$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233392e302f32342d3234203d3e20343032383636.roa File: 3230312e32342e3233392e302f32342d3234203d3e20343032383636.roa (raw, json) Hash identifier: Q4Tb7Ys59y/D48OdudawT0Bmdji5XvnVw1mlulFFXYQ= Subject key identifier: 6B:34:19:38:57:F8:BE:BC:05:CA:75:26:62:EC:AD:C3:5B:AB:A6:51 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 6F04C8A331A5EE0D16924E61CAED92B5741194C5 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233392e302f32342d3234203d3e20343032383636.roa Signing time: Thu 17 Sep 2026 05:46:09 +0000 ROA not before: Thu 17 Sep 2026 05:41:09 +0000 ROA not after: Thu 16 Sep 2027 05:46:09 +0000 asID: 402866 IP address blocks: 201.24.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 16:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:04:c8:a3:31:a5:ee:0d:16:92:4e:61:ca:ed:92:b5:74:11:94:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 17 05:41:09 2026 GMT Not After : Sep 16 05:46:09 2027 GMT Subject: CN=6B34193857F8BEBC05CA752662ECADC35BABA651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:4b:e7:1a:4a:a9:4f:c4:82:f9:19:32:c8: dc:24:4c:09:4c:be:52:b4:3b:0b:32:04:9f:04:6d: 45:db:48:31:9b:30:95:45:c3:d2:83:c7:1c:ac:c2: 14:9d:91:4c:40:cb:2f:4a:ea:0a:38:7d:1c:99:02: 77:a0:fe:3e:5c:bd:0c:1f:76:b3:99:d1:42:5f:6b: ec:8a:9e:c2:0f:a4:69:48:e6:be:6a:8a:5e:7b:b9: ab:a6:c3:29:1f:95:ce:28:10:d4:71:81:db:1b:59: b8:54:9d:80:b5:27:ac:b6:72:47:f1:74:74:5a:88: c5:18:f0:d2:5d:cc:30:99:99:5c:21:22:69:07:c9: b9:12:4e:63:ec:71:12:90:2d:73:0d:af:4c:ca:62: 5a:4a:76:d0:77:2b:cd:9f:bc:1d:b1:f2:c7:92:24: e5:0f:7e:6c:4e:e9:3b:0e:32:94:03:15:2f:97:c3: 84:74:e7:aa:16:06:47:bc:92:fd:c1:65:e1:12:18: 58:96:60:ef:81:d8:da:e2:95:73:47:3a:6b:72:74: 70:68:b9:9d:6d:6a:d8:bc:01:7d:d8:48:a5:53:51: 5e:ce:d0:db:bd:8c:7c:bf:72:49:cb:69:77:ec:f6: a8:65:5a:5c:39:3a:ab:a7:47:bf:5b:a8:31:19:fe: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:34:19:38:57:F8:BE:BC:05:CA:75:26:62:EC:AD:C3:5B:AB:A6:51 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230312e32342e3233392e302f32342d3234203d3e20343032383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.24.239.0/24 Signature Algorithm: sha256WithRSAEncryption a5:d7:ca:32:6c:58:cf:40:22:1b:88:b3:f9:7d:b9:88:e8:a1: b4:71:47:0a:62:fd:43:7c:9c:a3:ee:db:91:ff:f8:36:69:3a: 9e:b0:06:64:67:9c:1f:53:5d:9f:6a:02:f7:7c:9e:88:00:bd: 2a:46:73:ca:67:15:4c:4b:55:74:67:55:36:bf:c3:5f:7e:b8: d9:54:c9:4d:28:37:89:8d:2e:84:65:53:1f:a8:99:a5:50:2b: d1:37:c5:cc:e1:56:09:5c:ed:cd:84:69:b9:c7:f2:34:29:04: 2f:2a:cb:05:c2:3e:5f:7c:f5:da:a6:b9:7b:2d:59:52:e3:5f: 1c:cc:52:78:51:fe:45:fa:93:c0:b4:98:83:0c:9e:39:1e:31: 78:e7:bc:d0:b4:8a:b5:d8:42:53:c0:31:fe:8a:3e:29:78:fb: 2a:e7:89:9f:89:0a:6f:f5:58:45:a8:f1:ea:11:88:24:f1:dd: 31:b3:51:a9:d8:64:a9:e3:d1:6d:b2:41:21:c7:1f:24:f3:4a: b0:db:13:73:89:3a:07:5f:12:b7:6e:24:d0:f4:cb:3e:73:af: b4:75:b0:9c:5d:ca:eb:9b:11:c0:35:ec:3a:1c:0c:b0:8f:50: 24:bb:d4:59:b9:13:cb:b6:06:eb:d0:b8:43:2b:3b:37:41:6d: 08:e4:d8:16 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUbwTIozGl7g0Wkk5hyu2StXQRlMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTcwNTQxMDlaFw0yNzA5MTYwNTQ2MDlaMDMxMTAvBgNV BAMTKDZCMzQxOTM4NTdGOEJFQkMwNUNBNzUyNjYyRUNBREMzNUJBQkE2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oEvnGkqpT8SC+RkyyNwkTAlM vlK0OwsyBJ8EbUXbSDGbMJVFw9KDxxyswhSdkUxAyy9K6go4fRyZAneg/j5cvQwf drOZ0UJfa+yKnsIPpGlI5r5qil57uaumwykflc4oENRxgdsbWbhUnYC1J6y2ckfx dHRaiMUY8NJdzDCZmVwhImkHybkSTmPscRKQLXMNr0zKYlpKdtB3K82fvB2x8seS JOUPfmxO6TsOMpQDFS+Xw4R056oWBke8kv3BZeESGFiWYO+B2NrilXNHOmtydHBo uZ1tati8AX3YSKVTUV7O0Nu9jHy/cknLaXfs9qhlWlw5OqunR79bqDEZ/jWJAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUazQZOFf4vrwFynUmYuytw1urplEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzEy ZTMyMzQyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjM4MzYz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMkY7zANBgkqhkiG9w0BAQsFAAOCAQEApdfKMmxYz0AiG4iz +X25iOihtHFHCmL9Q3yco+7bkf/4Nmk6nrAGZGecH1Ndn2oC93yeiAC9KkZzymcV TEtVdGdVNr/DX3642VTJTSg3iY0uhGVTH6iZpVAr0TfFzOFWCVztzYRpucfyNCkE LyrLBcI+X3z12qa5ey1ZUuNfHMxSeFH+RfqTwLSYgwyeOR4xeOe80LSKtdhCU8Ax /oo+KXj7KueJn4kKb/VYRajx6hGIJPHdMbNRqdhkqePRbbJBIccfJPNKsNsTc4k6 B18St24k0PTLPnOvtHWwnF3K65sRwDXsOhwMsI9QJLvUWbkTy7YG69C4Qys7N0Ft COTYFg== -----END CERTIFICATE-----Generated at Sat Sep 19 02:56:23 2026 by rpki-client