$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138342e302f32342d3234203d3e20343032323635.roa File: 3230302e3138302e3138342e302f32342d3234203d3e20343032323635.roa (raw, json) Hash identifier: 1zfhy0PjQ4/THvfzMZqi6pM/2UjyjNR2qq+jJEicV5A= Subject key identifier: F6:33:A0:C0:FA:05:7D:77:E9:D7:2A:C6:A8:80:41:91:EC:55:7C:70 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 46CF12CDF63011D6CADE48D43AEA5FA9C64FA829 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138342e302f32342d3234203d3e20343032323635.roa Signing time: Sun 20 Sep 2026 04:04:49 +0000 ROA not before: Sun 20 Sep 2026 03:59:49 +0000 ROA not after: Sun 19 Sep 2027 04:04:49 +0000 asID: 402265 IP address blocks: 200.180.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cf:12:cd:f6:30:11:d6:ca:de:48:d4:3a:ea:5f:a9:c6:4f:a8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 20 03:59:49 2026 GMT Not After : Sep 19 04:04:49 2027 GMT Subject: CN=F633A0C0FA057D77E9D72AC6A8804191EC557C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:90:3c:d8:9a:85:af:7b:e0:58:32:be:48: 33:90:58:bb:8c:46:10:a6:81:69:36:d9:55:c4:f6: fc:09:8f:94:60:ac:8d:22:e0:1b:39:fb:a0:c2:36: 02:8a:81:1f:65:ad:56:54:8e:48:39:ea:b7:0a:29: b9:ce:33:50:1f:49:e2:67:8f:5a:44:b3:a8:33:2f: a6:68:cf:ce:84:18:71:8e:91:60:41:9a:b3:17:5b: 08:65:7e:5c:ea:c2:82:62:4f:2e:1c:aa:ad:d8:31: 1e:0d:d7:eb:4b:e2:e9:87:19:a8:41:ba:25:f2:3f: b2:36:0d:44:81:52:ef:a7:2a:7b:54:0b:95:eb:f1: d1:b2:80:66:ce:fc:6d:84:db:7f:b2:44:a8:7d:58: 65:62:01:dc:d1:cc:1c:77:27:86:1c:c2:3a:06:f5: ee:51:75:73:67:4d:81:cc:45:86:d5:db:eb:bb:88: 41:f4:72:c1:32:99:7c:2e:76:e1:6c:0a:c3:25:ef: c9:19:9f:a0:02:1c:2c:df:8b:5f:8b:10:52:8a:c7: 46:c7:f2:d6:19:06:52:11:27:1f:26:2c:fb:e9:23: 71:24:e9:be:0c:e7:ec:bc:c3:bc:4f:86:60:58:44: c7:33:e5:f1:bb:1f:6d:3a:92:95:96:54:9d:0b:fe: 2f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:33:A0:C0:FA:05:7D:77:E9:D7:2A:C6:A8:80:41:91:EC:55:7C:70 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138342e302f32342d3234203d3e20343032323635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.184.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c8:79:66:8d:55:73:1d:0e:60:54:21:93:da:9d:ee:62:ea: 2e:6c:8d:c8:b5:77:3d:6f:0c:7d:d6:63:2b:c4:e4:84:58:c1: ec:6f:d4:8c:43:d9:a0:48:39:48:2f:1c:e7:07:6b:23:2d:e1: e9:eb:56:c5:25:8f:f3:34:bc:6d:81:9e:61:69:e2:b3:66:aa: b8:63:09:52:04:8d:8b:3f:46:16:23:8a:d5:d7:d8:8d:27:3c: 39:80:78:b7:f3:15:a1:f7:ea:ad:d5:2a:fc:43:d7:b1:e5:c6: 2d:8e:60:3c:b8:6e:2d:53:84:4e:07:1d:56:6b:7a:b8:6c:16: 37:7b:07:3f:7c:5f:d5:8a:a2:65:d7:29:b8:7e:ee:6b:c2:df: 40:99:50:80:a8:a9:b9:e2:31:01:b7:70:35:13:22:ce:30:5e: a8:68:d5:97:06:cc:37:47:f3:2f:84:0e:f7:84:8f:73:60:d0: 49:8f:43:f4:b8:07:5e:19:bb:f4:50:bd:06:2e:13:21:b8:85: f4:00:ca:68:4e:35:d6:00:58:b1:d6:20:63:cc:02:d1:05:3d: 01:83:0c:40:a2:84:8b:16:19:0b:0f:ae:78:c7:8d:0b:62:cc: 4f:f6:0b:8a:ee:b2:51:0a:02:48:82:c8:49:2c:19:c1:09:13: 04:ed:96:a3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIURs8SzfYwEdbK3kjUOupfqcZPqCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjAwMzU5NDlaFw0yNzA5MTkwNDA0NDlaMDMxMTAvBgNV BAMTKEY2MzNBMEMwRkEwNTdENzdFOUQ3MkFDNkE4ODA0MTkxRUM1NTdDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfZA82JqFr3vgWDK+SDOQWLuM RhCmgWk22VXE9vwJj5RgrI0i4Bs5+6DCNgKKgR9lrVZUjkg56rcKKbnOM1AfSeJn j1pEs6gzL6Zoz86EGHGOkWBBmrMXWwhlflzqwoJiTy4cqq3YMR4N1+tL4umHGahB uiXyP7I2DUSBUu+nKntUC5Xr8dGygGbO/G2E23+yRKh9WGViAdzRzBx3J4YcwjoG 9e5RdXNnTYHMRYbV2+u7iEH0csEymXwuduFsCsMl78kZn6ACHCzfi1+LEFKKx0bH 8tYZBlIRJx8mLPvpI3Ek6b4M5+y8w7xPhmBYRMcz5fG7H206kpWWVJ0L/i+3AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU9jOgwPoFfXfp1yrGqIBBkexVfHAwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIz NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAyLS4MA0GCSqGSIb3DQEBCwUAA4IBAQBJyHlmjVVzHQ5g VCGT2p3uYuoubI3ItXc9bwx91mMrxOSEWMHsb9SMQ9mgSDlILxznB2sjLeHp61bF JY/zNLxtgZ5haeKzZqq4YwlSBI2LP0YWI4rV19iNJzw5gHi38xWh9+qt1Sr8Q9ex 5cYtjmA8uG4tU4ROBx1Wa3q4bBY3ewc/fF/ViqJl1ym4fu5rwt9AmVCAqKm54jEB t3A1EyLOMF6oaNWXBsw3R/MvhA73hI9zYNBJj0P0uAdeGbv0UL0GLhMhuIX0AMpo TjXWAFix1iBjzALRBT0BgwxAooSLFhkLD654x40LYsxP9guK7rJRCgJIgshJLBnB CRME7Zaj -----END CERTIFICATE-----Generated at Tue Sep 22 03:00:52 2026 by rpki-client