$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138362e302f32332d3234203d3e20383334.roa File: 3230302e3138302e3138362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: /6IdrXkaGU9YWP81xYl4kKozlQXz9fa0FManrbpR2cE= Subject key identifier: AF:EF:97:FC:1D:92:31:A3:05:94:8A:95:00:F3:68:13:1D:B4:B4:D3 Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Certificate serial: 4294AE7BFB0466494CC936C15792E132CF347307 Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138362e302f32332d3234203d3e20383334.roa Signing time: Sun 20 Sep 2026 04:05:31 +0000 ROA not before: Sun 20 Sep 2026 04:00:31 +0000 ROA not after: Sun 19 Sep 2027 04:05:31 +0000 asID: 834 IP address blocks: 200.180.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:94:ae:7b:fb:04:66:49:4c:c9:36:c1:57:92:e1:32:cf:34:73:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF Validity Not Before: Sep 20 04:00:31 2026 GMT Not After : Sep 19 04:05:31 2027 GMT Subject: CN=AFEF97FC1D9231A305948A9500F368131DB4B4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:e6:11:2d:c5:13:39:82:55:04:7a:6d:45: f8:83:c2:a0:55:54:7a:9f:a5:c5:ab:79:4b:84:01: f1:14:df:10:04:52:1d:e0:31:bf:7f:c0:93:5a:d8: 64:31:a9:45:11:d1:8f:66:b5:d9:2d:81:c9:cb:d6: 88:87:1b:ff:fa:1c:49:cd:2f:98:38:72:95:c7:04: 1f:c1:9a:54:a9:b6:68:bd:a4:69:04:4b:d3:d8:82: 53:29:5c:cc:b9:15:2f:93:e8:2e:28:84:50:7f:c9: e3:71:51:b7:18:9c:e2:71:66:58:19:18:83:43:81: 74:6e:7f:4d:96:b2:3d:c9:65:5e:53:b7:45:eb:4c: ab:4d:af:94:f0:71:dc:f1:e8:0e:90:9a:1f:66:fe: 5c:eb:95:59:1c:0a:78:8f:fe:2e:ea:1e:e0:ea:a4: 4e:83:2b:af:a5:5f:0b:45:a7:b8:67:92:57:d9:38: cc:d7:a2:d6:cd:d6:13:7d:69:33:fc:4f:15:75:e6: 37:27:bc:38:05:f3:f6:83:48:4a:fe:ae:fb:eb:96: 6e:55:9f:50:a3:4d:a0:8e:39:ba:ff:ec:3b:45:96: 3a:5e:f7:4f:b2:6e:63:61:7c:5c:36:60:39:ba:ca: 5a:f0:53:fd:9f:f8:9e:54:ed:30:0e:e5:11:ac:61: f7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EF:97:FC:1D:92:31:A3:05:94:8A:95:00:F3:68:13:1D:B4:B4:D3 X509v3 Authority Key Identifier: keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/3230302e3138302e3138362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.180.186.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:73:c6:83:bc:25:1f:fe:32:00:ab:d0:1f:78:bc:ea:ee:73: 7f:cf:b3:b9:62:e3:8f:55:63:a2:fb:58:97:83:aa:1f:8a:40: fb:a0:ec:d2:b9:1d:f5:44:0f:50:13:9b:d7:ae:62:d4:0b:81: 51:e0:f8:4c:40:72:5f:1b:69:c7:63:8a:8b:92:01:8e:16:50: 2d:da:47:6d:88:d4:62:56:fd:4b:27:dc:88:5f:b7:99:96:f2: 71:cb:a5:97:ba:b2:5e:05:29:5b:ca:9c:4a:a2:40:d9:50:c0: 77:b1:16:43:3e:be:fb:c7:78:a5:32:f1:4b:dc:b7:35:0c:91: bd:ea:84:da:e9:1a:e2:5e:5d:49:21:98:f6:aa:86:7f:63:22: 9a:ba:b3:b6:54:9e:0a:26:3f:c7:90:e6:52:1e:11:2f:02:f4: ae:a7:c1:7c:48:e7:72:69:20:8e:d6:6c:d9:b8:93:06:38:1b: 19:c2:ac:6c:35:2d:1f:e1:b7:2f:6f:d7:8d:95:e2:d6:01:22: 02:b2:e5:e6:6b:1e:93:de:ad:97:67:f0:1b:92:b9:5e:b8:b1: 63:ef:61:e8:65:91:55:54:f3:62:49:39:11:02:1a:0f:6e:dc: 0f:4a:75:7c:d9:96:60:59:e0:24:f8:d1:00:ea:0a:e6:14:12: 61:52:ee:36 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUQpSue/sEZklMyTbBV5LhMs80cwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFC MzJBODFERjAeFw0yNjA5MjAwNDAwMzFaFw0yNzA5MTkwNDA1MzFaMDMxMTAvBgNV BAMTKEFGRUY5N0ZDMUQ5MjMxQTMwNTk0OEE5NTAwRjM2ODEzMURCNEI0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDelOYRLcUTOYJVBHptRfiDwqBV VHqfpcWreUuEAfEU3xAEUh3gMb9/wJNa2GQxqUUR0Y9mtdktgcnL1oiHG//6HEnN L5g4cpXHBB/BmlSptmi9pGkES9PYglMpXMy5FS+T6C4ohFB/yeNxUbcYnOJxZlgZ GINDgXRuf02Wsj3JZV5Tt0XrTKtNr5Twcdzx6A6Qmh9m/lzrlVkcCniP/i7qHuDq pE6DK6+lXwtFp7hnklfZOMzXotbN1hN9aTP8TxV15jcnvDgF8/aDSEr+rvvrlm5V n1CjTaCOObr/7DtFljpe90+ybmNhfFw2YDm6ylrwU/2f+J5U7TAO5RGsYfe1AgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUr++X/B2SMaMFlIqVAPNoEx20tNMwHwYDVR0j BBgwFoAUFP+8Yl2ZyiKGl7n/dbImWrMqgd8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTdjODVkZWEtMGNhMC00YzZhLWJhNDctZWRhZDRiOTQ1 NzU0LzAvMTRGRkJDNjI1RDk5Q0EyMjg2OTdCOUZGNzVCMjI2NUFCMzJBODFERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YmMxZmY3Ni0yOTMwLTQw MDctYmQ2YS1iYWZmNTE2OWE2M2YvMC8xNEZGQkM2MjVEOTlDQTIyODY5N0I5RkY3 NUIyMjY1QUIzMkE4MURGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hN2M4NWRlYS0wY2EwLTRjNmEtYmE0Ny1lZGFkNGI5NDU3NTQvMC8zMjMwMzAy ZTMxMzgzMDJlMzEzODM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByLS6MA0GCSqGSIb3DQEBCwUAA4IBAQAKc8aDvCUf/jIAq9AfeLzq 7nN/z7O5YuOPVWOi+1iXg6ofikD7oOzSuR31RA9QE5vXrmLUC4FR4PhMQHJfG2nH Y4qLkgGOFlAt2kdtiNRiVv1LJ9yIX7eZlvJxy6WXurJeBSlbypxKokDZUMB3sRZD Pr77x3ilMvFL3Lc1DJG96oTa6RriXl1JIZj2qoZ/YyKaurO2VJ4KJj/HkOZSHhEv AvSup8F8SOdyaSCO1mzZuJMGOBsZwqxsNS0f4bcvb9eNleLWASICsuXmax6T3q2X Z/AbkrleuLFj72HoZZFVVPNiSTkRAhoPbtwPSnV82ZZgWeAk+NEA6grmFBJhUu42 -----END CERTIFICATE-----Generated at Mon Sep 21 11:45:06 2026 by rpki-client