$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa File: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: sOfzsAt2tIul/+/Ef8oFoB5LJ7RqnvlLcWysQWAevOw= Subject key identifier: F7:17:69:93:A8:2A:5D:82:BE:E4:0F:52:23:42:EA:30:21:12:58:25 Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 595251F1A23F201DCC4FBB1B0D7029DBA5BF6505 Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa Signing time: Thu 03 Sep 2026 20:16:40 +0000 ROA not before: Thu 03 Sep 2026 20:11:40 +0000 ROA not after: Thu 02 Sep 2027 20:16:40 +0000 asID: 199763 IP address blocks: 2a14:7581:3962::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:52:51:f1:a2:3f:20:1d:cc:4f:bb:1b:0d:70:29:db:a5:bf:65:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 3 20:11:40 2026 GMT Not After : Sep 2 20:16:40 2027 GMT Subject: CN=F7176993A82A5D82BEE40F522342EA3021125825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:46:65:c3:d4:ba:cf:26:6e:b6:b5:85:c7: 81:98:b2:dd:10:4c:63:7e:7d:66:3e:5c:28:85:e2: 59:ad:78:53:ce:58:fd:0d:a0:91:32:71:63:a6:b3: 62:b4:90:e1:4e:78:77:bb:1c:5e:8d:3c:a2:16:5c: 4a:6a:98:8c:11:2c:6d:b4:93:0b:68:37:c3:66:8f: 89:bd:d7:ba:e8:e1:df:c4:b9:da:ff:42:a6:c1:3b: 09:98:2c:b0:c6:2d:3d:aa:2c:6b:1e:f0:b2:52:ec: 76:ef:c1:c9:96:eb:d1:f7:fb:75:d7:14:22:d0:e3: 84:e9:10:b8:ed:34:1c:ee:80:be:3f:22:ed:b1:ed: 6d:1b:9d:56:98:ca:e0:e5:09:55:c0:ae:4c:17:d4: 31:51:1a:df:95:1f:16:e2:ea:b9:e4:39:b2:8a:78: 9a:4c:07:ca:33:dc:c1:42:35:03:f5:03:42:e1:d9: 4d:5d:3f:65:7c:10:14:25:76:92:17:8d:fd:2b:54: 2d:7c:22:b3:03:76:81:14:47:07:50:a5:60:dc:5a: e8:d9:61:f2:d2:9a:be:3c:2c:49:fa:a8:f6:ba:e5: da:cd:f7:25:6f:18:ec:cc:75:0d:c2:cf:8b:13:64: 09:8c:bc:c8:fa:ef:f8:e2:51:a4:cb:0e:d4:5c:f2: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:17:69:93:A8:2A:5D:82:BE:E4:0F:52:23:42:EA:30:21:12:58:25 X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3962::/48 Signature Algorithm: sha256WithRSAEncryption 4d:d8:43:de:5f:91:93:6e:a8:fc:db:d2:8e:7a:a8:69:1a:89: 1d:63:20:21:1c:b7:33:75:1b:5b:9b:dd:55:68:21:f0:2d:38: 2d:32:f9:28:7d:2d:69:a5:df:92:f6:20:0c:54:9c:f7:87:53: 38:f9:c5:d9:b7:e5:d7:39:c7:f3:07:a5:38:7f:f5:7a:13:1d: a1:e7:75:8a:6f:4b:1a:17:92:f5:20:03:72:c5:ce:d6:48:09: 21:e8:d4:d9:76:8a:11:44:c4:6e:6a:38:e2:70:ca:d5:18:8b: 1a:59:95:6a:b3:b3:3a:61:a3:0d:9f:95:7d:da:de:c1:4f:d1: b7:8b:7e:d7:3e:dd:7c:07:5b:c0:76:21:bb:e0:f3:fb:40:79: 7d:68:84:7a:43:a8:44:5a:ea:c7:31:fc:90:3c:39:93:ed:40: 8b:aa:64:e9:5b:11:ea:9a:f4:e4:37:11:34:c7:90:a1:d8:68: 01:1d:0c:a2:4d:99:80:c1:3e:9f:ee:1c:df:b2:31:c3:32:61: c1:97:e7:4d:ba:2d:45:01:95:02:03:92:be:85:e3:11:89:6a: cd:7c:97:2b:40:88:dc:8a:59:88:1f:ef:44:f7:1d:e9:55:6e: 1a:0b:99:44:5a:47:9a:0c:d6:aa:27:a8:6a:ad:27:87:72:f7: c6:5e:ff:39 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUWVJR8aI/IB3MT7sbDXAp26W/ZQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDMyMDExNDBaFw0yNzA5MDIyMDE2NDBaMDMxMTAvBgNV BAMTKEY3MTc2OTkzQTgyQTVEODJCRUU0MEY1MjIzNDJFQTMwMjExMjU4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxkZlw9S6zyZutrWFx4GYst0Q TGN+fWY+XCiF4lmteFPOWP0NoJEycWOms2K0kOFOeHe7HF6NPKIWXEpqmIwRLG20 kwtoN8Nmj4m917ro4d/Eudr/QqbBOwmYLLDGLT2qLGse8LJS7HbvwcmW69H3+3XX FCLQ44TpELjtNBzugL4/Iu2x7W0bnVaYyuDlCVXArkwX1DFRGt+VHxbi6rnkObKK eJpMB8oz3MFCNQP1A0Lh2U1dP2V8EBQldpIXjf0rVC18IrMDdoEURwdQpWDcWujZ YfLSmr48LEn6qPa65drN9yVvGOzMdQ3Cz4sTZAmMvMj67/jiUaTLDtRc8if1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU9xdpk6gqXYK+5A9SI0LqMCESWCUwHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMzc5MWJmYi1jMWRlLTRiYmYtODM5MC1jYzI4YjFkNDE1YWIvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzkzNjMyM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTliMA0GCSqGSIb3DQEBCwUAA4IBAQBN 2EPeX5GTbqj829KOeqhpGokdYyAhHLczdRtbm91VaCHwLTgtMvkofS1ppd+S9iAM VJz3h1M4+cXZt+XXOcfzB6U4f/V6Ex2h53WKb0saF5L1IANyxc7WSAkh6NTZdooR RMRuajjicMrVGIsaWZVqs7M6YaMNn5V92t7BT9G3i37XPt18B1vAdiG74PP7QHl9 aIR6Q6hEWurHMfyQPDmT7UCLqmTpWxHqmvTkNxE0x5Ch2GgBHQyiTZmAwT6f7hzf sjHDMmHBl+dNui1FAZUCA5K+heMRiWrNfJcrQIjcilmIH+9E9x3pVW4aC5lEWkea DNaqJ6hqrSeHcvfGXv85 -----END CERTIFICATE-----Generated at Sat Sep 5 00:44:56 2026 by rpki-client