$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa File: 3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: +AYFsYf+KIfGgfaKl3UT5QJ9Tn7Vqq872ZTadq05NNM= Subject key identifier: 74:AB:74:FB:0F:9B:E0:9A:BC:FD:3E:23:65:6E:B2:1F:5F:32:9E:AA Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 18CCD0BDF1E56B53C5C97148059842B07F3A7EE1 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:11 +0000 ROA not before: Thu 17 Sep 2026 05:41:11 +0000 ROA not after: Thu 16 Sep 2027 05:46:11 +0000 asID: 214483 IP address blocks: 200.141.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cc:d0:bd:f1:e5:6b:53:c5:c9:71:48:05:98:42:b0:7f:3a:7e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:11 2026 GMT Not After : Sep 16 05:46:11 2027 GMT Subject: CN=74AB74FB0F9BE09ABCFD3E23656EB21F5F329EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:73:e3:f2:34:ea:22:95:ff:07:07:ed:cc: 88:ae:b0:11:cf:d0:15:90:6c:69:4d:3f:1e:82:e3: 34:d7:6f:35:46:13:d5:8a:2d:67:84:d6:ab:4c:7d: 88:0b:a7:9d:99:41:ca:84:e9:ab:3c:f3:c9:8f:87: b5:dc:b4:f6:d5:d3:6e:49:76:e9:45:36:55:80:87: 74:97:14:03:6a:e1:94:fc:84:01:3b:08:a0:ff:1f: aa:57:40:15:c0:e1:70:8f:a5:b8:25:df:66:bd:59: c8:76:cb:cc:3a:b4:0e:3f:c8:ad:ca:a8:24:9c:3d: e2:ef:c1:62:d3:db:ca:85:f2:b3:e8:1e:ae:52:6b: 45:f5:c2:7f:b3:1e:5b:58:d7:34:4c:28:8f:b6:51: 0e:0f:55:9c:31:c3:df:da:94:c4:9f:db:68:bd:64: 97:0e:7c:90:32:8b:26:b2:ca:f3:b0:27:b6:cf:60: 5d:5b:4d:ad:a9:14:f1:f2:1f:e4:e2:26:27:25:3c: 62:ed:21:18:01:75:4e:c5:31:e2:6b:b9:fa:13:bb: 36:c5:f5:03:29:29:0c:de:84:06:99:2c:f7:cf:a2: 9e:9b:1c:6e:08:84:1f:c2:ed:85:8e:fe:16:21:1f: d9:a6:46:4b:08:eb:76:87:35:72:d1:da:d7:b2:b5: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AB:74:FB:0F:9B:E0:9A:BC:FD:3E:23:65:6E:B2:1F:5F:32:9E:AA X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.179.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:87:2d:0c:c3:b9:ab:18:0c:f9:c3:66:e2:4f:85:80:78:9c: 16:ee:85:57:68:94:41:00:5e:8a:ed:82:7d:c1:4f:c9:16:2f: 85:c1:53:d1:8e:f2:10:3f:65:a9:26:5f:c8:4e:8d:9d:fc:ac: d4:ae:75:d2:a2:45:29:58:5c:4c:70:3a:7a:20:45:32:e4:25: f3:a1:54:bd:6a:12:f2:c4:22:ef:a6:c4:67:9b:a2:de:5b:e7: 6b:e4:54:b2:5a:08:63:ab:2d:1f:2e:13:f9:d2:50:c4:5d:c4: 00:9e:95:6e:1d:e8:64:f5:eb:1a:3b:05:70:52:10:cd:dc:2e: 2e:c3:63:3c:12:70:df:4d:ba:a2:c3:72:f8:3e:33:70:fd:90: 4a:5a:57:e3:cb:57:4e:f3:af:63:02:90:8e:f7:da:ab:7b:68: 59:07:79:8d:f6:f5:de:72:a9:b5:3e:07:6b:b6:e7:e1:7e:61: d3:7a:8e:d7:77:ec:88:f2:01:9d:ca:14:53:59:c7:7a:f4:1b: 03:c4:96:2e:93:91:35:d6:6d:c1:72:2b:0b:f2:df:f1:3d:c2: 28:40:a5:df:f7:5b:d2:ff:da:c7:b6:7e:7d:85:e0:1e:73:3b: 3e:f8:06:1a:8b:6e:61:ea:cf:45:eb:96:da:d5:91:bd:c5:7c: 76:78:3f:40 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUGMzQvfHla1PFyXFIBZhCsH86fuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTFaFw0yNzA5MTYwNTQ2MTFaMDMxMTAvBgNV BAMTKDc0QUI3NEZCMEY5QkUwOUFCQ0ZEM0UyMzY1NkVCMjFGNUYzMjlFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmnPj8jTqIpX/BwftzIiusBHP 0BWQbGlNPx6C4zTXbzVGE9WKLWeE1qtMfYgLp52ZQcqE6as888mPh7XctPbV025J dulFNlWAh3SXFANq4ZT8hAE7CKD/H6pXQBXA4XCPpbgl32a9Wch2y8w6tA4/yK3K qCScPeLvwWLT28qF8rPoHq5Sa0X1wn+zHltY1zRMKI+2UQ4PVZwxw9/alMSf22i9 ZJcOfJAyiyayyvOwJ7bPYF1bTa2pFPHyH+TiJiclPGLtIRgBdU7FMeJrufoTuzbF 9QMpKQzehAaZLPfPop6bHG4IhB/C7YWO/hYhH9mmRksI63aHNXLR2teytYmlAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUdKt0+w+b4Jq8/T4jZW6yH18ynqowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI2zMA0GCSqGSIb3DQEBCwUAA4IBAQAbhy0Mw7mrGAz5 w2biT4WAeJwW7oVXaJRBAF6K7YJ9wU/JFi+FwVPRjvIQP2WpJl/ITo2d/KzUrnXS okUpWFxMcDp6IEUy5CXzoVS9ahLyxCLvpsRnm6LeW+dr5FSyWghjqy0fLhP50lDE XcQAnpVuHehk9esaOwVwUhDN3C4uw2M8EnDfTbqiw3L4PjNw/ZBKWlfjy1dO869j ApCO99qre2hZB3mN9vXecqm1PgdrtufhfmHTeo7Xd+yI8gGdyhRTWcd69BsDxJYu k5E11m3BcisL8t/xPcIoQKXf91vS/9rHtn59heAeczs++AYai25h6s9F65ba1ZG9 xXx2eD9A -----END CERTIFICATE-----Generated at Sat Sep 19 04:00:35 2026 by rpki-client