$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138312e302f32342d3234203d3e20343032323838.roa File: 3230302e3138302e3138312e302f32342d3234203d3e20343032323838.roa (raw, json) Hash identifier: RPk9c1ZSTfbTyPCCdcA/efB4rX6my10pe92M/jq3ElI= Subject key identifier: 71:D6:ED:92:BB:C0:58:3E:70:F1:A3:9F:47:A8:58:26:D2:E6:40:0E Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 639413A598F3CE244FFDD78B89C85E6805EAC49F Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138312e302f32342d3234203d3e20343032323838.roa Signing time: Sat 19 Sep 2026 23:45:16 +0000 ROA not before: Sat 19 Sep 2026 23:40:16 +0000 ROA not after: Sat 18 Sep 2027 23:45:16 +0000 asID: 402288 IP address blocks: 200.180.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:94:13:a5:98:f3:ce:24:4f:fd:d7:8b:89:c8:5e:68:05:ea:c4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 19 23:40:16 2026 GMT Not After : Sep 18 23:45:16 2027 GMT Subject: CN=71D6ED92BBC0583E70F1A39F47A85826D2E6400E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:ea:6c:58:0e:a9:18:13:0d:28:8f:2e:6e: 62:c8:1a:ca:8b:58:66:94:28:34:77:59:5b:7e:8e: d7:e7:78:a1:13:15:78:4c:9f:c0:18:a3:09:94:b9: c5:e7:86:1d:6a:7d:95:59:70:44:27:cc:7e:12:60: d8:3f:ad:91:76:8e:70:d4:7a:04:c7:e1:5f:e5:a8: ed:82:b1:43:14:f3:54:17:e9:c1:d7:70:16:38:98: 5d:10:7a:32:c3:e4:83:97:19:8f:c7:63:6b:3e:48: cb:f3:ac:f5:be:0b:c3:70:6d:52:34:4a:cd:4f:2f: 96:11:ce:0b:0e:8b:91:37:52:90:51:df:df:83:07: e8:64:53:e1:59:4a:d9:8f:2e:e0:d8:0a:61:dd:bf: 07:e9:42:f2:3b:ec:fa:aa:0d:49:27:03:40:37:c4: f5:ca:d7:2a:38:20:e2:9f:1e:82:9a:f2:08:7b:33: 94:d1:4c:aa:47:84:86:b4:21:9c:1a:7b:54:5e:f0: 9b:a7:05:2a:2e:1c:6b:16:c0:44:52:66:38:87:a3: 9e:9c:99:27:8f:3e:fc:e4:93:da:b5:96:53:2e:99: 53:94:71:1f:12:50:95:3d:0a:19:12:bd:1f:c8:65: c8:cc:76:79:d1:9b:5a:d1:9a:3d:bf:7c:59:78:76: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D6:ED:92:BB:C0:58:3E:70:F1:A3:9F:47:A8:58:26:D2:E6:40:0E X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138312e302f32342d3234203d3e20343032323838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.181.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:df:69:25:2a:d9:13:fb:5c:4a:9c:42:bc:37:d9:17:d1:32: 78:44:aa:20:28:70:b8:8f:09:53:3b:7b:9e:00:32:19:3b:be: e7:a2:0d:ab:d1:8f:10:bd:65:38:3f:3c:31:18:71:d5:70:fa: 8c:ee:fc:2a:29:d0:e2:c7:58:82:76:87:d4:1f:80:8b:aa:57: c7:8e:db:3e:86:28:51:91:6d:6b:5d:e6:ee:ba:4c:68:d2:1b: 0f:93:64:0b:a6:bb:13:c8:dc:11:15:f3:28:c0:9e:da:1d:a4: ea:15:7c:da:89:c2:c4:7b:9b:50:22:fb:b1:42:9f:4f:03:b6: 8a:37:89:74:6c:38:e5:d1:72:db:f6:ac:22:ec:d9:c4:76:ac: fe:c1:5c:ad:df:6b:ab:ff:d4:d9:66:9a:3e:ef:4d:c1:3e:ed: 35:9a:87:57:aa:dc:0e:04:77:f2:66:52:a4:43:48:cd:7d:97: c4:5d:a8:42:b0:cc:aa:09:ef:e8:5e:b4:1c:46:e0:5d:dc:8e: aa:0e:3f:38:ef:90:59:4d:7d:26:34:c6:59:2a:bd:15:9b:1b: 80:74:4c:b5:58:9c:d7:5c:51:fa:f4:80:6d:f4:2a:30:4a:a8: fd:b1:45:20:6a:98:77:a4:ef:f3:f9:b1:88:2d:e8:9b:d8:bf: f3:0a:7b:75 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUY5QTpZjzziRP/deLicheaAXqxJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MTkyMzQwMTZaFw0yNzA5MTgyMzQ1MTZaMDMxMTAvBgNV BAMTKDcxRDZFRDkyQkJDMDU4M0U3MEYxQTM5RjQ3QTg1ODI2RDJFNjQwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3epsWA6pGBMNKI8ubmLIGsqL WGaUKDR3WVt+jtfneKETFXhMn8AYowmUucXnhh1qfZVZcEQnzH4SYNg/rZF2jnDU egTH4V/lqO2CsUMU81QX6cHXcBY4mF0QejLD5IOXGY/HY2s+SMvzrPW+C8NwbVI0 Ss1PL5YRzgsOi5E3UpBR39+DB+hkU+FZStmPLuDYCmHdvwfpQvI77PqqDUknA0A3 xPXK1yo4IOKfHoKa8gh7M5TRTKpHhIa0IZwae1Re8JunBSouHGsWwERSZjiHo56c mSePPvzkk9q1llMumVOUcR8SUJU9ChkSvR/IZcjMdnnRm1rRmj2/fFl4dnU/AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUcdbtkrvAWD5w8aOfR6hYJtLmQA4wHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIz ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyLS1MA0GCSqGSIb3DQEBCwUAA4IBAQAK32klKtkT+1xK nEK8N9kX0TJ4RKogKHC4jwlTO3ueADIZO77nog2r0Y8QvWU4PzwxGHHVcPqM7vwq KdDix1iCdofUH4CLqlfHjts+hihRkW1rXebuukxo0hsPk2QLprsTyNwRFfMowJ7a HaTqFXzaicLEe5tQIvuxQp9PA7aKN4l0bDjl0XLb9qwi7NnEdqz+wVyt32ur/9TZ Zpo+703BPu01modXqtwOBHfyZlKkQ0jNfZfEXahCsMyqCe/oXrQcRuBd3I6qDj84 75BZTX0mNMZZKr0VmxuAdEy1WJzXXFH69IBt9CowSqj9sUUgaph3pO/z+bGILeib 2L/zCnt1 -----END CERTIFICATE-----Generated at Sun Sep 20 18:36:27 2026 by rpki-client