$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa File: 3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa (raw, json) Hash identifier: c7rDwmaeg1ixtTlrBNd5rmSVyV1b9P8eB3zeUnPw2no= Subject key identifier: 49:12:C8:72:66:99:B1:7E:63:EF:D2:A5:5C:EF:EA:3A:E4:B9:3B:29 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 1E6CEB1A23214CC74FF150389D64F498C0020165 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa Signing time: Thu 03 Sep 2026 12:11:48 +0000 ROA not before: Thu 03 Sep 2026 12:06:48 +0000 ROA not after: Thu 02 Sep 2027 12:11:48 +0000 asID: 218965 IP address blocks: 194.31.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 07:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6c:eb:1a:23:21:4c:c7:4f:f1:50:38:9d:64:f4:98:c0:02:01:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Sep 3 12:06:48 2026 GMT Not After : Sep 2 12:11:48 2027 GMT Subject: CN=4912C8726699B17E63EFD2A55CEFEA3AE4B93B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:bf:6d:78:25:19:37:55:9d:a4:97:7b:34: 11:67:8e:f8:96:dd:ea:cb:41:e8:38:d5:0b:9a:70: ad:6e:19:5d:2d:76:83:6e:dd:a0:19:b5:df:36:65: 2f:eb:5d:28:5d:7f:73:89:0f:17:23:47:5b:9a:dd: 5e:fc:25:3a:af:b8:46:b4:92:05:10:b0:ce:13:e1: 9e:22:08:d9:3f:49:3b:71:96:78:28:42:86:65:55: 7d:cf:ae:a9:ad:e4:e9:d9:a3:99:b5:19:fb:c6:f3: 2d:45:bb:c9:43:8a:bd:d0:25:5d:29:ef:2f:ce:d3: 30:1f:dc:8b:9c:aa:00:20:47:47:8f:f1:e3:c5:c0: 27:47:9e:d5:01:cb:be:a3:4f:bd:f7:08:50:97:a7: f5:0d:d8:c8:55:c5:03:57:b6:50:79:2a:0a:2f:dd: b1:72:e2:cf:99:73:4f:03:bb:cf:0a:fe:d4:a8:ca: 66:f8:ac:4b:e8:78:79:1c:18:aa:67:02:17:f4:2a: b6:f0:0d:f2:21:dc:2b:83:c8:9e:b8:c4:2e:68:37: bd:42:2d:ee:86:45:cb:42:c3:6b:ad:6c:4b:71:36: 73:5f:b1:1a:50:9d:fd:79:d8:3c:01:ac:71:3b:9b: 38:fd:4e:c5:63:43:10:86:ca:2d:30:a5:b5:67:89: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:12:C8:72:66:99:B1:7E:63:EF:D2:A5:5C:EF:EA:3A:E4:B9:3B:29 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136362e302f32342d3234203d3e20323138393635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.166.0/24 Signature Algorithm: sha256WithRSAEncryption 75:2d:8f:63:c6:e1:30:4f:64:7e:c7:e1:d4:02:6e:a5:b9:6f: 8d:d6:d8:63:83:27:5b:7c:3a:10:e4:b6:87:8d:b4:ed:04:ab: 3d:f6:73:b4:fb:e7:08:82:72:15:e4:0a:69:9d:10:df:77:d0: ca:a6:1f:f0:ee:3e:9c:df:8f:f7:36:e3:86:27:df:c2:47:e4: 9d:c8:2a:13:a7:f7:10:a6:ae:05:82:20:73:4d:ba:53:41:4a: 11:f6:9a:11:93:de:23:0c:ad:a7:2b:9e:b2:22:7e:90:3d:f8: d5:70:e8:39:d8:57:41:f8:8f:70:e5:d2:c4:ef:b5:ff:e0:4d: 2d:93:48:6c:da:12:55:96:7f:69:c7:8d:a1:ba:e9:8a:ad:08: 9e:28:c6:f0:cc:e7:a1:dd:fd:78:c4:49:43:a7:66:0e:76:8d: 92:d0:e0:d5:1a:bc:58:80:da:3a:3a:c0:f6:c5:c7:78:ad:32: aa:bb:72:f0:63:50:27:8c:98:c7:a9:c1:5e:3f:1d:80:cb:da: d7:59:1d:8c:2c:c7:99:df:fa:2a:6f:97:fc:1e:9c:65:66:d7: 2b:2d:1e:b7:e1:37:21:b7:93:8f:c7:19:bc:f5:07:4a:1b:e7: 8c:65:b3:48:99:39:f1:eb:85:fa:64:87:2f:73:cb:4d:60:38: 45:ca:00:35 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUHmzrGiMhTMdP8VA4nWT0mMACAWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA5MDMxMjA2NDhaFw0yNzA5MDIxMjExNDhaMDMxMTAvBgNV BAMTKDQ5MTJDODcyNjY5OUIxN0U2M0VGRDJBNTVDRUZFQTNBRTRCOTNCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH79teCUZN1WdpJd7NBFnjviW 3erLQeg41QuacK1uGV0tdoNu3aAZtd82ZS/rXShdf3OJDxcjR1ua3V78JTqvuEa0 kgUQsM4T4Z4iCNk/STtxlngoQoZlVX3Prqmt5OnZo5m1GfvG8y1Fu8lDir3QJV0p 7y/O0zAf3IucqgAgR0eP8ePFwCdHntUBy76jT733CFCXp/UN2MhVxQNXtlB5Kgov 3bFy4s+Zc08Du88K/tSoymb4rEvoeHkcGKpnAhf0KrbwDfIh3CuDyJ64xC5oN71C Le6GRctCw2utbEtxNnNfsRpQnf152DwBrHE7mzj9TsVjQxCGyi0wpbVniVZTAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUSRLIcmaZsX5j79KlXO/qOuS5OykwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mMDdjOTNlZC1iODE5LTQ1ZTgtOTQ1ZC00MjYzNmQ0NzE3MTAvMC8zMTM5MzQy ZTMzMzEyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM5MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMIfpjANBgkqhkiG9w0BAQsFAAOCAQEAdS2PY8bhME9kfsfh 1AJupblvjdbYY4MnW3w6EOS2h4207QSrPfZztPvnCIJyFeQKaZ0Q33fQyqYf8O4+ nN+P9zbjhiffwkfkncgqE6f3EKauBYIgc026U0FKEfaaEZPeIwytpyuesiJ+kD34 1XDoOdhXQfiPcOXSxO+1/+BNLZNIbNoSVZZ/aceNobrpiq0InijG8Mznod39eMRJ Q6dmDnaNktDg1Rq8WIDaOjrA9sXHeK0yqrty8GNQJ4yYx6nBXj8dgMva11kdjCzH md/6Km+X/B6cZWbXKy0et+E3IbeTj8cZvPUHShvnjGWzSJk58euF+mSHL3PLTWA4 RcoANQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:55:45 2026 by rpki-client