$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa File: 3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa (raw, json) Hash identifier: 98apHSRAtsgGwiUHAMePYG0RGIhfnzmyRcfJ+g+Y+C4= Subject key identifier: 17:CB:13:EC:C6:8B:A1:CB:FC:94:47:CB:91:86:62:A9:99:C0:AC:B4 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4E6580BC5252444EA136BF3E2CC5ACBF93129539 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa Signing time: Thu 17 Sep 2026 05:46:06 +0000 ROA not before: Thu 17 Sep 2026 05:41:06 +0000 ROA not after: Thu 16 Sep 2027 05:46:06 +0000 asID: 212259 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:65:80:bc:52:52:44:4e:a1:36:bf:3e:2c:c5:ac:bf:93:12:95:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:06 2026 GMT Not After : Sep 16 05:46:06 2027 GMT Subject: CN=17CB13ECC68BA1CBFC9447CB918662A999C0ACB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:14:7c:6a:2f:68:8c:30:4f:fe:b7:45:d0: b1:cb:b5:b7:79:c1:43:45:42:df:37:06:fe:ed:ac: b0:60:a5:7f:92:52:f0:61:a9:77:07:e2:b1:a9:09: 5c:30:27:91:4b:06:be:e0:c9:ad:c7:61:c7:24:c9: 5a:dc:7f:37:fc:af:30:21:54:4a:81:4f:fd:e9:56: fb:52:a7:61:b1:e4:eb:ff:1b:2d:8d:47:a6:83:98: 7f:92:b0:c2:ea:55:b8:3c:f4:dc:c4:ca:d5:c0:6b: af:85:3b:50:5a:73:f6:c9:93:86:a9:ef:72:9c:55: d6:96:24:59:e7:23:7f:bd:bc:44:12:2f:28:95:2a: 28:fd:40:51:56:67:3f:b4:64:3c:7b:49:f5:b4:12: 51:c2:d0:1a:7c:a0:4d:ac:30:ac:31:4c:f7:48:35: fd:e9:9b:fa:38:72:94:14:4f:11:69:29:45:14:08: b8:31:17:bf:f1:42:f5:79:c8:f1:56:a9:37:d8:50: 3c:7a:02:8f:25:57:85:c5:9c:92:dc:ab:bf:5f:b0: ee:1d:12:c5:e3:2b:56:b1:d4:e0:79:32:2a:e2:38: ee:25:06:31:7d:2a:28:b2:fe:89:7b:35:7b:3c:98: fa:ee:1e:54:bf:43:a4:5e:a6:0a:0a:66:21:f1:49: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CB:13:EC:C6:8B:A1:CB:FC:94:47:CB:91:86:62:A9:99:C0:AC:B4 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption a0:51:78:54:0f:1a:a6:19:86:8b:0d:83:9d:d1:fa:ea:64:e5: b1:0e:ce:e0:d5:df:50:12:38:eb:40:6f:39:6e:93:18:5f:4d: 4d:9e:97:f9:4c:c3:2e:37:e2:da:45:f1:e9:f0:1c:90:cf:51: df:b0:77:25:39:bf:47:7a:54:d5:14:83:64:90:8e:c6:30:e1: e5:4f:bd:f8:a1:9d:76:79:64:3b:ca:e8:1c:02:31:57:08:4e: 0a:4b:01:ca:10:2e:0e:3e:83:4a:07:0c:c0:ed:26:96:e6:f4: 4f:2f:83:cc:d4:5b:f8:8e:d3:91:ac:90:f6:e2:30:cb:2b:ab: b2:e8:ec:8b:c9:a6:e0:9e:40:7f:a4:20:f5:70:11:b1:c0:c3: a8:e2:a2:72:15:2b:2b:11:5c:da:fc:76:d1:a9:bf:d4:42:d9: 8e:3e:5c:f0:23:ee:00:be:90:7c:1e:85:88:07:66:50:8e:80: 61:0a:44:61:b8:fd:4c:1c:d5:fe:25:fd:40:ec:3e:13:e4:90: ec:17:41:1b:bb:f5:8e:f3:78:73:6a:81:44:ed:28:91:b8:91: 2c:18:ca:7d:bd:26:ab:d5:29:d7:9b:c4:55:de:0b:c2:9a:8c: bf:73:41:21:6e:41:6e:e0:98:59:70:ca:5f:15:65:cb:c1:dd: bf:ff:9a:6e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUTmWAvFJSRE6hNr8+LMWsv5MSlTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDZaFw0yNzA5MTYwNTQ2MDZaMDMxMTAvBgNV BAMTKDE3Q0IxM0VDQzY4QkExQ0JGQzk0NDdDQjkxODY2MkE5OTlDMEFDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SRR8ai9ojDBP/rdF0LHLtbd5 wUNFQt83Bv7trLBgpX+SUvBhqXcH4rGpCVwwJ5FLBr7gya3HYcckyVrcfzf8rzAh VEqBT/3pVvtSp2Gx5Ov/Gy2NR6aDmH+SsMLqVbg89NzEytXAa6+FO1Bac/bJk4ap 73KcVdaWJFnnI3+9vEQSLyiVKij9QFFWZz+0ZDx7SfW0ElHC0Bp8oE2sMKwxTPdI Nf3pm/o4cpQUTxFpKUUUCLgxF7/xQvV5yPFWqTfYUDx6Ao8lV4XFnJLcq79fsO4d EsXjK1ax1OB5MiriOO4lBjF9Kiiy/ol7NXs8mPruHlS/Q6RepgoKZiHxSV0pAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUF8sT7MaLocv8lEfLkYZiqZnArLQwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzNjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMTMyMzIz NTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQCgUXhUDxqmGYaL DYOd0frqZOWxDs7g1d9QEjjrQG85bpMYX01Nnpf5TMMuN+LaRfHp8ByQz1HfsHcl Ob9HelTVFINkkI7GMOHlT734oZ12eWQ7yugcAjFXCE4KSwHKEC4OPoNKBwzA7SaW 5vRPL4PM1Fv4jtORrJD24jDLK6uy6OyLyabgnkB/pCD1cBGxwMOo4qJyFSsrEVza /HbRqb/UQtmOPlzwI+4AvpB8HoWIB2ZQjoBhCkRhuP1MHNX+Jf1A7D4T5JDsF0Eb u/WO83hzaoFE7SiRuJEsGMp9vSar1SnXm8RV3gvCmoy/c0EhbkFu4JhZcMpfFWXL wd2//5pu -----END CERTIFICATE-----Generated at Sat Sep 19 04:01:10 2026 by rpki-client