$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa File: 3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa (raw, json) Hash identifier: o9uexgugoP+ID7Qy71lCfBp4l0Ro6lEmR+4BTrU5hYI= Subject key identifier: 87:0E:55:DB:E1:2A:36:33:C6:1E:EE:B6:01:63:F1:77:EC:B3:7E:19 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 3B9529AD56824CFC2A2F53E6C6974A01402989A2 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa Signing time: Thu 17 Sep 2026 05:46:16 +0000 ROA not before: Thu 17 Sep 2026 05:41:16 +0000 ROA not after: Thu 16 Sep 2027 05:46:16 +0000 asID: 199707 IP address blocks: 200.141.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:95:29:ad:56:82:4c:fc:2a:2f:53:e6:c6:97:4a:01:40:29:89:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:16 2026 GMT Not After : Sep 16 05:46:16 2027 GMT Subject: CN=870E55DBE12A3633C61EEEB60163F177ECB37E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:e4:ca:90:9b:10:5a:cc:8e:c9:98:d5:bb: d7:59:fc:9e:6f:5e:27:4d:19:8e:ed:84:5a:e6:06: a2:4b:43:ff:33:3d:c1:cc:86:5e:dd:84:1d:f3:e2: ef:07:6c:05:dd:4e:20:1d:41:4a:ad:fc:c4:6b:c2: 5e:35:ad:23:39:27:61:8b:ab:72:aa:25:c4:3c:b2: 09:6f:a9:6e:6a:5e:4c:ba:a6:fd:86:bb:e4:15:2e: 53:95:72:9d:a1:4f:20:40:92:9a:4d:e5:11:20:18: 16:b7:fc:49:91:3c:1f:0d:90:08:54:fc:8a:a9:cd: e1:3c:b5:7e:97:09:78:25:99:61:e9:ab:e1:17:b1: a9:f6:40:bb:47:18:8c:d2:a3:b7:6c:b7:bf:b6:7d: f9:d6:b3:32:4d:b2:75:b2:2e:a7:b1:0c:72:37:4e: 36:cb:c2:1d:05:10:ce:62:50:27:fa:4a:e4:08:2e: 95:62:34:d2:d4:20:ba:a8:25:6b:64:06:0d:5d:18: c4:d5:6a:35:4b:ad:be:8a:d6:e0:08:c0:0a:d7:57: 07:d5:30:d3:a8:95:a1:ce:e0:d5:8a:56:3a:c4:7d: 32:70:20:2f:aa:5a:6a:33:97:8b:97:03:89:3f:10: 97:a7:c8:e3:7e:50:6e:6b:7e:f9:52:aa:07:72:bd: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0E:55:DB:E1:2A:36:33:C6:1E:EE:B6:01:63:F1:77:EC:B3:7E:19 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.184.0/24 Signature Algorithm: sha256WithRSAEncryption 31:2a:8d:d9:bf:2f:4b:89:a1:43:a3:72:d4:71:09:2e:fa:c4: d9:7f:e3:14:5c:f4:34:57:14:02:32:86:00:51:a2:31:5c:c6: 22:5d:5e:8c:82:9e:73:45:05:76:e0:66:3b:88:34:08:07:f0: ab:18:de:46:61:5a:e8:e8:33:ec:42:ad:e8:d3:fb:fc:7f:b3: db:00:19:16:9f:f6:7f:86:a3:ae:99:3a:68:3f:fb:86:9f:30: 63:12:c7:37:f0:80:b2:e2:39:17:cc:ad:f4:7f:0a:01:1d:90: 92:cc:f0:a0:a8:aa:1b:84:b1:73:3a:c8:bc:23:63:10:30:1e: de:b7:0b:23:fd:19:b8:77:3b:c9:17:bc:ee:2d:f9:32:9e:a1: 9d:0d:36:1e:e0:9e:e3:a9:59:95:a8:a3:0b:6f:6b:62:67:bc: 97:24:23:7a:08:fb:d8:e1:04:e6:33:b0:6d:61:9c:ac:d2:5a: 6b:2f:a6:d5:85:45:3e:84:d4:da:2f:bf:3c:68:11:ee:7b:f5: 47:d6:ce:0f:a3:a0:56:d2:cb:0a:8b:c3:19:ab:ee:19:1e:4e: 18:d4:68:4c:7c:71:52:0f:20:f2:14:58:95:41:1c:41:bc:6a: 73:05:e9:3e:be:79:2e:61:b2:ea:03:b9:24:ff:6e:60:1d:2b: 4a:e8:fb:b6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUO5UprVaCTPwqL1PmxpdKAUApiaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTZaFw0yNzA5MTYwNTQ2MTZaMDMxMTAvBgNV BAMTKDg3MEU1NURCRTEyQTM2MzNDNjFFRUVCNjAxNjNGMTc3RUNCMzdFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBp+TKkJsQWsyOyZjVu9dZ/J5v XidNGY7thFrmBqJLQ/8zPcHMhl7dhB3z4u8HbAXdTiAdQUqt/MRrwl41rSM5J2GL q3KqJcQ8sglvqW5qXky6pv2Gu+QVLlOVcp2hTyBAkppN5REgGBa3/EmRPB8NkAhU /IqpzeE8tX6XCXglmWHpq+EXsan2QLtHGIzSo7dst7+2ffnWszJNsnWyLqexDHI3 TjbLwh0FEM5iUCf6SuQILpViNNLUILqoJWtkBg1dGMTVajVLrb6K1uAIwArXVwfV MNOolaHO4NWKVjrEfTJwIC+qWmozl4uXA4k/EJenyON+UG5rfvlSqgdyvX6RAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUhw5V2+EqNjPGHu62AWPxd+yzfhkwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM5Mzcz MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI24MA0GCSqGSIb3DQEBCwUAA4IBAQAxKo3Zvy9LiaFD o3LUcQku+sTZf+MUXPQ0VxQCMoYAUaIxXMYiXV6Mgp5zRQV24GY7iDQIB/CrGN5G YVro6DPsQq3o0/v8f7PbABkWn/Z/hqOumTpoP/uGnzBjEsc38ICy4jkXzK30fwoB HZCSzPCgqKobhLFzOsi8I2MQMB7etwsj/Rm4dzvJF7zuLfkynqGdDTYe4J7jqVmV qKMLb2tiZ7yXJCN6CPvY4QTmM7BtYZys0lprL6bVhUU+hNTaL788aBHue/VH1s4P o6BW0ssKi8MZq+4ZHk4Y1GhMfHFSDyDyFFiVQRxBvGpzBek+vnkuYbLqA7kk/25g HStK6Pu2 -----END CERTIFICATE-----Generated at Sat Sep 19 04:01:18 2026 by rpki-client