$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa File: 3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa (raw, json) Hash identifier: GP3dtwznEdVdgGiifaTapvZwAtGZ9xpCdMSHwNAcz0I= Subject key identifier: F2:64:75:B3:AC:9F:81:35:94:22:93:EF:8B:7F:75:45:18:D2:8C:8D Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5B177D8FBC950199E413AA9A030166489F886391 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa Signing time: Thu 17 Sep 2026 05:46:11 +0000 ROA not before: Thu 17 Sep 2026 05:41:11 +0000 ROA not after: Thu 16 Sep 2027 05:46:11 +0000 asID: 142146 IP address blocks: 200.141.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:17:7d:8f:bc:95:01:99:e4:13:aa:9a:03:01:66:48:9f:88:63:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:11 2026 GMT Not After : Sep 16 05:46:11 2027 GMT Subject: CN=F26475B3AC9F8135942293EF8B7F754518D28C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b6:b6:07:24:1b:4a:6e:de:bc:c4:4b:ea:99: bc:3c:1c:af:98:0a:1b:0d:c4:26:8d:6b:73:13:60: 8d:8a:37:15:a8:7d:51:bd:a2:b7:0a:05:f6:45:56: f3:6b:11:ab:e1:d1:cd:8f:e8:df:d7:b3:3d:76:49: 49:48:52:82:17:aa:05:9b:3a:99:86:bd:3e:90:a1: d7:47:73:d7:bf:68:b9:73:28:a7:23:5a:f8:02:b6: d4:86:2a:0e:fc:40:3e:a9:c9:50:5c:b3:59:18:02: af:3c:c4:75:5c:95:70:2b:4e:6d:3b:fd:e6:d0:8d: c7:40:fc:93:19:52:be:da:5a:10:c9:cd:45:a5:12: 22:ef:ae:14:51:77:49:48:7d:a2:11:10:a0:84:57: 6e:20:8b:52:6a:72:6e:da:e2:5a:bc:ba:53:d7:4f: a6:5f:0b:d8:3a:aa:d3:81:5d:23:46:c0:76:80:f8: 28:38:32:6c:17:aa:02:02:92:45:c5:15:05:f8:15: 61:15:3f:4c:9c:71:ab:75:6c:17:4f:b3:6d:85:49: f1:94:cf:68:72:58:d7:c7:1e:1f:64:b7:43:d5:60: 3e:16:da:b3:1a:c4:a7:d1:30:3d:2a:9a:3e:93:e8: 70:1b:f7:88:68:47:fb:42:a8:3c:03:5f:8c:cb:18: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:64:75:B3:AC:9F:81:35:94:22:93:EF:8B:7F:75:45:18:D2:8C:8D X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.183.0/24 Signature Algorithm: sha256WithRSAEncryption b2:7e:51:04:0b:42:a3:86:93:bb:d6:5c:7f:84:1c:29:fb:53: e4:12:dc:50:2e:34:be:11:95:38:fb:db:d2:b6:bf:1c:78:fa: 08:33:16:71:f4:07:b8:8a:46:6e:24:49:c8:87:78:47:17:c7: 24:d3:89:63:a8:92:1d:66:24:b6:2a:20:3d:2c:2b:54:fb:d2: 6f:84:66:1c:9c:26:3c:6a:f0:98:9f:93:a5:e9:9a:3a:ff:62: de:2b:5a:21:17:c0:e6:98:b0:ed:09:b5:5b:e1:2b:91:31:49: 34:cb:50:d0:ef:9e:a6:07:89:db:49:a6:d6:88:cf:6e:2b:bd: 3f:7d:41:37:ef:30:ff:49:30:3d:7a:a8:67:72:fd:96:b9:18: 82:0d:7c:c1:39:da:33:d5:1e:9f:3c:7b:21:ec:50:8d:dc:7e: 12:28:66:15:43:53:06:27:47:bf:fc:83:e3:17:51:18:d8:20: 95:85:09:9e:bd:78:04:eb:12:c4:10:8b:21:2e:38:8a:86:b8: cd:53:06:25:44:db:7f:7e:2b:33:4f:fd:5a:ca:62:c2:dc:9c: 2f:19:4b:05:e5:88:a2:fe:2b:01:ea:49:ca:77:fb:62:32:ce: 53:af:d8:e8:ab:eb:c5:40:ba:36:c1:0c:04:cc:3f:8f:83:54: 54:b7:75:2a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUWxd9j7yVAZnkE6qaAwFmSJ+IY5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTFaFw0yNzA5MTYwNTQ2MTFaMDMxMTAvBgNV BAMTKEYyNjQ3NUIzQUM5RjgxMzU5NDIyOTNFRjhCN0Y3NTQ1MThEMjhDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctrYHJBtKbt68xEvqmbw8HK+Y ChsNxCaNa3MTYI2KNxWofVG9orcKBfZFVvNrEavh0c2P6N/Xsz12SUlIUoIXqgWb OpmGvT6QoddHc9e/aLlzKKcjWvgCttSGKg78QD6pyVBcs1kYAq88xHVclXArTm07 /ebQjcdA/JMZUr7aWhDJzUWlEiLvrhRRd0lIfaIREKCEV24gi1Jqcm7a4lq8ulPX T6ZfC9g6qtOBXSNGwHaA+Cg4MmwXqgICkkXFFQX4FWEVP0yccat1bBdPs22FSfGU z2hyWNfHHh9kt0PVYD4W2rMaxKfRMD0qmj6T6HAb94hoR/tCqDwDX4zLGPijAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU8mR1s6yfgTWUIpPvi391RRjSjI0wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMyMzEz NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI23MA0GCSqGSIb3DQEBCwUAA4IBAQCyflEEC0KjhpO7 1lx/hBwp+1PkEtxQLjS+EZU4+9vStr8cePoIMxZx9Ae4ikZuJEnIh3hHF8ck04lj qJIdZiS2KiA9LCtU+9JvhGYcnCY8avCYn5Ol6Zo6/2LeK1ohF8DmmLDtCbVb4SuR MUk0y1DQ756mB4nbSabWiM9uK70/fUE37zD/STA9eqhncv2WuRiCDXzBOdoz1R6f PHsh7FCN3H4SKGYVQ1MGJ0e//IPjF1EY2CCVhQmevXgE6xLEEIshLjiKhrjNUwYl RNt/fiszT/1aymLC3JwvGUsF5Yii/isB6knKd/tiMs5Tr9joq+vFQLo2wQwEzD+P g1RUt3Uq -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:13 2026 by rpki-client