$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39362e302f32342d3234203d3e20343031333632.roa File: 3138392e33302e39362e302f32342d3234203d3e20343031333632.roa (raw, json) Hash identifier: naeEG3RwREmow+ftfx1+EDP6TT5TshCsSCbHx+oZbfc= Subject key identifier: 43:A0:C9:E7:27:30:AF:A4:F2:B9:05:D6:C4:FE:37:E2:DE:29:BA:3C Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2CAB3565F893E4FA05BB6E70DC29E710CC6FD444 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39362e302f32342d3234203d3e20343031333632.roa Signing time: Thu 17 Sep 2026 05:46:05 +0000 ROA not before: Thu 17 Sep 2026 05:41:05 +0000 ROA not after: Thu 16 Sep 2027 05:46:05 +0000 asID: 401362 IP address blocks: 189.30.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ab:35:65:f8:93:e4:fa:05:bb:6e:70:dc:29:e7:10:cc:6f:d4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:05 2026 GMT Not After : Sep 16 05:46:05 2027 GMT Subject: CN=43A0C9E72730AFA4F2B905D6C4FE37E2DE29BA3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4e:8f:9a:08:6a:db:af:69:8d:85:32:85:34: ce:6b:a3:e8:29:7c:df:a5:21:19:5c:44:1c:79:11: 6c:5e:39:4e:9c:1b:e3:89:7e:82:15:58:a9:67:47: 85:92:8a:8c:cd:46:19:a4:f7:6b:30:88:ce:b9:63: 33:4f:5e:03:1c:a3:94:f0:a8:99:65:23:6c:7c:44: 8c:c2:4d:73:4d:e4:8f:51:71:dd:3d:c8:a4:14:65: 4c:59:cb:82:d5:d0:2e:5a:cc:f6:17:fd:e6:2d:6f: 8b:e5:1b:3a:76:62:73:32:e8:c2:e6:da:b6:0f:e0: bc:42:a3:e9:52:02:19:a9:35:6e:ca:3a:a9:13:7c: b8:b1:8e:9b:3b:30:ab:fe:1e:70:84:c4:4b:4a:04: ee:04:17:d1:c4:87:21:b5:7b:3a:c9:0e:a0:a0:f0: 66:c6:15:32:e4:cb:c0:d7:e0:e0:b0:c9:b0:95:23: 75:09:9c:56:1b:81:02:54:c5:1c:74:4c:9a:42:e6: af:3d:64:b2:9e:a3:af:86:be:dc:b0:67:16:e6:39: 6a:2b:0e:56:d3:54:03:fd:da:91:ff:e2:9b:93:48: b3:48:2e:29:3a:03:c8:05:8a:28:d2:cc:8f:02:33: d5:e8:1c:33:e0:41:46:73:a3:34:8d:0e:74:6a:73: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:C9:E7:27:30:AF:A4:F2:B9:05:D6:C4:FE:37:E2:DE:29:BA:3C X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39362e302f32342d3234203d3e20343031333632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.30.96.0/24 Signature Algorithm: sha256WithRSAEncryption 50:aa:11:c9:91:d4:c3:54:ad:14:87:f6:d6:be:eb:0e:d0:f8: da:c9:dd:9f:15:43:2a:dc:de:9a:e5:80:d0:8f:91:11:1d:31: c2:c5:20:cc:f5:66:b7:4c:3b:e7:e0:a6:bb:08:c8:f7:e2:84: ae:3f:7f:ce:e7:74:cc:25:9d:73:54:f8:98:bf:cc:67:05:08: ed:b6:0d:3e:f8:8c:4d:b0:92:39:fb:ee:e2:42:13:b3:bb:8e: 1d:06:c0:da:32:70:6e:26:26:2d:b2:5b:02:b7:2e:4c:c7:f4: c7:71:d6:3b:85:45:35:59:7e:9d:20:98:79:17:e8:7e:fa:cb: b2:b5:92:75:b7:37:8b:20:11:9f:93:c0:66:e6:64:b4:89:52: 0c:c0:f7:5e:25:3f:46:4e:41:30:9f:73:5a:dc:ed:b4:a2:18: 89:b9:e5:2d:5a:e9:70:4d:23:d4:c9:59:0d:47:1e:3b:2e:59: 56:d9:09:42:f7:76:3a:c3:66:45:83:03:fb:7c:84:0c:0a:40: 97:13:ef:e4:0c:b7:30:d7:57:0f:fa:61:af:f0:1a:5c:af:1b: 90:cd:83:ba:ad:89:d6:23:71:30:07:62:55:9a:b3:93:e9:7a: b5:ce:e9:2e:0a:88:72:dd:32:37:61:f0:36:56:c2:73:41:1b: c4:1f:e2:ba -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULKs1ZfiT5PoFu25w3CnnEMxv1EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDVaFw0yNzA5MTYwNTQ2MDVaMDMxMTAvBgNV BAMTKDQzQTBDOUU3MjczMEFGQTRGMkI5MDVENkM0RkUzN0UyREUyOUJBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLTo+aCGrbr2mNhTKFNM5ro+gp fN+lIRlcRBx5EWxeOU6cG+OJfoIVWKlnR4WSiozNRhmk92swiM65YzNPXgMco5Tw qJllI2x8RIzCTXNN5I9Rcd09yKQUZUxZy4LV0C5azPYX/eYtb4vlGzp2YnMy6MLm 2rYP4LxCo+lSAhmpNW7KOqkTfLixjps7MKv+HnCExEtKBO4EF9HEhyG1ezrJDqCg 8GbGFTLky8DX4OCwybCVI3UJnFYbgQJUxRx0TJpC5q89ZLKeo6+GvtywZxbmOWor DlbTVAP92pH/4puTSLNILik6A8gFiijSzI8CM9XoHDPgQUZzozSNDnRqczljAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUQ6DJ5ycwr6TyuQXWxP434t4pujwwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMzMzAyZTM5MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzMzM2MzIu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAC9HmAwDQYJKoZIhvcNAQELBQADggEBAFCqEcmR1MNUrRSH9ta+ 6w7Q+NrJ3Z8VQyrc3prlgNCPkREdMcLFIMz1ZrdMO+fgprsIyPfihK4/f87ndMwl nXNU+Ji/zGcFCO22DT74jE2wkjn77uJCE7O7jh0GwNoycG4mJi2yWwK3LkzH9Mdx 1juFRTVZfp0gmHkX6H76y7K1knW3N4sgEZ+TwGbmZLSJUgzA914lP0ZOQTCfc1rc 7bSiGIm55S1a6XBNI9TJWQ1HHjsuWVbZCUL3djrDZkWDA/t8hAwKQJcT7+QMtzDX Vw/6Ya/wGlyvG5DNg7qtidYjcTAHYlWas5PperXO6S4KiHLdMjdh8DZWwnNBG8Qf 4ro= -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:11 2026 by rpki-client