$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138352e302f32342d3234203d3e20383334.roa File: 3230302e3138302e3138352e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: rBD730EVvojYAeZwbkPkw/70+HqOt77F1v1yZ4rKdjg= Subject key identifier: A9:0B:0B:07:AE:6D:74:01:9D:14:D3:7D:7D:97:B5:53:F5:9A:77:35 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 011C4B1E5DB7C7C0C6777C63DC9031E504D0932F Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138352e302f32342d3234203d3e20383334.roa Signing time: Sun 20 Sep 2026 04:05:31 +0000 ROA not before: Sun 20 Sep 2026 04:00:31 +0000 ROA not after: Sun 19 Sep 2027 04:05:31 +0000 asID: 834 IP address blocks: 200.180.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1c:4b:1e:5d:b7:c7:c0:c6:77:7c:63:dc:90:31:e5:04:d0:93:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 20 04:00:31 2026 GMT Not After : Sep 19 04:05:31 2027 GMT Subject: CN=A90B0B07AE6D74019D14D37D7D97B553F59A7735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:5c:4c:28:1a:a7:6e:60:bf:da:db:a2:ef: 98:63:c9:d0:75:25:08:a3:97:c9:98:7e:bb:81:5e: 47:7a:83:e4:63:04:a9:c0:58:c4:59:bf:e1:75:bf: ff:c0:cf:20:a2:d4:17:16:86:62:96:9e:55:90:8e: 1e:e8:8f:5b:7a:db:b7:13:9f:54:1e:bf:38:ea:02: 5d:de:fa:59:66:b2:6f:27:0d:b9:2b:95:d2:d9:f6: 02:f7:ac:44:9b:84:10:52:fe:5b:94:6e:8e:b4:6c: 95:28:f9:ef:a9:6f:15:03:68:4a:fb:57:d4:7c:c5: 4f:88:c3:38:43:99:ac:9b:7d:a7:df:c5:70:36:1e: a0:b7:4e:e7:e8:cf:25:87:eb:5c:ac:89:32:9e:27: 6a:10:35:d4:19:93:a4:3b:ef:65:ca:1d:ee:56:a4: fb:cb:50:38:14:1b:c9:ef:fc:67:4c:ae:ed:0f:52: 38:d6:b1:fb:13:8d:87:7f:f8:90:4a:7b:9d:12:4d: e3:00:aa:3d:38:28:f7:61:7b:d3:aa:27:a0:87:ab: f8:c1:33:82:3a:5f:d5:dc:2e:d1:59:86:29:dc:c6: ba:bd:f0:95:3a:b3:f4:7d:88:b1:4d:48:2f:ed:c9: c7:2f:69:e0:ab:d9:b9:e6:28:50:6f:75:d6:65:c7: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0B:0B:07:AE:6D:74:01:9D:14:D3:7D:7D:97:B5:53:F5:9A:77:35 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138352e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.185.0/24 Signature Algorithm: sha256WithRSAEncryption 44:95:62:2d:c3:25:a3:8a:c1:37:5b:4e:92:84:c1:51:55:53: bb:ac:01:eb:4d:ff:3f:b8:be:51:89:47:ea:98:ed:ce:17:64: 03:e9:65:c7:c8:0e:19:b3:09:05:ed:57:55:74:60:05:df:36: fe:1b:fa:ce:11:69:aa:39:bf:55:a1:13:87:aa:d8:a1:0d:75: c3:39:4e:2f:a3:f4:0d:e3:27:5b:d4:6b:4b:f8:97:e3:16:6f: 5a:64:91:f4:b0:c1:7a:a9:61:38:ff:6f:4f:c0:27:dc:fb:84: dd:fa:e1:c2:d5:e8:d5:37:a9:cd:9d:e1:ce:43:ac:b0:2a:0c: 26:fb:c1:16:59:b9:93:88:3f:85:14:2b:97:02:b0:eb:f1:5b: 1d:d1:80:f5:bb:d0:0c:b3:f9:75:97:e5:b8:e6:2e:66:7c:16: 88:fb:60:63:a6:d4:07:ff:b8:ac:ce:5c:d3:55:22:63:26:b4: 1c:01:85:7d:51:c6:d0:d8:ec:34:f4:2b:74:e9:24:72:7e:e3: 9a:05:e4:33:87:13:7e:29:c2:43:59:3c:d3:e6:b9:e6:af:5b: 23:30:48:ea:e8:06:18:58:ea:50:78:af:e5:28:44:00:5c:b1: b4:e5:61:c0:37:48:d0:4e:a0:98:ee:d5:5e:38:9a:58:e0:49: d5:18:7c:f8 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUARxLHl23x8DGd3xj3JAx5QTQky8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjAwNDAwMzFaFw0yNzA5MTkwNDA1MzFaMDMxMTAvBgNV BAMTKEE5MEIwQjA3QUU2RDc0MDE5RDE0RDM3RDdEOTdCNTUzRjU5QTc3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqlxMKBqnbmC/2tui75hjydB1 JQijl8mYfruBXkd6g+RjBKnAWMRZv+F1v//AzyCi1BcWhmKWnlWQjh7oj1t627cT n1QevzjqAl3e+llmsm8nDbkrldLZ9gL3rESbhBBS/luUbo60bJUo+e+pbxUDaEr7 V9R8xU+IwzhDmaybfaffxXA2HqC3TufozyWH61ysiTKeJ2oQNdQZk6Q772XKHe5W pPvLUDgUG8nv/GdMru0PUjjWsfsTjYd/+JBKe50STeMAqj04KPdhe9OqJ6CHq/jB M4I6X9XcLtFZhincxrq98JU6s/R9iLFNSC/tyccvaeCr2bnmKFBvddZlx587AgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUqQsLB65tdAGdFNN9fZe1U/WadzUwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyLS5MA0GCSqGSIb3DQEBCwUAA4IBAQBElWItwyWjisE3W06ShMFR VVO7rAHrTf8/uL5RiUfqmO3OF2QD6WXHyA4ZswkF7VdVdGAF3zb+G/rOEWmqOb9V oROHqtihDXXDOU4vo/QN4ydb1GtL+JfjFm9aZJH0sMF6qWE4/29PwCfc+4Td+uHC 1ejVN6nNneHOQ6ywKgwm+8EWWbmTiD+FFCuXArDr8Vsd0YD1u9AMs/l1l+W45i5m fBaI+2BjptQH/7iszlzTVSJjJrQcAYV9UcbQ2Ow09Ct06SRyfuOaBeQzhxN+KcJD WTzT5rnmr1sjMEjq6AYYWOpQeK/lKEQAXLG05WHAN0jQTqCY7tVeOJpY4EnVGHz4 -----END CERTIFICATE-----Generated at Mon Sep 21 11:45:21 2026 by rpki-client