$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa File: 3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa (raw, json) Hash identifier: I0+gPyGSWqC15zCbawy0BaNg/M0NpRDM1NcIynLHye0= Subject key identifier: B9:12:56:FF:94:01:49:07:AC:51:D3:B2:BC:5E:EE:21:69:1E:EA:47 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 18AB54CC3F2305CF25F7E5D92AA01A4EEC573859 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa Signing time: Thu 17 Sep 2026 05:46:13 +0000 ROA not before: Thu 17 Sep 2026 05:41:13 +0000 ROA not after: Thu 16 Sep 2027 05:46:13 +0000 asID: 215817 IP address blocks: 200.141.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ab:54:cc:3f:23:05:cf:25:f7:e5:d9:2a:a0:1a:4e:ec:57:38:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:13 2026 GMT Not After : Sep 16 05:46:13 2027 GMT Subject: CN=B91256FF94014907AC51D3B2BC5EEE21691EEA47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:dd:38:d1:a3:1e:17:ac:a9:2f:12:8d:57: 3b:d9:46:3e:c2:38:80:e0:ed:13:02:3b:0c:62:f2: ab:ef:51:89:c3:57:11:77:7e:90:b1:d9:e1:9a:33: c2:e9:c1:8c:b8:00:67:96:f0:42:7a:91:01:c9:da: be:57:aa:e0:22:8a:0c:fa:8e:af:7e:75:ce:d2:c5: 8a:c7:01:79:3d:00:84:cd:fb:69:b8:d0:e1:1e:69: 04:97:88:ba:c1:71:eb:91:22:c6:05:d8:6f:c9:7d: 52:2b:a6:90:21:bd:07:7d:be:39:2f:2e:e9:b4:ee: e1:1d:9b:f1:00:de:19:14:50:c6:d5:04:80:b3:8c: eb:25:a9:34:6b:b7:10:a2:3d:79:11:59:12:55:1d: 47:3c:24:9f:1b:e2:de:c6:1d:04:3f:41:86:96:ff: 39:84:a5:bf:d1:43:cf:92:86:88:15:00:c4:63:49: f0:2e:e3:a4:3f:c7:0f:35:d3:7e:20:eb:ef:6a:f4: eb:bc:93:52:6d:7b:3a:d6:ca:a6:25:8c:fb:75:9c: 38:89:27:64:c6:70:47:f2:63:fa:46:9a:54:ce:81: e3:dd:3a:0d:e1:0d:d0:e6:91:0e:0f:cf:e4:fd:ca: 2d:9a:47:e4:75:a3:06:7f:1d:0e:52:01:20:c4:42: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:56:FF:94:01:49:07:AC:51:D3:B2:BC:5E:EE:21:69:1E:EA:47 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3138392e302f32342d3234203d3e20323135383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.189.0/24 Signature Algorithm: sha256WithRSAEncryption 31:09:3f:17:1a:79:1e:f5:3c:c7:df:5a:f3:92:04:f8:24:0e: 44:4e:aa:4c:d1:85:83:d5:03:b1:02:76:77:9f:ad:fc:bf:c9: 51:d4:80:bf:b9:b0:9f:00:a7:c6:26:a7:7a:9f:3a:02:32:31: eb:ab:31:07:bd:a9:8b:d2:52:e5:b3:37:ac:1b:e6:12:79:59: 7f:0b:18:da:de:e4:19:24:9a:54:98:fe:2c:86:f0:1f:ee:93: 4b:c1:f2:ab:31:7f:50:d1:3e:86:58:68:2e:66:3f:3f:e5:ad: 4d:79:5d:47:0a:92:5f:98:64:57:cf:5b:da:4a:67:cc:29:04: c3:0e:2f:a1:cd:2d:e7:0b:b8:f3:3b:58:69:b0:ae:bd:87:a3: f2:cf:a4:26:57:8b:66:7d:84:ab:d0:4e:df:55:3c:30:0a:37: 63:b8:cc:09:aa:4d:ff:23:3c:59:4e:bb:8e:69:a7:b5:47:9e: 63:76:ee:49:35:58:03:d1:7b:ea:d2:59:49:e8:89:14:17:b0: 80:3e:06:a6:14:78:04:f0:60:b8:e9:68:1a:96:b7:a3:08:d6: 78:82:e1:bc:43:63:e5:0c:55:45:f3:09:cd:da:90:47:3a:f1: 0e:eb:92:78:82:f6:be:db:16:ee:27:01:cf:13:ee:b3:d1:dd: 66:2c:96:4f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUGKtUzD8jBc8l9+XZKqAaTuxXOFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTNaFw0yNzA5MTYwNTQ2MTNaMDMxMTAvBgNV BAMTKEI5MTI1NkZGOTQwMTQ5MDdBQzUxRDNCMkJDNUVFRTIxNjkxRUVBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+z9040aMeF6ypLxKNVzvZRj7C OIDg7RMCOwxi8qvvUYnDVxF3fpCx2eGaM8LpwYy4AGeW8EJ6kQHJ2r5XquAiigz6 jq9+dc7SxYrHAXk9AITN+2m40OEeaQSXiLrBceuRIsYF2G/JfVIrppAhvQd9vjkv Lum07uEdm/EA3hkUUMbVBICzjOslqTRrtxCiPXkRWRJVHUc8JJ8b4t7GHQQ/QYaW /zmEpb/RQ8+ShogVAMRjSfAu46Q/xw81034g6+9q9Ou8k1JtezrWyqYljPt1nDiJ J2TGcEfyY/pGmlTOgePdOg3hDdDmkQ4Pz+T9yi2aR+R1owZ/HQ5SASDEQs4PAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUuRJW/5QBSQesUdOyvF7uIWke6kcwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzODM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1Mzgz MTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI29MA0GCSqGSIb3DQEBCwUAA4IBAQAxCT8XGnke9TzH 31rzkgT4JA5ETqpM0YWD1QOxAnZ3n638v8lR1IC/ubCfAKfGJqd6nzoCMjHrqzEH vamL0lLlszesG+YSeVl/Cxja3uQZJJpUmP4shvAf7pNLwfKrMX9Q0T6GWGguZj8/ 5a1NeV1HCpJfmGRXz1vaSmfMKQTDDi+hzS3nC7jzO1hpsK69h6Pyz6QmV4tmfYSr 0E7fVTwwCjdjuMwJqk3/IzxZTruOaae1R55jdu5JNVgD0Xvq0llJ6IkUF7CAPgam FHgE8GC46WgalrejCNZ4guG8Q2PlDFVF8wnN2pBHOvEO65J4gva+2xbuJwHPE+6z 0d1mLJZP -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:47 2026 by rpki-client