$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d313238203d3e20323034363033.roa File: 326131333a633863343a666530303a3a2f34302d313238203d3e20323034363033.roa (raw, json) Hash identifier: s1OzGxzGo1S6p8BGQiZst9p84TL2FlP/HwTxxSpiMb0= Subject key identifier: C1:75:F9:D3:70:50:E1:48:17:CA:BB:A2:49:3E:FA:CD:89:1A:C9:B5 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 6520B386DDDCF74DB71667E7A8CA1A22A192E4B7 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d313238203d3e20323034363033.roa Signing time: Thu 08 Oct 2026 20:44:31 +0000 ROA not before: Thu 08 Oct 2026 20:39:31 +0000 ROA not after: Thu 07 Oct 2027 20:44:31 +0000 asID: 204603 IP address blocks: 2a13:c8c4:fe00::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:20:b3:86:dd:dc:f7:4d:b7:16:67:e7:a8:ca:1a:22:a1:92:e4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Oct 8 20:39:31 2026 GMT Not After : Oct 7 20:44:31 2027 GMT Subject: CN=C175F9D37050E14817CABBA2493EFACD891AC9B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:9c:90:b5:32:25:81:0c:07:c0:88:c6:51: 33:eb:fd:a9:86:e3:40:d1:44:0e:22:ff:dd:e7:70: e6:23:99:1d:7e:17:e2:3f:ac:99:14:b0:1f:17:a6: 9b:eb:6e:e7:99:ad:c0:b4:12:75:42:be:e6:d1:dd: 3a:1b:70:3c:66:5e:9a:af:c4:67:89:00:bc:4d:62: d1:3a:f7:b4:a2:05:ef:1f:ab:81:ab:0e:3f:86:a6: 77:2a:29:8d:cd:73:6b:12:f2:2b:5f:47:2d:b8:0f: a2:30:9a:ed:34:3a:84:c3:a3:c5:3c:68:f9:2e:51: 7d:ee:e0:22:77:23:7e:76:ec:87:8f:61:e2:d2:5c: 77:56:0a:3f:85:bc:13:c9:d9:6a:a2:73:e0:aa:b2: 6a:ee:e9:d9:31:86:4f:0b:0c:0f:99:d0:2d:e8:4d: 7f:65:71:f8:88:4f:7a:03:15:0f:85:e8:80:f8:44: 2d:7a:48:c6:d0:5f:56:75:34:20:70:8e:3a:ec:d6: 28:aa:45:8d:d5:2c:64:98:88:2f:64:09:d3:24:91: e4:6c:f0:e8:2e:a7:f0:9d:69:7f:9b:4a:8e:9a:ee: ed:e1:44:25:bc:a9:ea:e7:f7:f1:b5:1e:86:79:4d: 47:94:33:23:0c:e9:43:3b:51:25:30:21:6a:fd:09: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:75:F9:D3:70:50:E1:48:17:CA:BB:A2:49:3E:FA:CD:89:1A:C9:B5 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d313238203d3e20323034363033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:fe00::/40 Signature Algorithm: sha256WithRSAEncryption c1:a0:14:11:2a:7d:6a:52:8f:91:5d:52:34:eb:fa:1f:ce:34: 7c:38:5f:91:ab:f9:83:4d:95:5c:27:18:47:ee:57:be:b2:a1: 60:e8:71:21:b8:24:7d:95:f1:2f:aa:2d:b7:8b:57:36:9a:7e: e7:a7:10:c4:ff:0d:77:1c:09:aa:0f:b7:de:68:34:ad:6a:43: 42:ee:46:30:a6:e9:4c:6a:f4:8e:7c:c8:a4:42:cd:be:ca:7f: 44:8b:91:2e:5a:eb:e7:1a:3d:9f:c7:c3:63:a7:ba:0c:e7:69: 69:6a:03:b0:ed:76:4c:67:72:02:ff:20:bc:16:8b:6d:88:3d: 3b:e2:13:66:38:2f:a8:b7:6c:3e:72:a9:22:0a:db:c6:4d:39: eb:81:68:3c:47:da:64:78:16:d6:2a:80:41:e7:04:2d:38:cb: d6:02:85:50:f1:0a:4b:29:ba:ac:5a:45:60:f6:c8:d9:e7:e2: 4f:34:bc:f3:76:da:8a:7b:3c:c1:c7:ae:be:5e:4b:21:46:84: f6:81:6a:1e:8a:c8:73:f2:04:3a:eb:dd:f2:a9:f5:d8:e2:b2: df:80:fe:0e:58:a0:68:a2:d4:af:bc:75:4e:e6:be:13:24:d9: 63:57:2f:f3:e1:4f:00:c1:ac:75:18:db:c1:09:ab:7f:32:49: 44:94:7c:26 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUZSCzht3c9023FmfnqMoaIqGS5LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjEwMDgyMDM5MzFaFw0yNzEwMDcyMDQ0MzFaMDMxMTAvBgNV BAMTKEMxNzVGOUQzNzA1MEUxNDgxN0NBQkJBMjQ5M0VGQUNEODkxQUM5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSN5yQtTIlgQwHwIjGUTPr/amG 40DRRA4i/93ncOYjmR1+F+I/rJkUsB8XppvrbueZrcC0EnVCvubR3TobcDxmXpqv xGeJALxNYtE697SiBe8fq4GrDj+GpncqKY3Nc2sS8itfRy24D6Iwmu00OoTDo8U8 aPkuUX3u4CJ3I3527IePYeLSXHdWCj+FvBPJ2Wqic+Cqsmru6dkxhk8LDA+Z0C3o TX9lcfiIT3oDFQ+F6ID4RC16SMbQX1Z1NCBwjjrs1iiqRY3VLGSYiC9kCdMkkeRs 8Ogup/CdaX+bSo6a7u3hRCW8qern9/G1HoZ5TUeUMyMM6UM7USUwIWr9CbN1AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUwXX503BQ4UgXyruiST76zYkaybUwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2NjUzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNlMjAz MjMwMzQzNjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8jE/jANBgkqhkiG9w0BAQsFAAOCAQEA waAUESp9alKPkV1SNOv6H840fDhfkav5g02VXCcYR+5XvrKhYOhxIbgkfZXxL6ot t4tXNpp+56cQxP8NdxwJqg+33mg0rWpDQu5GMKbpTGr0jnzIpELNvsp/RIuRLlrr 5xo9n8fDY6e6DOdpaWoDsO12TGdyAv8gvBaLbYg9O+ITZjgvqLdsPnKpIgrbxk05 64FoPEfaZHgW1iqAQecELTjL1gKFUPEKSym6rFpFYPbI2efiTzS883bains8wceu vl5LIUaE9oFqHorIc/IEOuvd8qn12OKy34D+DligaKLUr7x1Tua+EyTZY1cv8+FP AMGsdRjbwQmrfzJJRJR8Jg== -----END CERTIFICATE-----Generated at Sat Oct 24 03:16:39 2026 by rpki-client