$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137392e302f32342d3234203d3e20323134343833.roa File: 3230302e3138302e3137392e302f32342d3234203d3e20323134343833.roa (raw, json) Hash identifier: jhlg1O/krLDBUACUdXDWbWBcf6kBB1MP7INf/P1GhuY= Subject key identifier: 6F:84:35:A5:2D:16:5B:D9:84:87:09:71:9D:34:10:78:2D:91:C5:91 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 5F4DACD0832783265ED117D15E95A7E3EB9931A6 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137392e302f32342d3234203d3e20323134343833.roa Signing time: Sat 19 Sep 2026 22:41:58 +0000 ROA not before: Sat 19 Sep 2026 22:36:58 +0000 ROA not after: Sat 18 Sep 2027 22:41:58 +0000 asID: 214483 IP address blocks: 200.180.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4d:ac:d0:83:27:83:26:5e:d1:17:d1:5e:95:a7:e3:eb:99:31:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 19 22:36:58 2026 GMT Not After : Sep 18 22:41:58 2027 GMT Subject: CN=6F8435A52D165BD9848709719D3410782D91C591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:41:10:50:07:86:76:72:2c:9b:fa:68:fa: 16:3e:5a:39:f8:3d:ae:d2:28:bb:1a:d3:db:f9:76: c9:03:b2:12:7a:5d:f9:3e:37:59:70:04:70:00:0a: 19:44:b8:f2:5b:95:d5:32:02:62:c4:f8:cc:1f:5f: da:b0:cd:5c:9a:da:30:2e:9d:d9:05:b4:5e:ba:b0: a9:e7:d6:ef:7c:6c:4b:13:cd:d6:6b:51:ae:91:5a: 53:52:d4:e5:06:42:91:55:92:50:1a:ca:a7:19:c2: 2b:dc:21:f6:33:65:dd:cf:48:9d:8a:e4:5e:87:5a: 34:5d:a1:e4:ab:17:c3:7b:a7:28:23:9e:25:3b:f1: 93:13:53:c5:c7:03:66:61:61:b8:e7:26:12:1e:01: 71:fc:df:ad:01:e0:97:71:73:de:27:e2:ab:2b:46: ba:82:f5:9e:66:75:4f:9f:7c:6d:2e:d7:ab:aa:67: f1:c2:d0:3c:02:f6:99:4f:ee:76:b6:5e:7f:04:93: f1:f5:26:40:52:82:d6:2c:4d:a2:d9:92:83:81:6d: 29:af:9d:55:a9:36:ec:2a:77:90:f3:df:1a:f2:57: 8e:b8:e2:cc:ba:32:0f:cc:21:46:dd:35:23:fd:25: 30:d8:4c:d3:a6:00:43:61:73:80:40:b2:18:2b:04: 1c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:84:35:A5:2D:16:5B:D9:84:87:09:71:9D:34:10:78:2D:91:C5:91 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3137392e302f32342d3234203d3e20323134343833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.179.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:b0:5e:ce:2b:00:f7:05:54:c7:17:2e:3b:22:45:0d:3e:ff: 67:d2:98:30:09:26:32:86:96:46:f5:3c:3b:ae:21:55:0d:cd: aa:c5:e0:a6:44:06:ff:b4:43:58:d3:05:5e:c6:b8:92:cc:29: 4f:30:59:79:05:79:12:bd:4b:ed:72:81:3a:b1:8d:1f:82:dd: fd:2a:34:de:2f:b5:1e:87:ca:77:ab:9e:06:c7:1f:35:02:53: 43:8c:35:0a:65:ae:98:7c:61:58:e8:0e:17:36:8b:b7:4c:a8: 72:1a:23:0c:c8:e8:d3:72:8d:6f:92:03:b3:97:23:e5:f5:39: 83:de:86:bd:ad:4e:03:cf:33:ef:4d:71:3d:be:4c:4a:6e:6e: ac:92:1c:54:28:8d:a9:5a:62:00:0f:32:0d:3f:2f:44:ce:6b: d5:14:d1:36:3d:5b:55:3e:bf:57:cb:4f:60:1e:1e:4e:d2:ef: 77:3f:1d:b7:28:d0:95:06:5d:ef:c1:6e:0d:45:35:ab:07:0b: 29:f7:63:8b:77:51:26:2a:21:27:33:a2:25:76:93:62:68:cc: 17:b7:4d:ed:a2:46:16:a0:31:45:00:6e:12:38:be:47:38:7f: b5:ab:a0:46:cd:2a:97:5f:7a:aa:89:46:a0:c3:cb:b7:9e:d0: f7:ef:0a:99 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUX02s0IMngyZe0RfRXpWn4+uZMaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTkyMjM2NThaFw0yNzA5MTgyMjQxNThaMDMxMTAvBgNV BAMTKDZGODQzNUE1MkQxNjVCRDk4NDg3MDk3MTlEMzQxMDc4MkQ5MUM1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CEEQUAeGdnIsm/po+hY+Wjn4 Pa7SKLsa09v5dskDshJ6Xfk+N1lwBHAAChlEuPJbldUyAmLE+MwfX9qwzVya2jAu ndkFtF66sKnn1u98bEsTzdZrUa6RWlNS1OUGQpFVklAayqcZwivcIfYzZd3PSJ2K 5F6HWjRdoeSrF8N7pygjniU78ZMTU8XHA2ZhYbjnJhIeAXH8360B4Jdxc94n4qsr RrqC9Z5mdU+ffG0u16uqZ/HC0DwC9plP7na2Xn8Ek/H1JkBSgtYsTaLZkoOBbSmv nVWpNuwqd5Dz3xryV4644sy6Mg/MIUbdNSP9JTDYTNOmAENhc4BAshgrBBz3AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUb4Q1pS0WW9mEhwlxnTQQeC2RxZEwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQz ODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyLSzMA0GCSqGSIb3DQEBCwUAA4IBAQA/sF7OKwD3BVTH Fy47IkUNPv9n0pgwCSYyhpZG9Tw7riFVDc2qxeCmRAb/tENY0wVexriSzClPMFl5 BXkSvUvtcoE6sY0fgt39KjTeL7Ueh8p3q54Gxx81AlNDjDUKZa6YfGFY6A4XNou3 TKhyGiMMyOjTco1vkgOzlyPl9TmD3oa9rU4DzzPvTXE9vkxKbm6skhxUKI2pWmIA DzINPy9EzmvVFNE2PVtVPr9Xy09gHh5O0u93Px23KNCVBl3vwW4NRTWrBwsp92OL d1EmKiEnM6IldpNiaMwXt03tokYWoDFFAG4SOL5HOH+1q6BGzSqXX3qqiUagw8u3 ntD37wqZ -----END CERTIFICATE-----Generated at Sun Sep 20 22:21:28 2026 by rpki-client