$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666332303a3a2f34342d3434203d3e20323034363033.roa File: 326131333a633863343a666332303a3a2f34342d3434203d3e20323034363033.roa (raw, json) Hash identifier: PjiQY2KOUhxZpc0w3A4HGMgggbZ5o5LvvpkKv8DxtHI= Subject key identifier: 11:6C:1F:CC:37:D7:2C:40:E5:D6:53:46:BB:34:11:21:DD:90:3E:57 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 53397C6B7299D5CDDDB8F8D6A848DD2E17B76149 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666332303a3a2f34342d3434203d3e20323034363033.roa Signing time: Wed 07 Oct 2026 16:58:51 +0000 ROA not before: Wed 07 Oct 2026 16:53:51 +0000 ROA not after: Wed 06 Oct 2027 16:58:51 +0000 asID: 204603 IP address blocks: 2a13:c8c4:fc20::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:39:7c:6b:72:99:d5:cd:dd:b8:f8:d6:a8:48:dd:2e:17:b7:61:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Oct 7 16:53:51 2026 GMT Not After : Oct 6 16:58:51 2027 GMT Subject: CN=116C1FCC37D72C40E5D65346BB341121DD903E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:e2:7a:59:9e:b7:aa:ff:a8:dd:f2:5a:74: 3c:73:be:64:e9:5a:5b:78:47:7c:90:31:63:1d:68: 89:d7:0a:83:0b:22:3e:9c:1b:c1:a1:0d:b4:c2:4f: 4f:59:d0:c2:61:8c:9f:e0:85:1f:60:30:65:49:65: 7c:97:0f:6e:aa:71:6f:93:e2:63:21:32:b4:be:40: 2d:e0:4d:cf:1d:df:69:d9:78:0d:29:f4:1c:13:8b: fb:9e:9c:d9:3d:37:57:20:6a:74:0b:32:be:19:6a: dd:ab:95:77:74:62:5f:27:cc:cc:17:82:ff:af:5a: dd:d4:3f:14:31:09:98:e0:ef:1f:70:c0:0a:60:57: 52:38:f4:21:80:6a:2c:df:db:31:13:a1:e8:1a:b4: ee:e6:f4:eb:a8:5b:29:84:fa:e0:3b:1d:34:b3:b4: 7e:68:0a:b7:7f:18:8f:3d:d2:55:23:2f:a6:d9:d0: dd:89:86:33:05:77:e2:4b:69:3d:8b:4b:e5:35:dc: 8a:98:a0:80:ec:04:cb:52:d3:52:f6:3b:f3:d4:28: ab:ea:24:7a:b4:4c:30:89:61:ef:3e:18:d0:45:53: 07:c0:ab:45:ee:e6:e9:7f:d8:19:10:64:50:3e:09: c3:54:a5:92:c2:98:4a:ee:8b:44:27:eb:bc:bc:3a: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6C:1F:CC:37:D7:2C:40:E5:D6:53:46:BB:34:11:21:DD:90:3E:57 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666332303a3a2f34342d3434203d3e20323034363033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:fc20::/44 Signature Algorithm: sha256WithRSAEncryption 96:89:6f:a3:1d:0e:a5:dc:f8:c5:76:f9:50:e5:65:6f:41:2d: db:ff:22:72:fe:33:53:3a:29:c1:29:ce:b7:f9:f7:3a:5d:0e: 96:5e:ac:ef:d1:32:1f:52:89:87:89:e8:f7:0c:af:fa:c1:e3: de:ff:dd:ee:59:8f:c3:38:66:4f:de:ec:32:42:b0:10:fa:5e: 98:b5:63:eb:6e:77:fb:bf:ec:1a:b0:fd:10:31:31:df:55:6c: b4:08:f6:c0:35:46:63:26:84:85:7c:89:8c:4d:b9:2d:fc:0a: 7b:85:f1:21:e9:b4:4b:11:47:b6:50:cd:0c:76:2f:42:10:22: ff:5c:75:ab:d0:57:40:fb:f4:d6:33:1b:df:bc:83:62:99:d5: 75:ef:77:bd:98:50:16:17:e5:a5:ab:a4:26:f5:6d:6d:ca:66: c6:ba:ec:cb:83:99:d2:1b:32:e0:6a:73:2a:da:e1:83:aa:54: 8b:36:08:2a:39:d2:a8:62:1f:aa:f9:a8:0c:fa:86:e2:86:f1: cb:18:78:eb:1a:c6:2f:9d:25:f1:09:51:dc:df:ce:8b:52:45: ae:09:bf:65:47:12:c3:43:d3:dd:ea:0c:1e:cd:69:76:a6:99: fe:d0:d1:5f:1c:9d:4b:53:d3:78:d5:4b:f7:91:cb:eb:18:1a: 48:ff:d4:6e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUUzl8a3KZ1c3duPjWqEjdLhe3YUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjEwMDcxNjUzNTFaFw0yNzEwMDYxNjU4NTFaMDMxMTAvBgNV BAMTKDExNkMxRkNDMzdENzJDNDBFNUQ2NTM0NkJCMzQxMTIxREQ5MDNFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpTOJ6WZ63qv+o3fJadDxzvmTp Wlt4R3yQMWMdaInXCoMLIj6cG8GhDbTCT09Z0MJhjJ/ghR9gMGVJZXyXD26qcW+T 4mMhMrS+QC3gTc8d32nZeA0p9BwTi/uenNk9N1cganQLMr4Zat2rlXd0Yl8nzMwX gv+vWt3UPxQxCZjg7x9wwApgV1I49CGAaizf2zEToegatO7m9OuoWymE+uA7HTSz tH5oCrd/GI890lUjL6bZ0N2JhjMFd+JLaT2LS+U13IqYoIDsBMtS01L2O/PUKKvq JHq0TDCJYe8+GNBFUwfAq0Xu5ul/2BkQZFA+CcNUpZLCmErui0Qn67y8Or7zAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUEWwfzDfXLEDl1lNGuzQRId2QPlcwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2NjMzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MDM0MzYzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhPIxPwgMA0GCSqGSIb3DQEBCwUAA4IBAQCW iW+jHQ6l3PjFdvlQ5WVvQS3b/yJy/jNTOinBKc63+fc6XQ6WXqzv0TIfUomHiej3 DK/6wePe/93uWY/DOGZP3uwyQrAQ+l6YtWPrbnf7v+wasP0QMTHfVWy0CPbANUZj JoSFfImMTbkt/Ap7hfEh6bRLEUe2UM0Mdi9CECL/XHWr0FdA+/TWMxvfvINimdV1 73e9mFAWF+Wlq6Qm9W1tymbGuuzLg5nSGzLganMq2uGDqlSLNggqOdKoYh+q+agM +obihvHLGHjrGsYvnSXxCVHc386LUkWuCb9lRxLDQ9Pd6gwezWl2ppn+0NFfHJ1L U9N41Uv3kcvrGBpI/9Ru -----END CERTIFICATE-----Generated at Thu Oct 22 20:06:32 2026 by rpki-client