$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138352e302f32342d3234203d3e20383334.roa File: 3230302e3134392e3138352e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: /kI2Q3GrTkoVACgqq6e8/ZEyt0VjwHh42RgRDIDBipQ= Subject key identifier: 9F:9B:45:AF:C9:19:35:CF:E6:A0:B3:7E:C9:95:3B:05:66:18:24:C1 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 2C53696E23E69AF6352B951EB533285A9E06DCF9 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138352e302f32342d3234203d3e20383334.roa Signing time: Sat 19 Sep 2026 13:11:14 +0000 ROA not before: Sat 19 Sep 2026 13:06:14 +0000 ROA not after: Sat 18 Sep 2027 13:11:14 +0000 asID: 834 IP address blocks: 200.149.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 01:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:53:69:6e:23:e6:9a:f6:35:2b:95:1e:b5:33:28:5a:9e:06:dc:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 19 13:06:14 2026 GMT Not After : Sep 18 13:11:14 2027 GMT Subject: CN=9F9B45AFC91935CFE6A0B37EC9953B05661824C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:1b:22:1c:78:d5:c2:d7:d1:bd:ba:e7:8c: 59:34:69:7d:f1:2f:26:2a:5f:34:58:9e:6a:f7:a7: 79:d0:dc:92:74:bd:50:b0:da:d2:d8:45:81:11:56: 1a:6e:a4:58:28:bb:4c:ef:84:62:20:33:08:70:85: 57:91:41:60:1c:79:a7:41:13:e8:a4:c0:87:50:3f: 94:dc:ee:0f:44:1c:33:66:10:dd:ff:34:8c:ee:cf: 66:dc:8a:bd:af:b0:8c:4b:ff:56:19:8c:39:4c:14: 94:69:2f:3d:3a:bf:02:7a:08:52:5c:62:38:37:c8: 43:22:ba:4b:50:0f:25:28:fe:e8:5e:0e:17:e2:57: 11:72:1f:1f:67:3a:ba:86:32:76:f7:19:19:6d:63: f7:4d:95:cd:4d:4d:04:d7:bf:2a:bd:96:e5:42:65: 07:ac:27:55:26:b1:64:fd:f5:86:19:fb:61:80:7a: 40:2d:d7:a6:1a:42:a4:59:5e:0c:f4:84:34:83:07: 1d:d6:0f:c9:89:7b:30:ff:ca:7e:95:17:ee:2d:83: 80:43:97:55:8f:d6:ca:8d:a8:e5:a7:ba:90:3a:d7: eb:c3:fa:b4:00:34:c4:08:29:38:e5:a2:03:c6:80: 0b:f5:62:00:de:77:34:fe:98:29:2b:69:0c:04:28: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:45:AF:C9:19:35:CF:E6:A0:B3:7E:C9:95:3B:05:66:18:24:C1 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3134392e3138352e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.149.185.0/24 Signature Algorithm: sha256WithRSAEncryption ae:67:af:d5:91:2c:e3:7c:b3:7a:3b:31:46:c7:b1:23:aa:35: b8:64:a6:bc:b2:e6:f2:90:b1:d8:a8:bb:e2:74:6b:8f:dd:a3: 40:e7:68:40:6f:33:74:8c:97:c0:e9:a1:5d:cd:c6:24:85:a3: ad:fc:a6:a1:14:06:78:67:bd:bc:51:24:d4:cb:e9:91:07:a4: 00:cf:14:0d:fb:4f:61:c5:8d:82:e7:76:48:7a:c8:b8:c8:c9: 8d:98:c8:34:11:04:ca:57:94:76:32:b5:06:09:7f:5b:e8:2a: 16:7a:ea:ee:b6:65:26:8d:2b:60:d8:01:69:8a:b6:6c:34:ed: cc:bd:bc:20:27:95:d0:9f:73:c4:71:43:25:ea:c8:7a:b0:81: 31:62:28:95:a4:70:02:6b:a8:9d:2d:82:75:06:3b:f8:bf:55: f1:66:1c:73:6a:bd:08:a7:f7:17:8f:7f:a7:0a:1e:ae:35:64: 7e:4e:14:ae:4a:6a:9f:9e:48:1c:4a:fc:6b:ff:54:16:2a:09: 0c:e3:a6:77:d5:5d:d3:33:cd:19:a7:23:9c:30:2a:99:2e:22: d0:b2:9b:c8:d1:da:1b:14:8e:e9:b8:28:e2:ed:a9:46:60:c7: d7:ed:a4:3c:b7:12:d2:56:d5:9a:9a:24:c4:62:ff:f0:4a:bf: 90:4c:cc:09 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIULFNpbiPmmvY1K5UetTMoWp4G3PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTkxMzA2MTRaFw0yNzA5MTgxMzExMTRaMDMxMTAvBgNV BAMTKDlGOUI0NUFGQzkxOTM1Q0ZFNkEwQjM3RUM5OTUzQjA1NjYxODI0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmcBsiHHjVwtfRvbrnjFk0aX3x LyYqXzRYnmr3p3nQ3JJ0vVCw2tLYRYERVhpupFgou0zvhGIgMwhwhVeRQWAceadB E+ikwIdQP5Tc7g9EHDNmEN3/NIzuz2bcir2vsIxL/1YZjDlMFJRpLz06vwJ6CFJc Yjg3yEMiuktQDyUo/uheDhfiVxFyHx9nOrqGMnb3GRltY/dNlc1NTQTXvyq9luVC ZQesJ1UmsWT99YYZ+2GAekAt16YaQqRZXgz0hDSDBx3WD8mJezD/yn6VF+4tg4BD l1WP1sqNqOWnupA61+vD+rQANMQIKTjlogPGgAv1YgDedzT+mCkraQwEKBiLAgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUn5tFr8kZNc/moLN+yZU7BWYYJMEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzQzOTJlMzEzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyJW5MA0GCSqGSIb3DQEBCwUAA4IBAQCuZ6/VkSzjfLN6OzFGx7Ej qjW4ZKa8subykLHYqLvidGuP3aNA52hAbzN0jJfA6aFdzcYkhaOt/KahFAZ4Z728 USTUy+mRB6QAzxQN+09hxY2C53ZIesi4yMmNmMg0EQTKV5R2MrUGCX9b6CoWeuru tmUmjStg2AFpirZsNO3MvbwgJ5XQn3PEcUMl6sh6sIExYiiVpHACa6idLYJ1Bjv4 v1XxZhxzar0Ip/cXj3+nCh6uNWR+ThSuSmqfnkgcSvxr/1QWKgkM46Z31V3TM80Z pyOcMCqZLiLQspvI0dobFI7puCji7alGYMfX7aQ8txLSVtWamiTEYv/wSr+QTMwJ -----END CERTIFICATE-----Generated at Mon Sep 21 18:56:54 2026 by rpki-client