$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233362e302f32342d3234203d3e20343032383636.roa File: 3230312e32342e3233362e302f32342d3234203d3e20343032383636.roa (raw, json) Hash identifier: pbi1Woqd5ozojL4PlkPqvUPPhbCPHdup2p6elsCfWMs= Subject key identifier: C3:A0:B3:32:11:C3:91:8B:24:EF:68:C1:02:62:57:FA:45:E4:73:4E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7CAEBB5C6E38E476E6C2F82F2D8CC0DF64CB9975 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233362e302f32342d3234203d3e20343032383636.roa Signing time: Thu 17 Sep 2026 09:04:27 +0000 ROA not before: Thu 17 Sep 2026 08:59:27 +0000 ROA not after: Thu 16 Sep 2027 09:04:27 +0000 asID: 402866 IP address blocks: 201.24.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ae:bb:5c:6e:38:e4:76:e6:c2:f8:2f:2d:8c:c0:df:64:cb:99:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 08:59:27 2026 GMT Not After : Sep 16 09:04:27 2027 GMT Subject: CN=C3A0B33211C3918B24EF68C1026257FA45E4734E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:f1:48:29:a2:50:7e:d4:85:5a:6a:b4:a8: 4c:86:eb:98:4b:1a:93:c7:ac:16:e6:0a:e9:d8:21: 82:1c:72:8a:5e:c3:95:32:96:e6:ad:7c:87:90:1a: 91:bb:de:0f:99:af:2a:94:a0:7d:66:64:89:29:e3: 34:c6:f0:38:e7:e5:64:78:30:ea:66:79:ca:47:b6: 54:8a:95:1b:83:86:14:f7:5e:73:ab:5c:ae:35:c6: 68:16:f8:ed:9e:41:9c:d9:6a:5b:ff:0e:93:d2:79: ba:48:74:66:26:65:72:bd:46:15:c5:b5:60:a0:9b: a0:89:60:11:9c:bc:bb:6f:93:5c:e0:b3:5b:2f:a7: fc:1e:9a:85:b3:4b:bc:9c:fa:12:6e:40:43:8e:81: 2f:67:52:68:2c:99:90:10:83:ee:e1:a7:3d:2e:9e: 0b:05:12:2c:8d:4e:22:86:54:fd:36:0c:49:eb:f5: 37:8f:b9:1c:ab:46:0d:21:a9:f0:e2:39:17:6a:b0: b7:c6:ee:b7:38:ff:16:4a:38:a2:5d:ae:24:18:6a: 4d:60:66:99:e8:25:bf:6e:70:42:5c:5b:a3:e9:3e: c8:3f:35:f6:fb:b5:b9:dc:0a:8f:3a:5a:54:c3:a6: 24:f9:6b:d5:ac:c9:fd:80:6c:53:91:3d:ee:9e:77: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A0:B3:32:11:C3:91:8B:24:EF:68:C1:02:62:57:FA:45:E4:73:4E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233362e302f32342d3234203d3e20343032383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.236.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:b4:1c:f6:a5:33:ba:27:f0:2b:c7:74:6d:c2:38:2d:49:5b: 10:22:5f:6a:46:03:f3:31:d6:c7:72:fe:f0:4b:b5:fa:d5:33: c2:38:ad:75:3e:84:5f:bc:49:da:9b:10:31:4e:1d:14:e7:56: 31:fa:e1:56:ca:eb:ba:4b:d2:e0:91:f1:b4:8e:d3:93:00:5b: d2:0d:46:d9:9c:c4:7b:db:79:be:bc:1d:0d:f7:0c:0a:8c:87: 3d:23:4b:68:5a:9a:59:53:ee:6e:fa:98:08:23:d8:0c:9d:dd: a8:28:9f:f7:bd:ba:9e:7f:dc:c8:d7:bf:48:e6:c9:27:c6:f9: e7:33:e5:ea:64:83:06:4e:79:65:ac:1d:0c:22:33:00:08:a4: cf:5d:a8:24:9b:f9:a9:97:90:9a:ed:be:7c:5f:21:6b:23:1b: 3e:a5:d2:32:86:5e:2e:c3:ba:94:84:27:db:a0:a4:df:4b:75: 08:9b:03:fe:f0:87:84:e1:11:25:1f:af:cb:b3:1a:d8:c9:90: 11:04:06:4a:f1:cf:14:67:4e:d8:e8:20:69:f6:fb:46:f8:e9: 64:3a:d2:ab:90:ed:b1:42:e1:0a:db:e9:44:6e:49:65:4f:2d: 2a:d5:f9:8f:c6:2b:42:1c:eb:0c:35:68:cf:0e:f3:34:c1:81: 7b:b7:b1:17 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUfK67XG445HbmwvgvLYzA32TLmXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwODU5MjdaFw0yNzA5MTYwOTA0MjdaMDMxMTAvBgNV BAMTKEMzQTBCMzMyMTFDMzkxOEIyNEVGNjhDMTAyNjI1N0ZBNDVFNDczNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7vFIKaJQftSFWmq0qEyG65hL GpPHrBbmCunYIYIccopew5UyluatfIeQGpG73g+ZryqUoH1mZIkp4zTG8Djn5WR4 MOpmecpHtlSKlRuDhhT3XnOrXK41xmgW+O2eQZzZalv/DpPSebpIdGYmZXK9RhXF tWCgm6CJYBGcvLtvk1zgs1svp/wemoWzS7yc+hJuQEOOgS9nUmgsmZAQg+7hpz0u ngsFEiyNTiKGVP02DEnr9TePuRyrRg0hqfDiORdqsLfG7rc4/xZKOKJdriQYak1g ZpnoJb9ucEJcW6PpPsg/Nfb7tbncCo86WlTDpiT5a9Wsyf2AbFORPe6ed0OrAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUw6CzMhHDkYsk72jBAmJX+kXkc04wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjM4MzYz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMkY7DANBgkqhkiG9w0BAQsFAAOCAQEAjbQc9qUzuifwK8d0 bcI4LUlbECJfakYD8zHWx3L+8Eu1+tUzwjitdT6EX7xJ2psQMU4dFOdWMfrhVsrr ukvS4JHxtI7TkwBb0g1G2ZzEe9t5vrwdDfcMCoyHPSNLaFqaWVPubvqYCCPYDJ3d qCif9726nn/cyNe/SObJJ8b55zPl6mSDBk55ZawdDCIzAAikz12oJJv5qZeQmu2+ fF8hayMbPqXSMoZeLsO6lIQn26Ck30t1CJsD/vCHhOERJR+vy7Ma2MmQEQQGSvHP FGdO2Oggafb7RvjpZDrSq5DtsULhCtvpRG5JZU8tKtX5j8YrQhzrDDVozw7zNMGB e7exFw== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:29 2026 by rpki-client