$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa File: 3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa (raw, json) Hash identifier: Qq+xdf+1egrWop05KbTzhdPDtLdNbZzHtFJUfxIXoNw= Subject key identifier: 73:EF:33:CE:3E:49:DA:53:35:4C:70:77:23:DB:30:80:07:76:C2:E5 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 72C2A0F85B48699E7EFA21F1262887AFC11EB7B3 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa Signing time: Thu 17 Sep 2026 05:46:17 +0000 ROA not before: Thu 17 Sep 2026 05:41:17 +0000 ROA not after: Thu 16 Sep 2027 05:46:17 +0000 asID: 9304 IP address blocks: 200.149.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c2:a0:f8:5b:48:69:9e:7e:fa:21:f1:26:28:87:af:c1:1e:b7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:17 2026 GMT Not After : Sep 16 05:46:17 2027 GMT Subject: CN=73EF33CE3E49DA53354C707723DB30800776C2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:ac:e1:0e:67:34:f4:2c:fd:5b:fc:68:b3: c7:37:f9:c6:38:a4:2d:b7:22:9d:28:3f:8e:6b:bb: d1:a0:77:6f:cf:48:f6:a9:00:84:8b:b9:c1:c9:96: d5:82:80:57:29:bc:52:e4:69:54:e4:ba:17:21:8c: c1:99:d6:72:c3:f0:f3:f3:7d:c6:15:13:53:62:e4: f3:f0:a8:13:29:25:83:a1:34:a7:e5:60:bf:cc:75: 6b:62:ab:c1:96:10:26:de:67:25:c5:0e:92:39:bf: 04:1f:37:2f:00:75:0d:1c:3d:7a:d8:c9:ee:e5:c4: 74:99:00:a7:0e:6b:24:05:d7:07:d4:62:a1:c1:20: ca:59:f2:f3:12:3a:57:9a:02:5c:b5:a6:86:7f:cb: ee:52:f8:2a:29:82:5b:4f:7a:8d:a2:e5:24:aa:e4: c8:34:31:82:7d:bc:b0:f2:b0:64:ae:19:58:93:7a: 4d:83:8c:3c:85:cf:71:82:4e:65:55:58:b3:f6:e4: 48:8c:27:ca:ed:df:61:18:29:a1:38:bb:63:a5:49: 0e:c6:c8:a7:1a:d7:83:77:4e:5f:28:8a:26:53:67: 08:8d:f0:e7:96:59:27:3f:aa:9a:47:f8:72:2f:e0: c7:17:c7:b3:5a:d8:63:de:45:3c:23:ca:e3:58:55: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EF:33:CE:3E:49:DA:53:35:4C:70:77:23:DB:30:80:07:76:C2:E5 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3137362e302f32312d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.149.176.0/21 Signature Algorithm: sha256WithRSAEncryption 00:ff:61:97:94:f6:5e:29:ba:cc:97:d3:e4:f6:8a:ac:0e:ee: 51:50:bd:b5:c3:c6:55:10:12:fd:03:1a:0d:a5:52:30:23:7a: 4a:f2:b6:d9:55:9f:b0:1f:17:1b:13:2d:19:c1:b3:65:92:30: 3f:3a:14:9a:72:00:5a:e2:78:05:b3:e1:45:61:57:73:72:f6: e4:93:13:a2:79:9a:e4:23:f9:82:7f:ef:f4:a3:87:d9:dd:b8: 51:1a:8b:57:e7:60:f6:05:d4:de:5b:06:0d:b5:86:fe:11:b3: a9:4c:9b:ac:4c:48:fb:35:81:39:61:ed:e9:95:53:ef:cf:3e: 98:bd:6a:d0:7d:b7:f9:ff:c4:cd:53:d7:0b:48:4d:70:2f:dd: ee:27:37:75:94:f3:08:b4:60:86:76:97:3f:5b:30:03:68:4f: a3:3f:d8:a4:17:e0:02:94:8d:27:ad:ef:b2:23:1e:ae:30:c8: 85:af:25:69:de:bd:0d:09:f5:9c:d0:9f:97:c6:7f:ed:62:e4: 32:90:e8:d4:54:c4:0a:15:16:57:88:b0:1c:e8:4f:b0:7e:92: 6d:01:0b:44:f6:af:9a:93:21:e7:3a:0f:64:32:53:32:5f:d2: 16:a0:45:dd:b1:32:f8:c3:cc:5f:c1:12:72:4f:4a:bb:e3:e7: ad:26:92:8c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcsKg+FtIaZ5++iHxJiiHr8Eet7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTdaFw0yNzA5MTYwNTQ2MTdaMDMxMTAvBgNV BAMTKDczRUYzM0NFM0U0OURBNTMzNTRDNzA3NzIzREIzMDgwMDc3NkMyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsKzhDmc09Cz9W/xos8c3+cY4 pC23Ip0oP45ru9Ggd2/PSPapAISLucHJltWCgFcpvFLkaVTkuhchjMGZ1nLD8PPz fcYVE1Ni5PPwqBMpJYOhNKflYL/MdWtiq8GWECbeZyXFDpI5vwQfNy8AdQ0cPXrY ye7lxHSZAKcOayQF1wfUYqHBIMpZ8vMSOleaAly1poZ/y+5S+CopgltPeo2i5SSq 5Mg0MYJ9vLDysGSuGViTek2DjDyFz3GCTmVVWLP25EiMJ8rt32EYKaE4u2OlSQ7G yKca14N3Tl8oiiZTZwiN8OeWWSc/qppH+HIv4McXx7Na2GPeRTwjyuNYVcbBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUc+8zzj5J2lM1THB3I9swgAd2wuUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzOTJlMzEzNzM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzkzMzMwMzQu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAPIlbAwDQYJKoZIhvcNAQELBQADggEBAAD/YZeU9l4pusyX0+T2 iqwO7lFQvbXDxlUQEv0DGg2lUjAjekryttlVn7AfFxsTLRnBs2WSMD86FJpyAFri eAWz4UVhV3Ny9uSTE6J5muQj+YJ/7/Sjh9nduFEai1fnYPYF1N5bBg21hv4Rs6lM m6xMSPs1gTlh7emVU+/PPpi9atB9t/n/xM1T1wtITXAv3e4nN3WU8wi0YIZ2lz9b MANoT6M/2KQX4AKUjSet77IjHq4wyIWvJWnevQ0J9ZzQn5fGf+1i5DKQ6NRUxAoV FleIsBzoT7B+km0BC0T2r5qTIec6D2QyUzJf0hagRd2xMvjDzF/BEnJPSrvj560m kow= -----END CERTIFICATE-----Generated at Sat Sep 19 05:03:34 2026 by rpki-client