$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138302e302f32332d3234203d3e20323735373631.roa File: 3230302e3134312e3138302e302f32332d3234203d3e20323735373631.roa (raw, json) Hash identifier: 9VvOUsNGFmp+0ck873hRdT/NR81uqPkd0rA4KOJ2i+8= Subject key identifier: 55:7C:52:30:57:14:44:29:61:FC:1B:0B:FA:67:A2:D2:75:05:15:A0 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5355E050BEFDC47036B8DBFFF173FFD656A1E84C Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138302e302f32332d3234203d3e20323735373631.roa Signing time: Fri 18 Sep 2026 16:14:23 +0000 ROA not before: Fri 18 Sep 2026 16:09:23 +0000 ROA not after: Fri 17 Sep 2027 16:14:23 +0000 asID: 275761 IP address blocks: 200.141.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:55:e0:50:be:fd:c4:70:36:b8:db:ff:f1:73:ff:d6:56:a1:e8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 18 16:09:23 2026 GMT Not After : Sep 17 16:14:23 2027 GMT Subject: CN=557C52305714442961FC1B0BFA67A2D2750515A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:4d:62:4c:cc:51:d9:00:b9:19:68:9c:14: 1a:36:8f:91:16:10:2a:a7:98:eb:a2:e7:06:fc:af: 78:71:71:d5:55:d4:11:24:6a:2b:bd:3c:be:36:96: 3b:57:b4:c6:71:56:e9:75:8e:df:85:eb:86:81:fc: 40:cf:50:38:78:02:0a:33:eb:ad:2d:f0:1e:71:4e: 0a:45:9f:a8:e1:9c:f8:ed:b6:e9:11:2a:7c:8a:b1: 14:70:d5:84:e9:29:1e:52:67:7c:51:87:ca:2a:1e: 58:af:79:7c:e6:dd:d8:5b:19:c9:18:e8:ba:5f:23: 2a:bc:98:6c:4c:cd:4a:82:e1:ef:b6:e1:b1:4b:a0: e7:b5:a9:4c:35:b7:b7:56:da:6b:64:85:a3:0d:26: f9:90:4d:9a:58:28:55:b8:e8:be:89:87:11:53:2c: a5:32:95:23:f8:c5:2e:b2:ed:1b:13:83:05:a5:92: 41:04:54:b9:2c:3f:c8:23:a8:55:35:50:78:2b:bb: 63:83:6c:65:ae:76:3d:35:5f:29:00:01:00:82:27: aa:0b:f3:e8:fa:c4:77:09:3f:c2:8c:fc:40:f0:11: 1a:eb:4c:ca:c1:0e:aa:95:59:a1:0e:db:cb:85:58: 01:18:c9:30:8e:df:fc:f5:6a:ac:db:ab:d8:ae:a0: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:52:30:57:14:44:29:61:FC:1B:0B:FA:67:A2:D2:75:05:15:A0 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138302e302f32332d3234203d3e20323735373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.180.0/23 Signature Algorithm: sha256WithRSAEncryption 80:90:0f:60:be:3c:76:83:3f:fd:a9:69:10:2f:0d:ad:0b:64: a1:36:54:e1:94:45:e8:1a:12:78:f3:46:11:fd:08:3a:c9:d6: 61:cd:5c:b4:fb:db:fe:4f:60:b7:19:45:dd:94:bf:f5:af:7c: 35:b9:99:f2:e4:4c:72:98:8b:63:d5:6e:b2:7f:89:d5:64:7a: 59:b4:01:87:aa:57:17:36:20:3d:41:1b:c6:89:15:06:cf:4f: 06:af:50:9d:f3:78:f1:c2:82:4a:82:6e:90:73:6c:e8:07:82: ac:fe:81:3b:ce:ee:00:68:0f:c4:80:10:c3:25:d8:f3:72:df: 68:a6:c2:f5:f3:72:c2:01:82:51:57:5c:52:75:eb:74:71:42: 5d:fd:83:2a:f5:a3:22:3e:6a:cb:97:08:bf:1f:d1:5d:46:65: b4:3c:ae:b8:ab:6e:75:d5:7e:16:e2:7e:65:6d:7c:57:2d:c9: 94:04:05:bf:82:08:3c:ef:dc:5e:9a:70:12:ed:07:30:ed:a0: a4:48:27:ff:b8:7d:7d:0a:72:5e:ba:e7:f3:f3:b1:3c:7c:53: ef:52:93:a2:b0:ec:db:d5:80:f1:74:cb:67:21:cb:94:0c:80: 9d:06:3a:7a:a7:96:f9:7a:2e:b6:36:da:4e:a2:cd:b5:90:7c: 5a:50:2c:bf -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUU1XgUL79xHA2uNv/8XP/1lah6EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTgxNjA5MjNaFw0yNzA5MTcxNjE0MjNaMDMxMTAvBgNV BAMTKDU1N0M1MjMwNTcxNDQ0Mjk2MUZDMUIwQkZBNjdBMkQyNzUwNTE1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uk1iTMxR2QC5GWicFBo2j5EW ECqnmOui5wb8r3hxcdVV1BEkaiu9PL42ljtXtMZxVul1jt+F64aB/EDPUDh4Agoz 660t8B5xTgpFn6jhnPjttukRKnyKsRRw1YTpKR5SZ3xRh8oqHliveXzm3dhbGckY 6LpfIyq8mGxMzUqC4e+24bFLoOe1qUw1t7dW2mtkhaMNJvmQTZpYKFW46L6JhxFT LKUylSP4xS6y7RsTgwWlkkEEVLksP8gjqFU1UHgru2ODbGWudj01XykAAQCCJ6oL 8+j6xHcJP8KM/EDwERrrTMrBDqqVWaEO28uFWAEYyTCO3/z1aqzbq9iuoFNZAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUVXxSMFcURClh/BsL+mei0nUFFaAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzODMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzM1Mzcz NjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQByI20MA0GCSqGSIb3DQEBCwUAA4IBAQCAkA9gvjx2gz/9 qWkQLw2tC2ShNlThlEXoGhJ480YR/Qg6ydZhzVy0+9v+T2C3GUXdlL/1r3w1uZny 5ExymItj1W6yf4nVZHpZtAGHqlcXNiA9QRvGiRUGz08Gr1Cd83jxwoJKgm6Qc2zo B4Ks/oE7zu4AaA/EgBDDJdjzct9opsL183LCAYJRV1xSdet0cUJd/YMq9aMiPmrL lwi/H9FdRmW0PK64q2511X4W4n5lbXxXLcmUBAW/ggg879xemnAS7Qcw7aCkSCf/ uH19CnJeuufz87E8fFPvUpOisOzb1YDxdMtnIcuUDICdBjp6p5b5ei62NtpOos21 kHxaUCy/ -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:59 2026 by rpki-client