$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa File: 3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa (raw, json) Hash identifier: bNMaoOupC97stn8M6kbDP4FItSQ5y6B2ZHAVeB5mDdU= Subject key identifier: 3F:06:D5:F8:91:B8:63:B6:A8:51:BD:DE:6C:F3:0F:FD:21:2A:DC:62 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 249DD375736156C3DA7A54C1ADC16CAA2C1B3361 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa Signing time: Thu 17 Sep 2026 05:46:06 +0000 ROA not before: Thu 17 Sep 2026 05:41:06 +0000 ROA not after: Thu 16 Sep 2027 05:46:06 +0000 asID: 199436 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9d:d3:75:73:61:56:c3:da:7a:54:c1:ad:c1:6c:aa:2c:1b:33:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:06 2026 GMT Not After : Sep 16 05:46:06 2027 GMT Subject: CN=3F06D5F891B863B6A851BDDE6CF30FFD212ADC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:26:08:92:f5:f3:d2:61:7e:6f:82:9c:f5: f5:ea:f6:38:7f:de:9d:97:55:71:55:03:6a:1e:ca: 65:e7:c2:67:f4:59:b1:53:29:e8:95:b1:78:ff:3d: 48:78:d2:a3:94:3f:7b:32:c5:d4:70:0d:93:ac:c4: c8:e8:7c:97:17:66:61:83:92:e3:b4:4d:da:dc:62: 8d:8e:13:c7:6f:0b:15:e1:ff:15:1b:c1:d6:e8:f9: 51:09:1a:c8:6c:a9:5c:ab:83:33:9a:6b:b9:33:89: 8a:7f:10:7d:11:41:6b:d9:e9:c2:c0:4c:23:6f:a4: 04:96:3a:5e:eb:43:a5:66:d2:0f:f0:3c:76:09:59: 61:ac:fc:1c:62:69:8c:44:86:92:23:66:8e:09:da: 34:69:91:8d:08:b2:2c:b2:e4:93:65:62:ee:c1:de: 14:23:94:6e:d9:9e:8d:ff:78:0d:fe:57:20:e5:ce: 2a:3a:d5:b8:b8:77:f1:1c:92:b5:84:fc:6e:fe:6c: 32:ff:66:b5:91:f7:28:af:45:d1:56:b8:8e:26:81: 4c:d7:6d:d6:7a:3d:95:11:10:f9:7d:c7:db:d0:28: c0:ad:5d:c9:06:c6:e3:d2:38:e8:96:c9:b6:f3:ad: 6f:ff:35:d7:c2:6e:7f:f9:5d:2c:ce:f4:9e:4b:05: 79:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:06:D5:F8:91:B8:63:B6:A8:51:BD:DE:6C:F3:0F:FD:21:2A:DC:62 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 89:3e:6b:32:61:ec:f5:9b:08:f6:be:8f:5e:5b:7a:3c:2b:ae: 97:7e:4a:8e:33:25:f2:52:71:a8:5b:29:38:ce:df:7a:74:7b: 14:c2:24:34:1b:42:04:15:07:55:f1:2e:58:12:87:d6:c9:bc: bd:0c:c3:db:2c:f1:87:3e:23:ee:6e:4e:3e:24:dc:f7:24:02: 6b:8f:f2:79:ec:7b:de:e6:24:8e:89:a6:ac:49:a9:16:8c:88: 36:b5:75:5f:76:33:65:f0:35:9e:9d:11:38:be:fe:1a:1e:27: dc:9e:07:b3:75:93:5a:5a:07:d0:71:24:b8:68:b8:a5:b3:2d: b5:0f:2f:f9:29:3a:f3:e2:36:d2:a3:41:8a:2a:27:b6:4f:d1: 2f:68:d3:6c:57:56:9c:e0:04:12:26:a2:58:50:36:c9:b1:7e: 90:02:1a:df:3c:47:17:8d:4a:6f:c6:03:c0:38:a9:27:8d:2e: 75:ca:7a:ca:66:1b:18:f1:15:4a:07:83:17:83:40:7c:7b:96: 2a:9f:7d:14:24:33:6d:e2:0d:f2:d8:39:24:d9:9f:26:26:68: 7e:e2:c6:2b:9f:43:35:4c:3e:9e:0b:1a:98:e1:96:eb:8c:4e: 8b:80:4e:c0:cd:3f:23:b8:94:2a:1c:ae:b5:3a:bf:7e:59:23: 7e:18:50:3f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUJJ3TdXNhVsPaelTBrcFsqiwbM2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDZaFw0yNzA5MTYwNTQ2MDZaMDMxMTAvBgNV BAMTKDNGMDZENUY4OTFCODYzQjZBODUxQkRERTZDRjMwRkZEMjEyQURDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLCYIkvXz0mF+b4Kc9fXq9jh/ 3p2XVXFVA2oeymXnwmf0WbFTKeiVsXj/PUh40qOUP3syxdRwDZOsxMjofJcXZmGD kuO0TdrcYo2OE8dvCxXh/xUbwdbo+VEJGshsqVyrgzOaa7kziYp/EH0RQWvZ6cLA TCNvpASWOl7rQ6Vm0g/wPHYJWWGs/BxiaYxEhpIjZo4J2jRpkY0Isiyy5JNlYu7B 3hQjlG7Zno3/eA3+VyDlzio61bi4d/EckrWE/G7+bDL/ZrWR9yivRdFWuI4mgUzX bdZ6PZUREPl9x9vQKMCtXckGxuPSOOiWybbzrW//NdfCbn/5XSzO9J5LBXmDAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUPwbV+JG4Y7aoUb3ebPMP/SEq3GIwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzNjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzOTM5MzQz MzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQCJPmsyYez1mwj2 vo9eW3o8K66XfkqOMyXyUnGoWyk4zt96dHsUwiQ0G0IEFQdV8S5YEofWyby9DMPb LPGHPiPubk4+JNz3JAJrj/J57Hve5iSOiaasSakWjIg2tXVfdjNl8DWenRE4vv4a HifcngezdZNaWgfQcSS4aLilsy21Dy/5KTrz4jbSo0GKKie2T9EvaNNsV1ac4AQS JqJYUDbJsX6QAhrfPEcXjUpvxgPAOKknjS51ynrKZhsY8RVKB4MXg0B8e5Yqn30U JDNt4g3y2Dkk2Z8mJmh+4sYrn0M1TD6eCxqY4ZbrjE6LgE7AzT8juJQqHK61Or9+ WSN+GFA/ -----END CERTIFICATE-----Generated at Sat Sep 19 05:03:40 2026 by rpki-client