$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa File: 3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa (raw, json) Hash identifier: a42jCIwmQcjzDwG98n63xK2nB0xLO3CKDp8IUKixwSY= Subject key identifier: 59:E9:1D:DC:00:85:8C:49:7E:6E:AF:F4:D1:7C:49:B4:DB:B2:FF:A9 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 66A0F7FE60A5EFDC1BA91A8F1056F35B24B9ACB3 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa Signing time: Thu 17 Sep 2026 05:46:15 +0000 ROA not before: Thu 17 Sep 2026 05:41:15 +0000 ROA not after: Thu 16 Sep 2027 05:46:15 +0000 asID: 218809 IP address blocks: 200.141.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a0:f7:fe:60:a5:ef:dc:1b:a9:1a:8f:10:56:f3:5b:24:b9:ac:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:15 2026 GMT Not After : Sep 16 05:46:15 2027 GMT Subject: CN=59E91DDC00858C497E6EAFF4D17C49B4DBB2FFA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:b0:bc:38:5a:4d:77:ab:10:34:10:b1:a2: 8a:ed:e2:f0:36:dd:0d:0d:ea:c1:ed:77:63:1d:d3: 23:f3:23:eb:cb:ae:0d:49:7c:69:9b:c1:e9:00:64: c0:ee:42:b0:d4:5d:c2:f8:89:fe:3b:8d:5e:f6:d0: 01:a3:1d:01:af:11:32:00:92:2f:7c:7d:45:a0:cd: d4:7c:cd:83:1b:ea:1d:70:27:92:1c:11:94:86:59: 4d:f8:52:d1:b3:02:cf:10:06:17:08:61:18:56:22: fd:07:fa:24:e4:77:31:ac:01:b5:76:83:06:b7:a1: 68:73:5a:e0:29:24:04:32:ec:02:ba:98:79:1c:a1: a0:96:8d:e9:28:02:af:1a:eb:85:5f:f3:9b:4f:e0: 02:a6:c4:e0:4a:73:45:70:52:f7:d0:b9:22:ca:52: fa:a8:b0:81:3c:3e:61:12:05:70:b6:43:9b:7d:e1: 9a:37:38:89:db:03:fc:d1:8c:67:5b:a3:6d:62:e0: 2a:87:0a:37:d9:fc:f4:02:43:af:b3:77:15:70:4e: e7:47:6f:78:88:72:89:d8:6e:1e:86:3a:12:84:5d: 9e:bd:7d:22:80:13:1c:33:40:79:9b:87:b7:3c:27: a8:a7:de:b5:2c:c5:a6:00:3d:7c:4c:81:da:bd:71: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E9:1D:DC:00:85:8C:49:7E:6E:AF:F4:D1:7C:49:B4:DB:B2:FF:A9 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.188.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e7:ad:71:cf:9b:aa:f6:a4:fd:96:94:e0:c5:12:d1:5f:28: e2:20:62:a2:db:ef:a6:cb:49:20:a5:60:b9:ab:1a:2c:13:df: 74:8f:76:8e:10:81:d1:46:85:49:93:07:c0:39:cb:2c:1b:86: 74:39:d7:b0:68:15:43:b4:6a:00:5b:27:fb:1b:16:66:ff:01: b5:96:ac:dc:bc:1e:bd:72:2f:cb:7e:97:e4:5e:4a:c3:5f:8e: 02:73:5f:99:cf:2b:52:37:45:fc:9d:cf:c2:f7:aa:b6:a7:f2: 66:7d:b8:98:50:42:3c:6e:75:fc:f8:95:aa:23:06:b6:62:bd: 0c:ed:f6:8f:6a:98:e6:28:b1:f8:43:0b:3b:2e:0f:20:56:fc: ae:6f:06:ef:2f:5e:e7:85:01:03:e1:5d:f3:d7:0c:0e:b3:09: d6:a0:b5:e8:83:a8:b9:5b:f9:d6:03:31:09:cc:3a:0c:82:3d: bf:d0:7c:37:71:00:11:d8:f7:b7:36:4a:a7:5c:89:b1:9a:01: dc:13:4b:02:12:9a:17:5c:a0:32:19:f1:5b:48:f9:2a:2b:48: b5:f2:40:b0:40:43:54:08:2d:45:67:f3:10:59:d1:84:bc:1d: f0:9a:7d:73:d7:a5:c4:1d:3b:3c:10:27:6c:07:96:df:8a:b1: 2c:d0:d3:af -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUZqD3/mCl79wbqRqPEFbzWyS5rLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTVaFw0yNzA5MTYwNTQ2MTVaMDMxMTAvBgNV BAMTKDU5RTkxRERDMDA4NThDNDk3RTZFQUZGNEQxN0M0OUI0REJCMkZGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvr7C8OFpNd6sQNBCxoort4vA2 3Q0N6sHtd2Md0yPzI+vLrg1JfGmbwekAZMDuQrDUXcL4if47jV720AGjHQGvETIA ki98fUWgzdR8zYMb6h1wJ5IcEZSGWU34UtGzAs8QBhcIYRhWIv0H+iTkdzGsAbV2 gwa3oWhzWuApJAQy7AK6mHkcoaCWjekoAq8a64Vf85tP4AKmxOBKc0VwUvfQuSLK UvqosIE8PmESBXC2Q5t94Zo3OInbA/zRjGdbo21i4CqHCjfZ/PQCQ6+zdxVwTudH b3iIconYbh6GOhKEXZ69fSKAExwzQHmbh7c8J6in3rUsxaYAPXxMgdq9cQ39AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUWekd3ACFjEl+bq/00XxJtNuy/6kwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4Mzgz MDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI28MA0GCSqGSIb3DQEBCwUAA4IBAQCE561xz5uq9qT9 lpTgxRLRXyjiIGKi2++my0kgpWC5qxosE990j3aOEIHRRoVJkwfAOcssG4Z0Odew aBVDtGoAWyf7GxZm/wG1lqzcvB69ci/LfpfkXkrDX44Cc1+ZzytSN0X8nc/C96q2 p/JmfbiYUEI8bnX8+JWqIwa2Yr0M7faPapjmKLH4Qws7Lg8gVvyubwbvL17nhQED 4V3z1wwOswnWoLXog6i5W/nWAzEJzDoMgj2/0Hw3cQAR2Pe3NkqnXImxmgHcE0sC EpoXXKAyGfFbSPkqK0i18kCwQENUCC1FZ/MQWdGEvB3wmn1z16XEHTs8ECdsB5bf irEs0NOv -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:33 2026 by rpki-client