$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134382e302f32322d3234203d3e20383334.roa File: 3138392e31322e3134382e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: 9VWwJhRttTnFrLc4CvlCf/RqZT1QBfxnK/aRHsywxGk= Subject key identifier: 25:C2:00:1F:A4:3F:C6:BB:EE:1F:D0:80:7C:59:87:52:8A:23:8D:35 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2A730C2DBE866AF42337971D6463C114B4A36D80 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134382e302f32322d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:13 +0000 ROA not before: Thu 17 Sep 2026 05:41:13 +0000 ROA not after: Thu 16 Sep 2027 05:46:13 +0000 asID: 834 IP address blocks: 189.12.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:73:0c:2d:be:86:6a:f4:23:37:97:1d:64:63:c1:14:b4:a3:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:13 2026 GMT Not After : Sep 16 05:46:13 2027 GMT Subject: CN=25C2001FA43FC6BBEE1FD0807C5987528A238D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:c3:46:d8:f9:21:28:68:fd:09:aa:65:4c: 51:ea:f0:cd:39:bf:4d:0d:e5:39:28:af:53:06:db: 8f:5f:3a:77:8b:55:4c:dd:44:c7:93:5d:06:47:d1: d4:80:e4:2d:2c:ef:e9:c9:a8:f8:4c:bc:cf:2b:bd: 2d:80:d2:00:2d:4f:e9:61:8d:45:7e:75:03:91:17: 5c:de:f2:6f:97:e3:62:69:3e:b7:87:2f:ea:0d:24: 4b:9e:26:62:89:46:9a:09:41:8f:77:c3:d0:78:22: d9:3f:a7:92:5f:8e:b4:51:49:44:24:c0:f0:c2:f6: 86:ed:0d:ba:27:1d:b5:7c:86:60:91:5e:4d:b8:de: 3b:bb:4c:11:f3:6d:70:63:4c:0e:b0:fc:f9:03:06: 94:b3:43:65:42:7f:f0:dc:8a:8a:85:34:2f:dd:0a: 7b:a5:bb:de:c4:5a:5c:ae:93:7a:0c:63:5b:fa:44: 3c:e5:a0:86:9d:bb:bf:df:40:8e:37:da:a3:d0:71: f5:d3:25:fa:9a:bd:33:d1:bc:60:12:6d:1c:9b:31: 09:75:5b:db:8b:16:2f:ef:6d:fb:2c:a2:26:e9:f1: 5e:5b:3d:7b:c9:92:fb:d4:92:dd:15:ad:ca:23:a8: 3d:9d:c7:18:6b:ee:8d:3a:80:5b:d3:6f:e9:24:89: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:00:1F:A4:3F:C6:BB:EE:1F:D0:80:7C:59:87:52:8A:23:8D:35 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3134382e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.148.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:63:7f:64:c7:d8:68:a1:8f:23:7e:6e:4e:3e:68:5b:4e:2d: 71:b5:b0:13:d4:e8:c9:10:58:4e:1c:d6:ee:4a:cb:58:30:b0: 59:30:3a:72:65:6c:fc:98:88:b8:16:28:d8:c2:87:34:7d:82: 01:69:40:10:10:91:d1:0c:ea:c8:17:9b:44:16:98:06:8d:fb: 6b:31:a5:ac:f8:44:56:57:ce:4d:c2:fd:90:30:67:67:ac:31: be:fb:d7:a3:52:c0:0f:77:e4:f2:54:82:80:2b:92:52:9b:31: 30:63:b6:25:47:f5:df:fc:90:3c:49:ad:48:55:f1:a8:11:bb: 6e:e4:86:b8:c1:5f:78:27:93:46:94:e8:8d:85:a0:15:35:16: b2:0d:42:f6:b3:9a:f8:a0:a4:66:41:76:4a:bb:6c:04:a8:aa: 3a:8b:91:43:70:a3:87:7a:f4:99:98:0d:c8:d6:31:d2:c1:1d: 7a:96:ba:27:fa:16:40:c6:c0:2a:42:50:6d:eb:01:07:e3:55: 6c:c0:f3:13:47:bd:4f:2c:4c:97:22:79:2f:da:64:65:1e:83: d3:ff:39:1e:1f:7c:df:fb:91:2b:3e:60:46:17:f3:9f:37:f0: 2c:fe:fb:bc:fe:ba:76:1e:bc:f4:bc:ff:0a:03:7b:f2:5b:66: f1:95:32:2a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUKnMMLb6GavQjN5cdZGPBFLSjbYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTNaFw0yNzA5MTYwNTQ2MTNaMDMxMTAvBgNV BAMTKDI1QzIwMDFGQTQzRkM2QkJFRTFGRDA4MDdDNTk4NzUyOEEyMzhEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/cNG2PkhKGj9CaplTFHq8M05 v00N5Tkor1MG249fOneLVUzdRMeTXQZH0dSA5C0s7+nJqPhMvM8rvS2A0gAtT+lh jUV+dQORF1ze8m+X42JpPreHL+oNJEueJmKJRpoJQY93w9B4Itk/p5JfjrRRSUQk wPDC9obtDbonHbV8hmCRXk243ju7TBHzbXBjTA6w/PkDBpSzQ2VCf/DcioqFNC/d Cnulu97EWlyuk3oMY1v6RDzloIadu7/fQI432qPQcfXTJfqavTPRvGASbRybMQl1 W9uLFi/vbfssoibp8V5bPXvJkvvUkt0VrcojqD2dxxhr7o06gFvTb+kkiddzAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUJcIAH6Q/xrvuH9CAfFmHUoojjTUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAr0MlDANBgkqhkiG9w0BAQsFAAOCAQEAimN/ZMfYaKGPI35uTj5oW04t cbWwE9ToyRBYThzW7krLWDCwWTA6cmVs/JiIuBYo2MKHNH2CAWlAEBCR0QzqyBeb RBaYBo37azGlrPhEVlfOTcL9kDBnZ6wxvvvXo1LAD3fk8lSCgCuSUpsxMGO2JUf1 3/yQPEmtSFXxqBG7buSGuMFfeCeTRpTojYWgFTUWsg1C9rOa+KCkZkF2SrtsBKiq OouRQ3Cjh3r0mZgNyNYx0sEdepa6J/oWQMbAKkJQbesBB+NVbMDzE0e9TyxMlyJ5 L9pkZR6D0/85Hh983/uRKz5gRhfznzfwLP77vP66dh689Lz/CgN78ltm8ZUyKg== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:59 2026 by rpki-client