$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39382e302f32332d3234203d3e20383334.roa File: 3138392e33302e39382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: H1E9bnRLPycbeuP4BOMi1mMXq5j4T23fQ35xTcsATLI= Subject key identifier: 56:DC:84:8A:B3:76:76:EA:FB:F1:74:46:76:4C:70:F2:FC:47:E4:4A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5590DC3C81DD2B07A74825ECF26AEEE9E06849C0 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39382e302f32332d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:19 +0000 ROA not before: Thu 17 Sep 2026 05:41:19 +0000 ROA not after: Thu 16 Sep 2027 05:46:19 +0000 asID: 834 IP address blocks: 189.30.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:90:dc:3c:81:dd:2b:07:a7:48:25:ec:f2:6a:ee:e9:e0:68:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:19 2026 GMT Not After : Sep 16 05:46:19 2027 GMT Subject: CN=56DC848AB37676EAFBF17446764C70F2FC47E44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:e3:3b:bf:d0:81:21:2a:04:9a:6b:ea:db: d7:a7:b9:ee:18:b1:cf:40:cd:dd:9a:7a:30:5c:55: 2d:14:44:d2:71:1d:3a:f4:f8:cf:db:be:3e:4c:c2: c0:69:8a:6f:04:3b:4f:e3:e1:e0:86:61:47:8f:6f: 55:c7:b2:d3:0d:bc:0e:b1:da:ff:86:91:f9:e9:20: dd:91:69:d7:05:dc:6c:d5:d6:e0:22:d2:3b:4c:c7: b1:40:9f:95:5f:0a:3d:68:24:2a:74:a1:88:ea:49: 4a:70:9c:90:94:2e:9b:16:5b:aa:af:09:34:2c:35: 75:c7:68:a8:23:5d:83:eb:76:bd:52:79:3d:af:13: 02:82:b2:98:e6:dd:b1:fe:d7:ec:67:06:59:35:fe: 66:f4:92:07:82:20:88:b4:db:9e:fd:4a:63:6e:d8: 54:b2:cb:dc:fd:4a:e6:da:33:cf:a3:c8:56:05:cb: b5:a8:3f:30:93:72:87:86:e7:0c:a5:98:a2:48:b9: 97:55:7f:6c:96:16:75:16:99:eb:a3:31:e2:65:74: 3e:20:c2:4e:77:1b:83:b3:6c:09:0f:c5:d1:98:d0: c8:54:5e:c6:69:b0:82:98:e3:48:c5:5d:56:c5:6f: c0:40:d7:e6:16:7b:6c:6c:ea:ca:81:2a:ab:1f:9b: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DC:84:8A:B3:76:76:EA:FB:F1:74:46:76:4C:70:F2:FC:47:E4:4A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3138392e33302e39382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.30.98.0/23 Signature Algorithm: sha256WithRSAEncryption 99:f3:06:96:57:06:33:a3:6b:32:21:e4:b9:1f:40:92:87:94: 1a:f8:77:43:80:57:8c:1c:cd:ca:78:51:b1:9f:1e:57:38:e3: ab:b7:d5:00:b9:f9:ad:6e:39:62:6d:43:3c:13:b9:07:ad:c7: 5f:a1:1f:13:1c:e6:9c:10:b4:ab:c3:bf:02:0e:e7:ef:c3:c2: f0:f3:91:4f:70:a3:98:10:17:39:67:57:e1:80:61:f8:b3:2a: f7:c3:dc:bf:33:73:94:b3:5d:eb:90:08:df:38:4f:83:37:c1: 05:02:32:80:f6:90:5e:9a:05:cc:5f:a3:36:89:fb:53:aa:09: d3:e7:69:f4:51:a8:96:36:81:60:00:fd:4c:35:49:6b:85:1a: 22:1b:59:9b:f0:f1:fa:6b:e5:72:df:6e:1a:bf:91:dc:23:87: 61:f2:ce:f1:d9:54:9e:86:8f:1a:19:68:8c:cd:29:2a:3e:41: 74:1b:05:a1:2a:2a:6b:42:a3:00:4a:2f:a7:05:a2:a0:76:4b: 1d:bc:a3:f5:f8:73:3c:55:b3:ba:cd:4d:6c:b8:b8:8e:bf:2f: 96:94:57:07:d7:89:8c:2a:fb:56:9c:20:49:2f:26:82:56:23: a7:66:2d:7b:b4:a1:df:c1:51:51:d6:5e:b5:16:8e:07:9a:24: 96:f2:29:68 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIUVZDcPIHdKwenSCXs8mru6eBoScAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTlaFw0yNzA5MTYwNTQ2MTlaMDMxMTAvBgNV BAMTKDU2REM4NDhBQjM3Njc2RUFGQkYxNzQ0Njc2NEM3MEYyRkM0N0U0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwuM7v9CBISoEmmvq29enue4Y sc9Azd2aejBcVS0URNJxHTr0+M/bvj5MwsBpim8EO0/j4eCGYUePb1XHstMNvA6x 2v+GkfnpIN2RadcF3GzV1uAi0jtMx7FAn5VfCj1oJCp0oYjqSUpwnJCULpsWW6qv CTQsNXXHaKgjXYPrdr1SeT2vEwKCspjm3bH+1+xnBlk1/mb0kgeCIIi02579SmNu 2FSyy9z9SubaM8+jyFYFy7WoPzCTcoeG5wylmKJIuZdVf2yWFnUWmeujMeJldD4g wk53G4OzbAkPxdGY0MhUXsZpsIKY40jFXVbFb8BA1+YWe2xs6sqBKqsfm6knAgMB AAGjggJyMIICbjAdBgNVHQ4EFgQUVtyEirN2dur78XRGdkxw8vxH5EowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUF BzALhoGHcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMTM4Mzky ZTMzMzAyZTM5MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAG9HmIwDQYJKoZIhvcNAQELBQADggEBAJnzBpZXBjOjazIh5LkfQJKHlBr4 d0OAV4wczcp4UbGfHlc446u31QC5+a1uOWJtQzwTuQetx1+hHxMc5pwQtKvDvwIO 5+/DwvDzkU9wo5gQFzlnV+GAYfizKvfD3L8zc5SzXeuQCN84T4M3wQUCMoD2kF6a BcxfozaJ+1OqCdPnafRRqJY2gWAA/Uw1SWuFGiIbWZvw8fpr5XLfbhq/kdwjh2Hy zvHZVJ6GjxoZaIzNKSo+QXQbBaEqKmtCowBKL6cFoqB2Sx28o/X4czxVs7rNTWy4 uI6/L5aUVwfXiYwq+1acIEkvJoJWI6dmLXu0od/BUVHWXrUWjgeaJJbyKWg= -----END CERTIFICATE-----Generated at Sat Sep 19 04:00:14 2026 by rpki-client