$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa File: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: wQ2v3L+f7wKDwqYoOzbn3pE9cmHsuQKZM23dZR1K2fs= Subject key identifier: 63:92:F3:DD:B9:E1:71:E3:A9:32:33:DB:55:DF:3A:D2:7C:D0:4B:98 Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 328846F20CD7F98C05E8387E53B599F42A6FD447 Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa Signing time: Thu 03 Sep 2026 20:16:42 +0000 ROA not before: Thu 03 Sep 2026 20:11:42 +0000 ROA not after: Thu 02 Sep 2027 20:16:42 +0000 asID: 199763 IP address blocks: 2a14:7581:3961::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:88:46:f2:0c:d7:f9:8c:05:e8:38:7e:53:b5:99:f4:2a:6f:d4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 3 20:11:42 2026 GMT Not After : Sep 2 20:16:42 2027 GMT Subject: CN=6392F3DDB9E171E3A93233DB55DF3AD27CD04B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:e9:40:fa:77:5b:52:52:1b:e8:5b:70:74: 41:58:4f:16:19:09:59:36:9e:72:b8:dd:78:39:6e: 0b:2a:b6:27:69:c8:d4:19:c9:2d:25:cb:89:77:9b: 1d:71:81:02:56:7d:ff:41:11:79:d5:7c:41:eb:2e: a2:0f:e8:ce:d4:67:83:45:c1:3a:2c:98:92:7d:ad: e8:2e:53:97:cb:90:23:f7:4d:86:3f:0b:56:df:aa: 80:ff:ba:10:ae:7c:5d:cb:af:fe:51:01:87:75:cf: bb:32:d2:ad:48:a9:70:3c:f8:4e:68:5c:1d:98:46: 70:b1:b6:19:75:0f:d7:25:91:28:6d:aa:c6:7b:b8: 62:72:79:03:d6:cf:b1:b1:9c:55:01:6f:ac:6a:20: 82:b2:ec:18:c4:23:bc:5a:87:96:c5:49:d5:19:bc: 4f:b7:27:f4:1e:f5:cb:ec:50:73:ce:46:7f:b9:64: b0:be:0e:b2:99:5c:9d:91:58:0b:95:d2:1b:03:32: cf:44:3d:59:15:6d:57:50:de:1e:54:b5:b4:f3:f7: 25:0f:18:ca:bf:f4:3b:8d:42:72:78:95:99:54:1a: b2:c1:5b:44:75:81:f8:f8:59:65:0f:e5:f4:28:d0: dd:3f:57:05:fe:03:f6:f3:5c:51:d0:e0:58:d5:17: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:92:F3:DD:B9:E1:71:E3:A9:32:33:DB:55:DF:3A:D2:7C:D0:4B:98 X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3961::/48 Signature Algorithm: sha256WithRSAEncryption 77:15:05:3a:97:16:95:81:75:71:f0:51:fb:db:07:8a:68:29: e3:bc:64:b6:92:30:da:30:84:79:8b:7d:6e:51:47:51:e6:86: c5:92:16:7a:3f:df:62:7a:35:97:a7:bf:08:e5:c1:62:d1:3b: e6:99:8f:f2:6b:b8:62:dc:d7:c4:e2:5a:cb:b9:81:cd:50:a5: 62:ae:19:67:a1:02:5f:6f:47:b3:ca:5d:94:e4:29:e2:d2:ff: 39:00:75:fb:4d:67:75:84:a1:82:95:65:d0:5b:96:ce:22:84: 77:25:80:f6:f6:b9:b3:c1:ac:56:d4:e3:58:d3:59:d4:21:37: 56:93:83:0b:f7:91:32:ea:f9:ca:38:07:b2:99:27:02:66:ff: 5d:e8:b6:8e:a1:d7:8f:6c:77:97:61:84:94:c7:e1:29:ef:05: e0:d4:ff:f9:9e:64:7c:54:fe:39:18:f6:d1:86:8a:91:55:c7: c0:57:ee:0e:d6:cc:b9:ef:5b:95:4a:e7:0a:9b:95:0c:54:87: cc:ce:c7:c0:79:90:2c:75:ff:fb:1d:92:39:15:6d:f0:53:6e: 95:b9:37:90:7e:5a:20:41:a4:a3:29:6a:10:73:14:33:0e:ac: f0:0c:56:64:ee:6a:10:e3:7e:05:62:6b:fa:c2:ad:f6:f3:eb: b9:aa:da:0d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMohG8gzX+YwF6Dh+U7WZ9Cpv1EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDMyMDExNDJaFw0yNzA5MDIyMDE2NDJaMDMxMTAvBgNV BAMTKDYzOTJGM0REQjlFMTcxRTNBOTMyMzNEQjU1REYzQUQyN0NEMDRCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvulA+ndbUlIb6FtwdEFYTxYZ CVk2nnK43Xg5bgsqtidpyNQZyS0ly4l3mx1xgQJWff9BEXnVfEHrLqIP6M7UZ4NF wTosmJJ9reguU5fLkCP3TYY/C1bfqoD/uhCufF3Lr/5RAYd1z7sy0q1IqXA8+E5o XB2YRnCxthl1D9clkShtqsZ7uGJyeQPWz7GxnFUBb6xqIIKy7BjEI7xah5bFSdUZ vE+3J/Qe9cvsUHPORn+5ZLC+DrKZXJ2RWAuV0hsDMs9EPVkVbVdQ3h5UtbTz9yUP GMq/9DuNQnJ4lZlUGrLBW0R1gfj4WWUP5fQo0N0/VwX+A/bzXFHQ4FjVF/6tAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUY5Lz3bnhceOpMjPbVd860nzQS5gwHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMzc5MWJmYi1jMWRlLTRiYmYtODM5MC1jYzI4YjFkNDE1YWIvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzkzNjMxM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTlhMA0GCSqGSIb3DQEBCwUAA4IBAQB3 FQU6lxaVgXVx8FH72weKaCnjvGS2kjDaMIR5i31uUUdR5obFkhZ6P99iejWXp78I 5cFi0TvmmY/ya7hi3NfE4lrLuYHNUKVirhlnoQJfb0ezyl2U5Cni0v85AHX7TWd1 hKGClWXQW5bOIoR3JYD29rmzwaxW1ONY01nUITdWk4ML95Ey6vnKOAeymScCZv9d 6LaOodePbHeXYYSUx+Ep7wXg1P/5nmR8VP45GPbRhoqRVcfAV+4O1sy571uVSucK m5UMVIfMzsfAeZAsdf/7HZI5FW3wU26VuTeQflogQaSjKWoQcxQzDqzwDFZk7moQ 434FYmv6wq328+u5qtoN -----END CERTIFICATE-----Generated at Sat Sep 5 00:44:56 2026 by rpki-client