$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134372e302f32342d3234203d3e20383334.roa File: 3138392e31322e3134372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: EIEKOA8p1ixQnLz1pN490Sa0YN0VXCwQoI9VvZA//yM= Subject key identifier: 5D:D6:53:90:50:10:61:FA:72:BC:8F:7B:D2:9E:75:42:17:49:2D:0C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3C9285200D82A9E1295E69CC797F653A8EDB079A Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134372e302f32342d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:15 +0000 ROA not before: Thu 17 Sep 2026 05:41:15 +0000 ROA not after: Thu 16 Sep 2027 05:46:15 +0000 asID: 834 IP address blocks: 189.12.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:92:85:20:0d:82:a9:e1:29:5e:69:cc:79:7f:65:3a:8e:db:07:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:15 2026 GMT Not After : Sep 16 05:46:15 2027 GMT Subject: CN=5DD65390501061FA72BC8F7BD29E754217492D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:2c:c7:21:03:98:7f:6f:4e:ce:ea:6b:96: 76:c8:3d:b8:04:bb:27:de:5f:a7:8e:89:26:02:34: 08:80:6b:2e:16:09:69:0f:55:93:49:35:5a:94:a7: f7:92:61:73:b1:e8:bc:f2:37:09:ac:75:58:a2:61: ff:1c:8e:09:76:23:0a:56:67:31:1a:9e:ae:c1:07: 5b:8f:f2:9b:2a:76:53:a3:ab:03:70:e1:b3:b1:03: 44:71:46:7b:1f:aa:7e:35:f8:95:39:b1:4e:48:12: 7d:e7:22:76:f0:93:68:b6:b7:b9:fb:77:10:aa:76: 01:85:cf:85:c1:e6:fb:80:79:8d:6b:2e:21:ca:f7: 32:c7:84:f7:a8:0a:02:fd:bf:f7:19:65:53:f1:5c: 97:c6:ac:f7:2b:b6:06:37:0d:2b:5f:55:bf:a6:8d: db:e6:35:3d:52:c9:a4:b8:f3:5d:e0:56:c3:ad:66: e4:a2:05:03:e1:b0:17:30:59:48:aa:4e:3d:cd:cb: 4b:52:6b:ce:a7:ba:9b:b0:a5:ca:2a:80:a5:f1:71: 04:d7:39:1d:13:f5:f9:86:05:1e:e0:79:f7:f0:ba: 92:5f:a7:82:76:78:7c:ff:db:87:70:63:a8:8b:8f: 20:72:db:b9:06:0b:03:ac:94:56:d0:af:44:dd:94: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D6:53:90:50:10:61:FA:72:BC:8F:7B:D2:9E:75:42:17:49:2D:0C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.147.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:6f:97:f4:68:d0:69:98:f9:20:54:b1:26:fd:57:bb:0e:f8: 34:72:c9:5b:2d:ce:85:ed:8c:8f:13:67:d8:c9:89:86:28:f3: 8c:60:2c:45:5f:60:84:97:e9:53:2e:77:99:79:46:22:96:61: 3d:6b:e5:6a:e1:7e:6a:bd:b2:85:72:73:6f:3f:f5:da:ba:a7: d9:99:ae:c5:10:d1:97:96:3f:8a:22:b3:ef:35:3b:56:ab:c7: 33:03:c4:40:27:b3:2e:b7:a0:67:4c:d0:22:dd:88:66:95:a5: bc:83:55:de:da:0a:52:94:23:33:37:7c:ec:d8:22:97:37:b5: e2:96:53:25:63:c0:f5:bb:e5:ef:56:b8:cd:9d:30:e4:5d:08: db:b6:c5:11:75:fa:2a:ac:b9:b0:fc:8d:93:55:ce:93:93:c1: ad:4d:86:21:c3:eb:0a:96:75:03:97:11:8e:26:4f:72:98:fc: db:57:24:a8:a5:06:df:42:f9:30:8c:fd:44:74:83:f8:e9:1e: f5:55:83:cc:4d:dd:7f:03:09:f5:f9:0c:55:6a:91:d1:2c:f3: 7d:2a:c0:e9:ad:cb:58:a0:4a:ca:fa:34:8d:ec:b6:38:d4:3d: b3:c5:ed:59:99:90:c0:17:ac:c2:44:6f:36:64:22:2a:5f:7c: e4:c8:d1:a7 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUPJKFIA2CqeEpXmnMeX9lOo7bB5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTVaFw0yNzA5MTYwNTQ2MTVaMDMxMTAvBgNV BAMTKDVERDY1MzkwNTAxMDYxRkE3MkJDOEY3QkQyOUU3NTQyMTc0OTJEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RyzHIQOYf29OzuprlnbIPbgE uyfeX6eOiSYCNAiAay4WCWkPVZNJNVqUp/eSYXOx6LzyNwmsdViiYf8cjgl2IwpW ZzEanq7BB1uP8psqdlOjqwNw4bOxA0RxRnsfqn41+JU5sU5IEn3nInbwk2i2t7n7 dxCqdgGFz4XB5vuAeY1rLiHK9zLHhPeoCgL9v/cZZVPxXJfGrPcrtgY3DStfVb+m jdvmNT1SyaS4813gVsOtZuSiBQPhsBcwWUiqTj3Ny0tSa86nupuwpcoqgKXxcQTX OR0T9fmGBR7geffwupJfp4J2eHz/24dwY6iLjyBy27kGCwOslFbQr0TdlGQTAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUXdZTkFAQYfpyvI970p51QhdJLQwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAL0MkzANBgkqhkiG9w0BAQsFAAOCAQEAW2+X9GjQaZj5IFSxJv1Xuw74 NHLJWy3Ohe2MjxNn2MmJhijzjGAsRV9ghJfpUy53mXlGIpZhPWvlauF+ar2yhXJz bz/12rqn2ZmuxRDRl5Y/iiKz7zU7VqvHMwPEQCezLregZ0zQIt2IZpWlvINV3toK UpQjMzd87Ngilze14pZTJWPA9bvl71a4zZ0w5F0I27bFEXX6Kqy5sPyNk1XOk5PB rU2GIcPrCpZ1A5cRjiZPcpj821ckqKUG30L5MIz9RHSD+Oke9VWDzE3dfwMJ9fkM VWqR0SzzfSrA6a3LWKBKyvo0jey2ONQ9s8XtWZmQwBeswkRvNmQiKl985MjRpw== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:39 2026 by rpki-client