$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233352e302f32342d3234203d3e20383334.roa File: 3230312e32342e3233352e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: +zRP2p5bjXqP/YA9XJ1fzBKq/R5jWQURYZGBaUN3bqE= Subject key identifier: 29:FD:7A:F6:AD:71:8A:52:2B:70:D4:19:91:34:19:E9:76:10:EE:05 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5A875FB02A466E26A4932C4C684E91351D3C996B Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233352e302f32342d3234203d3e20383334.roa Signing time: Thu 17 Sep 2026 08:17:05 +0000 ROA not before: Thu 17 Sep 2026 08:12:05 +0000 ROA not after: Thu 16 Sep 2027 08:17:05 +0000 asID: 834 IP address blocks: 201.24.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:87:5f:b0:2a:46:6e:26:a4:93:2c:4c:68:4e:91:35:1d:3c:99:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 08:12:05 2026 GMT Not After : Sep 16 08:17:05 2027 GMT Subject: CN=29FD7AF6AD718A522B70D419913419E97610EE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:40:29:e1:81:de:73:6b:b6:c9:28:81:90: c4:4b:f7:db:52:40:0c:18:6d:70:15:66:81:6d:4e: 6c:07:7d:45:4c:41:21:dd:0a:c6:99:af:e2:0c:34: 78:d0:2e:f1:b3:61:3c:fb:e2:a4:c1:10:95:13:dd: 92:3b:9a:84:2a:bf:c6:bd:0f:fe:03:b0:67:a9:f1: 3d:26:ac:a2:d0:62:98:2d:12:0a:fe:cf:4d:13:71: 16:ab:d2:e3:aa:48:95:6b:89:48:a6:e7:e0:9b:3b: 30:8a:87:9e:49:0c:b5:e1:ed:c1:0c:15:20:fb:c7: 95:11:63:15:ae:31:ba:8b:de:dd:ff:48:11:37:5b: 9b:71:a4:75:2c:5a:49:db:68:d1:42:c9:20:59:34: 4d:16:26:4c:e2:40:e4:5d:c2:9e:4b:77:b4:8a:76: ac:df:34:3d:6d:20:19:05:88:92:e1:cb:d1:ce:af: c2:8b:26:40:da:4a:14:83:2a:78:bb:6b:ff:11:5d: 42:12:87:39:79:d2:0c:bc:1d:0d:5c:6f:8a:fc:5a: 36:c0:fe:db:ab:64:88:28:a1:69:01:4b:5f:52:ec: 4f:4b:01:dd:81:2a:13:57:dd:43:e7:09:6c:bc:e9: 61:8a:b4:85:c8:74:b2:ba:c9:9b:fa:f0:a9:43:d3: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FD:7A:F6:AD:71:8A:52:2B:70:D4:19:91:34:19:E9:76:10:EE:05 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233352e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.235.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:eb:47:a8:82:51:19:3b:f1:59:20:95:76:d6:22:9b:af:81: 30:cc:4f:06:6f:12:ce:11:06:a6:8b:86:7d:c7:f5:36:83:04: 64:5f:95:a6:de:b0:66:8c:8c:11:9b:aa:dd:c4:2b:97:b9:4c: 7e:4e:25:db:95:10:a6:6f:72:0c:97:41:19:a2:81:e2:bc:a7: c2:9c:c1:e1:c1:3b:92:83:3d:f1:55:c7:57:92:44:d3:cb:1d: 96:67:8e:f5:69:5b:30:2f:a0:6e:a5:db:c2:6d:da:72:2d:a3: d7:9c:42:16:32:38:cb:31:fb:6a:78:2c:9a:a4:c6:01:67:96: 52:01:bd:9d:b2:64:7e:17:96:1d:bc:48:b0:c3:9a:0a:a3:32: 50:3e:3a:f4:f5:a9:6c:13:d3:4f:a8:dc:f4:15:5f:0d:8e:a4: 14:1b:a3:00:6d:14:47:c1:cf:92:51:c8:ae:c6:49:14:b6:59: 84:fa:c7:97:51:59:db:17:3d:38:d0:6b:d7:e0:53:65:2a:a5: 81:36:80:ee:09:15:10:63:57:54:5e:3d:c5:4c:4c:3f:ab:60: dc:59:e6:d5:d5:d0:5c:74:23:9f:0c:62:01:38:9f:e7:fe:96: fb:07:5b:53:1f:c9:fe:89:4f:47:66:d5:91:8b:91:83:db:9a: 11:fe:d3:9c -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUWodfsCpGbiakkyxMaE6RNR08mWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwODEyMDVaFw0yNzA5MTYwODE3MDVaMDMxMTAvBgNV BAMTKDI5RkQ3QUY2QUQ3MThBNTIyQjcwRDQxOTkxMzQxOUU5NzYxMEVFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsU0Ap4YHec2u2ySiBkMRL99tS QAwYbXAVZoFtTmwHfUVMQSHdCsaZr+IMNHjQLvGzYTz74qTBEJUT3ZI7moQqv8a9 D/4DsGep8T0mrKLQYpgtEgr+z00TcRar0uOqSJVriUim5+CbOzCKh55JDLXh7cEM FSD7x5URYxWuMbqL3t3/SBE3W5txpHUsWknbaNFCySBZNE0WJkziQORdwp5Ld7SK dqzfND1tIBkFiJLhy9HOr8KLJkDaShSDKni7a/8RXUIShzl50gy8HQ1cb4r8WjbA /turZIgooWkBS19S7E9LAd2BKhNX3UPnCWy86WGKtIXIdLK6yZv68KlD00tVAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUKf169q1xilIrcNQZkTQZ6XYQ7gUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUF BzALhoGJcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMkY6zANBgkqhkiG9w0BAQsFAAOCAQEAHutHqIJRGTvxWSCVdtYim6+B MMxPBm8SzhEGpouGfcf1NoMEZF+Vpt6wZoyMEZuq3cQrl7lMfk4l25UQpm9yDJdB GaKB4rynwpzB4cE7koM98VXHV5JE08sdlmeO9WlbMC+gbqXbwm3aci2j15xCFjI4 yzH7angsmqTGAWeWUgG9nbJkfheWHbxIsMOaCqMyUD469PWpbBPTT6jc9BVfDY6k FBujAG0UR8HPklHIrsZJFLZZhPrHl1FZ2xc9ONBr1+BTZSqlgTaA7gkVEGNXVF49 xUxMP6tg3Fnm1dXQXHQjnwxiATif5/6W+wdbUx/J/olPR2bVkYuRg9uaEf7TnA== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:05 2026 by rpki-client