:4c:9c:ac:5d:6a:05:4f:ff:d3:be: 07:56:ca:02:0a:2a:09:37:f4:55:5f:bc:7a:56:ba:00:77:5a: 26:dc:7b:77:e3:05:f8:ec:03:10:92:88:24:ab:7e:a1:7b:49: 23:70:3b:52:74:2c:67:31:7a:17:49:64:f7:ea:3b:e3:85:0f: b7:33:dd:29:6a:7e:28:4d:d2:25:01:0f:36:c9:36:0c:41:33: e1:55:15:c4:b7:6e:77:ef:0b:16:4b:d8:0d:e7:3d:50:7f:9f: 22:46:e7:af:e7:20:f7:9b:7e:60:b5:f4:52:c3:95:cc:b0:ed: 5d:a5:05:47:87:e4:62:e9:94:81:03:a9:26:71:ff:f7:1b:93: 8a:3a:0b:79:46:78:fc:6f:14:61:0a:62:ee:b9:92:d9:1c:10: e4:2a:05:43:27:82:67:b2:25:93:07:ea:02:24:9d:64:13:ee: 84:d7:85:d1:2f:6b:84:8f:d9:ce:ae:1b:bc:4f:db:b1:29:e5: 19:8d:90:74:76:a3:e1:6e:c0:be:8c:85:cf:66:1b:b1:21:bf: 0c:b2:93:2e:f1:0e:42:10:da:52:30:2a:3c:59:2a:75:92:1c: 1f:29:23:39 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUOIj7ZWWWE3ZYZsRF1atXUAkpLWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTlaFw0yNzA5MTYwNTQ2MTlaMDMxMTAvBgNV BAMTKDBEODFGQjk5NkE5MURGNTAyMURBMjIwMDc5NzEzNDlBNEU0RTZDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtIxsNLJOt5hfVDYjU+IsE5VVx xMqnumiT71mILtwBDZu78+LqP0UOJHOXOJc/b/Fq0KUBTJuyLFN374MWRpIJ+sTD X6/KyKDuLlEPgWc0lq6a/Q5Angns1atBPmg7l7A6LcUClyq9b/Xd2ejK4B0fsgbv +PbIKScfPZ8oU4ee3U6O0AWToFZM9cUleLcu5vq6hzPUcdkIx9hyZbiifQLsWZ// Q+qpbL/YSfagwd7nbkrVP5nwVcie6+wNo6tXALiQNbJs9xeH6MlPxYjFYIC3rnpr HXskT/Iwn8+wQnUJ0iTe8KuSaS5PqyL/zmCZPd72Np1ptE7uG9d2DjhdoijDAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUDYH7mWqR31Ah2iIAeXE0mk5ObPgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzMzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAb0MhjANBgkqhkiG9w0BAQsFAAOCAQEAZz6YDElFtFN9SjFN/HGQvAw+ YmUlhKVupdhMnKxdagVP/9O+B1bKAgoqCTf0VV+8ela6AHdaJtx7d+MF+OwDEJKI JKt+oXtJI3A7UnQsZzF6F0lk9+o744UPtzPdKWp+KE3SJQEPNsk2DEEz4VUVxLdu d+8LFkvYDec9UH+fIkbnr+cg95t+YLX0UsOVzLDtXaUFR4fkYumUgQOpJnH/9xuT ijoLeUZ4/G8UYQpi7rmS2RwQ5CoFQyeCZ7IlkwfqAiSdZBPuhNeF0S9rhI/Zzq4b vE/bsSnlGY2QdHaj4W7AvoyFz2YbsSG/DLKTLvEOQhDaUjAqPFkqdZIcHykjOQ== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:06 2026 by rpki-client