$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa File: 3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa (raw, json) Hash identifier: 1O1bwFlNUrnBZKf5iZ/AKGw7CL4D1fEh+FZ4oNM9ipM= Subject key identifier: 4B:7A:CF:3F:F7:9C:2E:03:92:C3:A0:78:71:D9:D2:DA:3D:B1:2F:0B Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0FC374B475E5620654AFA32C3FB2F1D2813F3FD2 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa Signing time: Thu 17 Sep 2026 05:46:09 +0000 ROA not before: Thu 17 Sep 2026 05:41:09 +0000 ROA not after: Thu 16 Sep 2027 05:46:09 +0000 asID: 151331 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c3:74:b4:75:e5:62:06:54:af:a3:2c:3f:b2:f1:d2:81:3f:3f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:09 2026 GMT Not After : Sep 16 05:46:09 2027 GMT Subject: CN=4B7ACF3FF79C2E0392C3A07871D9D2DA3DB12F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:e4:64:70:3a:1d:c6:60:24:f7:b8:fe:9b: c7:9c:60:7f:32:9e:45:b1:d7:7f:d1:14:74:7c:c3: 33:57:f5:60:22:a0:8a:fb:4c:36:d0:67:5d:78:0d: 9e:5b:98:7f:56:e3:97:22:8a:2a:0a:35:db:d9:11: 72:2f:27:de:19:54:7e:44:98:0b:64:2a:44:be:8e: aa:d4:fa:bb:58:34:e0:fe:97:5c:ac:23:f6:88:e3: d7:d1:9c:75:13:3f:85:d4:7e:6e:48:55:c8:ab:27: de:0d:a4:0d:0e:02:68:ba:2f:b0:4a:aa:24:89:b0: 6e:99:3b:a9:2b:99:2b:04:62:17:37:f4:d7:6d:c3: c7:00:e0:aa:7c:38:3b:c7:d1:79:15:de:53:cb:7e: 2f:9c:de:99:93:f0:1d:fc:95:eb:8a:8b:de:fe:43: b5:12:9d:c9:62:3c:31:4d:13:70:21:0f:36:54:5b: d6:2b:b9:c2:9b:51:f2:1b:60:ae:d7:7e:c7:88:1a: be:1d:a5:34:70:3a:9d:62:1b:6b:e4:47:cd:eb:42: 3e:5e:92:7a:d9:06:c2:a4:88:c1:4d:b1:ee:f4:3b: d1:e2:d0:54:a8:8a:69:81:02:0d:d1:55:65:09:7c: 13:05:de:a7:3f:2b:ac:a5:e5:70:0e:05:bd:8c:e1: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7A:CF:3F:F7:9C:2E:03:92:C3:A0:78:71:D9:D2:DA:3D:B1:2F:0B X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption a8:bb:fd:31:3f:d8:0b:e7:f7:62:c1:6b:3d:fd:97:d4:02:8c: 4a:39:ad:c6:5b:7c:40:2c:c5:5b:4a:3d:0e:4b:6a:da:78:74: 31:1a:58:5a:be:04:64:61:17:86:ec:87:81:f7:f7:42:75:3d: 09:05:26:d9:4e:bf:46:59:7f:6e:2c:1a:5b:5d:da:22:c2:66: 7e:c7:54:73:32:7e:8b:90:e5:f1:1a:25:33:8c:11:bb:6d:5b: 67:0b:ed:f4:6d:2f:f2:98:ee:96:04:d7:52:f4:f0:94:2a:50: 57:23:74:95:b0:dd:1a:5c:0e:55:7e:4d:e6:86:41:27:7a:ff: b7:a2:ec:22:45:57:bd:58:0a:ae:51:ec:33:46:33:9c:ea:60: 19:9b:54:d9:ec:78:07:73:e1:dd:7b:68:e9:3b:04:75:b1:07: 9e:49:7f:b4:1f:4d:a2:ab:d5:79:83:ed:3c:b3:5f:08:64:c7: d1:85:6f:a4:c8:35:8e:25:ff:86:a5:8b:f4:19:ac:f2:f6:d8: 19:f9:5e:ac:75:98:7f:77:99:1b:ca:d9:c5:d9:64:c1:3b:c8: 14:27:e8:eb:19:29:fb:96:d7:7f:99:18:dd:81:22:6a:c1:c9: 04:d8:df:e6:ce:ea:28:2d:41:b7:be:ae:29:a8:da:43:ff:f4: 6a:a4:ae:6d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUD8N0tHXlYgZUr6MsP7Lx0oE/P9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDlaFw0yNzA5MTYwNTQ2MDlaMDMxMTAvBgNV BAMTKDRCN0FDRjNGRjc5QzJFMDM5MkMzQTA3ODcxRDlEMkRBM0RCMTJGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqk+RkcDodxmAk97j+m8ecYH8y nkWx13/RFHR8wzNX9WAioIr7TDbQZ114DZ5bmH9W45ciiioKNdvZEXIvJ94ZVH5E mAtkKkS+jqrU+rtYNOD+l1ysI/aI49fRnHUTP4XUfm5IVcirJ94NpA0OAmi6L7BK qiSJsG6ZO6krmSsEYhc39Ndtw8cA4Kp8ODvH0XkV3lPLfi+c3pmT8B38leuKi97+ Q7USncliPDFNE3AhDzZUW9YrucKbUfIbYK7XfseIGr4dpTRwOp1iG2vkR83rQj5e knrZBsKkiMFNse70O9Hi0FSoimmBAg3RVWUJfBMF3qc/K6yl5XAOBb2M4Wo/AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUS3rPP/ecLgOSw6B4cdnS2j2xLwswHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzNjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzNTMxMzMz MzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQCou/0xP9gL5/di wWs9/ZfUAoxKOa3GW3xALMVbSj0OS2raeHQxGlhavgRkYReG7IeB9/dCdT0JBSbZ Tr9GWX9uLBpbXdoiwmZ+x1RzMn6LkOXxGiUzjBG7bVtnC+30bS/ymO6WBNdS9PCU KlBXI3SVsN0aXA5Vfk3mhkEnev+3ouwiRVe9WAquUewzRjOc6mAZm1TZ7HgHc+Hd e2jpOwR1sQeeSX+0H02iq9V5g+08s18IZMfRhW+kyDWOJf+GpYv0Gazy9tgZ+V6s dZh/d5kbytnF2WTBO8gUJ+jrGSn7ltd/mRjdgSJqwckE2N/mzuooLUG3vq4pqNpD //RqpK5t -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:33 2026 by rpki-client