$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa File: 3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa (raw, json) Hash identifier: xpbhKwgEj8+qyzOq3L1hhR+IgsBKLEnKJfL9CB4HSZQ= Subject key identifier: CA:8E:0A:81:AA:B9:49:36:9E:5F:21:E4:09:A7:58:04:D8:93:68:51 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 57EB48101BDB0EBA258631AC681FB571FF352C24 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa Signing time: Thu 17 Sep 2026 05:46:13 +0000 ROA not before: Thu 17 Sep 2026 05:41:13 +0000 ROA not after: Thu 16 Sep 2027 05:46:13 +0000 asID: 402628 IP address blocks: 200.180.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:eb:48:10:1b:db:0e:ba:25:86:31:ac:68:1f:b5:71:ff:35:2c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:13 2026 GMT Not After : Sep 16 05:46:13 2027 GMT Subject: CN=CA8E0A81AAB949369E5F21E409A75804D8936851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:1b:c9:2b:34:8d:8d:2b:c5:7c:3b:79:6c: 40:f6:1a:49:81:d9:05:eb:75:5e:97:74:91:61:09: 00:89:38:7e:61:9f:a0:c5:06:1a:b4:2e:11:9c:aa: 2d:6c:e3:25:c9:7e:5c:fa:85:57:8b:3a:0d:be:63: fd:b8:4d:6b:17:fc:85:83:e3:93:28:8b:3c:c1:17: 86:55:a3:3e:0c:37:a9:48:cd:b7:62:83:a1:a5:db: 1c:58:fe:d3:f7:48:d8:fa:aa:bd:0b:b8:2a:a0:e0: 4f:94:5d:13:aa:d9:48:d8:f3:cd:c8:f5:25:44:21: fe:2e:98:5d:ac:9b:90:9c:b8:9f:3e:e9:e1:ed:95: 0d:99:35:0c:e5:16:93:c7:f7:67:01:30:26:1e:2f: 94:05:91:7f:d3:3a:34:c9:57:44:53:ae:c6:5b:b9: 5d:4b:d7:6a:a4:d9:36:3e:40:be:5b:08:07:6b:3b: bb:2d:8e:14:74:a5:fd:f7:de:70:b8:76:be:95:7f: b2:ee:e0:f9:46:ba:d4:42:35:08:49:69:ef:5c:76: a2:17:6d:92:bf:8f:8a:34:3f:08:c1:7c:d6:aa:d1: c7:fc:62:8f:30:77:41:73:f4:47:cc:6a:73:76:e9: 6d:9b:e5:ed:c2:49:19:7b:bb:6c:cc:a3:46:32:e8: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8E:0A:81:AA:B9:49:36:9E:5F:21:E4:09:A7:58:04:D8:93:68:51 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.160.0/21 Signature Algorithm: sha256WithRSAEncryption 5e:9c:8d:e3:fa:94:c2:99:96:db:9a:89:9a:84:82:9a:ea:0e: b3:8d:c8:c7:ac:b2:91:28:f1:47:b8:30:4e:44:0d:71:41:37: f5:1e:7b:45:3a:06:f8:5b:0c:b7:80:04:c6:8c:88:14:0e:02: 49:db:04:da:27:71:8f:97:4c:62:17:b4:05:73:f0:40:37:c4: c9:bc:96:bd:f1:56:b3:e9:17:9d:4c:de:c9:31:d3:f0:a3:20: 17:45:34:86:5d:5e:eb:c4:09:8c:0b:26:31:fd:78:6d:70:86: 43:c9:c7:37:64:96:81:b5:57:ad:cb:bf:a6:7d:ac:6d:0f:55: 5b:3e:2e:5e:d7:1f:26:0f:97:0f:4b:33:6f:12:73:49:ac:cf: e9:13:30:c9:5e:c1:3a:49:e0:1e:a5:54:5f:e5:d3:50:0d:24: 76:a5:19:02:47:5b:23:af:57:c8:4c:2d:b6:a9:ed:1b:ee:49: 17:9d:c9:ce:65:5e:c4:5e:30:3f:36:e0:13:8e:aa:0f:88:43: ca:67:33:3c:84:2b:fa:26:13:f8:a1:9f:3c:5f:8e:bb:24:21: 46:ea:69:a1:cd:5a:c2:b2:97:cd:7d:6a:03:6b:cd:82:d1:d4: 94:56:40:d2:70:1f:f6:22:86:61:54:a7:cd:91:d0:3e:94:e9: ec:a3:60:10 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUV+tIEBvbDrolhjGsaB+1cf81LCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTNaFw0yNzA5MTYwNTQ2MTNaMDMxMTAvBgNV BAMTKENBOEUwQTgxQUFCOTQ5MzY5RTVGMjFFNDA5QTc1ODA0RDg5MzY4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPRvJKzSNjSvFfDt5bED2GkmB 2QXrdV6XdJFhCQCJOH5hn6DFBhq0LhGcqi1s4yXJflz6hVeLOg2+Y/24TWsX/IWD 45MoizzBF4ZVoz4MN6lIzbdig6Gl2xxY/tP3SNj6qr0LuCqg4E+UXROq2UjY883I 9SVEIf4umF2sm5CcuJ8+6eHtlQ2ZNQzlFpPH92cBMCYeL5QFkX/TOjTJV0RTrsZb uV1L12qk2TY+QL5bCAdrO7stjhR0pf333nC4dr6Vf7Lu4PlGutRCNQhJae9cdqIX bZK/j4o0PwjBfNaq0cf8Yo8wd0Fz9EfManN26W2b5e3CSRl7u2zMo0Yy6AtFAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUyo4Kgaq5STaeXyHkCadYBNiTaFEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzNjMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzMDMyMzYz MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDyLSgMA0GCSqGSIb3DQEBCwUAA4IBAQBenI3j+pTCmZbb momahIKa6g6zjcjHrLKRKPFHuDBORA1xQTf1HntFOgb4Wwy3gATGjIgUDgJJ2wTa J3GPl0xiF7QFc/BAN8TJvJa98Vaz6RedTN7JMdPwoyAXRTSGXV7rxAmMCyYx/Xht cIZDycc3ZJaBtVety7+mfaxtD1VbPi5e1x8mD5cPSzNvEnNJrM/pEzDJXsE6SeAe pVRf5dNQDSR2pRkCR1sjr1fITC22qe0b7kkXncnOZV7EXjA/NuATjqoPiEPKZzM8 hCv6JhP4oZ88X467JCFG6mmhzVrCspfNfWoDa82C0dSUVkDScB/2IoZhVKfNkdA+ lOnso2AQ -----END CERTIFICATE-----Generated at Sat Sep 19 02:57:35 2026 by rpki-client