$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333934313a3a2f34382d3634203d3e20313939373633.roa File: 326131343a373538313a333934313a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: EhqBuQ2rW6jmStDfNfWXgqhPEJfMYVcykuC6x930/W4= Subject key identifier: 65:FA:36:14:49:05:6B:BD:C2:17:BB:F3:97:34:75:28:1E:D0:38:10 Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 47D115FB614DE561E356ADB90AA565D7DEE79E1D Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333934313a3a2f34382d3634203d3e20313939373633.roa Signing time: Thu 03 Sep 2026 20:16:41 +0000 ROA not before: Thu 03 Sep 2026 20:11:41 +0000 ROA not after: Thu 02 Sep 2027 20:16:41 +0000 asID: 199763 IP address blocks: 2a14:7581:3941::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d1:15:fb:61:4d:e5:61:e3:56:ad:b9:0a:a5:65:d7:de:e7:9e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 3 20:11:41 2026 GMT Not After : Sep 2 20:16:41 2027 GMT Subject: CN=65FA361449056BBDC217BBF3973475281ED03810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:4a:75:db:36:fc:fa:d9:34:b9:aa:72:6d: 11:91:fb:07:63:52:48:c6:c2:17:e2:15:25:67:31: 7c:47:b4:7a:7a:90:89:e2:c4:d6:5c:c6:e3:98:5a: 57:de:f3:a7:a5:e9:19:e2:df:b7:08:77:02:35:df: 94:9a:53:3d:c4:07:f2:75:26:17:63:43:a9:a2:85: c2:c9:17:0b:b5:9a:f2:80:cb:4b:1d:1e:48:d0:91: 6d:c6:2a:72:2e:41:c9:5e:ef:75:ee:bd:02:e2:a8: eb:09:24:80:10:1b:97:ff:4e:d1:29:04:35:45:84: 54:4b:28:8a:64:1c:3f:2c:4d:9c:72:b8:3b:7b:b5: 7d:8c:43:f2:ba:b3:c7:e3:de:8e:20:a6:77:58:07: 47:19:0a:e7:e7:a6:f4:ca:19:81:5e:40:e3:b2:e6: 90:50:b8:56:6a:b1:8c:26:d9:2f:41:fe:dd:18:5e: fa:42:c3:e0:99:d1:05:b9:8f:8d:6d:5f:ed:f2:9a: 8b:dd:06:9c:9a:1c:bd:0c:44:3c:b5:38:64:ef:5d: 78:a8:5a:7c:25:3d:4d:fc:27:89:a0:b8:51:b1:a6: 89:61:75:99:dd:10:ca:83:81:6e:92:ed:cd:1b:40: 01:dd:f9:00:90:54:cd:05:4b:99:7a:1d:08:c1:24: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FA:36:14:49:05:6B:BD:C2:17:BB:F3:97:34:75:28:1E:D0:38:10 X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333934313a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3941::/48 Signature Algorithm: sha256WithRSAEncryption 68:81:39:c6:6e:5c:6d:8b:54:ab:3c:36:1a:bd:a7:ba:57:87: 2d:ed:10:d1:fd:83:1f:3f:2c:07:2c:35:ae:85:5d:57:a2:44: 89:0e:e8:de:d9:82:75:ad:fd:8a:7e:fe:c1:79:9d:77:3f:ab: 1b:2e:59:a7:93:3e:e2:22:e2:4e:07:33:93:c0:c6:7d:7c:d1: 92:3e:30:0b:e6:84:ce:13:a1:4d:ec:58:00:70:72:10:49:90: e7:4d:49:bb:f2:90:13:7b:b3:01:7f:f4:ac:df:ec:06:e7:8f: 2b:cf:d2:24:00:a6:17:f9:29:92:55:52:43:91:3b:e4:68:50: a8:a5:d2:4e:95:90:9e:36:4f:78:30:c8:0f:16:7a:f3:e0:bf: 71:b9:8c:3c:1e:71:1b:c4:03:51:e9:dd:ef:05:97:69:1f:4e: 45:6f:d5:09:e2:21:95:81:1d:10:fc:ae:86:f4:35:b0:c8:93: 97:3e:b5:1a:b9:2b:da:4c:8f:3b:1a:f8:a9:53:16:03:79:f0: c3:ad:5a:c9:4b:18:96:5a:5a:93:70:c6:ab:b0:73:cf:ca:12: 54:27:fd:49:93:84:15:52:20:37:36:e5:b7:93:4a:c4:42:2b: 95:90:04:dc:36:96:be:ea:fa:7c:3e:9d:9b:e9:e6:05:41:0a: 3e:2a:0e:d6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUR9EV+2FN5WHjVq25CqVl197nnh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDMyMDExNDFaFw0yNzA5MDIyMDE2NDFaMDMxMTAvBgNV BAMTKDY1RkEzNjE0NDkwNTZCQkRDMjE3QkJGMzk3MzQ3NTI4MUVEMDM4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSEp12zb8+tk0uapybRGR+wdj UkjGwhfiFSVnMXxHtHp6kInixNZcxuOYWlfe86el6Rni37cIdwI135SaUz3EB/J1 JhdjQ6mihcLJFwu1mvKAy0sdHkjQkW3GKnIuQcle73XuvQLiqOsJJIAQG5f/TtEp BDVFhFRLKIpkHD8sTZxyuDt7tX2MQ/K6s8fj3o4gpndYB0cZCufnpvTKGYFeQOOy 5pBQuFZqsYwm2S9B/t0YXvpCw+CZ0QW5j41tX+3ymovdBpyaHL0MRDy1OGTvXXio WnwlPU38J4mguFGxpolhdZndEMqDgW6S7c0bQAHd+QCQVM0FS5l6HQjBJAlnAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUZfo2FEkFa73CF7vzlzR1KB7QOBAwHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMzc5MWJmYi1jMWRlLTRiYmYtODM5MC1jYzI4YjFkNDE1YWIvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzkzNDMxM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTlBMA0GCSqGSIb3DQEBCwUAA4IBAQBo gTnGblxti1SrPDYavae6V4ct7RDR/YMfPywHLDWuhV1XokSJDuje2YJ1rf2Kfv7B eZ13P6sbLlmnkz7iIuJOBzOTwMZ9fNGSPjAL5oTOE6FN7FgAcHIQSZDnTUm78pAT e7MBf/Ss3+wG548rz9IkAKYX+SmSVVJDkTvkaFCopdJOlZCeNk94MMgPFnrz4L9x uYw8HnEbxANR6d3vBZdpH05Fb9UJ4iGVgR0Q/K6G9DWwyJOXPrUauSvaTI87Gvip UxYDefDDrVrJSxiWWlqTcMarsHPPyhJUJ/1Jk4QVUiA3NuW3k0rEQiuVkATcNpa+ 6vp8Pp2b6eYFQQo+Kg7W -----END CERTIFICATE-----Generated at Sat Sep 5 00:45:06 2026 by rpki-client