$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137382e302f32342d3234203d3e20343032383636.roa File: 3230302e3138302e3137382e302f32342d3234203d3e20343032383636.roa (raw, json) Hash identifier: H2QLviF59MPqmMr0NOZ+4PAym3bpXPHN/0X9FvLc81I= Subject key identifier: 68:AA:9C:DA:01:F9:9F:38:ED:53:A6:69:95:D3:FB:2D:57:F5:3B:28 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 7BE23904B107A8CAA4EE45BF56D1C2DF72C1FCDA Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137382e302f32342d3234203d3e20343032383636.roa Signing time: Sat 19 Sep 2026 21:28:29 +0000 ROA not before: Sat 19 Sep 2026 21:23:29 +0000 ROA not after: Sat 18 Sep 2027 21:28:29 +0000 asID: 402866 IP address blocks: 200.180.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e2:39:04:b1:07:a8:ca:a4:ee:45:bf:56:d1:c2:df:72:c1:fc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 19 21:23:29 2026 GMT Not After : Sep 18 21:28:29 2027 GMT Subject: CN=68AA9CDA01F99F38ED53A66995D3FB2D57F53B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:a4:82:3f:cb:92:13:25:da:a3:db:ea:49: 82:d3:93:94:98:c3:76:d7:be:34:2f:71:d5:2e:ea: 42:14:22:65:7e:80:fe:b7:f9:c9:1e:3b:48:75:ca: 8c:4c:e9:12:33:4e:5e:e0:5a:9a:ea:20:c6:6e:cc: e5:b2:bf:9b:79:67:5c:9a:7c:a0:17:02:1f:91:dc: cc:b0:dc:29:19:4d:e8:ee:47:eb:39:9d:5d:3e:f7: 6d:15:83:c8:8c:d5:32:87:11:9b:14:48:49:ec:3f: 73:d2:b5:9c:19:5a:28:ec:69:01:f3:a7:37:8c:8d: 6c:b4:2b:8d:61:fc:21:36:27:03:03:7d:90:88:f7: dd:ee:e9:bb:61:67:40:52:ba:f1:f3:b7:0e:fc:84: a5:e2:8e:71:0b:5c:0e:60:ca:d1:f0:de:c2:52:17: 4e:73:f5:e2:27:ee:9f:19:c9:47:3e:4e:d9:69:78: 80:95:40:a9:4a:24:6b:ae:82:58:a7:e4:8c:df:64: e8:ac:2c:73:e2:48:b3:44:d4:0a:7c:70:5d:91:c0: cf:15:40:65:31:d2:a9:ff:fc:d5:f8:21:da:fb:7b: cb:02:67:a5:9c:56:d6:ad:48:d8:8f:fb:b5:02:50: 79:ee:a3:b0:0b:6d:0d:77:b2:93:4a:d5:c6:60:25: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AA:9C:DA:01:F9:9F:38:ED:53:A6:69:95:D3:FB:2D:57:F5:3B:28 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137382e302f32342d3234203d3e20343032383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.178.0/24 Signature Algorithm: sha256WithRSAEncryption be:bc:b5:5f:cc:de:61:65:84:db:2f:d5:ac:62:8b:d4:8e:99: 67:6e:66:97:6f:dd:87:21:94:bc:f6:2c:1e:6d:76:08:08:55: 47:17:86:32:f3:c7:52:a9:74:c7:4f:93:55:87:71:b1:20:a0: 4f:25:fe:09:23:df:ed:95:c5:23:9c:a2:61:e5:c6:1e:81:11: ac:ef:96:aa:b4:72:af:fe:e7:0d:41:16:d7:4f:25:f4:34:bd: 58:f2:8d:b9:83:cf:a6:e9:f7:2b:85:ee:93:36:08:14:ac:85: 02:f4:9d:da:18:29:95:21:f1:55:ef:32:ee:7f:8a:4c:b8:55: 21:05:26:d2:dc:dd:35:0a:e9:85:01:aa:c1:07:cc:0d:f3:ee: 35:6a:eb:ec:2e:e3:f1:ca:e3:d0:ff:44:9c:e1:2f:02:99:e6: 2b:05:8a:cd:57:42:13:61:4f:2b:49:52:e3:5e:4f:61:13:b0: a3:0d:86:6c:14:85:34:19:b1:a6:2b:a3:49:42:e9:bd:23:46: 6d:d0:1c:0b:3c:88:d1:f8:b6:94:7c:ac:14:f4:05:76:e6:ad: b6:36:ad:50:cb:d3:68:9f:00:ea:4d:e5:38:14:a8:74:13:38: a3:0c:85:d8:ee:0f:10:5f:85:59:63:6e:b7:29:3f:d7:f2:9d: 5c:83:25:b1 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUe+I5BLEHqMqk7kW/VtHC33LB/NowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTkyMTIzMjlaFw0yNzA5MTgyMTI4MjlaMDMxMTAvBgNV BAMTKDY4QUE5Q0RBMDFGOTlGMzhFRDUzQTY2OTk1RDNGQjJENTdGNTNCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyaSCP8uSEyXao9vqSYLTk5SY w3bXvjQvcdUu6kIUImV+gP63+ckeO0h1yoxM6RIzTl7gWprqIMZuzOWyv5t5Z1ya fKAXAh+R3Myw3CkZTejuR+s5nV0+920Vg8iM1TKHEZsUSEnsP3PStZwZWijsaQHz pzeMjWy0K41h/CE2JwMDfZCI993u6bthZ0BSuvHztw78hKXijnELXA5gytHw3sJS F05z9eIn7p8ZyUc+TtlpeICVQKlKJGuuglin5IzfZOisLHPiSLNE1Ap8cF2RwM8V QGUx0qn//NX4Idr7e8sCZ6WcVtatSNiP+7UCUHnuo7ALbQ13spNK1cZgJf4tAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUaKqc2gH5nzjtU6ZpldP7LVf1OygwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzNzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzgz NjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyLSyMA0GCSqGSIb3DQEBCwUAA4IBAQC+vLVfzN5hZYTb L9WsYovUjplnbmaXb92HIZS89iwebXYICFVHF4Yy88dSqXTHT5NVh3GxIKBPJf4J I9/tlcUjnKJh5cYegRGs75aqtHKv/ucNQRbXTyX0NL1Y8o25g8+m6fcrhe6TNggU rIUC9J3aGCmVIfFV7zLuf4pMuFUhBSbS3N01CumFAarBB8wN8+41auvsLuPxyuPQ /0Sc4S8CmeYrBYrNV0ITYU8rSVLjXk9hE7CjDYZsFIU0GbGmK6NJQum9I0Zt0BwL PIjR+LaUfKwU9AV25q22Nq1Qy9NonwDqTeU4FKh0EzijDIXY7g8QX4VZY263KT/X 8p1cgyWx -----END CERTIFICATE-----Generated at Sun Sep 20 22:22:41 2026 by rpki-client