$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa File: 3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: Zj2DeRdULNVeinj31g7Ge4O+ZWUtNs5F7ahexZ5LDGI= Subject key identifier: 71:34:DC:FB:DD:37:66:CB:5F:D5:A3:BF:79:DD:26:57:4F:99:6A:CD Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0B12D2D45B69F539D47CB0CAA4EF4CC0567BF757 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:11 +0000 ROA not before: Thu 17 Sep 2026 05:41:11 +0000 ROA not after: Thu 16 Sep 2027 05:46:11 +0000 asID: 214483 IP address blocks: 189.30.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:12:d2:d4:5b:69:f5:39:d4:7c:b0:ca:a4:ef:4c:c0:56:7b:f7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:11 2026 GMT Not After : Sep 16 05:46:11 2027 GMT Subject: CN=7134DCFBDD3766CB5FD5A3BF79DD26574F996ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:48:73:3e:0e:9d:14:09:b4:43:05:49:4c:66: e0:46:62:ad:62:27:5b:05:db:f5:33:c4:ac:b0:d9: 55:72:c0:b1:8e:d6:7a:95:bf:82:5c:fa:d3:11:76: 48:c9:42:4e:86:1d:2c:34:cc:84:79:7d:26:d8:85: e9:b7:8d:c3:eb:e7:aa:d2:83:90:b9:ee:a9:11:b2: 12:e6:55:0f:1f:ad:0c:16:26:34:a3:f2:3b:c9:82: 56:64:32:f8:ca:80:5d:48:54:19:0e:2a:be:e9:4d: 14:5f:60:15:86:a6:72:6f:f2:ef:76:ad:80:37:15: 9f:de:83:ce:fa:0a:aa:34:3c:d6:e5:af:06:3c:a7: c2:d8:e3:96:2b:f6:e5:36:1a:bb:1f:5e:31:e4:3e: 82:66:f7:61:b9:b8:c5:58:fa:a3:94:65:06:bb:6e: d1:2c:67:75:4c:9b:2e:f7:a1:2f:61:0b:35:b9:86: f8:5b:c1:b8:07:3d:81:c5:35:42:d4:58:43:aa:cb: d3:e0:33:9d:a1:ee:3e:57:79:60:ca:a6:5a:a2:9b: 01:df:51:93:99:21:5c:e6:cc:58:3a:61:f4:88:21: cc:5d:2d:08:b8:44:98:aa:b8:e6:07:9f:25:aa:7f: 4f:ea:8f:07:d3:7e:84:9a:12:6b:c4:2a:51:ed:44: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:DC:FB:DD:37:66:CB:5F:D5:A3:BF:79:DD:26:57:4F:99:6A:CD X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.30.100.0/24 Signature Algorithm: sha256WithRSAEncryption 32:29:d6:2d:60:ab:15:15:d9:cb:d6:4f:39:c7:e6:f6:75:1a: fa:5e:7f:ed:9d:de:7d:4e:fe:44:1c:66:d0:f8:54:95:5f:35: 3d:6c:1a:03:9b:d5:55:33:48:e8:65:84:4b:70:57:61:cd:c9: 74:33:32:7a:5a:ac:96:32:f1:70:d3:00:9e:45:78:60:91:a5: b7:78:63:9a:72:58:98:83:4e:92:8c:9c:c2:11:4a:5a:db:6a: 25:c1:b5:d8:a2:a9:fa:ad:cf:2d:4f:17:57:69:a2:16:ca:8a: 77:60:04:0f:c6:88:da:58:50:2a:00:7c:ab:4c:d3:09:18:46: a9:94:2d:87:9e:a6:4c:cb:06:14:6b:38:4d:e6:cf:2f:d7:67: cf:ba:76:64:4f:52:98:3a:ac:0d:cc:a6:3b:21:48:77:31:c3: d3:13:73:f9:01:be:8a:85:cb:18:a7:15:20:45:28:75:11:f1: ca:fe:81:61:60:02:b7:b1:00:cc:f0:a1:54:dd:70:51:d4:f3: 3a:d2:91:38:21:ec:93:80:18:c9:26:74:35:5b:a0:6c:56:5d: 68:00:41:ae:61:a3:41:01:4c:fe:60:5d:3a:53:7d:db:63:4e: c5:c5:04:3f:7f:ad:46:79:39:8f:bb:00:83:b1:28:48:6d:17: 01:e5:4f:56 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUCxLS1Ftp9TnUfLDKpO9MwFZ791cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTFaFw0yNzA5MTYwNTQ2MTFaMDMxMTAvBgNV BAMTKDcxMzREQ0ZCREQzNzY2Q0I1RkQ1QTNCRjc5REQyNjU3NEY5OTZBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSHM+Dp0UCbRDBUlMZuBGYq1i J1sF2/UzxKyw2VVywLGO1nqVv4Jc+tMRdkjJQk6GHSw0zIR5fSbYhem3jcPr56rS g5C57qkRshLmVQ8frQwWJjSj8jvJglZkMvjKgF1IVBkOKr7pTRRfYBWGpnJv8u92 rYA3FZ/eg876Cqo0PNblrwY8p8LY45Yr9uU2GrsfXjHkPoJm92G5uMVY+qOUZQa7 btEsZ3VMmy73oS9hCzW5hvhbwbgHPYHFNULUWEOqy9PgM52h7j5XeWDKplqimwHf UZOZIVzmzFg6YfSIIcxdLQi4RJiquOYHnyWqf0/qjwfTfoSaEmvEKlHtRARPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUcTTc+903Zstf1aO/ed0mV0+Zas0wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMzMzAyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0Mzgz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAL0eZDANBgkqhkiG9w0BAQsFAAOCAQEAMinWLWCrFRXZy9ZP Ocfm9nUa+l5/7Z3efU7+RBxm0PhUlV81PWwaA5vVVTNI6GWES3BXYc3JdDMyelqs ljLxcNMAnkV4YJGlt3hjmnJYmINOkoycwhFKWttqJcG12KKp+q3PLU8XV2miFsqK d2AED8aI2lhQKgB8q0zTCRhGqZQth56mTMsGFGs4TebPL9dnz7p2ZE9SmDqsDcym OyFIdzHD0xNz+QG+ioXLGKcVIEUodRHxyv6BYWACt7EAzPChVN1wUdTzOtKROCHs k4AYySZ0NVugbFZdaABBrmGjQQFM/mBdOlN922NOxcUEP3+tRnk5j7sAg7EoSG0X AeVPVg== -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:04 2026 by rpki-client