$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa File: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: nc3oYXzCmvtpwHlk9i9l1I6GviPKWBNc9HgGppn1YZw= Subject key identifier: 19:39:BE:2B:80:E6:7C:B6:9A:DE:B2:E0:7C:42:71:17:18:A5:0C:7B Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 09E040B382D134C6F3617D588D978ECFD337B89D Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa Signing time: Thu 03 Sep 2026 20:16:40 +0000 ROA not before: Thu 03 Sep 2026 20:11:40 +0000 ROA not after: Thu 02 Sep 2027 20:16:40 +0000 asID: 199763 IP address blocks: 2a14:7581:3966::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e0:40:b3:82:d1:34:c6:f3:61:7d:58:8d:97:8e:cf:d3:37:b8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 3 20:11:40 2026 GMT Not After : Sep 2 20:16:40 2027 GMT Subject: CN=1939BE2B80E67CB69ADEB2E07C42711718A50C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:96:80:ae:55:36:fc:3e:af:2a:1c:60:50: 2d:37:26:82:7d:92:c6:b3:7e:4b:b4:31:cd:06:dc: fb:9f:32:74:15:18:e7:77:b2:97:84:7c:c5:e8:65: 85:e4:70:4f:14:bb:5e:0b:52:48:7a:62:9b:90:af: 65:f4:82:5e:b3:f7:4d:f7:cc:8a:52:0b:e5:d6:9e: c4:da:70:50:3f:d3:3f:64:6a:a1:9b:7d:6f:5e:12: 27:89:fd:ab:06:41:a6:3a:8a:84:fd:34:53:80:f5: d2:ac:e9:34:9f:bc:40:67:f6:15:f5:0b:f5:d3:48: c1:e2:5b:4b:b3:de:70:40:ec:3d:18:2b:df:51:df: e2:da:48:78:90:4f:56:7a:28:a8:4c:fb:c5:ce:f0: e3:7e:88:9b:4c:af:d6:04:04:2a:c8:2f:7a:43:cb: 59:f5:98:14:83:f0:3b:98:90:ac:84:44:6b:e2:68: e6:fc:e6:68:83:bb:7c:48:b9:11:36:21:c2:43:7a: c6:d9:80:1c:27:40:cb:b7:81:94:27:10:a9:99:d3: 69:44:37:91:3e:f9:45:61:45:98:4f:f9:3d:c7:32: df:38:22:bf:bf:c7:4a:5a:ff:70:ff:3e:ad:73:9a: 04:e6:91:c2:2c:c7:8d:d7:71:d2:32:65:5f:04:e7: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:BE:2B:80:E6:7C:B6:9A:DE:B2:E0:7C:42:71:17:18:A5:0C:7B X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3966::/48 Signature Algorithm: sha256WithRSAEncryption 22:2e:c2:d9:60:2c:02:53:28:d7:84:1e:06:07:0a:73:06:dd: 77:67:93:84:65:74:e4:2d:00:1a:f0:e5:e9:85:63:67:a5:2e: a2:dd:96:39:c3:ac:0a:e5:28:3b:d6:cf:56:00:58:3b:fa:af: ae:cb:d7:68:27:ab:39:1a:e5:3f:2a:a6:0c:60:f4:6f:cd:6c: a0:af:f5:44:24:1e:21:4b:fa:8e:25:b0:5c:e7:21:aa:23:69: 69:28:09:80:75:ef:7d:ee:87:c2:30:28:52:16:a4:3f:4f:6a: ca:3f:3d:54:d7:a9:77:64:2d:a7:19:74:62:ea:cd:bd:52:3f: e8:69:1d:c7:d2:54:71:05:c8:76:02:f9:63:8f:b0:af:a7:b9: 71:bd:2d:13:c1:6e:05:27:71:3e:60:4c:b9:66:93:88:a1:3e: dc:df:26:13:58:7a:13:19:83:5f:56:42:c7:93:90:4f:7b:ec: d9:dc:f0:1a:03:82:83:b6:78:c8:8f:67:fb:9a:d6:37:b2:ba: 15:8d:15:f5:fc:8a:43:45:87:09:57:9b:f6:28:12:40:c4:96: 6f:85:3e:4a:76:e1:41:cc:da:37:1d:ae:30:cd:12:49:cd:b8: 8c:de:fc:20:ef:e2:51:c1:41:f9:f9:d9:4d:4b:a6:27:51:50: ef:c0:6d:24 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCeBAs4LRNMbzYX1YjZeOz9M3uJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDMyMDExNDBaFw0yNzA5MDIyMDE2NDBaMDMxMTAvBgNV BAMTKDE5MzlCRTJCODBFNjdDQjY5QURFQjJFMDdDNDI3MTE3MThBNTBDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbpaArlU2/D6vKhxgUC03JoJ9 ksazfku0Mc0G3PufMnQVGOd3speEfMXoZYXkcE8Uu14LUkh6YpuQr2X0gl6z9033 zIpSC+XWnsTacFA/0z9kaqGbfW9eEieJ/asGQaY6ioT9NFOA9dKs6TSfvEBn9hX1 C/XTSMHiW0uz3nBA7D0YK99R3+LaSHiQT1Z6KKhM+8XO8ON+iJtMr9YEBCrIL3pD y1n1mBSD8DuYkKyERGviaOb85miDu3xIuRE2IcJDesbZgBwnQMu3gZQnEKmZ02lE N5E++UVhRZhP+T3HMt84Ir+/x0pa/3D/Pq1zmgTmkcIsx43XcdIyZV8E541bAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGTm+K4DmfLaa3rLgfEJxFxilDHswHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMzc5MWJmYi1jMWRlLTRiYmYtODM5MC1jYzI4YjFkNDE1YWIvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzkzNjM2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTlmMA0GCSqGSIb3DQEBCwUAA4IBAQAi LsLZYCwCUyjXhB4GBwpzBt13Z5OEZXTkLQAa8OXphWNnpS6i3ZY5w6wK5Sg71s9W AFg7+q+uy9doJ6s5GuU/KqYMYPRvzWygr/VEJB4hS/qOJbBc5yGqI2lpKAmAde99 7ofCMChSFqQ/T2rKPz1U16l3ZC2nGXRi6s29Uj/oaR3H0lRxBch2Avljj7Cvp7lx vS0TwW4FJ3E+YEy5ZpOIoT7c3yYTWHoTGYNfVkLHk5BPe+zZ3PAaA4KDtnjIj2f7 mtY3sroVjRX1/IpDRYcJV5v2KBJAxJZvhT5KduFBzNo3Ha4wzRJJzbiM3vwg7+JR wUH5+dlNS6YnUVDvwG0k -----END CERTIFICATE-----Generated at Sat Sep 5 00:44:53 2026 by rpki-client