$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233322e302f32342d3234203d3e20343032383636.roa File: 3230312e32342e3233322e302f32342d3234203d3e20343032383636.roa (raw, json) Hash identifier: 7YD5gnmX0a70afuy5SU7oru7zC6nLsvc0BXUFBEfZws= Subject key identifier: 3C:A2:B8:F2:6A:12:6D:F9:C0:04:9B:14:BE:39:19:EF:E3:54:5F:E3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7B23508688B8FBF3ED55FA2DB8AE68A4E770DDA4 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233322e302f32342d3234203d3e20343032383636.roa Signing time: Thu 17 Sep 2026 05:46:11 +0000 ROA not before: Thu 17 Sep 2026 05:41:11 +0000 ROA not after: Thu 16 Sep 2027 05:46:11 +0000 asID: 402866 IP address blocks: 201.24.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:23:50:86:88:b8:fb:f3:ed:55:fa:2d:b8:ae:68:a4:e7:70:dd:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:11 2026 GMT Not After : Sep 16 05:46:11 2027 GMT Subject: CN=3CA2B8F26A126DF9C0049B14BE3919EFE3545FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:77:72:42:c6:81:07:8f:83:1c:eb:7e:3a: a3:f4:8b:cb:3e:de:75:a8:43:4e:1f:8a:9f:3c:3a: 03:0c:5a:61:88:a1:ec:fd:88:97:4f:a4:66:2e:7c: 68:11:06:70:79:39:c7:46:2c:d1:da:a1:0d:7d:81: 2d:fc:43:32:90:1a:b3:c5:a4:55:a0:33:1a:3c:38: 3f:97:66:71:17:d1:b5:b9:8c:b9:b1:a8:3b:00:f8: 7b:73:b7:0e:a6:1f:0e:74:f4:af:8e:19:bd:38:71: 6e:22:db:85:9e:1d:bd:b8:84:c7:5d:02:14:5b:ed: 33:5d:3a:38:6d:61:4b:15:8f:d8:d4:58:6f:54:3a: 38:75:eb:a4:27:05:fc:df:dd:09:e9:df:d9:99:1f: f6:8c:d3:ef:ae:09:84:a7:5f:e5:ef:31:b4:01:95: 76:fb:b4:58:29:62:61:8c:a3:fe:0e:3b:e3:ee:9f: 87:8a:2b:19:d4:80:8e:d5:01:0b:ce:29:ac:25:17: 40:48:1d:a3:d5:12:bc:41:bd:bd:1e:c7:8c:83:84: 95:96:c1:2a:53:bb:43:76:bc:d0:13:4e:05:c7:a2: fc:04:3a:25:bb:5b:93:cb:3b:0e:01:28:dd:d3:af: 35:e8:d2:6d:f7:e3:87:41:ad:35:9a:f6:81:bb:b2: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:B8:F2:6A:12:6D:F9:C0:04:9B:14:BE:39:19:EF:E3:54:5F:E3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233322e302f32342d3234203d3e20343032383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.232.0/24 Signature Algorithm: sha256WithRSAEncryption 69:96:90:3a:56:20:e2:0f:03:d2:d1:ba:38:e2:df:4d:1c:0c: cc:7c:81:1e:bd:f0:08:ad:ff:79:26:e1:bb:e6:52:9f:a2:aa: 11:96:3e:6c:fd:2c:11:00:c4:36:17:24:37:29:c5:b2:ef:87: 4a:f5:3d:1c:8c:b2:9d:1b:f5:0d:8d:e2:b1:e0:13:ad:2c:35: 8a:a1:bf:d5:87:a1:27:88:0a:ee:8d:64:ff:4f:84:d2:63:d0: 7b:3a:b0:c0:78:11:e9:b4:a2:de:07:e5:32:a7:3e:f0:ec:69: 3a:ee:0c:41:9f:ba:19:da:2c:cb:bb:30:0f:d2:23:da:6e:92: 82:a6:f7:d5:7b:44:89:86:c0:8a:e5:42:28:84:75:1a:e5:1b: fe:ac:69:7e:ce:6c:89:ef:d0:0a:cc:33:ee:c7:97:53:a8:0b: 04:ef:c8:c6:28:8c:9c:b8:24:5d:9c:8e:e0:5f:7b:61:7c:03: 75:18:97:81:f5:5c:0a:c5:c9:54:db:92:57:b9:fd:f0:21:fd: a8:0e:55:7a:e8:eb:2c:8c:55:1b:ea:f7:6f:2c:8f:de:b6:24: 1f:69:0a:5b:00:d0:75:d3:d6:36:f3:8c:16:fa:c1:1c:bd:d9: 72:e3:38:6b:4c:39:0d:14:ef:40:7a:33:61:43:db:a6:d9:c3: cb:66:d7:30 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUeyNQhoi4+/PtVfotuK5opOdw3aQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMTFaFw0yNzA5MTYwNTQ2MTFaMDMxMTAvBgNV BAMTKDNDQTJCOEYyNkExMjZERjlDMDA0OUIxNEJFMzkxOUVGRTM1NDVGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIndyQsaBB4+DHOt+OqP0i8s+ 3nWoQ04fip88OgMMWmGIoez9iJdPpGYufGgRBnB5OcdGLNHaoQ19gS38QzKQGrPF pFWgMxo8OD+XZnEX0bW5jLmxqDsA+Htztw6mHw509K+OGb04cW4i24WeHb24hMdd AhRb7TNdOjhtYUsVj9jUWG9UOjh166QnBfzf3Qnp39mZH/aM0++uCYSnX+XvMbQB lXb7tFgpYmGMo/4OO+Pun4eKKxnUgI7VAQvOKawlF0BIHaPVErxBvb0ex4yDhJWW wSpTu0N2vNATTgXHovwEOiW7W5PLOw4BKN3TrzXo0m3344dBrTWa9oG7smN3AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUPKK48moSbfnABJsUvjkZ7+NUX+MwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjM4MzYz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMkY6DANBgkqhkiG9w0BAQsFAAOCAQEAaZaQOlYg4g8D0tG6 OOLfTRwMzHyBHr3wCK3/eSbhu+ZSn6KqEZY+bP0sEQDENhckNynFsu+HSvU9HIyy nRv1DY3iseATrSw1iqG/1YehJ4gK7o1k/0+E0mPQezqwwHgR6bSi3gflMqc+8Oxp Ou4MQZ+6Gdosy7swD9Ij2m6Sgqb31XtEiYbAiuVCKIR1GuUb/qxpfs5sie/QCswz 7seXU6gLBO/IxiiMnLgkXZyO4F97YXwDdRiXgfVcCsXJVNuSV7n98CH9qA5Veujr LIxVG+r3byyP3rYkH2kKWwDQddPWNvOMFvrBHL3ZcuM4a0w5DRTvQHozYUPbptnD y2bXMA== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:26 2026 by rpki-client