$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232342e302f32342d3234203d3e20313532313739.roa File: 3230312e32342e3232342e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: 2fOAxYG0hYg2lkXchdIVDCSfZERwCvHlnI53X0rQdEw= Subject key identifier: DA:CB:18:84:DB:7B:61:EC:BC:C5:33:36:9F:85:DC:77:D9:BB:8E:48 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 0F747D5FC99BB0D35FE67C671F676E58221E41E7 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232342e302f32342d3234203d3e20313532313739.roa Signing time: Fri 18 Sep 2026 09:10:17 +0000 ROA not before: Fri 18 Sep 2026 09:05:17 +0000 ROA not after: Fri 17 Sep 2027 09:10:17 +0000 asID: 152179 IP address blocks: 201.24.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:74:7d:5f:c9:9b:b0:d3:5f:e6:7c:67:1f:67:6e:58:22:1e:41:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 18 09:05:17 2026 GMT Not After : Sep 17 09:10:17 2027 GMT Subject: CN=DACB1884DB7B61ECBCC533369F85DC77D9BB8E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:ff:cf:20:2b:f2:4a:41:07:b3:d7:7b:28: 7f:91:9a:a1:3c:d5:5f:9c:05:bd:6a:af:b5:1e:ec: 79:2a:67:75:84:06:02:25:70:bb:da:63:2a:ba:94: 77:cd:ea:dd:20:a8:80:0d:77:fd:48:9c:bc:70:2b: 22:4e:f0:c9:c3:a3:1e:32:8a:de:c4:fa:e2:6c:eb: 81:84:df:df:f1:ad:e7:79:f5:4c:ee:c5:c0:8a:96: d3:5a:ac:f3:d2:18:91:77:62:e3:e0:a3:24:65:0a: 48:cb:a2:ef:e5:e0:15:2f:6f:32:bc:b9:12:95:2e: 4f:50:78:4d:98:43:fd:92:39:44:78:4d:68:4f:40: 86:3e:26:f4:37:78:4e:af:42:04:e7:b4:a1:ab:8e: aa:23:90:f4:06:84:66:5b:8d:e9:68:50:7a:4e:28: 66:62:88:97:b2:0e:56:00:91:41:14:38:09:c8:83: c9:d4:b4:76:8d:d8:d3:5b:44:43:b8:0b:2f:5f:0f: bd:e4:c5:97:e5:10:b3:f7:a9:d2:0a:3d:1b:d1:28: c6:a6:59:29:5b:e9:73:5e:13:1e:39:f2:b6:3e:6f: 05:64:75:78:4c:a6:10:90:71:67:5b:af:bc:a7:4c: f8:33:bd:18:e7:28:1c:ed:c6:f4:3d:56:b4:4d:68: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CB:18:84:DB:7B:61:EC:BC:C5:33:36:9F:85:DC:77:D9:BB:8E:48 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232342e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.224.0/24 Signature Algorithm: sha256WithRSAEncryption b0:b0:37:64:cd:37:17:95:cb:1e:62:f6:97:95:5b:52:6a:1e: be:4c:3b:7f:cf:da:77:82:b9:ce:4b:74:4e:35:bb:4d:54:46: 96:8b:ae:6d:06:b7:65:4b:aa:12:0a:cd:25:e9:2a:25:15:af: 2d:d3:9c:69:28:38:6b:74:cd:3c:04:6f:8b:94:43:11:92:1d: d2:a6:69:6b:31:17:0f:89:d0:e7:4f:07:18:5a:90:2a:c9:0f: b8:da:ed:c6:f2:36:f4:f2:0f:c0:77:14:dd:a3:db:60:8c:fa: 97:a2:12:9e:9b:32:bc:b4:25:57:00:56:53:58:d5:a6:a0:2a: ea:53:5b:fa:5a:fb:29:d4:c7:30:35:01:c9:e5:58:ed:2f:d1: 82:4b:4d:7e:be:3e:95:20:81:2d:bd:1b:a8:4e:f8:3e:a2:06: 93:e6:50:f2:ab:8a:06:04:42:5d:73:36:dd:37:2e:a6:cb:e0: b7:a0:cb:ff:56:9a:3a:0f:22:9f:d0:db:be:d9:4b:19:f9:dd: 99:ab:a2:6e:e6:20:13:89:5f:ab:07:81:0e:30:cd:35:4b:df: 82:ae:4f:fe:13:8a:bf:ff:24:0b:06:a0:6f:f4:42:40:6e:31: 7d:3f:16:b9:6c:39:1e:be:e2:1e:72:91:08:4f:9c:36:e4:d2: ba:fb:89:5c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUD3R9X8mbsNNf5nxnH2duWCIeQecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTgwOTA1MTdaFw0yNzA5MTcwOTEwMTdaMDMxMTAvBgNV BAMTKERBQ0IxODg0REI3QjYxRUNCQ0M1MzMzNjlGODVEQzc3RDlCQjhFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN8f/PICvySkEHs9d7KH+RmqE8 1V+cBb1qr7Ue7HkqZ3WEBgIlcLvaYyq6lHfN6t0gqIANd/1InLxwKyJO8MnDox4y it7E+uJs64GE39/xred59UzuxcCKltNarPPSGJF3YuPgoyRlCkjLou/l4BUvbzK8 uRKVLk9QeE2YQ/2SOUR4TWhPQIY+JvQ3eE6vQgTntKGrjqojkPQGhGZbjeloUHpO KGZiiJeyDlYAkUEUOAnIg8nUtHaN2NNbREO4Cy9fD73kxZflELP3qdIKPRvRKMam WSlb6XNeEx458rY+bwVkdXhMphCQcWdbr7ynTPgzvRjnKBztxvQ9VrRNaDiTAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU2ssYhNt7Yey8xTM2n4Xcd9m7jkgwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzcz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMkY4DANBgkqhkiG9w0BAQsFAAOCAQEAsLA3ZM03F5XLHmL2 l5VbUmoevkw7f8/ad4K5zkt0TjW7TVRGlouubQa3ZUuqEgrNJekqJRWvLdOcaSg4 a3TNPARvi5RDEZId0qZpazEXD4nQ508HGFqQKskPuNrtxvI29PIPwHcU3aPbYIz6 l6ISnpsyvLQlVwBWU1jVpqAq6lNb+lr7KdTHMDUByeVY7S/RgktNfr4+lSCBLb0b qE74PqIGk+ZQ8quKBgRCXXM23Tcupsvgt6DL/1aaOg8in9DbvtlLGfndmauibuYg E4lfqweBDjDNNUvfgq5P/hOKv/8kCwagb/RCQG4xfT8WuWw5Hr7iHnKRCE+cNuTS uvuJXA== -----END CERTIFICATE-----Generated at Sat Sep 19 04:00:22 2026 by rpki-client