$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa File: 3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: qlVjLyek5D1XbAAH6s7ahZCcUlSVZ+v7n2qkRlLabj0= Subject key identifier: 1E:77:DB:4A:A0:41:C5:E0:16:01:55:72:D0:84:9B:EB:89:66:EE:7B Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 703477D7D27AA46E8B38B09CA5C1DEF77F40709D Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:07 +0000 ROA not before: Thu 17 Sep 2026 05:41:07 +0000 ROA not after: Thu 16 Sep 2027 05:46:07 +0000 asID: 214483 IP address blocks: 189.12.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:34:77:d7:d2:7a:a4:6e:8b:38:b0:9c:a5:c1:de:f7:7f:40:70:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:07 2026 GMT Not After : Sep 16 05:46:07 2027 GMT Subject: CN=1E77DB4AA041C5E016015572D0849BEB8966EE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:99:07:58:32:5d:30:16:09:53:f5:4f:8d:c6: df:11:6d:5a:5a:1f:2c:f0:fd:cb:df:d9:73:55:18: fc:f2:22:41:19:7b:0c:62:be:c9:93:e1:6c:0b:ea: 5b:c5:6d:1f:a3:0e:53:27:57:a6:2e:ec:d3:cc:95: cd:77:5d:8c:de:e6:d6:0b:aa:74:38:30:02:65:78: fe:43:32:d1:ee:c2:7b:61:2a:af:6e:e5:1a:2f:95: 13:f6:68:e7:95:c2:b1:3d:d5:56:1a:a9:d8:da:ed: d0:a2:b7:52:42:44:60:43:c8:7e:f2:62:ce:68:18: 39:d8:ce:73:4a:3f:0c:90:28:c0:7f:05:8d:69:9c: f0:e8:5d:71:de:70:86:d9:2a:4d:d3:99:aa:2d:60: d9:a8:a5:56:11:23:08:23:f8:a2:22:40:7a:ca:ff: 5a:8a:68:f6:d2:c9:56:ef:a7:c1:cc:4a:dd:0f:7a: 6f:08:7a:34:0c:1f:0f:b1:4d:85:7e:d7:bb:15:03: fd:da:93:fc:cd:47:bc:d2:ae:ad:cb:0e:68:e8:1e: af:9c:d5:a7:c5:68:4a:57:a4:81:f5:fb:bb:8b:8f: 03:cd:44:c4:e4:ab:a4:8a:0e:a3:61:8f:b0:17:0e: 7e:d0:c9:d3:e5:66:79:6b:d3:ca:26:6c:d8:38:63: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:77:DB:4A:A0:41:C5:E0:16:01:55:72:D0:84:9B:EB:89:66:EE:7B X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.146.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c0:33:02:12:25:d6:62:09:78:a9:a8:41:a6:ea:14:5a:45: a7:24:59:8b:75:63:f8:ef:c3:2e:8b:32:7b:79:bb:d5:cf:b9: ea:61:f3:00:b5:fa:dd:40:2f:c8:f2:f2:5a:cf:d2:c3:62:84: 81:c1:da:e6:cf:7f:ba:07:b1:27:d9:41:9f:4f:66:16:2e:43: 0f:31:c5:4a:97:e8:69:17:52:ab:51:c5:8e:31:53:17:2a:69: b1:02:2b:56:a0:5c:6c:d7:4a:40:a2:e3:bd:97:ac:84:97:f8: fa:43:e8:27:c2:df:af:5c:1d:eb:71:b7:57:f8:01:a4:47:81: 23:a9:3f:8d:50:d5:bb:54:4b:98:cc:80:07:48:5a:b3:04:1e: 7f:9d:46:fb:f3:88:41:82:2f:5c:d0:21:0b:2e:30:c8:a4:e1: 53:90:69:75:a6:70:7e:3c:01:2b:c9:0f:4a:82:7c:52:8e:ba: 5d:2a:c8:5b:16:93:2b:db:ea:60:e4:8e:78:12:2a:39:83:f8: 33:f1:92:51:51:0e:c8:2c:f8:fb:da:73:e7:63:28:7b:4e:bb: 8a:91:64:84:95:d3:3a:3d:44:74:e2:6c:e8:f1:0d:38:7d:8a: 73:a8:dd:8d:3e:d9:e0:69:0b:36:27:83:d7:d8:d5:83:f5:f5: 43:63:e9:85 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUcDR319J6pG6LOLCcpcHe939AcJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDdaFw0yNzA5MTYwNTQ2MDdaMDMxMTAvBgNV BAMTKDFFNzdEQjRBQTA0MUM1RTAxNjAxNTU3MkQwODQ5QkVCODk2NkVFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxmQdYMl0wFglT9U+Nxt8RbVpa Hyzw/cvf2XNVGPzyIkEZewxivsmT4WwL6lvFbR+jDlMnV6Yu7NPMlc13XYze5tYL qnQ4MAJleP5DMtHuwnthKq9u5RovlRP2aOeVwrE91VYaqdja7dCit1JCRGBDyH7y Ys5oGDnYznNKPwyQKMB/BY1pnPDoXXHecIbZKk3TmaotYNmopVYRIwgj+KIiQHrK /1qKaPbSyVbvp8HMSt0Pem8IejQMHw+xTYV+17sVA/3ak/zNR7zSrq3LDmjoHq+c 1afFaEpXpIH1+7uLjwPNRMTkq6SKDqNhj7AXDn7QydPlZnlr08ombNg4Y9K1AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUHnfbSqBBxeAWAVVy0ISb64lm7nswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0Mzgz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAL0MkjANBgkqhkiG9w0BAQsFAAOCAQEABcAzAhIl1mIJeKmo QabqFFpFpyRZi3Vj+O/DLosye3m71c+56mHzALX63UAvyPLyWs/Sw2KEgcHa5s9/ ugexJ9lBn09mFi5DDzHFSpfoaRdSq1HFjjFTFyppsQIrVqBcbNdKQKLjvZeshJf4 +kPoJ8Lfr1wd63G3V/gBpEeBI6k/jVDVu1RLmMyAB0haswQef51G+/OIQYIvXNAh Cy4wyKThU5BpdaZwfjwBK8kPSoJ8Uo66XSrIWxaTK9vqYOSOeBIqOYP4M/GSUVEO yCz4+9pz52Moe067ipFkhJXTOj1EdOJs6PENOH2Kc6jdjT7Z4GkLNieD19jVg/X1 Q2PphQ== -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:28 2026 by rpki-client