$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa File: 3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: EA/p5gk4uvCAF0h/rEWo7fVoz2MONmTZeF9PlGBJzUA= Subject key identifier: F0:57:63:CE:6E:3A:B3:E8:81:1A:27:EC:C9:D9:9D:CE:D9:D9:60:20 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 313A54F5753CC4B9CFA98105AFA92060092562B3 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa Signing time: Thu 17 Sep 2026 05:46:09 +0000 ROA not before: Thu 17 Sep 2026 05:41:09 +0000 ROA not after: Thu 16 Sep 2027 05:46:09 +0000 asID: 152179 IP address blocks: 200.141.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3a:54:f5:75:3c:c4:b9:cf:a9:81:05:af:a9:20:60:09:25:62:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:09 2026 GMT Not After : Sep 16 05:46:09 2027 GMT Subject: CN=F05763CE6E3AB3E8811A27ECC9D99DCED9D96020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:3d:9e:fb:f0:73:1f:32:f6:31:33:a3:0f: cd:6a:73:ec:08:f4:2f:8b:d3:af:6a:c9:88:48:0b: 39:d9:0d:4e:fd:7d:3e:6a:f4:2f:48:92:09:1f:6f: 38:ff:ec:63:32:7b:96:e6:de:48:b7:c7:5d:a2:fb: 69:b9:3c:90:c7:b0:43:c9:da:0c:66:e9:fa:45:3c: f9:d9:db:fd:96:a2:45:ad:01:e4:b6:33:fc:f9:18: 64:f3:a8:64:66:8d:e8:76:c2:bd:2d:4b:c7:a4:3b: f6:85:35:5d:c7:3b:ff:a4:70:f8:e7:38:0e:36:f7: 57:7f:83:14:6b:a6:24:7d:65:9c:42:82:cd:d4:ab: aa:a5:79:d7:ae:75:35:81:c4:91:e7:e2:cd:3a:7c: ee:fe:3d:06:29:4b:67:06:2e:06:53:f5:ec:b1:59: 9d:82:62:3c:38:cf:8f:b3:42:e6:95:6b:ab:c3:04: 35:ab:1f:b7:c5:5f:f9:12:40:63:2f:7d:ab:19:bd: 67:f8:07:93:e8:91:a2:a0:eb:d2:78:6a:eb:91:85: 97:4b:45:db:1a:5f:8e:64:44:4a:b9:7d:73:50:36: 83:cf:2f:b2:f2:d4:0c:81:8e:6e:95:f1:04:fa:32: 14:a5:cd:f8:37:7f:0b:f6:70:29:94:b5:c1:79:67: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:63:CE:6E:3A:B3:E8:81:1A:27:EC:C9:D9:9D:CE:D9:D9:60:20 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.187.0/24 Signature Algorithm: sha256WithRSAEncryption 11:fd:43:a7:fc:b9:09:c2:73:4a:25:a4:76:ac:b8:61:f5:54: 52:3e:41:0d:76:e9:0b:77:ff:bd:dc:72:d9:03:55:07:2b:cf: c6:de:94:e9:bc:77:7f:f4:59:04:3a:6f:36:d9:16:a8:c4:78: 87:13:d2:17:cb:17:63:2b:07:23:52:09:63:25:14:49:cc:90: e6:e5:e1:f3:f9:9b:21:39:ef:47:41:fd:45:58:8a:14:0f:41: 3e:7d:e4:ab:cb:b7:fc:e8:85:bf:e0:28:49:62:61:51:5d:15: bc:4f:69:1e:d6:e3:93:46:f8:55:60:4f:04:48:2c:d7:d1:24: a0:c1:22:b3:36:0f:d2:58:e1:22:9d:be:6d:a2:19:f0:ad:6d: e6:1f:eb:75:39:ee:3b:22:39:88:e9:4f:45:7b:b4:8e:e4:5d: 6a:0c:91:97:9e:d5:a3:33:b8:87:11:ff:6b:1f:13:c7:88:e8: cb:16:ee:dd:87:44:48:25:41:cb:fd:56:60:b3:dd:b9:b8:78: cb:19:aa:03:72:51:13:db:8b:bd:7f:39:33:aa:e5:48:3f:44: e2:9b:98:48:66:af:46:bb:1a:ab:e9:a0:7e:0a:e3:38:d0:9d: 84:c4:c1:0a:b8:29:84:a0:68:25:80:da:ec:a2:cb:fd:6d:33: 62:1d:76:b7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUMTpU9XU8xLnPqYEFr6kgYAklYrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDlaFw0yNzA5MTYwNTQ2MDlaMDMxMTAvBgNV BAMTKEYwNTc2M0NFNkUzQUIzRTg4MTFBMjdFQ0M5RDk5RENFRDlEOTYwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2j2e+/BzHzL2MTOjD81qc+wI 9C+L069qyYhICznZDU79fT5q9C9Ikgkfbzj/7GMye5bm3ki3x12i+2m5PJDHsEPJ 2gxm6fpFPPnZ2/2WokWtAeS2M/z5GGTzqGRmjeh2wr0tS8ekO/aFNV3HO/+kcPjn OA4291d/gxRrpiR9ZZxCgs3Uq6qledeudTWBxJHn4s06fO7+PQYpS2cGLgZT9eyx WZ2CYjw4z4+zQuaVa6vDBDWrH7fFX/kSQGMvfasZvWf4B5PokaKg69J4auuRhZdL RdsaX45kREq5fXNQNoPPL7Ly1AyBjm6V8QT6MhSlzfg3fwv2cCmUtcF5ZyYzAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU8Fdjzm46s+iBGifsydmdztnZYCAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEz NzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI27MA0GCSqGSIb3DQEBCwUAA4IBAQAR/UOn/LkJwnNK JaR2rLhh9VRSPkENdukLd/+93HLZA1UHK8/G3pTpvHd/9FkEOm822RaoxHiHE9IX yxdjKwcjUgljJRRJzJDm5eHz+ZshOe9HQf1FWIoUD0E+feSry7f86IW/4ChJYmFR XRW8T2ke1uOTRvhVYE8ESCzX0SSgwSKzNg/SWOEinb5tohnwrW3mH+t1Oe47IjmI 6U9Fe7SO5F1qDJGXntWjM7iHEf9rHxPHiOjLFu7dh0RIJUHL/VZgs925uHjLGaoD clET24u9fzkzquVIP0Tim5hIZq9Guxqr6aB+CuM40J2ExMEKuCmEoGglgNrsosv9 bTNiHXa3 -----END CERTIFICATE-----Generated at Sat Sep 19 04:01:11 2026 by rpki-client