$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3135322e302f32312d3234203d3e20383334.roa File: 3138392e31322e3135322e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: 5VwRz+RZUTALl6ex/PtLq2QsoRQNzLDTXUqnOUxQJeU= Subject key identifier: 26:E8:45:A7:2D:51:82:08:86:61:28:18:AE:11:8D:FA:DE:D5:98:F1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5D6C8274F9D7BE316B38E3131A8BFE4FF9C46011 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3135322e302f32312d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:05 +0000 ROA not before: Thu 17 Sep 2026 05:41:05 +0000 ROA not after: Thu 16 Sep 2027 05:46:05 +0000 asID: 834 IP address blocks: 189.12.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6c:82:74:f9:d7:be:31:6b:38:e3:13:1a:8b:fe:4f:f9:c4:60:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:05 2026 GMT Not After : Sep 16 05:46:05 2027 GMT Subject: CN=26E845A72D51820886612818AE118DFADED598F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:35:cd:48:d0:4f:e7:7f:f5:38:c4:68:11: c5:3f:bb:ff:5e:a6:83:49:bb:2d:91:f8:8b:25:b3: 42:9b:f2:9d:f7:8c:8f:03:d5:23:4b:47:c6:c5:d3: 29:66:d4:4f:77:53:9e:e3:66:ab:0f:08:e7:92:b3: e8:0b:21:db:a3:a7:33:98:60:d1:06:57:3f:40:94: d0:44:96:57:4e:ad:33:ba:27:03:8d:64:ba:33:4f: 26:e7:85:14:e6:b2:1c:1e:47:2e:2e:80:57:09:95: 4d:15:e7:77:9b:4b:3a:28:1c:38:82:21:95:4c:aa: ad:dc:20:92:fe:06:5c:4f:a9:c1:1c:90:8a:7c:43: 56:6f:67:a4:71:5a:44:08:68:55:fb:57:cd:2e:c0: 31:71:61:96:e3:45:43:9a:62:66:bf:89:a2:7e:d8: 50:38:bf:66:e8:f7:7a:37:8e:89:72:1a:e2:e3:2f: 0c:45:32:50:15:d9:a2:36:69:f3:14:52:fa:c6:b6: 9e:23:b0:e8:9e:9f:ae:6b:7c:70:02:c3:8e:7c:44: ea:0b:c1:f6:73:94:23:18:b6:16:9f:fc:54:1e:03: eb:c1:b9:a3:fe:42:40:e4:57:95:de:a6:5f:81:a2: 69:34:d1:28:9b:f7:3d:a3:8c:f5:a3:ad:aa:bc:47: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:45:A7:2D:51:82:08:86:61:28:18:AE:11:8D:FA:DE:D5:98:F1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e31322e3135322e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.12.152.0/21 Signature Algorithm: sha256WithRSAEncryption 85:f1:2a:69:bd:2d:ad:fe:fc:c4:8e:47:70:76:6a:45:7c:06: f8:80:08:de:bd:0c:85:f4:03:9b:0b:bf:1a:96:5f:da:f8:e4: b3:04:4d:3d:95:7a:6b:91:3b:72:50:23:64:0a:f8:87:c9:b4: 47:6d:da:e1:f3:97:39:19:45:4f:a2:ab:45:38:46:0f:52:3d: 6d:0d:a7:cc:35:7e:11:6f:7a:0b:7e:73:85:09:35:7e:1d:b3: 70:1f:d9:3a:74:34:65:d4:24:91:3d:0b:23:99:0d:31:8c:24: 7e:af:f7:5d:89:52:68:12:1c:18:4d:92:a2:61:9a:1f:77:bc: ef:93:f6:ab:58:d5:68:28:01:aa:3f:88:de:aa:a6:82:f6:27: 26:28:59:a3:c5:5e:80:3f:2c:f7:4b:99:c7:47:9e:cf:f4:70: de:d3:2d:d0:d4:77:0f:eb:40:4c:4f:2f:7c:e9:d6:46:4f:53: 42:c1:f3:1d:7f:f5:6e:59:d8:5c:be:7b:c4:16:3f:7f:a5:5f: 21:52:01:aa:ce:da:5d:f5:30:e4:3f:cc:c3:d9:1c:f6:5e:89: 40:b9:3f:a2:b3:4a:f0:c3:88:ed:cb:0c:d5:1a:89:d6:ba:9e: 5d:09:11:66:4a:ab:67:27:b4:e4:ae:07:24:85:b6:7a:3b:74: a0:56:ed:6a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUXWyCdPnXvjFrOOMTGov+T/nEYBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDVaFw0yNzA5MTYwNTQ2MDVaMDMxMTAvBgNV BAMTKDI2RTg0NUE3MkQ1MTgyMDg4NjYxMjgxOEFFMTE4REZBREVENTk4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAjXNSNBP53/1OMRoEcU/u/9e poNJuy2R+Isls0Kb8p33jI8D1SNLR8bF0ylm1E93U57jZqsPCOeSs+gLIdujpzOY YNEGVz9AlNBElldOrTO6JwONZLozTybnhRTmshweRy4ugFcJlU0V53ebSzooHDiC IZVMqq3cIJL+BlxPqcEckIp8Q1ZvZ6RxWkQIaFX7V80uwDFxYZbjRUOaYma/iaJ+ 2FA4v2bo93o3jolyGuLjLwxFMlAV2aI2afMUUvrGtp4jsOien65rfHACw458ROoL wfZzlCMYthaf/FQeA+vBuaP+QkDkV5Xepl+Bomk00Sib9z2jjPWjraq8R3kPAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUJuhFpy1RggiGYSgYrhGN+t7VmPEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMxMzIyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA70MmDANBgkqhkiG9w0BAQsFAAOCAQEAhfEqab0trf78xI5HcHZqRXwG +IAI3r0MhfQDmwu/GpZf2vjkswRNPZV6a5E7clAjZAr4h8m0R23a4fOXORlFT6Kr RThGD1I9bQ2nzDV+EW96C35zhQk1fh2zcB/ZOnQ0ZdQkkT0LI5kNMYwkfq/3XYlS aBIcGE2SomGaH3e875P2q1jVaCgBqj+I3qqmgvYnJihZo8VegD8s90uZx0eez/Rw 3tMt0NR3D+tATE8vfOnWRk9TQsHzHX/1blnYXL57xBY/f6VfIVIBqs7aXfUw5D/M w9kc9l6JQLk/orNK8MOI7csM1RqJ1rqeXQkRZkqrZye05K4HJIW2ejt0oFbtag== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:29 2026 by rpki-client