$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39372e302f32342d3234203d3e20383334.roa File: 3138392e33302e39372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: K3hGQCRqJhSJ6tDMh3JXVAzgMRBhu8je7yclvWjT2xo= Subject key identifier: 96:DD:00:64:45:3C:C4:03:96:BD:AC:A4:FF:92:25:66:6C:D9:DC:43 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 36D83856AE37063BF9FB771D6DDEADBABC660013 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39372e302f32342d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:06 +0000 ROA not before: Thu 17 Sep 2026 05:41:06 +0000 ROA not after: Thu 16 Sep 2027 05:46:06 +0000 asID: 834 IP address blocks: 189.30.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d8:38:56:ae:37:06:3b:f9:fb:77:1d:6d:de:ad:ba:bc:66:00:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:06 2026 GMT Not After : Sep 16 05:46:06 2027 GMT Subject: CN=96DD0064453CC40396BDACA4FF9225666CD9DC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:49:b9:9b:d4:bc:de:36:48:90:dd:ba:69: 2c:b7:6d:01:af:3b:ff:63:82:32:a1:a3:78:dd:ff: 8f:94:f6:1b:f1:e6:9d:77:31:4b:8c:2c:14:08:fd: a0:09:e2:20:b8:69:42:a6:3c:66:d6:fc:79:7d:0e: cd:a6:a5:ca:de:50:fd:89:10:ea:44:90:33:ff:76: 33:06:c5:68:4b:09:6a:62:14:01:68:d8:c6:e2:d9: f2:96:77:2f:1f:69:37:f6:cd:51:72:c4:78:ce:b1: 73:1b:05:c0:33:d9:c8:91:81:7a:8f:45:32:3d:2e: 40:6e:04:c8:c6:be:6c:a5:5f:ec:5c:eb:2c:34:f6: b2:84:44:44:4b:d6:01:da:6d:9f:90:fa:86:4a:e5: a0:d8:dd:4c:9a:06:40:cc:c1:21:84:9f:a1:b0:d7: 36:7c:02:41:c1:72:10:e0:0d:a2:db:b4:12:e5:9b: ef:2c:5c:82:c1:e0:8d:86:35:49:58:3b:27:c3:05: fa:78:d9:e7:09:ba:03:52:ba:93:42:1e:12:f1:87: cd:cd:be:57:dd:0b:7b:2c:54:4c:90:0e:a2:b7:6a: b9:87:6d:44:7b:f7:6b:73:56:cb:5d:9c:ea:04:ad: c6:f8:00:37:0a:9b:b8:1b:21:fe:85:0e:f9:ae:cc: 0a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:00:64:45:3C:C4:03:96:BD:AC:A4:FF:92:25:66:6C:D9:DC:43 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.30.97.0/24 Signature Algorithm: sha256WithRSAEncryption 45:20:9e:49:53:e1:5a:e0:2f:c0:23:3c:71:16:1a:38:f7:77: 17:8f:8b:09:ad:31:0d:d0:6b:ce:64:4d:a4:4e:b7:55:7b:fa: 27:4c:ec:c3:50:f0:0f:61:14:1d:af:d8:0c:3e:ba:a1:e8:fc: 69:f3:91:f8:2c:74:7a:b4:e2:2b:a0:c9:3f:ea:1c:53:6f:7d: fa:63:de:02:95:2e:c2:04:77:33:86:fc:89:43:ed:b7:f8:a0: 19:74:89:ad:da:68:74:9c:46:83:07:db:6a:7d:72:0e:19:02: a9:48:db:8d:0e:a6:f7:a3:70:5e:ee:b5:08:ee:25:bd:0a:bd: ef:52:8e:27:ca:e5:8f:7a:3d:e8:ad:77:9f:e5:15:f1:d6:ec: d9:51:91:f3:7f:06:a4:61:3f:b4:b8:71:69:19:7e:87:02:e1: 2f:c4:3b:b7:2b:93:29:66:f5:61:4c:7a:00:ad:98:4f:5d:95: 16:0d:28:0a:46:7b:f3:63:ee:ac:b2:ce:14:16:c1:eb:6d:a2: 91:7b:d9:3e:27:11:42:9f:e5:6c:00:4b:d2:25:9c:39:b7:f5: 99:5a:b0:7d:2b:32:41:c5:22:06:ce:4c:3f:99:15:97:7c:c8: 9c:33:0b:5b:85:0a:ed:d5:2d:df:e1:78:e0:f1:5e:0b:36:0e: ff:0f:9c:71 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUNtg4Vq43Bjv5+3cdbd6turxmABMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDZaFw0yNzA5MTYwNTQ2MDZaMDMxMTAvBgNV BAMTKDk2REQwMDY0NDUzQ0M0MDM5NkJEQUNBNEZGOTIyNTY2NkNEOURDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAk0m5m9S83jZIkN26aSy3bQGv O/9jgjKho3jd/4+U9hvx5p13MUuMLBQI/aAJ4iC4aUKmPGbW/Hl9Ds2mpcreUP2J EOpEkDP/djMGxWhLCWpiFAFo2Mbi2fKWdy8faTf2zVFyxHjOsXMbBcAz2ciRgXqP RTI9LkBuBMjGvmylX+xc6yw09rKERERL1gHabZ+Q+oZK5aDY3UyaBkDMwSGEn6Gw 1zZ8AkHBchDgDaLbtBLlm+8sXILB4I2GNUlYOyfDBfp42ecJugNSupNCHhLxh83N vlfdC3ssVEyQDqK3armHbUR792tzVstdnOoErcb4ADcKm7gbIf6FDvmuzArbAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUlt0AZEU8xAOWvayk/5IlZmzZ3EMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUF BzALhoGHcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMzMzAyZTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC9HmEwDQYJKoZIhvcNAQELBQADggEBAEUgnklT4VrgL8AjPHEWGjj3dxeP iwmtMQ3Qa85kTaROt1V7+idM7MNQ8A9hFB2v2Aw+uqHo/GnzkfgsdHq04iugyT/q HFNvffpj3gKVLsIEdzOG/IlD7bf4oBl0ia3aaHScRoMH22p9cg4ZAqlI240Opvej cF7utQjuJb0Kve9SjifK5Y96Peitd5/lFfHW7NlRkfN/BqRhP7S4cWkZfocC4S/E O7crkylm9WFMegCtmE9dlRYNKApGe/Nj7qyyzhQWwettopF72T4nEUKf5WwAS9Il nDm39ZlasH0rMkHFIgbOTD+ZFZd8yJwzC1uFCu3VLd/heODxXgs2Dv8PnHE= -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:18 2026 by rpki-client