$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666330303a3a2f33392d313238203d3e20323138393935.roa File: 326131333a633863343a666330303a3a2f33392d313238203d3e20323138393935.roa (raw, json) Hash identifier: fe9ZeqxvPdcG5otvDjVHl2QFC//KG6i42qMOmO5b0Ss= Subject key identifier: F8:DF:84:B3:A6:A6:DF:3D:03:88:87:86:AD:07:28:7C:05:46:2C:A7 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 15ADA69ABDAE713CFA1227C01E2E442B494A7C09 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666330303a3a2f33392d313238203d3e20323138393935.roa Signing time: Fri 02 Oct 2026 18:46:01 +0000 ROA not before: Fri 02 Oct 2026 18:41:01 +0000 ROA not after: Fri 01 Oct 2027 18:46:01 +0000 asID: 218995 IP address blocks: 2a13:c8c4:fc00::/39 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ad:a6:9a:bd:ae:71:3c:fa:12:27:c0:1e:2e:44:2b:49:4a:7c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Oct 2 18:41:01 2026 GMT Not After : Oct 1 18:46:01 2027 GMT Subject: CN=F8DF84B3A6A6DF3D03888786AD07287C05462CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:23:1a:b1:53:3a:2f:92:6e:ff:9d:a5:bb:3c: 07:bd:b6:74:90:b8:fc:31:8d:25:ad:a1:b1:92:0f: 5c:5b:12:d9:2c:1b:90:42:a8:ed:5f:fd:54:fb:4d: e6:8d:9f:93:1e:37:06:36:86:1d:66:98:86:24:4a: 49:42:86:47:23:d7:85:e6:64:01:af:3f:61:b6:3c: e0:89:c5:07:c0:bb:07:bc:54:d0:8b:1f:0f:c3:04: 8a:1c:7e:5e:5d:d4:f0:ac:98:c6:0e:a7:c2:b9:3d: d5:50:48:d0:1b:c4:0a:c0:13:e4:f7:c7:8f:26:c2: eb:fa:11:e4:5a:63:bd:35:d0:93:b3:71:e1:db:3e: 23:17:62:03:57:08:96:4b:2c:31:d6:4e:3f:14:13: d7:bf:ed:29:79:2d:c4:3a:0b:5a:7d:7b:6e:32:e2: ec:c4:c8:89:a5:89:86:98:f5:6f:af:53:81:07:4b: 83:bf:e6:20:2e:23:03:83:36:f6:fe:9b:9f:0b:55: 78:ed:ba:e3:02:16:34:76:59:0d:c5:7f:99:78:d7: b3:1e:5a:94:7c:f7:9f:f8:5c:74:6e:25:c1:5a:fe: 9b:24:2d:ff:1b:7c:01:8a:a8:90:98:86:13:0c:a4: 0f:dc:28:ed:14:e1:c0:58:bc:a7:0b:7f:44:80:1b: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DF:84:B3:A6:A6:DF:3D:03:88:87:86:AD:07:28:7C:05:46:2C:A7 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666330303a3a2f33392d313238203d3e20323138393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:fc00::/39 Signature Algorithm: sha256WithRSAEncryption 20:2f:b4:52:87:45:68:fd:de:d8:da:0e:a3:af:3e:32:24:7d: d5:9e:38:a3:e8:93:fc:64:b2:09:3e:07:bf:09:10:32:3b:4b: a0:ad:9b:cb:a6:cf:c9:61:01:f9:fb:38:f1:5b:c6:cb:0f:31: 7a:ce:8a:1c:ac:bd:3b:8e:31:65:cc:41:20:fa:b7:51:54:41: c6:61:0b:29:9c:b8:e8:02:9a:94:22:b5:a1:e4:75:83:73:e5: 5c:00:07:c3:75:2b:a9:fd:b1:9e:1b:2d:9f:db:2d:06:4c:12: f3:79:a2:db:1b:08:a3:96:d1:68:ba:f4:1b:33:bf:98:28:af: f0:a0:be:8a:57:4b:ba:08:5e:2a:18:94:da:a8:71:b3:35:bb: 72:1a:99:24:0a:61:cb:02:8c:58:53:9d:23:10:b8:8d:fb:d6: 6d:3e:9c:9d:84:56:62:2d:18:5f:d8:af:6a:f2:27:09:95:58: 08:67:70:2c:4f:50:3f:97:de:d2:ae:77:87:ba:1f:9b:fc:47: a8:ce:a3:8d:05:0b:d9:30:77:33:a6:c0:db:f3:65:b1:04:78: 17:9f:27:79:99:cb:84:90:3e:21:3e:37:b5:77:6d:7d:58:a5: 63:b2:78:a0:3f:09:ec:32:94:51:ad:ea:7e:40:93:39:75:1b: 89:2d:03:df -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUFa2mmr2ucTz6EifAHi5EK0lKfAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjEwMDIxODQxMDFaFw0yNzEwMDExODQ2MDFaMDMxMTAvBgNV BAMTKEY4REY4NEIzQTZBNkRGM0QwMzg4ODc4NkFEMDcyODdDMDU0NjJDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIxqxUzovkm7/naW7PAe9tnSQ uPwxjSWtobGSD1xbEtksG5BCqO1f/VT7TeaNn5MeNwY2hh1mmIYkSklChkcj14Xm ZAGvP2G2POCJxQfAuwe8VNCLHw/DBIocfl5d1PCsmMYOp8K5PdVQSNAbxArAE+T3 x48mwuv6EeRaY7010JOzceHbPiMXYgNXCJZLLDHWTj8UE9e/7Sl5LcQ6C1p9e24y 4uzEyImliYaY9W+vU4EHS4O/5iAuIwODNvb+m58LVXjtuuMCFjR2WQ3Ff5l417Me WpR895/4XHRuJcFa/pskLf8bfAGKqJCYhhMMpA/cKO0U4cBYvKcLf0SAG8E3AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQU+N+Es6am3z0DiIeGrQcofAVGLKcwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2NjMzMDMwM2EzYTJmMzMzOTJkMzEzMjM4MjAzZDNlMjAz MjMxMzgzOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgEqE8jE/DANBgkqhkiG9w0BAQsFAAOCAQEA IC+0UodFaP3e2NoOo68+MiR91Z44o+iT/GSyCT4HvwkQMjtLoK2by6bPyWEB+fs4 8VvGyw8xes6KHKy9O44xZcxBIPq3UVRBxmELKZy46AKalCK1oeR1g3PlXAAHw3Ur qf2xnhstn9stBkwS83mi2xsIo5bRaLr0GzO/mCiv8KC+ildLugheKhiU2qhxszW7 chqZJAphywKMWFOdIxC4jfvWbT6cnYRWYi0YX9ivavInCZVYCGdwLE9QP5fe0q53 h7ofm/xHqM6jjQUL2TB3M6bA2/NlsQR4F58neZnLhJA+IT43tXdtfVilY7J4oD8J 7DKUUa3qfkCTOXUbiS0D3w== -----END CERTIFICATE-----Generated at Sun Oct 11 13:37:16 2026 by rpki-client