$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa File: 3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: C3K10k5eF4jRX5ZoP46Djq6AB9a+98top8ELkjuMAiM= Subject key identifier: 7E:36:47:74:40:1E:64:05:9E:99:C4:F0:50:A2:CB:7B:FB:37:7D:39 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0350F782877E68A531497E789401338AE4DF54A9 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa Signing time: Thu 17 Sep 2026 05:46:17 +0000 ROA not before: Thu 17 Sep 2026 05:41:17 +0000 ROA not after: Thu 16 Sep 2027 05:46:17 +0000 asID: 152179 IP address blocks: 200.141.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:50:f7:82:87:7e:68:a5:31:49:7e:78:94:01:33:8a:e4:df:54:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:17 2026 GMT Not After : Sep 16 05:46:17 2027 GMT Subject: CN=7E364774401E64059E99C4F050A2CB7BFB377D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:80:62:f2:a7:09:8c:9d:65:08:6d:de:93: 6a:47:33:fd:21:77:94:31:25:ef:5e:32:e1:55:72: b4:56:9c:1c:8e:5f:55:60:82:c1:c2:5c:04:b8:78: 86:30:a9:0d:5f:38:72:a3:c3:17:66:45:4a:4c:fd: a9:5c:e4:ea:ec:d9:3e:88:29:80:e8:64:b0:1a:21: bd:03:a0:93:93:f1:58:0b:2a:87:50:dc:42:5d:9c: f3:50:00:a0:9b:d2:bb:c0:84:68:19:f5:2c:27:b8: b0:23:40:76:8c:5d:53:4e:d9:60:d7:5c:51:da:00: ee:dc:44:09:84:1b:9d:61:ad:4c:38:97:08:04:25: 79:21:29:a3:56:f0:f3:f3:7f:5e:74:7c:5d:c1:6e: f2:c9:6f:63:e9:4f:64:99:40:b4:0b:a3:a8:3c:75: 29:df:25:4b:aa:0a:12:5b:2a:e0:e3:c6:33:0e:4a: 53:4f:8f:6a:ef:86:df:3e:d8:3e:0b:50:26:22:45: 93:ea:27:c2:f5:4d:cc:9b:a8:9e:5c:d0:f3:df:4b: 85:95:24:86:bd:eb:3f:b1:b9:b3:88:8b:fc:5f:91: a2:92:dc:0d:85:40:be:1f:0f:3f:50:8e:c8:21:59: 42:c9:e8:4a:fd:1a:41:21:33:4e:ef:95:a8:18:a0: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:36:47:74:40:1E:64:05:9E:99:C4:F0:50:A2:CB:7B:FB:37:7D:39 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134312e3139312e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.141.191.0/24 Signature Algorithm: sha256WithRSAEncryption ae:57:48:70:39:11:67:46:d8:28:32:30:8e:02:0f:a2:c1:c3: da:25:63:01:60:fc:c7:28:41:13:67:d5:5c:de:03:0e:ea:23: d8:2f:ec:56:b1:f2:56:62:28:7d:74:cc:a1:fe:b1:9e:79:04: d8:9c:18:79:6a:2f:ea:7d:00:e9:dc:e2:6f:65:d9:7f:3c:54: 10:0a:0b:98:19:ca:1d:9e:99:35:ce:84:90:36:1c:f3:94:ad: 61:f8:b5:99:95:db:bb:75:d7:63:d5:31:47:df:ce:dd:38:37: 11:9c:c7:ea:35:91:0b:7f:2b:17:ae:9a:a4:c0:4d:10:3e:78: 1b:34:6c:1e:6e:c7:65:8c:27:67:59:c1:c8:16:6c:6f:ce:95: 0d:c3:47:9b:dd:f3:b8:77:cc:a5:6d:2b:7a:c7:00:48:f1:66: db:dd:76:8f:05:52:b4:74:a2:f0:a7:1d:e2:3e:fa:04:07:5f: 6a:03:14:6c:b3:69:c6:e3:a3:72:f8:e6:47:1f:0d:cb:12:38: ff:42:87:1f:57:4b:24:38:4e:6f:2b:13:7b:8c:fa:b8:bd:e8: ca:2a:33:c2:50:bd:76:ea:8e:73:20:18:8c:30:27:52:29:91: 52:f9:b6:02:40:5e:87:59:f9:1f:95:04:9b:e1:f2:e7:d0:3a: 69:e1:a4:25 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUA1D3god+aKUxSX54lAEziuTfVKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTdaFw0yNzA5MTYwNTQ2MTdaMDMxMTAvBgNV BAMTKDdFMzY0Nzc0NDAxRTY0MDU5RTk5QzRGMDUwQTJDQjdCRkIzNzdEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aoBi8qcJjJ1lCG3ek2pHM/0h d5QxJe9eMuFVcrRWnByOX1VggsHCXAS4eIYwqQ1fOHKjwxdmRUpM/alc5Ors2T6I KYDoZLAaIb0DoJOT8VgLKodQ3EJdnPNQAKCb0rvAhGgZ9SwnuLAjQHaMXVNO2WDX XFHaAO7cRAmEG51hrUw4lwgEJXkhKaNW8PPzf150fF3BbvLJb2PpT2SZQLQLo6g8 dSnfJUuqChJbKuDjxjMOSlNPj2rvht8+2D4LUCYiRZPqJ8L1TcybqJ5c0PPfS4WV JIa96z+xubOIi/xfkaKS3A2FQL4fDz9QjsghWULJ6Er9GkEhM07vlagYoFrfAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUfjZHdEAeZAWemcTwUKLLe/s3fTkwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzMTJlMzEzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEz NzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyI2/MA0GCSqGSIb3DQEBCwUAA4IBAQCuV0hwORFnRtgo MjCOAg+iwcPaJWMBYPzHKEETZ9Vc3gMO6iPYL+xWsfJWYih9dMyh/rGeeQTYnBh5 ai/qfQDp3OJvZdl/PFQQCguYGcodnpk1zoSQNhzzlK1h+LWZldu7dddj1TFH387d ODcRnMfqNZELfysXrpqkwE0QPngbNGwebsdljCdnWcHIFmxvzpUNw0eb3fO4d8yl bSt6xwBI8Wbb3XaPBVK0dKLwpx3iPvoEB19qAxRss2nG46Ny+OZHHw3LEjj/Qocf V0skOE5vKxN7jPq4vejKKjPCUL126o5zIBiMMCdSKZFS+bYCQF6HWfkflQSb4fLn 0Dpp4aQl -----END CERTIFICATE-----Generated at Sat Sep 19 04:00:43 2026 by rpki-client