$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130342e302f32312d3234203d3e20383334.roa File: 3138392e33302e3130342e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: C3zXY7ZoOXHFlQjT+x9vCqKdO1PsXodqttUPkcEpSiM= Subject key identifier: CA:4A:06:B5:97:41:AA:76:A0:A0:1F:EB:80:6A:DF:8B:CE:91:1A:8B Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 73A14B6F51B71A87FD1C65477E0F7C30164BD6DC Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130342e302f32312d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:17 +0000 ROA not before: Thu 17 Sep 2026 05:41:17 +0000 ROA not after: Thu 16 Sep 2027 05:46:17 +0000 asID: 834 IP address blocks: 189.30.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a1:4b:6f:51:b7:1a:87:fd:1c:65:47:7e:0f:7c:30:16:4b:d6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:17 2026 GMT Not After : Sep 16 05:46:17 2027 GMT Subject: CN=CA4A06B59741AA76A0A01FEB806ADF8BCE911A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:3a:54:8b:dc:1f:b4:6a:a7:ed:2d:b2:9d: bb:3a:ea:bd:a2:27:30:ae:86:b5:cb:2c:0f:68:08: 41:b5:f2:c5:9b:e2:d0:ee:9a:39:9a:83:be:90:c7: dc:d9:ad:bf:c6:70:01:a3:3b:e6:63:01:db:0c:d6: f4:77:8f:f7:53:33:b4:57:09:7e:e6:22:0d:73:b8: 75:b9:53:9f:2a:b6:b0:93:aa:41:a0:cb:e8:46:f9: 0a:e4:eb:9c:78:b3:6e:39:ea:7d:8c:05:d0:b1:51: 93:19:c5:90:8f:08:0e:6a:f6:7d:c7:43:03:b1:7b: c1:d1:e7:c2:85:77:a0:54:35:fe:84:c6:58:5f:21: 94:57:4a:dc:c1:9d:4a:9a:79:3d:54:41:78:cc:7c: c6:e5:03:21:49:be:a4:17:3f:e3:ae:a8:76:83:6a: 7f:7c:c8:f1:34:46:64:62:b2:8d:a7:1c:1a:2b:cd: 67:cc:24:c7:5f:ec:bf:bf:72:16:c3:48:a2:e2:23: 9f:91:16:ac:de:ca:30:10:a7:f0:19:e1:e9:bd:f5: b5:b3:35:a8:26:4f:8b:f1:5e:7a:de:15:88:99:1e: 9b:0d:2a:5a:42:86:4e:b5:61:cb:ec:05:f6:06:16: 1c:30:4b:47:7b:7f:96:fa:da:56:86:db:0b:de:9b: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4A:06:B5:97:41:AA:76:A0:A0:1F:EB:80:6A:DF:8B:CE:91:1A:8B X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e3130342e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.30.104.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:16:f3:e8:52:d7:16:d2:31:7a:90:3d:ea:88:58:d8:96:16: 9f:37:b9:68:15:17:b5:a1:8e:a8:a1:a9:9a:36:35:82:c2:3f: 2d:70:27:66:ea:5f:0e:c9:a1:0e:40:57:3a:2c:da:fa:e7:41: fe:21:a8:53:b6:19:1c:e1:41:b4:19:13:84:90:58:69:f2:83: 8e:15:f2:58:82:3f:f0:47:1d:84:3f:66:f0:f9:d7:0d:06:64: bb:c8:ad:62:a3:c2:74:43:ce:d4:a3:39:4d:e2:b8:94:2a:c1: 61:b2:6c:d5:38:0e:80:76:3b:12:48:29:5a:32:2e:95:c3:53: 64:5e:a3:91:21:e7:4a:68:c5:2b:32:b5:7c:1d:23:ab:e3:8c: e0:27:ab:0b:b8:5f:5c:84:39:37:4f:e9:b1:cc:4f:98:90:3b: 98:35:57:78:6f:9d:6c:b8:59:d2:e7:d4:1c:d9:c0:fa:19:be: cd:d7:f4:23:4d:92:84:93:42:47:a8:94:ff:cb:e3:f7:38:25: 58:d5:4f:d6:53:20:25:f4:7d:7b:0b:29:5f:f9:89:16:d2:17: fa:d3:2e:7a:b9:e5:f0:c9:f1:c1:a1:81:45:46:83:52:ab:3a: 62:be:5c:23:20:89:ad:93:d9:dc:59:03:14:47:e3:79:36:90: 6d:e4:e3:75 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUc6FLb1G3Gof9HGVHfg98MBZL1twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTdaFw0yNzA5MTYwNTQ2MTdaMDMxMTAvBgNV BAMTKENBNEEwNkI1OTc0MUFBNzZBMEEwMUZFQjgwNkFERjhCQ0U5MTFBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WzpUi9wftGqn7S2ynbs66r2i JzCuhrXLLA9oCEG18sWb4tDumjmag76Qx9zZrb/GcAGjO+ZjAdsM1vR3j/dTM7RX CX7mIg1zuHW5U58qtrCTqkGgy+hG+Qrk65x4s2456n2MBdCxUZMZxZCPCA5q9n3H QwOxe8HR58KFd6BUNf6ExlhfIZRXStzBnUqaeT1UQXjMfMblAyFJvqQXP+OuqHaD an98yPE0RmRiso2nHBorzWfMJMdf7L+/chbDSKLiI5+RFqzeyjAQp/AZ4em99bWz NagmT4vxXnreFYiZHpsNKlpChk61YcvsBfYGFhwwS0d7f5b62laG2wvem+c1AgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUykoGtZdBqnagoB/rgGrfi86RGoswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMzMzAyZTMxMzAzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA70eaDANBgkqhkiG9w0BAQsFAAOCAQEAihbz6FLXFtIxepA96ohY2JYW nze5aBUXtaGOqKGpmjY1gsI/LXAnZupfDsmhDkBXOiza+udB/iGoU7YZHOFBtBkT hJBYafKDjhXyWII/8EcdhD9m8PnXDQZku8itYqPCdEPO1KM5TeK4lCrBYbJs1TgO gHY7EkgpWjIulcNTZF6jkSHnSmjFKzK1fB0jq+OM4CerC7hfXIQ5N0/pscxPmJA7 mDVXeG+dbLhZ0ufUHNnA+hm+zdf0I02ShJNCR6iU/8vj9zglWNVP1lMgJfR9ewsp X/mJFtIX+tMuernl8MnxwaGBRUaDUqs6Yr5cIyCJrZPZ3FkDFEfjeTaQbeTjdQ== -----END CERTIFICATE-----Generated at Sat Sep 19 04:00:24 2026 by rpki-client