$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233312e302f32342d3234203d3e20313532313739.roa File: 3230312e32342e3233312e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: GIHZzFJ2KvGzpOIDXlUztpflFMHmHcccbf+1lVVQ74o= Subject key identifier: DA:9E:D8:66:B6:6E:7B:AD:C1:C4:7C:44:3F:38:7D:07:D7:41:91:CE Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 74A0E3FC6FA9DFF21F75913924D6A4DB9C7B38A6 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233312e302f32342d3234203d3e20313532313739.roa Signing time: Fri 18 Sep 2026 08:29:52 +0000 ROA not before: Fri 18 Sep 2026 08:24:52 +0000 ROA not after: Fri 17 Sep 2027 08:29:52 +0000 asID: 152179 IP address blocks: 201.24.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a0:e3:fc:6f:a9:df:f2:1f:75:91:39:24:d6:a4:db:9c:7b:38:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 18 08:24:52 2026 GMT Not After : Sep 17 08:29:52 2027 GMT Subject: CN=DA9ED866B66E7BADC1C47C443F387D07D74191CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:06:48:ac:bb:d6:9c:a3:94:8a:5c:cd:30: 03:47:46:10:86:a6:f2:60:f6:53:de:be:4e:05:12: 9f:24:f4:49:f4:9a:6c:d8:75:69:d3:c4:29:f9:70: 02:02:56:16:23:df:f8:97:a9:62:97:cb:4e:d9:87: 98:8b:e7:6f:26:ae:42:bf:81:fd:9e:c4:cb:9d:d6: e2:ac:0e:d8:e8:e9:47:c3:af:a7:dd:02:2c:d5:5f: c0:09:5c:4f:ac:39:1a:c7:f7:aa:8a:fa:14:05:77: bc:fc:b2:15:42:d7:f0:98:5e:5e:01:d8:be:71:6b: 5e:c5:b9:27:88:a9:e4:ac:1a:fb:57:d3:50:44:93: d2:33:3d:c7:15:12:11:a1:a2:c6:17:17:99:f4:6e: 7d:63:ee:d0:56:ff:17:5f:dc:45:03:ad:32:19:61: a2:e9:38:9e:bf:14:75:ea:e1:ce:7d:b5:45:04:f0: e7:cd:7a:54:80:fc:e2:a2:65:28:2f:bd:f3:6b:f4: 9f:d3:a7:6b:1c:e0:21:28:46:70:ce:79:d9:f9:fd: 5e:4a:bc:b4:63:dd:c2:34:7e:63:bb:a7:ee:11:f4: 84:dc:b8:07:81:af:43:5c:48:26:8c:8d:9f:58:70: 03:74:7b:4f:50:f7:31:ac:7d:35:53:92:5a:6f:63: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9E:D8:66:B6:6E:7B:AD:C1:C4:7C:44:3F:38:7D:07:D7:41:91:CE X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233312e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.231.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:54:21:22:6c:36:7f:12:d3:15:86:fc:0d:ab:dd:b3:a9:53: 76:d7:b1:74:50:78:70:6a:12:42:9c:31:c5:cc:39:16:7b:11: 7d:34:cc:9b:e0:5b:c5:36:91:de:9f:9e:9b:99:51:23:9f:e2: 30:a8:39:50:cd:6f:7c:a1:90:15:c4:10:60:fe:b0:b6:b5:98: 75:33:22:d7:95:b5:09:49:0f:f4:e2:65:7a:7f:28:9d:88:17: 9f:9c:ea:fd:2a:de:0c:ad:55:9a:f9:26:c7:1e:78:52:d7:5d: db:7d:3b:fc:8b:2a:dc:28:c5:0e:9c:6b:d1:5e:06:1c:e9:c4: 59:39:b1:5c:bf:6a:b7:d7:38:db:34:8d:c1:02:d5:61:ed:7e: 98:e1:13:f6:13:35:5f:96:64:73:ca:6b:3d:a1:dd:66:2d:38: 79:92:d7:ba:ab:5b:f8:5c:24:a0:41:31:1e:8d:34:49:4f:80: 69:49:cd:d2:eb:59:8e:d4:cc:c5:b7:0a:35:d7:79:1b:79:09: d5:69:e3:ea:42:34:a6:bb:1a:ed:60:7d:c2:7f:3f:99:75:7b: 02:80:b9:66:f6:29:83:e0:67:30:5f:bd:db:9e:98:96:e3:1f: 31:01:a0:1c:34:99:0b:5f:cb:bf:4c:b3:66:90:7b:4e:d1:06: 72:98:cc:c1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUdKDj/G+p3/IfdZE5JNak25x7OKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTgwODI0NTJaFw0yNzA5MTcwODI5NTJaMDMxMTAvBgNV BAMTKERBOUVEODY2QjY2RTdCQURDMUM0N0M0NDNGMzg3RDA3RDc0MTkxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVkQZIrLvWnKOUilzNMANHRhCG pvJg9lPevk4FEp8k9En0mmzYdWnTxCn5cAICVhYj3/iXqWKXy07Zh5iL528mrkK/ gf2exMud1uKsDtjo6UfDr6fdAizVX8AJXE+sORrH96qK+hQFd7z8shVC1/CYXl4B 2L5xa17FuSeIqeSsGvtX01BEk9IzPccVEhGhosYXF5n0bn1j7tBW/xdf3EUDrTIZ YaLpOJ6/FHXq4c59tUUE8OfNelSA/OKiZSgvvfNr9J/Tp2sc4CEoRnDOedn5/V5K vLRj3cI0fmO7p+4R9ITcuAeBr0NcSCaMjZ9YcAN0e09Q9zGsfTVTklpvY4jpAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU2p7YZrZue63BxHxEPzh9B9dBkc4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzcz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMkY5zANBgkqhkiG9w0BAQsFAAOCAQEASlQhImw2fxLTFYb8 Davds6lTdtexdFB4cGoSQpwxxcw5FnsRfTTMm+BbxTaR3p+em5lRI5/iMKg5UM1v fKGQFcQQYP6wtrWYdTMi15W1CUkP9OJlen8onYgXn5zq/SreDK1Vmvkmxx54Utdd 2307/Isq3CjFDpxr0V4GHOnEWTmxXL9qt9c42zSNwQLVYe1+mOET9hM1X5Zkc8pr PaHdZi04eZLXuqtb+FwkoEExHo00SU+AaUnN0utZjtTMxbcKNdd5G3kJ1Wnj6kI0 prsa7WB9wn8/mXV7AoC5ZvYpg+BnMF+9256YluMfMQGgHDSZC1/Lv0yzZpB7TtEG cpjMwQ== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:57 2026 by rpki-client