$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138342e302f32332d3234203d3e20383334.roa File: 3230302e3134392e3138342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: o5J99m2IOhS92GZSwWPT8g9PFy1lbLDYTjJ8Rgl0mV0= Subject key identifier: 67:1E:DE:A1:31:7B:69:1F:09:63:FB:1A:00:E2:24:8C:C5:0D:4F:CA Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 71BBDA3E181DD36ECC70A9394BA9F7556C1A2413 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138342e302f32332d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 05:46:08 +0000 ROA not before: Thu 17 Sep 2026 05:41:08 +0000 ROA not after: Thu 16 Sep 2027 05:46:08 +0000 asID: 834 IP address blocks: 200.149.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bb:da:3e:18:1d:d3:6e:cc:70:a9:39:4b:a9:f7:55:6c:1a:24:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:08 2026 GMT Not After : Sep 16 05:46:08 2027 GMT Subject: CN=671EDEA1317B691F0963FB1A00E2248CC50D4FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:7d:45:e6:b5:cd:bf:4b:13:af:31:9b:10: 41:ac:5f:db:f0:72:bc:4f:28:a4:c6:b7:34:f4:d8: 31:70:0e:c7:84:02:a3:50:d7:bc:24:bb:97:60:9b: 86:f7:56:3d:3d:ae:8e:77:39:68:a8:05:46:03:32: c0:1c:ed:47:93:c6:8e:dc:9d:fb:7c:ad:af:79:a8: 7e:fb:05:5b:0a:d8:58:da:d9:1c:a2:76:4f:eb:36: d1:2f:13:df:4e:0a:f9:9a:90:be:5e:d6:a0:fc:11: cf:92:5f:af:f5:be:bb:0d:a6:62:10:da:54:f2:ce: 4a:81:c7:0f:24:af:2e:e0:89:f3:ce:9d:82:38:52: 7f:ce:e0:c4:d7:5a:a5:c4:4a:4f:f6:d0:29:42:b9: 73:47:8f:26:82:38:e7:9a:6e:37:b4:3d:7d:d9:0a: 0d:00:e4:05:7b:33:2d:86:df:b8:ce:3c:8a:b0:e7: 52:ef:61:ee:3e:63:dc:c0:6a:94:4c:f5:bb:d4:c2: d8:38:ea:8f:65:23:f3:c7:1e:ac:b1:52:3f:cf:a7: 46:dd:07:48:a8:04:6b:8e:22:70:b8:a5:a3:e2:b2: 8f:7c:5e:9a:8b:4d:81:a1:e6:51:09:c5:ac:c3:1c: 34:ab:76:75:72:1a:1a:6c:0f:34:88:69:95:95:3b: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1E:DE:A1:31:7B:69:1F:09:63:FB:1A:00:E2:24:8C:C5:0D:4F:CA X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.149.184.0/23 Signature Algorithm: sha256WithRSAEncryption 39:4a:ef:46:c6:34:b0:cd:37:91:c3:6c:01:4b:dc:5b:0e:43: 4c:8b:4c:64:9f:d3:3b:12:40:70:2e:c5:a3:aa:d8:f1:39:c5: 33:07:8d:ad:a1:ef:06:df:fe:c2:2d:41:d7:79:e1:f6:a9:18: 38:5b:08:d7:e6:3a:fd:0e:1c:b4:b6:20:0f:10:4a:38:44:6a: 2c:ae:b5:8b:ba:e5:55:9e:c8:e8:b2:76:e9:eb:f3:be:6e:14: f2:01:bb:a1:6f:17:3d:20:36:82:d9:79:ca:d0:a4:e6:16:b2: 1e:ed:82:11:e0:a4:82:78:13:56:75:87:bf:7c:46:49:2d:e9: 0e:b7:32:aa:ec:50:cf:9d:ac:8c:2f:03:ed:df:75:4e:70:18: 1e:6d:d7:c6:67:89:85:0d:b3:2d:9d:5a:c4:96:26:ae:5d:cd: 20:69:3d:cd:b0:10:81:72:fb:0a:9c:95:e0:86:74:ec:93:65: 53:68:6b:7d:a8:50:97:f6:ab:85:df:67:1a:9e:1a:8d:b7:06: 5a:da:0b:ea:f4:0a:35:ad:06:cb:cb:3a:fe:ec:b1:d1:46:cd: 67:a2:8f:6d:f9:d7:44:4c:65:4c:cc:31:6a:59:7f:2b:f0:58: db:89:a0:d7:ae:4d:1b:dc:00:8e:19:76:5f:3c:0f:24:24:3b: b0:eb:31:b9 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUcbvaPhgd027McKk5S6n3VWwaJBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDhaFw0yNzA5MTYwNTQ2MDhaMDMxMTAvBgNV BAMTKDY3MUVERUExMzE3QjY5MUYwOTYzRkIxQTAwRTIyNDhDQzUwRDRGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl031F5rXNv0sTrzGbEEGsX9vw crxPKKTGtzT02DFwDseEAqNQ17wku5dgm4b3Vj09ro53OWioBUYDMsAc7UeTxo7c nft8ra95qH77BVsK2Fja2Ryidk/rNtEvE99OCvmakL5e1qD8Ec+SX6/1vrsNpmIQ 2lTyzkqBxw8kry7gifPOnYI4Un/O4MTXWqXESk/20ClCuXNHjyaCOOeabje0PX3Z Cg0A5AV7My2G37jOPIqw51LvYe4+Y9zAapRM9bvUwtg46o9lI/PHHqyxUj/Pp0bd B0ioBGuOInC4paPiso98XpqLTYGh5lEJxazDHDSrdnVyGhpsDzSIaZWVO0I5AgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUZx7eoTF7aR8JY/saAOIkjMUNT8owHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzOTJlMzEzODM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByJW4MA0GCSqGSIb3DQEBCwUAA4IBAQA5Su9GxjSwzTeRw2wBS9xb DkNMi0xkn9M7EkBwLsWjqtjxOcUzB42toe8G3/7CLUHXeeH2qRg4WwjX5jr9Dhy0 tiAPEEo4RGosrrWLuuVVnsjosnbp6/O+bhTyAbuhbxc9IDaC2XnK0KTmFrIe7YIR 4KSCeBNWdYe/fEZJLekOtzKq7FDPnayMLwPt33VOcBgebdfGZ4mFDbMtnVrEliau Xc0gaT3NsBCBcvsKnJXghnTsk2VTaGt9qFCX9quF32canhqNtwZa2gvq9Ao1rQbL yzr+7LHRRs1noo9t+ddETGVMzDFqWX8r8FjbiaDXrk0b3ACOGXZfPA8kJDuw6zG5 -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:45 2026 by rpki-client