$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138322e302f32342d3234203d3e20333939333539.roa File: 3230302e3138302e3138322e302f32342d3234203d3e20333939333539.roa (raw, json) Hash identifier: HZ6bSBtyOuY2Yn8b87ukkPC4WTozQRrBF+bpwuST7yw= Subject key identifier: FE:05:3B:78:86:91:11:4B:1E:53:DD:D9:7D:0F:F5:0B:CC:FD:7A:9A Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 650938E1F02264F55A3299AD81AE33C9F2E8ABB6 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138322e302f32342d3234203d3e20333939333539.roa Signing time: Sun 20 Sep 2026 00:42:43 +0000 ROA not before: Sun 20 Sep 2026 00:37:43 +0000 ROA not after: Sun 19 Sep 2027 00:42:43 +0000 asID: 399359 IP address blocks: 200.180.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:09:38:e1:f0:22:64:f5:5a:32:99:ad:81:ae:33:c9:f2:e8:ab:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 20 00:37:43 2026 GMT Not After : Sep 19 00:42:43 2027 GMT Subject: CN=FE053B788691114B1E53DDD97D0FF50BCCFD7A9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:19:05:74:02:ba:7e:9a:78:d2:96:74:b1: b1:d1:2e:f9:47:65:4e:39:32:97:1b:db:76:a9:2c: ed:53:cc:32:74:0f:46:d9:e4:2e:bc:84:d0:1c:ed: dd:34:1b:d3:93:42:37:d5:aa:0e:ac:1a:03:c9:e2: d8:fd:7b:e6:26:45:d6:bb:14:f9:9d:68:03:ac:f6: 6a:77:b0:21:85:27:c2:0d:e9:ab:88:c2:b3:5d:c3: eb:fb:c6:a5:a0:a5:db:2d:9e:9a:3f:9f:a1:c8:bc: ca:b4:cf:0a:4d:f3:4c:49:f5:f0:2d:62:ff:64:20: 6b:3b:e2:62:e2:d8:99:37:c6:27:f3:b8:4c:96:4c: 7c:a8:ab:37:c9:56:6a:82:34:62:9e:3f:46:06:04: 6b:28:ff:a1:0f:6b:47:3b:5f:a1:50:d2:39:14:b3: cd:92:cc:35:66:1a:22:b3:de:7f:90:ad:df:49:b0: 8c:1e:f4:72:64:70:d6:5f:e7:ca:06:69:9b:4c:88: 6b:b1:c0:c4:6a:10:2e:32:9a:6c:e9:dc:2c:94:74: 43:42:bc:d7:ec:09:6b:e2:27:96:9c:db:5c:1c:12: e7:7f:1d:6f:15:ce:a8:52:f8:c9:c8:c5:ba:b4:6d: cf:58:3f:39:23:7d:02:78:9f:ca:4d:82:22:fe:aa: 39:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:05:3B:78:86:91:11:4B:1E:53:DD:D9:7D:0F:F5:0B:CC:FD:7A:9A X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138322e302f32342d3234203d3e20333939333539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.182.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:79:f9:5f:09:bc:1f:2c:27:0f:19:7b:30:32:5c:23:9c:c7: 7a:9b:c9:df:a1:94:b4:52:0b:b5:2e:84:84:fc:36:c6:21:3d: 8c:6f:22:6d:50:eb:d2:0d:05:74:6f:62:8e:10:95:ab:17:c9: b0:7a:4d:00:20:3b:41:c5:5a:4b:a9:ad:53:26:4c:0a:a9:39: 0e:b5:e9:df:da:6d:38:0c:cb:94:68:a2:c9:5b:c9:a7:86:68: e5:43:09:ad:37:f3:e1:78:65:72:d3:04:d5:a2:fe:c2:16:a7: 8f:cb:80:6a:d1:36:36:72:af:24:ad:28:36:63:a7:cc:d5:0e: 15:29:31:a4:21:1f:53:85:9d:bf:73:34:73:6b:9a:12:b3:d2: 99:56:d2:0a:51:b7:13:54:25:59:fb:f8:16:6a:c7:81:d7:02: a6:4a:6c:a2:02:f7:46:55:19:00:cd:9c:29:a2:50:97:87:db: 8b:76:c2:ae:0c:b6:cb:ef:82:80:4d:3d:0f:dd:8e:85:bb:c9: d2:40:62:39:f2:40:de:cc:be:3c:6d:98:48:02:b6:6c:e5:94: 66:f6:4f:78:29:c8:e1:6f:1a:b6:e1:08:2a:c5:10:5a:95:ee: 2a:62:09:95:bb:8a:aa:4e:3f:70:6b:88:0f:eb:a4:24:51:20: ec:c7:1f:0f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUZQk44fAiZPVaMpmtga4zyfLoq7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjAwMDM3NDNaFw0yNzA5MTkwMDQyNDNaMDMxMTAvBgNV BAMTKEZFMDUzQjc4ODY5MTExNEIxRTUzREREOTdEMEZGNTBCQ0NGRDdBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8RkFdAK6fpp40pZ0sbHRLvlH ZU45Mpcb23apLO1TzDJ0D0bZ5C68hNAc7d00G9OTQjfVqg6sGgPJ4tj9e+YmRda7 FPmdaAOs9mp3sCGFJ8IN6auIwrNdw+v7xqWgpdstnpo/n6HIvMq0zwpN80xJ9fAt Yv9kIGs74mLi2Jk3xifzuEyWTHyoqzfJVmqCNGKeP0YGBGso/6EPa0c7X6FQ0jkU s82SzDVmGiKz3n+Qrd9JsIwe9HJkcNZf58oGaZtMiGuxwMRqEC4ymmzp3CyUdENC vNfsCWviJ5ac21wcEud/HW8VzqhS+MnIxbq0bc9YPzkjfQJ4n8pNgiL+qjnNAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU/gU7eIaREUseU93ZfQ/1C8z9epowHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzODMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM5MzMz NTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyLS2MA0GCSqGSIb3DQEBCwUAA4IBAQBLeflfCbwfLCcP GXswMlwjnMd6m8nfoZS0Ugu1LoSE/DbGIT2MbyJtUOvSDQV0b2KOEJWrF8mwek0A IDtBxVpLqa1TJkwKqTkOtenf2m04DMuUaKLJW8mnhmjlQwmtN/PheGVy0wTVov7C FqePy4Bq0TY2cq8krSg2Y6fM1Q4VKTGkIR9ThZ2/czRza5oSs9KZVtIKUbcTVCVZ +/gWaseB1wKmSmyiAvdGVRkAzZwpolCXh9uLdsKuDLbL74KATT0P3Y6Fu8nSQGI5 8kDezL48bZhIArZs5ZRm9k94Kcjhbxq24QgqxRBale4qYgmVu4qqTj9wa4gP66Qk USDsxx8P -----END CERTIFICATE-----Generated at Sun Sep 20 19:06:46 2026 by rpki-client