$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa File: 3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa (raw, json) Hash identifier: Mvzlqg/BUTGQm/NbMFDFnhWgfjOG3owS7e6ld1rKvYw= Subject key identifier: 0B:61:CE:94:D0:77:AD:14:B6:F7:26:F3:9D:2C:5F:01:50:74:DF:56 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 25962B529EEC7F2A0A0BD022C4A6C305CB9BB218 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa Signing time: Thu 17 Sep 2026 05:46:17 +0000 ROA not before: Thu 17 Sep 2026 05:41:17 +0000 ROA not after: Thu 16 Sep 2027 05:46:17 +0000 asID: 215023 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:96:2b:52:9e:ec:7f:2a:0a:0b:d0:22:c4:a6:c3:05:cb:9b:b2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:17 2026 GMT Not After : Sep 16 05:46:17 2027 GMT Subject: CN=0B61CE94D077AD14B6F726F39D2C5F015074DF56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:d3:b2:84:f6:22:38:be:5e:38:1c:8d:12: cb:b7:9f:83:03:b7:a2:de:b5:fe:3a:29:21:4b:b0: 72:69:22:f7:6c:de:95:99:87:21:c1:bf:3e:f3:9a: 2a:13:d8:fb:20:dd:93:5f:e3:47:27:16:d5:08:de: 1f:e3:1a:4b:5c:7f:bb:c5:ad:2e:30:62:a5:08:4b: 48:7c:eb:7a:bc:14:62:3a:ea:f5:de:4f:0d:d8:28: 72:a4:ac:07:e2:86:b6:9a:bf:b2:42:3d:d4:0e:eb: 49:70:02:dc:31:35:6a:0d:f7:2d:00:02:6e:e0:e4: b5:df:e6:12:6a:bc:38:8f:2a:a0:3a:8a:8b:08:98: fb:8f:ae:a8:c5:43:9d:ca:f6:1b:7a:f5:d4:33:68: c0:e6:03:f5:ad:02:17:06:91:65:35:7d:6b:f1:da: 82:ea:0b:45:75:36:f8:5c:be:99:9e:f5:ef:81:be: bc:3f:bc:a3:ae:cb:75:eb:da:67:f9:4b:19:d1:d4: 4f:89:53:24:3c:fe:2b:9f:be:1d:d0:36:29:6a:24: c0:bb:a2:5a:20:5f:59:e8:c2:11:e6:e5:ac:af:14: 18:2a:34:c0:39:35:54:ac:bd:f8:f9:fa:6a:88:9e: ae:d2:97:28:6e:a7:71:5f:41:20:88:3f:75:71:8d: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:CE:94:D0:77:AD:14:B6:F7:26:F3:9D:2C:5F:01:50:74:DF:56 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 62:05:f0:ed:5d:86:c5:e6:39:08:ec:46:e8:59:01:4e:91:94: f1:78:9a:cb:ae:3c:fd:24:c8:56:08:f4:44:4d:ff:fe:ce:01: bb:d4:c7:78:5b:18:0e:56:2a:aa:db:ac:fb:7d:6b:30:e7:d7: f8:d7:0e:b5:7a:84:fe:aa:9c:db:f8:20:ed:1b:e3:d0:ed:43: 9e:de:cf:45:b9:e3:7a:2b:26:09:cc:27:8e:b3:c0:74:e2:71: ce:dc:63:c7:ed:a0:30:cd:8b:20:66:ed:f0:13:6b:7a:7b:e3: e5:40:c1:0c:1b:b6:87:46:67:69:fd:2d:6a:5a:46:37:8c:ef: 82:28:2f:5a:66:f8:5a:38:d8:40:aa:3d:0f:1e:c2:47:ce:60: af:ae:50:cf:0b:c7:bb:58:ec:d8:09:5a:c3:2c:b7:97:19:e0: 9e:e7:3d:cd:57:f7:bf:c5:6f:32:2b:7c:a7:2e:24:70:dc:af: b4:52:70:51:a1:66:68:03:8a:71:d9:ef:ff:47:b9:b7:f0:1f: c9:8a:ee:cc:f6:5e:ce:38:e7:31:fc:3f:f2:37:72:52:b4:3f: fc:28:fa:33:3a:cb:11:13:ce:38:9e:55:62:d4:b9:4e:0e:0a: 1b:f8:28:8e:82:01:15:46:80:9a:2f:bb:f1:3c:32:0e:30:84: 53:19:0e:b4 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUJZYrUp7sfyoKC9AixKbDBcubshgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTdaFw0yNzA5MTYwNTQ2MTdaMDMxMTAvBgNV BAMTKDBCNjFDRTk0RDA3N0FEMTRCNkY3MjZGMzlEMkM1RjAxNTA3NERGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR8dOyhPYiOL5eOByNEsu3n4MD t6Letf46KSFLsHJpIvds3pWZhyHBvz7zmioT2Psg3ZNf40cnFtUI3h/jGktcf7vF rS4wYqUIS0h863q8FGI66vXeTw3YKHKkrAfihraav7JCPdQO60lwAtwxNWoN9y0A Am7g5LXf5hJqvDiPKqA6iosImPuPrqjFQ53K9ht69dQzaMDmA/WtAhcGkWU1fWvx 2oLqC0V1Nvhcvpme9e+Bvrw/vKOuy3Xr2mf5SxnR1E+JUyQ8/iufvh3QNilqJMC7 ologX1nowhHm5ayvFBgqNMA5NVSsvfj5+mqInq7Slyhup3FfQSCIP3VxjQLhAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUC2HOlNB3rRS29ybznSxfAVB031YwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzNjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMTM1MzAz MjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQBiBfDtXYbF5jkI 7EboWQFOkZTxeJrLrjz9JMhWCPRETf/+zgG71Md4WxgOViqq26z7fWsw59f41w61 eoT+qpzb+CDtG+PQ7UOe3s9FueN6KyYJzCeOs8B04nHO3GPH7aAwzYsgZu3wE2t6 e+PlQMEMG7aHRmdp/S1qWkY3jO+CKC9aZvhaONhAqj0PHsJHzmCvrlDPC8e7WOzY CVrDLLeXGeCe5z3NV/e/xW8yK3ynLiRw3K+0UnBRoWZoA4px2e//R7m38B/Jiu7M 9l7OOOcx/D/yN3JStD/8KPozOssRE844nlVi1LlODgob+CiOggEVRoCaL7vxPDIO MIRTGQ60 -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:49 2026 by rpki-client