$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232362e302f32342d3234203d3e20323134343833.roa File: 3230312e32342e3232362e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: IEI0iN6xmVhmPk0AMZMCDD3xwGxtPvHNbgDLzXbJ3L4= Subject key identifier: C1:8B:F5:25:00:14:E2:0E:D5:80:3D:84:5F:2D:6D:DD:22:53:5A:19 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 73F8E92356722B6F7C0B66D64D1288EBDB8E545E Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232362e302f32342d3234203d3e20323134343833.roa Signing time: Fri 18 Sep 2026 09:44:19 +0000 ROA not before: Fri 18 Sep 2026 09:39:19 +0000 ROA not after: Fri 17 Sep 2027 09:44:19 +0000 asID: 214483 IP address blocks: 201.24.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f8:e9:23:56:72:2b:6f:7c:0b:66:d6:4d:12:88:eb:db:8e:54:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 18 09:39:19 2026 GMT Not After : Sep 17 09:44:19 2027 GMT Subject: CN=C18BF5250014E20ED5803D845F2D6DDD22535A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1d:c5:26:5c:ac:8b:61:59:a5:ff:72:6d:3c: 25:50:64:02:71:eb:a9:c6:16:be:f2:7f:13:2e:8c: 11:97:f8:e0:d4:79:7b:ca:e2:5d:19:d1:49:a1:7a: e3:9b:e6:58:22:d0:7b:c9:34:97:19:d1:cd:09:52: 22:b2:78:c9:33:de:26:2c:17:d4:5a:2f:7b:72:d4: 59:c6:5e:c8:c3:8b:3e:fd:e1:62:cb:94:34:36:19: 2f:de:94:aa:3a:a7:13:24:a9:bd:02:2e:e1:65:c6: 3e:71:46:38:10:9a:61:df:2b:e1:8c:7d:b3:82:cc: b5:ae:4b:ad:75:e3:05:76:f7:a4:10:59:27:a5:cb: 42:c2:ae:9d:e1:0b:ef:10:a5:e8:b3:5f:f8:62:4b: 71:6d:2a:ca:2d:ae:fa:53:2f:53:3d:f0:7a:37:02: 93:2f:75:9c:57:9b:61:dc:aa:80:22:5e:9c:15:15: b1:2f:9e:47:1d:df:71:94:01:a2:1c:ae:fd:55:d1: 99:d9:23:50:40:3f:4a:0e:06:00:37:e0:04:90:57: bd:23:f5:e1:ac:fe:78:f2:25:e6:78:aa:66:ad:d5: 70:98:b5:3c:b0:f1:24:58:cf:43:25:d0:5f:5f:f3: 68:0f:98:f1:cf:78:23:75:77:5b:d8:85:3f:a2:80: 44:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8B:F5:25:00:14:E2:0E:D5:80:3D:84:5F:2D:6D:DD:22:53:5A:19 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232362e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.226.0/24 Signature Algorithm: sha256WithRSAEncryption 68:9a:7f:e9:6d:d3:e4:20:00:fe:81:16:86:db:93:70:33:e1: 2d:6b:b7:ea:24:14:71:a6:6f:bd:c2:dd:12:1f:24:23:61:10: 57:a7:29:8e:90:38:3e:af:be:3c:82:20:01:d3:18:22:19:6b: 11:2e:d1:f2:37:bd:ff:47:61:6d:62:6f:17:61:bf:38:f0:f1: c1:4a:46:68:df:34:7b:c8:ce:69:cb:fa:5f:fe:57:ab:07:ab: 4f:9d:88:d4:e7:c4:3c:ca:34:08:01:c6:39:65:23:30:aa:21: c9:f8:de:19:45:d6:17:f4:5e:2d:79:ee:10:04:79:4b:ac:00: 45:df:71:a9:73:ef:70:d4:5b:bb:86:13:55:ef:c0:73:0e:8b: 7d:31:11:b0:a5:8c:40:8d:d6:c6:a8:14:59:65:d3:f7:39:5f: 60:d5:85:04:73:c3:9f:53:26:00:49:88:8b:18:01:b4:38:a0: c1:c2:66:31:a9:36:ca:1a:b8:73:47:18:22:d7:ec:32:b4:a3: 07:38:8d:0a:bb:b5:f6:ca:f8:fe:45:46:e2:be:16:3e:d7:f3: d1:f1:36:69:e1:71:fc:37:8d:a6:9d:40:62:75:9d:69:9f:20: 7a:75:27:0b:f2:5e:71:85:57:60:36:c2:e2:cf:be:ee:91:12: 96:85:8b:31 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUc/jpI1ZyK298C2bWTRKI69uOVF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTgwOTM5MTlaFw0yNzA5MTcwOTQ0MTlaMDMxMTAvBgNV BAMTKEMxOEJGNTI1MDAxNEUyMEVENTgwM0Q4NDVGMkQ2REREMjI1MzVBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtHcUmXKyLYVml/3JtPCVQZAJx 66nGFr7yfxMujBGX+ODUeXvK4l0Z0UmheuOb5lgi0HvJNJcZ0c0JUiKyeMkz3iYs F9RaL3ty1FnGXsjDiz794WLLlDQ2GS/elKo6pxMkqb0CLuFlxj5xRjgQmmHfK+GM fbOCzLWuS6114wV296QQWSely0LCrp3hC+8QpeizX/hiS3FtKsotrvpTL1M98Ho3 ApMvdZxXm2HcqoAiXpwVFbEvnkcd33GUAaIcrv1V0ZnZI1BAP0oOBgA34ASQV70j 9eGs/njyJeZ4qmat1XCYtTyw8SRYz0Ml0F9f82gPmPHPeCN1d1vYhT+igERnAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUwYv1JQAU4g7VgD2EXy1t3SJTWhkwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0Mzgz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMkY4jANBgkqhkiG9w0BAQsFAAOCAQEAaJp/6W3T5CAA/oEW htuTcDPhLWu36iQUcaZvvcLdEh8kI2EQV6cpjpA4Pq++PIIgAdMYIhlrES7R8je9 /0dhbWJvF2G/OPDxwUpGaN80e8jOacv6X/5XqwerT52I1OfEPMo0CAHGOWUjMKoh yfjeGUXWF/ReLXnuEAR5S6wARd9xqXPvcNRbu4YTVe/Acw6LfTERsKWMQI3WxqgU WWXT9zlfYNWFBHPDn1MmAEmIixgBtDigwcJmMak2yhq4c0cYItfsMrSjBziNCru1 9sr4/kVG4r4WPtfz0fE2aeFx/DeNpp1AYnWdaZ8genUnC/JecYVXYDbC4s++7pES loWLMQ== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:28 2026 by rpki-client