$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa File: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (raw, json) Hash identifier: joAEPn9ggJnOJibwtnJz8w4Tu9b024lTJQ13MXp3eQ4= Subject key identifier: 5C:5C:5E:37:8E:AA:D4:A2:4A:39:3C:55:9F:13:BF:43:AB:F6:82:00 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 5591EF1840D0CB054A6D7E2956827A1E5B9071C7 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa Signing time: Fri 20 Feb 2026 00:16:10 +0000 ROA not before: Fri 20 Feb 2026 00:11:10 +0000 ROA not after: Fri 19 Feb 2027 00:16:10 +0000 asID: 199518 IP address blocks: 198.180.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:91:ef:18:40:d0:cb:05:4a:6d:7e:29:56:82:7a:1e:5b:90:71:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Feb 20 00:11:10 2026 GMT Not After : Feb 19 00:16:10 2027 GMT Subject: CN=5C5C5E378EAAD4A24A393C559F13BF43ABF68200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:3f:6b:5b:99:bc:fd:b7:42:7c:b7:13:5c: b1:4f:d0:cd:d5:1b:23:eb:82:96:e8:46:ed:73:7c: 91:e4:5f:ca:b0:32:f5:fa:40:43:c3:ca:98:f5:f9: 24:ef:21:ed:ec:f2:89:22:63:e1:0a:f1:16:c2:fc: 83:5e:0f:13:44:bb:33:51:e5:0b:bb:96:8b:4b:b8: 5d:ce:8b:6d:fb:07:ce:fc:5f:5d:03:8a:b7:4a:19: 4d:d3:10:e5:f5:fa:7e:c5:af:cd:97:fe:f4:9f:c5: 50:8b:e0:38:3d:75:a5:7f:b9:28:bd:03:7a:5e:68: f8:b9:38:46:3c:6e:80:fd:1b:11:62:23:a4:92:03: 9b:14:7d:fe:10:04:77:5b:f9:d2:08:e8:7b:7f:1b: 30:66:71:c3:23:05:d1:6d:00:85:b6:67:eb:95:a9: 5d:e3:b9:93:5f:a7:43:fb:81:ab:34:ef:bb:68:bc: c7:9b:cb:d0:16:0d:bb:23:5b:44:12:e2:6e:cf:1d: f5:18:a7:28:37:43:e0:dd:8e:02:c1:d2:cb:66:08: 23:25:40:9e:da:79:f2:96:7c:12:3a:50:07:d6:f9: 65:1a:06:8b:b0:46:cb:63:7e:ba:e5:da:a1:e6:ff: 5c:80:de:70:92:46:27:9a:08:ff:e7:c4:78:db:90: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:5E:37:8E:AA:D4:A2:4A:39:3C:55:9F:13:BF:43:AB:F6:82:00 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.180.151.0/24 Signature Algorithm: sha256WithRSAEncryption c4:15:3e:48:a1:f6:a1:7b:95:b1:ef:80:1c:d8:1d:7e:8e:cf: cd:fd:32:b9:09:fa:66:60:ff:8e:a5:75:3b:60:ef:38:b7:20: b8:6c:8b:16:40:11:cb:93:43:3b:e2:c9:33:86:2e:15:73:0a: a9:18:21:83:46:38:08:1c:5c:31:48:ac:3d:4b:d7:6b:8b:ab: 54:b0:6f:0a:90:6e:ff:aa:d6:61:68:40:22:33:b8:fe:87:bd: 27:5c:7e:ef:de:4a:fb:c8:27:5f:61:56:16:86:a5:fa:d5:57: 7c:30:51:3a:02:5b:bf:33:a4:46:f5:38:52:4b:9b:2a:9a:9d: 8c:bf:d0:56:ee:04:39:8b:6e:50:c7:a0:71:ff:11:66:fb:0a: ac:ef:c9:99:2e:b7:1e:95:be:7b:6b:ac:c4:1e:18:7e:be:a2: bd:50:9f:7e:66:b9:3f:d2:ce:87:14:fb:37:e1:13:aa:68:2c: 65:74:0a:05:07:d7:4d:32:89:6b:b2:82:b3:e5:f5:82:23:c0: 04:8b:73:a6:51:17:de:f2:57:30:6c:47:b7:19:4c:92:af:73: 23:82:3e:80:3b:01:7a:44:f7:fd:51:cd:10:5f:a5:7c:31:e0: f0:ea:44:7d:52:da:c3:c0:4d:84:77:ac:b3:f0:26:8f:f0:02: 02:a0:cc:65 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUVZHvGEDQywVKbX4pVoJ6HluQcccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNjAyMjAwMDExMTBaFw0yNzAyMTkwMDE2MTBaMDMxMTAvBgNV BAMTKDVDNUM1RTM3OEVBQUQ0QTI0QTM5M0M1NTlGMTNCRjQzQUJGNjgyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpD9rW5m8/bdCfLcTXLFP0M3V GyPrgpboRu1zfJHkX8qwMvX6QEPDypj1+STvIe3s8okiY+EK8RbC/INeDxNEuzNR 5Qu7lotLuF3Oi237B878X10DirdKGU3TEOX1+n7Fr82X/vSfxVCL4Dg9daV/uSi9 A3peaPi5OEY8boD9GxFiI6SSA5sUff4QBHdb+dII6Ht/GzBmccMjBdFtAIW2Z+uV qV3juZNfp0P7gas077tovMeby9AWDbsjW0QS4m7PHfUYpyg3Q+DdjgLB0stmCCMl QJ7aefKWfBI6UAfW+WUaBouwRstjfrrl2qHm/1yA3nCSRieaCP/nxHjbkKHPAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUXFxeN46q1KJKOTxVnxO/Q6v2ggAwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5jOi8vcnN5bmMu cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1 LWJhZDctYjQyODE4Y2Y1MGU4LzQvMzEzOTM4MmUzMTM4MzAyZTMxMzUzMTJlMzAy ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzOTM1MzEzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMa0lzAN BgkqhkiG9w0BAQsFAAOCAQEAxBU+SKH2oXuVse+AHNgdfo7Pzf0yuQn6ZmD/jqV1 O2DvOLcguGyLFkARy5NDO+LJM4YuFXMKqRghg0Y4CBxcMUisPUvXa4urVLBvCpBu /6rWYWhAIjO4/oe9J1x+795K+8gnX2FWFoal+tVXfDBROgJbvzOkRvU4UkubKpqd jL/QVu4EOYtuUMegcf8RZvsKrO/JmS63HpW+e2usxB4Yfr6ivVCffma5P9LOhxT7 N+ETqmgsZXQKBQfXTTKJa7KCs+X1giPABItzplEX3vJXMGxHtxlMkq9zI4I+gDsB ekT3/VHNEF+lfDHg8OpEfVLaw8BNhHess/Amj/ACAqDMZQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:07 2026 by rpki-client