$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133362e302f32312d3234203d3e20383334.roa File: 3138392e31322e3133362e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: 0WQxbGDWJ6DBcciaWsNNURsae2DZq39Fo/SIVQ6Yd6w= Subject key identifier: 76:37:99:73:0F:15:5B:B9:C5:96:BA:51:37:F8:C3:26:65:A4:E3:25 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 68A0A98E7EC5CACD5E94EE2136329C4748EDED7C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133362e302f32312d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:12 +0000 ROA not before: Thu 17 Sep 2026 05:41:12 +0000 ROA not after: Thu 16 Sep 2027 05:46:12 +0000 asID: 834 IP address blocks: 189.12.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a0:a9:8e:7e:c5:ca:cd:5e:94:ee:21:36:32:9c:47:48:ed:ed:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:12 2026 GMT Not After : Sep 16 05:46:12 2027 GMT Subject: CN=763799730F155BB9C596BA5137F8C32665A4E325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:dc:c6:b5:d4:01:1f:2e:3e:68:93:20:5d: 38:ba:94:94:fe:16:c5:23:2d:5b:62:ec:d7:d0:3d: 95:57:a6:f1:26:d0:a9:37:83:0b:85:72:9b:2e:d0: 78:7f:f2:71:f1:fb:8c:cc:48:1b:a6:dc:0e:42:be: 6f:ef:73:49:24:34:56:31:cb:75:93:71:01:49:a4: a5:7b:af:4d:37:0a:a9:88:c2:b9:82:5f:29:fb:ab: de:65:93:ef:a8:8a:1c:a9:bd:60:68:f5:42:2d:e1: 1e:61:40:6e:28:59:51:a2:fa:dd:f6:b8:d0:e6:77: ed:1e:73:74:cd:07:65:c7:5a:3b:e9:d4:3a:0a:d7: af:3a:60:13:23:41:b3:db:d6:b5:a1:8c:c3:cf:63: 0f:18:05:dc:df:39:a9:0a:51:b0:25:bc:41:44:79: a8:76:3e:d4:32:4b:a7:4a:79:21:bd:9f:47:d3:da: 6b:3f:93:43:cc:4e:9a:c3:8a:95:21:b9:61:29:07: bf:c3:c0:c6:b4:f3:67:bb:50:cb:94:a5:38:00:0c: 3f:40:05:c4:c9:e9:bd:5b:22:54:fd:f6:99:a7:44: 02:1a:cc:8d:5f:33:0c:e6:b7:ba:89:1a:4c:29:e9: b9:35:1c:df:7d:9b:e0:b2:16:eb:d2:68:a9:bf:20: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:37:99:73:0F:15:5B:B9:C5:96:BA:51:37:F8:C3:26:65:A4:E3:25 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3133362e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.136.0/21 Signature Algorithm: sha256WithRSAEncryption 00:03:ab:fa:49:17:af:fd:d6:8c:30:77:3d:f8:8a:bf:43:7b: d7:d4:6a:59:f1:bc:47:3c:32:ec:d6:c1:7f:d0:94:5b:1a:6d: f9:69:5f:d6:6d:38:dd:2c:42:f3:77:96:1f:90:6a:f7:4e:d7: 46:2a:8b:04:d8:34:80:ba:a2:d0:e7:f8:96:7f:c5:49:70:52: 1a:d7:9a:3a:16:47:72:f8:8b:15:3e:a1:13:9d:3f:64:26:e7: ba:84:27:72:90:fc:37:69:1c:d2:10:f4:2e:d7:43:3e:c8:a6: 79:ad:17:c1:05:34:d9:93:56:bd:28:1f:bf:76:d5:b4:76:e1: 9b:17:33:a5:69:f6:5f:1f:f3:bb:2d:f6:92:7c:20:cb:3f:ee: 84:5d:e3:95:41:bd:f1:e7:21:ff:42:9f:b0:b7:01:d2:d8:23: ac:5d:60:80:5f:d4:f8:cd:ae:6a:15:9d:87:1b:0f:ea:51:d9: 06:3e:c4:15:4d:80:83:52:08:59:f0:87:90:93:d0:a5:75:30: 14:3f:ac:59:46:fc:ad:ca:da:bf:46:5b:00:07:ef:46:5d:ff: c6:24:68:c4:c5:29:62:12:87:05:bf:24:dd:92:9d:7a:27:e9: d2:28:e0:0c:50:51:56:16:a5:2a:53:53:14:31:ec:98:e3:59: 68:4d:25:82 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUaKCpjn7Fys1elO4hNjKcR0jt7XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTJaFw0yNzA5MTYwNTQ2MTJaMDMxMTAvBgNV BAMTKDc2Mzc5OTczMEYxNTVCQjlDNTk2QkE1MTM3RjhDMzI2NjVBNEUzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN99zGtdQBHy4+aJMgXTi6lJT+ FsUjLVti7NfQPZVXpvEm0Kk3gwuFcpsu0Hh/8nHx+4zMSBum3A5Cvm/vc0kkNFYx y3WTcQFJpKV7r003CqmIwrmCXyn7q95lk++oihypvWBo9UIt4R5hQG4oWVGi+t32 uNDmd+0ec3TNB2XHWjvp1DoK1686YBMjQbPb1rWhjMPPYw8YBdzfOakKUbAlvEFE eah2PtQyS6dKeSG9n0fT2ms/k0PMTprDipUhuWEpB7/DwMa082e7UMuUpTgADD9A BcTJ6b1bIlT99pmnRAIazI1fMwzmt7qJGkwp6bk1HN99m+CyFuvSaKm/II8lAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUdjeZcw8VW7nFlrpRN/jDJmWk4yUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzMzNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA70MiDANBgkqhkiG9w0BAQsFAAOCAQEAAAOr+kkXr/3WjDB3PfiKv0N7 19RqWfG8Rzwy7NbBf9CUWxpt+Wlf1m043SxC83eWH5Bq907XRiqLBNg0gLqi0Of4 ln/FSXBSGteaOhZHcviLFT6hE50/ZCbnuoQncpD8N2kc0hD0LtdDPsimea0XwQU0 2ZNWvSgfv3bVtHbhmxczpWn2Xx/zuy32knwgyz/uhF3jlUG98ech/0KfsLcB0tgj rF1ggF/U+M2uahWdhxsP6lHZBj7EFU2Ag1IIWfCHkJPQpXUwFD+sWUb8rcrav0Zb AAfvRl3/xiRoxMUpYhKHBb8k3ZKdeifp0ijgDFBRVhalKlNTFDHsmONZaE0lgg== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:31 2026 by rpki-client