$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa File: 3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa (raw, json) Hash identifier: Msk1UwcIYqz+pxWBvgvGOzNRY+mnGpQvpHJk+oU00Ms= Subject key identifier: 4F:53:DA:68:9A:D1:66:68:F1:AC:18:35:B0:4B:98:0A:26:D0:53:58 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2C1D2A75647E11DDB22E5209B50F14521E25F0BE Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa Signing time: Thu 17 Sep 2026 05:46:19 +0000 ROA not before: Thu 17 Sep 2026 05:41:19 +0000 ROA not after: Thu 16 Sep 2027 05:46:19 +0000 asID: 402866 IP address blocks: 200.141.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1d:2a:75:64:7e:11:dd:b2:2e:52:09:b5:0f:14:52:1e:25:f0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:19 2026 GMT Not After : Sep 16 05:46:19 2027 GMT Subject: CN=4F53DA689AD16668F1AC1835B04B980A26D05358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d1:1f:e0:f4:1e:39:c5:fb:aa:7b:ba:9a:65: a2:ba:9c:a1:5e:ba:3a:7b:90:60:02:de:2f:7a:0a: 48:93:ab:dc:4d:04:e1:5b:d0:dc:21:a9:8c:f2:34: c0:00:0c:78:87:fe:e6:ba:4e:ea:55:5f:2f:20:92: 96:00:8f:8a:f0:29:c7:66:e2:02:25:24:98:a8:5b: 18:26:1e:00:dc:6a:3d:ee:9f:b2:94:12:0a:71:24: e6:7a:6d:2e:cc:9b:5e:11:55:ce:c1:a1:29:39:a8: 7f:c2:d6:36:7d:a2:13:55:33:80:9b:4c:1d:55:07: 5a:99:94:32:38:da:2a:5b:bc:ae:ab:d1:21:34:38: fd:fc:38:3b:a2:e1:41:e5:44:75:6d:7b:e4:cb:b4: 96:37:04:10:e7:b3:5f:4e:8f:0c:74:e2:e5:8c:ce: 1c:82:6a:26:51:99:2b:21:1d:fc:10:29:98:50:4b: 02:02:4c:31:95:77:2c:bc:5e:2f:b7:6d:70:e2:96: 57:81:ef:bb:15:60:c4:97:e5:1f:da:5f:55:0e:52: 1c:dd:50:b0:5b:cb:e5:88:f3:2e:ba:bd:2c:fd:c6: a8:17:35:dd:5e:c8:3a:bf:60:65:6e:e2:41:fe:03: 0d:94:f9:90:a0:b8:e8:77:7f:95:ec:c3:ef:cf:38: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:53:DA:68:9A:D1:66:68:F1:AC:18:35:B0:4B:98:0A:26:D0:53:58 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.177.0/24 Signature Algorithm: sha256WithRSAEncryption 31:6d:11:c4:e7:db:b0:cd:80:19:ea:40:0a:a3:e6:c3:6a:5d: 4c:96:b8:10:68:19:5b:f5:6a:63:64:fb:a5:fc:d8:34:a5:22: 14:1f:93:cd:f1:53:d0:37:52:66:b1:d7:1d:c2:08:ab:15:4d: 1e:92:9f:d5:29:22:06:39:9f:30:c7:31:f0:98:5b:31:57:13: 4a:83:47:78:fb:ce:b7:50:71:a1:4d:b4:fe:4c:c9:87:27:61: e9:cc:4d:ae:e6:40:4a:55:ab:62:51:31:a3:45:0f:44:78:10: 87:db:95:17:d7:ef:8e:41:70:63:c9:e5:7f:0d:b2:0f:c1:08: fb:2c:7c:d9:61:01:88:26:6b:b9:23:05:5b:f7:01:87:4d:e6: 36:24:0f:04:1f:10:33:08:07:57:19:1d:10:87:17:90:df:1a: f7:73:2e:80:2a:2f:69:69:6b:60:17:0a:4d:e2:5f:30:f0:81: 54:79:44:25:ff:00:7f:fa:d7:1b:ed:85:dd:66:aa:e4:bb:38: 1f:e6:03:fd:18:22:6b:06:6c:69:55:46:e0:b1:c2:52:1e:32: b3:85:38:c6:f8:c8:f2:45:c1:68:be:db:ce:6b:37:7a:48:a8: 2f:d4:71:ee:6b:6b:ae:27:03:6e:64:4b:ec:8f:1b:e7:24:18: 9f:6e:df:0d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIULB0qdWR+Ed2yLlIJtQ8UUh4l8L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTlaFw0yNzA5MTYwNTQ2MTlaMDMxMTAvBgNV BAMTKDRGNTNEQTY4OUFEMTY2NjhGMUFDMTgzNUIwNEI5ODBBMjZEMDUzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0R/g9B45xfuqe7qaZaK6nKFe ujp7kGAC3i96CkiTq9xNBOFb0NwhqYzyNMAADHiH/ua6TupVXy8gkpYAj4rwKcdm 4gIlJJioWxgmHgDcaj3un7KUEgpxJOZ6bS7Mm14RVc7BoSk5qH/C1jZ9ohNVM4Cb TB1VB1qZlDI42ipbvK6r0SE0OP38ODui4UHlRHVte+TLtJY3BBDns19Ojwx04uWM zhyCaiZRmSshHfwQKZhQSwICTDGVdyy8Xi+3bXDilleB77sVYMSX5R/aX1UOUhzd ULBby+WI8y66vSz9xqgXNd1eyDq/YGVu4kH+Aw2U+ZCguOh3f5Xsw+/POCyVAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUT1PaaJrRZmjxrBg1sEuYCibQU1gwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzgz NjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI2xMA0GCSqGSIb3DQEBCwUAA4IBAQAxbRHE59uwzYAZ 6kAKo+bDal1MlrgQaBlb9WpjZPul/Ng0pSIUH5PN8VPQN1JmsdcdwgirFU0ekp/V KSIGOZ8wxzHwmFsxVxNKg0d4+863UHGhTbT+TMmHJ2HpzE2u5kBKVatiUTGjRQ9E eBCH25UX1++OQXBjyeV/DbIPwQj7LHzZYQGIJmu5IwVb9wGHTeY2JA8EHxAzCAdX GR0QhxeQ3xr3cy6AKi9paWtgFwpN4l8w8IFUeUQl/wB/+tcb7YXdZqrkuzgf5gP9 GCJrBmxpVUbgscJSHjKzhTjG+MjyRcFovtvOazd6SKgv1HHua2uuJwNuZEvsjxvn JBifbt8N -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:13 2026 by rpki-client