$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333934663a3a2f34382d3634203d3e20313939373633.roa File: 326131343a373538313a333934663a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: VkQPo/g/7kNIg3a2luNKrt3mJVZCiGlXL2gyi16yj08= Subject key identifier: EA:33:8D:45:1A:0E:1C:B7:EC:11:A3:D6:9B:75:1F:1E:2C:0B:0C:64 Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 14AE78995B4870A4FE11710FE803C466E98F1122 Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333934663a3a2f34382d3634203d3e20313939373633.roa Signing time: Thu 03 Sep 2026 20:16:43 +0000 ROA not before: Thu 03 Sep 2026 20:11:43 +0000 ROA not after: Thu 02 Sep 2027 20:16:43 +0000 asID: 199763 IP address blocks: 2a14:7581:394f::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ae:78:99:5b:48:70:a4:fe:11:71:0f:e8:03:c4:66:e9:8f:11:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 3 20:11:43 2026 GMT Not After : Sep 2 20:16:43 2027 GMT Subject: CN=EA338D451A0E1CB7EC11A3D69B751F1E2C0B0C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:a4:92:07:07:5a:dc:6f:87:10:88:8d:49: 6e:7b:78:1b:ec:4e:be:9e:15:07:b9:88:65:a6:ca: c7:8a:ef:f9:75:12:f6:22:02:02:c2:98:d6:3a:06: 38:f3:2a:f4:53:49:05:85:b8:37:98:f0:af:ab:aa: 90:5e:8f:bf:89:9d:68:13:7d:22:d8:c9:c1:69:c1: e0:43:82:c0:02:9e:d1:09:47:76:ac:1b:cf:5d:92: 7e:fc:d5:8c:0e:18:a2:5e:19:b9:33:41:80:dc:c3: 5e:77:32:09:c7:c6:5b:2f:9c:11:ad:f9:47:f8:cf: b8:1f:0c:55:d6:a5:4b:d1:fd:b7:3f:b4:8b:b7:e6: 30:9b:1f:2a:3a:11:78:cb:ea:8c:a5:c2:e6:7a:00: 49:51:9f:af:f2:19:ac:a0:40:d9:d0:36:6a:06:58: 6a:00:80:f6:af:58:5c:f3:ea:93:a1:d0:31:ca:06: 53:e9:c3:6a:b7:96:13:41:f6:4d:4c:01:9d:84:8b: 74:72:62:4f:87:3d:69:9e:6a:0b:52:17:68:01:4b: 71:d5:fe:88:17:3a:f4:2f:74:92:35:21:bb:d6:af: 8a:13:89:b4:e8:8e:58:2e:e7:ab:78:b0:59:c7:e8: da:de:c5:93:60:d5:b0:56:71:22:50:65:33:82:d1: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:33:8D:45:1A:0E:1C:B7:EC:11:A3:D6:9B:75:1F:1E:2C:0B:0C:64 X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333934663a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:394f::/48 Signature Algorithm: sha256WithRSAEncryption 88:9e:80:8f:55:73:2c:ca:3d:cf:3e:cc:55:36:a5:61:d4:ce: a8:21:0f:1a:a7:9d:13:67:5d:bd:24:fa:4b:9a:64:89:c0:9b: d2:ad:f8:20:fd:65:3e:62:a6:25:5e:a5:a4:5f:6d:c3:03:ed: c6:86:3a:a4:2c:b9:7b:35:a0:f0:18:b0:89:1a:bd:eb:8a:49: c6:81:9c:da:a6:8c:2b:ed:8a:2e:42:4e:ef:e9:ea:e8:42:bc: 68:87:29:64:5a:3b:70:d3:fe:0d:86:1a:18:18:b0:d2:06:36: e1:69:03:9b:aa:f5:e5:27:f5:73:36:49:39:62:c2:47:e8:e8: bf:0d:c7:61:82:48:0c:5d:b0:b3:27:ee:36:93:f8:53:05:ca: f8:9b:c1:5a:43:b5:03:9f:97:66:4a:49:48:26:39:7e:1e:36: 8b:28:9d:07:78:ed:97:17:1d:2d:d4:95:bb:50:e4:8f:59:d4: 7e:b6:b9:50:e4:bb:94:89:57:8a:7d:56:27:34:54:d5:9f:22: b1:d4:cb:6d:c7:c4:c0:3b:b4:8b:f6:6e:f2:99:59:38:8a:24: b5:e1:31:2c:d5:4f:2e:5e:a2:10:02:78:1c:02:7d:1c:73:86: c9:c2:4b:f3:c2:d0:38:47:6a:43:95:21:3a:00:f6:8b:d1:b8: 25:a8:0f:2a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFK54mVtIcKT+EXEP6APEZumPESIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDMyMDExNDNaFw0yNzA5MDIyMDE2NDNaMDMxMTAvBgNV BAMTKEVBMzM4RDQ1MUEwRTFDQjdFQzExQTNENjlCNzUxRjFFMkMwQjBDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATaSSBwda3G+HEIiNSW57eBvs Tr6eFQe5iGWmyseK7/l1EvYiAgLCmNY6BjjzKvRTSQWFuDeY8K+rqpBej7+JnWgT fSLYycFpweBDgsACntEJR3asG89dkn781YwOGKJeGbkzQYDcw153MgnHxlsvnBGt +Uf4z7gfDFXWpUvR/bc/tIu35jCbHyo6EXjL6oylwuZ6AElRn6/yGaygQNnQNmoG WGoAgPavWFzz6pOh0DHKBlPpw2q3lhNB9k1MAZ2Ei3RyYk+HPWmeagtSF2gBS3HV /ogXOvQvdJI1IbvWr4oTibTojlgu56t4sFnH6NrexZNg1bBWcSJQZTOC0RXRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6jONRRoOHLfsEaPWm3UfHiwLDGQwHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMzc5MWJmYi1jMWRlLTRiYmYtODM5MC1jYzI4YjFkNDE1YWIvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzkzNDY2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTlPMA0GCSqGSIb3DQEBCwUAA4IBAQCI noCPVXMsyj3PPsxVNqVh1M6oIQ8ap50TZ129JPpLmmSJwJvSrfgg/WU+YqYlXqWk X23DA+3GhjqkLLl7NaDwGLCJGr3riknGgZzapowr7YouQk7v6eroQrxohylkWjtw 0/4NhhoYGLDSBjbhaQObqvXlJ/VzNkk5YsJH6Oi/DcdhgkgMXbCzJ+42k/hTBcr4 m8FaQ7UDn5dmSklIJjl+HjaLKJ0HeO2XFx0t1JW7UOSPWdR+trlQ5LuUiVeKfVYn NFTVnyKx1Mttx8TAO7SL9m7ymVk4iiS14TEs1U8uXqIQAngcAn0cc4bJwkvzwtA4 R2pDlSE6APaL0bglqA8q -----END CERTIFICATE-----Generated at Sat Sep 5 00:21:39 2026 by rpki-client