$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa File: 3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: SoYtVw3B+xRQXcqpXhtmsI85o48HLpPXjrx/TW5TF1c= Subject key identifier: E3:6D:1F:12:24:35:68:47:91:CA:99:8A:A6:CC:F2:FD:1B:C0:6B:B6 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3A82BD856CBA5ADA60122AAE676BE4B561DDABB6 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa Signing time: Thu 17 Sep 2026 05:46:12 +0000 ROA not before: Thu 17 Sep 2026 05:41:12 +0000 ROA not after: Thu 16 Sep 2027 05:46:12 +0000 asID: 152179 IP address blocks: 200.141.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:82:bd:85:6c:ba:5a:da:60:12:2a:ae:67:6b:e4:b5:61:dd:ab:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:12 2026 GMT Not After : Sep 16 05:46:12 2027 GMT Subject: CN=E36D1F122435684791CA998AA6CCF2FD1BC06BB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:4a:af:b0:64:8e:aa:9d:8e:13:0c:c6:b1: 82:50:0f:80:9e:66:9f:01:4d:d9:2f:23:55:e6:12: 28:51:7b:aa:44:b4:9a:69:49:91:ae:be:bd:a5:04: 25:35:92:c8:2d:cd:b4:11:ab:2d:7d:fc:2f:0f:47: c5:ae:19:80:b5:21:6d:a2:67:ca:d0:3a:71:cb:25: ea:15:6c:e1:f9:42:3d:08:98:b2:79:d5:7e:d9:2c: dd:15:1c:f0:fe:e3:64:ba:5d:a7:73:38:17:ed:93: a3:51:ac:44:5a:bb:f7:43:68:f3:85:85:84:b9:6f: 0f:44:f2:d5:75:66:67:9d:6a:69:b0:5f:2a:ec:04: ec:be:e8:4e:d4:c6:e6:15:f2:6c:ae:d5:9a:1c:78: e8:4d:94:32:46:dd:bb:5c:83:a9:23:46:87:f3:2f: 8b:ec:4d:d2:3a:00:a5:16:55:2a:03:35:db:96:c8: 8b:54:00:9e:dd:e6:ab:a1:07:5f:5d:ff:30:80:13: 80:2d:3c:c6:fe:85:04:77:9f:c6:e7:f2:de:ff:7d: 36:16:43:6d:b2:b7:19:28:d5:07:2e:70:71:7d:87: f6:d6:7a:2a:3c:10:da:f1:4c:d6:b4:f9:36:b6:e1: 54:2b:01:3d:30:20:04:c6:db:71:4a:a3:d5:f4:e8: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6D:1F:12:24:35:68:47:91:CA:99:8A:A6:CC:F2:FD:1B:C0:6B:B6 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.176.0/24 Signature Algorithm: sha256WithRSAEncryption 93:9a:04:f9:e1:01:a8:a1:02:29:6f:54:c7:ac:31:95:80:f4: 99:07:b3:df:61:e0:b6:86:ef:2c:44:b2:da:77:25:3e:9b:0d: 63:d0:4a:a0:8f:26:2f:c6:fe:f0:de:fe:ef:71:7a:7f:57:ec: b4:58:f3:57:f7:8d:cb:5b:1c:df:be:b0:3b:85:d6:ae:41:b2: 03:b6:5a:b9:a0:cc:97:f6:31:de:01:68:15:c6:55:fc:70:a4: 4d:a8:f4:d6:c8:27:8e:f9:b5:6b:2c:dc:75:88:fe:4a:57:cc: b0:43:a7:4b:6f:14:92:24:4c:7e:69:32:ea:ac:1a:db:3d:3d: ac:3d:25:d8:f5:0e:96:41:51:c2:be:4e:7b:ff:b6:81:a6:a8: 07:4f:a1:45:0f:e2:93:65:fd:0c:80:b8:b3:7c:90:5e:fa:5d: 32:4e:b1:59:25:fc:e1:f0:24:8f:00:50:39:e8:91:85:70:77: 70:68:ca:d3:a0:11:fc:96:f2:c1:b4:e7:41:7b:42:ea:7a:55: 68:8a:17:e4:ca:5d:c0:cd:17:e6:a9:6a:b5:d7:81:ea:6b:af: 87:4e:3f:2e:d1:7b:14:8c:b0:46:05:a8:07:e8:b7:62:fb:5a: 46:c1:cf:89:9c:71:07:ba:5f:39:d6:76:1c:0a:03:94:8f:f5: 3f:c4:4f:f6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUOoK9hWy6WtpgEiquZ2vktWHdq7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTJaFw0yNzA5MTYwNTQ2MTJaMDMxMTAvBgNV BAMTKEUzNkQxRjEyMjQzNTY4NDc5MUNBOTk4QUE2Q0NGMkZEMUJDMDZCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYEqvsGSOqp2OEwzGsYJQD4Ce Zp8BTdkvI1XmEihRe6pEtJppSZGuvr2lBCU1ksgtzbQRqy19/C8PR8WuGYC1IW2i Z8rQOnHLJeoVbOH5Qj0ImLJ51X7ZLN0VHPD+42S6XadzOBftk6NRrERau/dDaPOF hYS5bw9E8tV1ZmedammwXyrsBOy+6E7UxuYV8myu1ZoceOhNlDJG3btcg6kjRofz L4vsTdI6AKUWVSoDNduWyItUAJ7d5quhB19d/zCAE4AtPMb+hQR3n8bn8t7/fTYW Q22ytxko1QcucHF9h/bWeio8ENrxTNa0+Ta24VQrAT0wIATG23FKo9X06KsrAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU420fEiQ1aEeRypmKpszy/RvAa7YwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEz NzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI2wMA0GCSqGSIb3DQEBCwUAA4IBAQCTmgT54QGooQIp b1THrDGVgPSZB7PfYeC2hu8sRLLadyU+mw1j0EqgjyYvxv7w3v7vcXp/V+y0WPNX 943LWxzfvrA7hdauQbIDtlq5oMyX9jHeAWgVxlX8cKRNqPTWyCeO+bVrLNx1iP5K V8ywQ6dLbxSSJEx+aTLqrBrbPT2sPSXY9Q6WQVHCvk57/7aBpqgHT6FFD+KTZf0M gLizfJBe+l0yTrFZJfzh8CSPAFA56JGFcHdwaMrToBH8lvLBtOdBe0LqelVoihfk yl3AzRfmqWq114Hqa6+HTj8u0XsUjLBGBagH6Ldi+1pGwc+JnHEHul851nYcCgOU j/U/xE/2 -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:49 2026 by rpki-client