$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134342e302f32332d3234203d3e20383334.roa File: 3138392e31322e3134342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: qGiNcXNF6O0p8yzeu5cnwu1/Bz53wOGnLs8gWEfehnU= Subject key identifier: 06:BF:B6:C2:99:C5:18:1C:22:E3:86:D2:32:F2:BB:8D:99:2D:80:43 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 559397C6789E8BE86E13BA3E810BD18BDC04F482 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134342e302f32332d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:13 +0000 ROA not before: Thu 17 Sep 2026 05:41:13 +0000 ROA not after: Thu 16 Sep 2027 05:46:13 +0000 asID: 834 IP address blocks: 189.12.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:93:97:c6:78:9e:8b:e8:6e:13:ba:3e:81:0b:d1:8b:dc:04:f4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:13 2026 GMT Not After : Sep 16 05:46:13 2027 GMT Subject: CN=06BFB6C299C5181C22E386D232F2BB8D992D8043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:19:67:1f:4f:08:a8:95:a7:ab:46:9d:48: 52:2c:c3:97:d7:94:42:30:ef:d7:34:d4:6a:0f:c7: 52:a8:47:5d:64:e5:76:af:16:09:d7:3b:c2:8b:59: c9:8d:c5:c1:36:5a:47:a2:c2:5c:4f:1c:9c:4f:c3: 2a:d5:b8:ab:a2:d8:13:bf:c8:fa:cd:55:91:92:5f: a5:fa:33:af:4d:60:e8:74:8c:da:4b:26:c3:c9:da: d0:0d:26:3c:3f:37:df:6c:4c:8f:40:02:ad:fe:eb: 96:3a:fc:88:d3:67:fb:f6:fc:5d:5b:fd:48:7e:e7: 83:26:dd:25:7b:43:a9:da:b2:5c:cd:06:3c:b8:63: ff:bf:cb:47:e0:ca:17:96:42:91:d2:4e:b0:8d:ab: ce:03:8f:4f:09:e2:84:6d:c2:53:30:98:ed:f8:cd: 1a:41:1a:88:8c:bf:27:bf:71:85:35:9d:65:c9:20: c1:99:ad:fe:c1:e3:82:81:70:5d:c1:9e:33:bb:b9: d9:99:5b:76:bf:37:a0:90:e1:5e:fd:50:d6:03:b5: cc:df:40:bf:08:37:cc:63:05:c6:f4:1c:a7:10:4a: 3b:0d:92:61:0a:04:2a:b6:b8:40:1e:50:6b:90:e1: 5e:f2:b4:a5:33:5f:4f:6c:e6:ac:a7:5c:1e:0a:93: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BF:B6:C2:99:C5:18:1C:22:E3:86:D2:32:F2:BB:8D:99:2D:80:43 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.144.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:7a:b4:60:15:82:e3:60:55:fc:60:b8:b9:46:4b:e3:79:d1: c3:30:8d:78:76:cc:08:01:f5:33:78:35:e6:b1:75:90:50:8a: c6:46:91:f1:b7:f3:7b:d8:36:16:01:8d:c2:db:91:0d:3a:3e: 3d:ac:6b:c5:6a:3c:fa:81:bb:c5:6e:05:1a:9a:e0:18:1d:88: fc:ac:0c:fa:3c:94:93:a0:49:7a:9b:81:bb:22:92:61:d6:ae: 8d:77:ed:87:5a:72:1a:e3:48:25:03:df:45:97:d0:55:e5:7c: ea:4b:33:73:93:7d:64:e7:ff:12:03:d6:16:a0:18:da:3f:98: 97:6e:4e:cb:8f:d7:97:d3:42:40:d0:e0:b3:67:cb:57:05:56: 1e:ac:ac:52:26:ab:f8:d7:d0:fd:6f:cb:00:26:b4:46:a5:69: b3:17:0b:a1:a8:31:e9:0b:4b:98:a1:07:ae:92:1e:a6:97:92: 14:f7:f8:c0:4e:24:f2:5d:75:4a:b7:f2:7f:5d:e2:6e:ed:5e: d3:71:4c:31:88:59:95:c8:bd:56:3b:99:27:39:7a:9d:31:f0: 76:56:f2:8a:bc:a9:be:3f:d3:49:63:2d:46:59:b4:82:17:05: 84:28:7e:dc:60:f2:0d:3c:1a:05:bd:62:a6:e2:b0:f1:00:99: 0c:f9:9e:92 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUVZOXxniei+huE7o+gQvRi9wE9IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTNaFw0yNzA5MTYwNTQ2MTNaMDMxMTAvBgNV BAMTKDA2QkZCNkMyOTlDNTE4MUMyMkUzODZEMjMyRjJCQjhEOTkyRDgwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTVhlnH08IqJWnq0adSFIsw5fX lEIw79c01GoPx1KoR11k5XavFgnXO8KLWcmNxcE2WkeiwlxPHJxPwyrVuKui2BO/ yPrNVZGSX6X6M69NYOh0jNpLJsPJ2tANJjw/N99sTI9AAq3+65Y6/IjTZ/v2/F1b /Uh+54Mm3SV7Q6naslzNBjy4Y/+/y0fgyheWQpHSTrCNq84Dj08J4oRtwlMwmO34 zRpBGoiMvye/cYU1nWXJIMGZrf7B44KBcF3BnjO7udmZW3a/N6CQ4V79UNYDtczf QL8IN8xjBcb0HKcQSjsNkmEKBCq2uEAeUGuQ4V7ytKUzX09s5qynXB4Kk9UhAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUBr+2wpnFGBwi44bSMvK7jZktgEMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAb0MkDANBgkqhkiG9w0BAQsFAAOCAQEAmnq0YBWC42BV/GC4uUZL43nR wzCNeHbMCAH1M3g15rF1kFCKxkaR8bfze9g2FgGNwtuRDTo+PaxrxWo8+oG7xW4F GprgGB2I/KwM+jyUk6BJepuBuyKSYdaujXfth1pyGuNIJQPfRZfQVeV86kszc5N9 ZOf/EgPWFqAY2j+Yl25Oy4/Xl9NCQNDgs2fLVwVWHqysUiar+NfQ/W/LACa0RqVp sxcLoagx6QtLmKEHrpIeppeSFPf4wE4k8l11Srfyf13ibu1e03FMMYhZlci9VjuZ Jzl6nTHwdlbyirypvj/TSWMtRlm0ghcFhCh+3GDyDTwaBb1ipuKw8QCZDPmekg== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:37 2026 by rpki-client