$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232382e302f32342d3234203d3e20343032383636.roa File: 3230312e32342e3232382e302f32342d3234203d3e20343032383636.roa (raw, json) Hash identifier: aHc8C3jQIfvUDBxCB3o8tTVlY6W0qdt3BiskU0Mw3xU= Subject key identifier: 28:6A:6A:3D:0C:A8:52:0A:94:4C:BF:14:93:B2:16:2B:12:4C:84:94 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 1D84BA36FA1E30E29CF19A6C69ABA399F98753CB Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232382e302f32342d3234203d3e20343032383636.roa Signing time: Thu 17 Sep 2026 20:10:17 +0000 ROA not before: Thu 17 Sep 2026 20:05:17 +0000 ROA not after: Thu 16 Sep 2027 20:10:17 +0000 asID: 402866 IP address blocks: 201.24.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:84:ba:36:fa:1e:30:e2:9c:f1:9a:6c:69:ab:a3:99:f9:87:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 20:05:17 2026 GMT Not After : Sep 16 20:10:17 2027 GMT Subject: CN=286A6A3D0CA8520A944CBF1493B2162B124C8494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:f8:f5:c1:2b:df:86:f8:73:cf:4c:0f:17: 70:c2:2c:a2:0b:79:c6:23:d9:14:d4:11:2e:2b:ce: f9:67:74:5e:17:89:b3:f2:fb:1c:0c:e2:d1:01:eb: 05:94:f3:f6:bd:0a:0d:0f:48:84:f6:b1:82:08:94: d9:a8:1a:6c:1e:a9:2f:a8:bc:61:b9:52:eb:0f:9a: 03:d9:7a:79:66:53:ba:ab:6b:6a:2e:86:e9:e3:8b: a0:74:8f:98:8a:38:74:63:58:e5:eb:c8:85:37:73: 32:44:93:7e:85:16:e4:42:b4:8c:13:43:3a:cf:fa: ed:b3:cc:67:e6:ce:47:e9:aa:cb:52:c1:2d:43:83: fd:92:4c:6e:47:08:e2:f0:42:b4:b4:b1:1f:a2:bb: 06:aa:97:77:01:3d:a7:f6:7a:8e:58:4c:73:3f:a9: 6e:76:69:00:46:76:48:ce:71:bc:f6:78:21:fe:c7: 39:77:40:03:41:73:39:ff:73:85:f5:95:1c:66:34: d6:49:68:05:cb:a0:c4:f5:ed:c8:8e:67:02:e5:83: 87:4d:8a:ec:9f:1e:55:6d:25:ef:83:4d:f8:b2:df: 4d:a3:b8:f7:59:b5:76:db:ba:b5:bb:59:76:c7:82: 3c:5d:33:0a:1c:c9:50:42:15:d1:30:38:76:bb:f3: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6A:6A:3D:0C:A8:52:0A:94:4C:BF:14:93:B2:16:2B:12:4C:84:94 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3232382e302f32342d3234203d3e20343032383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.228.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:51:2d:7f:9d:3e:dd:7b:99:34:e5:36:3e:e5:95:6e:1e:48: d3:31:f5:7f:63:56:1a:2f:4f:a5:fc:37:d4:f5:07:94:fc:94: 2d:85:7a:69:86:88:07:d4:8d:e5:4e:fd:c3:aa:bc:7b:48:00: c6:ec:bb:40:14:65:34:d3:f0:09:70:71:4b:1f:b2:57:19:37: 35:1d:b1:71:b1:50:64:a6:9f:41:11:62:75:39:2d:05:92:34: f1:5c:36:c6:3c:dd:52:a0:c2:72:96:33:8d:c8:3f:33:18:d8: 9b:1f:1a:c4:1e:cc:58:db:06:75:7f:76:bd:0e:00:40:23:0f: 5b:78:f1:9a:16:ab:b4:0a:88:b1:c5:01:1b:2f:9b:c4:df:e1: 55:05:75:4d:d1:94:f9:06:50:b8:10:32:b9:7e:c3:75:59:55: a3:54:72:9e:85:5d:cb:b0:9f:23:c3:e9:46:54:54:ad:56:1b: d8:4d:44:2d:0a:59:97:23:ea:7d:bc:1d:43:be:c1:3e:f5:8c: 50:3b:a1:59:62:97:e0:5c:8d:63:d9:35:c4:1c:d0:9e:77:f4: 9e:ad:5a:af:b3:a2:da:d6:a6:a1:99:20:ab:9e:1d:e9:af:54: 6a:33:ab:bc:46:b0:96:b7:eb:b4:2f:2f:e3:4e:d6:41:aa:59: 1d:df:ce:bf -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUHYS6NvoeMOKc8ZpsaaujmfmHU8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcyMDA1MTdaFw0yNzA5MTYyMDEwMTdaMDMxMTAvBgNV BAMTKDI4NkE2QTNEMENBODUyMEE5NDRDQkYxNDkzQjIxNjJCMTI0Qzg0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+s/j1wSvfhvhzz0wPF3DCLKIL ecYj2RTUES4rzvlndF4XibPy+xwM4tEB6wWU8/a9Cg0PSIT2sYIIlNmoGmweqS+o vGG5UusPmgPZenlmU7qra2ouhunji6B0j5iKOHRjWOXryIU3czJEk36FFuRCtIwT QzrP+u2zzGfmzkfpqstSwS1Dg/2STG5HCOLwQrS0sR+iuwaql3cBPaf2eo5YTHM/ qW52aQBGdkjOcbz2eCH+xzl3QANBczn/c4X1lRxmNNZJaAXLoMT17ciOZwLlg4dN iuyfHlVtJe+DTfiy302juPdZtXbburW7WXbHgjxdMwocyVBCFdEwOHa78+hrAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUKGpqPQyoUgqUTL8Uk7IWKxJMhJQwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjM4MzYz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMkY5DANBgkqhkiG9w0BAQsFAAOCAQEAP1Etf50+3XuZNOU2 PuWVbh5I0zH1f2NWGi9Ppfw31PUHlPyULYV6aYaIB9SN5U79w6q8e0gAxuy7QBRl NNPwCXBxSx+yVxk3NR2xcbFQZKafQRFidTktBZI08Vw2xjzdUqDCcpYzjcg/MxjY mx8axB7MWNsGdX92vQ4AQCMPW3jxmhartAqIscUBGy+bxN/hVQV1TdGU+QZQuBAy uX7DdVlVo1RynoVdy7CfI8PpRlRUrVYb2E1ELQpZlyPqfbwdQ77BPvWMUDuhWWKX 4FyNY9k1xBzQnnf0nq1ar7Oi2tamoZkgq54d6a9UajOrvEawlrfrtC8v407WQapZ Hd/Ovw== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:39 2026 by rpki-client