$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa File: 3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: A7icOr2DNDpIdgSuP6Dvc/Ox8qD1Yx5WGtoMqPuWfnE= Subject key identifier: 05:00:93:7E:38:0A:F6:12:F1:F5:2D:6C:FE:56:A3:A1:83:C7:F9:68 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 04A3522B0B4AE95542085F7424DD1AB1B6161462 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa Signing time: Thu 17 Sep 2026 05:46:15 +0000 ROA not before: Thu 17 Sep 2026 05:41:15 +0000 ROA not after: Thu 16 Sep 2027 05:46:15 +0000 asID: 214483 IP address blocks: 200.141.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a3:52:2b:0b:4a:e9:55:42:08:5f:74:24:dd:1a:b1:b6:16:14:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:15 2026 GMT Not After : Sep 16 05:46:15 2027 GMT Subject: CN=0500937E380AF612F1F52D6CFE56A3A183C7F968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:18:f8:18:79:e7:d7:66:8f:f6:fb:c5:1b:a3: c4:5b:31:24:6f:d9:90:98:bf:11:a5:63:7b:21:a4: 47:e8:86:fe:83:a7:6e:c8:03:15:34:9a:ae:1f:76: 89:35:e1:cd:51:5f:c6:f6:a2:db:e2:1b:61:25:55: 2a:a2:e0:58:50:d6:06:3a:5b:5f:7d:58:e4:af:cf: 13:be:61:83:d6:48:c9:14:22:14:48:42:62:11:2b: 09:7a:ad:0d:d4:bb:89:40:e6:0c:c5:50:dc:27:a0: a2:a1:d1:a3:97:3b:31:82:83:cc:45:9b:16:c8:39: db:13:a1:39:de:b0:d5:1e:a1:1e:cb:35:13:52:aa: ff:6a:39:32:27:24:e2:82:1f:37:c6:90:fe:12:ed: e0:cc:e8:a5:d3:9b:81:58:97:d7:a1:bd:9d:61:7b: 32:1f:74:aa:b8:07:48:86:33:16:1d:d2:5c:42:74: 31:fc:4b:79:90:63:ac:0a:5f:ec:1b:43:a1:9e:9e: eb:8f:d4:82:c7:79:ea:d1:b7:00:35:a8:89:c1:d1: 65:df:99:68:c3:dd:4a:67:e4:f2:1b:5b:7c:1b:b8: b4:47:a0:e0:ed:2d:f7:ac:bd:c2:5e:3f:a0:7b:84: af:0d:5a:1d:ee:66:2e:ad:77:d7:95:3e:1e:d6:e1: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:00:93:7E:38:0A:F6:12:F1:F5:2D:6C:FE:56:A3:A1:83:C7:F9:68 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3139302e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.190.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:8f:0f:0c:83:dc:f7:56:20:f5:80:38:17:ab:48:a9:d9:92: 02:6d:75:f3:87:0b:cd:da:c5:e8:e0:f5:16:d0:e1:30:e1:de: ae:46:7a:6d:28:bd:62:16:c3:fc:c4:8f:e5:fe:71:ba:1e:51: 33:dc:33:8a:dc:0b:38:9b:67:8e:a5:9e:f2:c3:6f:ba:ea:60: 73:25:08:26:55:9d:16:d7:95:9f:d7:55:53:9f:62:b4:e3:56: a2:8f:00:9b:e5:cc:02:10:ae:7c:63:52:0c:23:9f:31:94:96: d5:30:06:76:e2:25:68:f3:71:ff:fc:36:f4:d8:7e:fe:fb:c4: ae:98:c5:fe:6c:59:6f:24:a2:e5:53:78:00:6c:d2:07:b2:53: 87:88:f7:51:69:d5:4e:30:44:21:0d:f1:a0:41:16:db:76:53: 62:9f:f8:f0:5b:8c:96:d5:a2:3a:59:d0:c4:ff:cc:71:dc:46: 74:1a:83:4b:e7:85:2c:cd:3c:f0:32:b0:05:c1:56:c2:8b:3a: 3c:4e:47:4e:6c:a1:93:95:24:6f:df:77:9a:32:0d:b1:83:55: f5:32:85:d9:2b:70:1b:d4:61:04:fd:09:6b:17:e7:d5:95:83: 7f:49:9b:3a:6f:db:2a:b3:b4:fd:14:8d:41:73:49:5b:31:38: 96:bb:87:a6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUBKNSKwtK6VVCCF90JN0asbYWFGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTVaFw0yNzA5MTYwNTQ2MTVaMDMxMTAvBgNV BAMTKDA1MDA5MzdFMzgwQUY2MTJGMUY1MkQ2Q0ZFNTZBM0ExODNDN0Y5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGPgYeefXZo/2+8Ubo8RbMSRv 2ZCYvxGlY3shpEfohv6Dp27IAxU0mq4fdok14c1RX8b2otviG2ElVSqi4FhQ1gY6 W199WOSvzxO+YYPWSMkUIhRIQmIRKwl6rQ3Uu4lA5gzFUNwnoKKh0aOXOzGCg8xF mxbIOdsToTnesNUeoR7LNRNSqv9qOTInJOKCHzfGkP4S7eDM6KXTm4FYl9ehvZ1h ezIfdKq4B0iGMxYd0lxCdDH8S3mQY6wKX+wbQ6GenuuP1ILHeerRtwA1qInB0WXf mWjD3Upn5PIbW3wbuLRHoODtLfesvcJeP6B7hK8NWh3uZi6td9eVPh7W4XqBAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUBQCTfjgK9hLx9S1s/lajoYPH+WgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI2+MA0GCSqGSIb3DQEBCwUAA4IBAQBajw8Mg9z3ViD1 gDgXq0ip2ZICbXXzhwvN2sXo4PUW0OEw4d6uRnptKL1iFsP8xI/l/nG6HlEz3DOK 3As4m2eOpZ7yw2+66mBzJQgmVZ0W15Wf11VTn2K041aijwCb5cwCEK58Y1IMI58x lJbVMAZ24iVo83H//Db02H7++8SumMX+bFlvJKLlU3gAbNIHslOHiPdRadVOMEQh DfGgQRbbdlNin/jwW4yW1aI6WdDE/8xx3EZ0GoNL54UszTzwMrAFwVbCizo8TkdO bKGTlSRv33eaMg2xg1X1MoXZK3Ab1GEE/QlrF+fVlYN/SZs6b9sqs7T9FI1Bc0lb MTiWu4em -----END CERTIFICATE-----Generated at Sat Sep 19 05:03:35 2026 by rpki-client