$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130322e302f32332d3234203d3e20383334.roa File: 3138392e33302e3130322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: pBxqPOLe73RKXt9xYP4tS4qun+x3wFFK5VN2hI1h7UM= Subject key identifier: 69:B9:A7:0E:F2:BB:B2:84:16:5D:9C:13:42:75:68:DA:4D:80:D8:91 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 31A8371B8D733C30ACEA2974BBFF9BF4BBE8ADE5 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130322e302f32332d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:18 +0000 ROA not before: Thu 17 Sep 2026 05:41:18 +0000 ROA not after: Thu 16 Sep 2027 05:46:18 +0000 asID: 834 IP address blocks: 189.30.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a8:37:1b:8d:73:3c:30:ac:ea:29:74:bb:ff:9b:f4:bb:e8:ad:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:18 2026 GMT Not After : Sep 16 05:46:18 2027 GMT Subject: CN=69B9A70EF2BBB284165D9C13427568DA4D80D891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:fb:a4:bf:8c:61:e1:d4:9b:e5:43:32:9a: dc:5f:e4:22:14:83:0f:19:8c:20:3a:8c:dc:ed:eb: 68:54:63:4b:23:74:f1:a8:d3:81:81:da:66:60:a3: 1a:13:7e:5f:f5:35:18:16:89:75:30:6a:34:59:85: d9:5f:35:c1:7b:ec:11:c8:f8:dc:28:e7:29:05:e7: d8:b5:14:ce:c2:6f:d8:82:c9:e8:e6:41:85:87:2c: b8:f8:71:aa:42:dc:f1:b0:0b:5f:4d:be:ab:98:9a: 69:df:46:1e:46:40:c0:07:03:91:cf:80:d4:45:2f: e9:e5:9e:2a:77:3f:04:15:15:ed:24:28:1b:da:cd: 86:51:3b:a9:6b:ef:de:97:2b:a7:8d:9c:36:bc:41: 2b:2d:03:63:7a:ad:83:c4:12:f0:a8:66:a1:3d:43: 54:dd:31:e0:2c:b6:b5:32:41:78:f5:1c:8a:b5:78: 8b:5e:9d:16:25:16:05:f6:e7:54:4c:94:05:e8:e9: 96:1c:83:9e:2a:d9:bf:5f:d4:a7:1f:52:23:fe:03: ce:cb:f7:f8:06:7c:5f:f3:e5:e1:d7:4a:98:bc:f0: c9:4a:6c:74:c8:54:6e:49:ac:e0:33:74:d0:3b:c9: 21:2d:e3:61:88:ba:e5:6a:29:e2:ab:17:98:06:f9: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B9:A7:0E:F2:BB:B2:84:16:5D:9C:13:42:75:68:DA:4D:80:D8:91 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.30.102.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:ed:a5:1f:d7:3f:55:a2:30:c6:02:17:58:a1:64:5a:30:e0: a9:2d:53:5f:65:84:36:c0:5d:f2:03:56:e1:35:82:97:b9:3e: 4d:62:c7:20:b0:88:bd:da:4c:48:98:71:f3:30:1c:f4:a1:46: bb:e8:cd:e1:52:42:ef:f4:7a:c2:fc:7b:63:e1:b4:8e:58:b8: 6d:94:2e:3a:87:b3:63:a4:cb:db:72:84:ee:c8:fa:06:74:db: 9c:9b:24:67:7f:c8:56:a1:9a:dd:31:3b:0b:8a:40:1d:40:da: fa:51:55:8c:2d:e2:6c:c1:ac:c2:45:9d:29:93:7c:7a:76:76: 2c:9f:d5:f1:6a:ad:ce:2d:bd:7b:ae:d5:08:b0:a5:73:c4:61: 8e:2e:5d:e2:7b:04:f8:3d:b5:63:f3:ba:43:48:1e:a7:c6:ca: 67:9f:4b:00:ae:f1:39:af:96:5d:97:90:aa:3f:3e:60:5e:c2: aa:2a:30:37:1f:38:74:fa:87:8d:45:a0:24:42:ad:02:91:b4: 3c:9d:d2:bb:0e:1c:c2:a9:86:9c:fe:66:7b:41:ef:2e:a6:85: c1:57:a6:04:d4:77:ab:88:a6:2d:21:b6:64:ef:11:39:b3:72: 85:96:9e:1a:07:34:6e:52:26:97:a4:13:bb:e8:46:c8:4a:e7: 1f:5a:85:e2 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUMag3G41zPDCs6il0u/+b9LvoreUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMThaFw0yNzA5MTYwNTQ2MThaMDMxMTAvBgNV BAMTKDY5QjlBNzBFRjJCQkIyODQxNjVEOUMxMzQyNzU2OERBNEQ4MEQ4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVY/ukv4xh4dSb5UMymtxf5CIU gw8ZjCA6jNzt62hUY0sjdPGo04GB2mZgoxoTfl/1NRgWiXUwajRZhdlfNcF77BHI +Nwo5ykF59i1FM7Cb9iCyejmQYWHLLj4capC3PGwC19NvquYmmnfRh5GQMAHA5HP gNRFL+nlnip3PwQVFe0kKBvazYZRO6lr796XK6eNnDa8QSstA2N6rYPEEvCoZqE9 Q1TdMeAstrUyQXj1HIq1eItenRYlFgX251RMlAXo6ZYcg54q2b9f1KcfUiP+A87L 9/gGfF/z5eHXSpi88MlKbHTIVG5JrOAzdNA7ySEt42GIuuVqKeKrF5gG+WWvAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUabmnDvK7soQWXZwTQnVo2k2A2JEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMzMzAyZTMxMzAzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAb0eZjANBgkqhkiG9w0BAQsFAAOCAQEAHu2lH9c/VaIwxgIXWKFkWjDg qS1TX2WENsBd8gNW4TWCl7k+TWLHILCIvdpMSJhx8zAc9KFGu+jN4VJC7/R6wvx7 Y+G0jli4bZQuOoezY6TL23KE7sj6BnTbnJskZ3/IVqGa3TE7C4pAHUDa+lFVjC3i bMGswkWdKZN8enZ2LJ/V8Wqtzi29e67VCLClc8Rhji5d4nsE+D21Y/O6Q0gep8bK Z59LAK7xOa+WXZeQqj8+YF7CqiowNx84dPqHjUWgJEKtApG0PJ3Suw4cwqmGnP5m e0HvLqaFwVemBNR3q4imLSG2ZO8RObNyhZaeGgc0blIml6QTu+hGyErnH1qF4g== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:32 2026 by rpki-client