$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa File: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: G6C19c6GOlod0FOB2bCztr+YLdJH5Z5El/nZEiwJChA= Subject key identifier: 2C:83:9D:E1:0B:F3:CB:2D:35:C0:79:5B:58:38:D1:7C:C6:4A:85:ED Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 18BA8E9DF2C127DB7E48EDB384C84793946C5B01 Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa Signing time: Thu 03 Sep 2026 20:16:40 +0000 ROA not before: Thu 03 Sep 2026 20:11:40 +0000 ROA not after: Thu 02 Sep 2027 20:16:40 +0000 asID: 199763 IP address blocks: 2a14:7581:3977::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ba:8e:9d:f2:c1:27:db:7e:48:ed:b3:84:c8:47:93:94:6c:5b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 3 20:11:40 2026 GMT Not After : Sep 2 20:16:40 2027 GMT Subject: CN=2C839DE10BF3CB2D35C0795B5838D17CC64A85ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:b6:db:83:39:2f:8e:bf:83:3c:c5:d6:73: 39:a6:b7:cd:fd:ee:32:a5:c1:9f:d3:76:21:37:c9: d7:e0:5f:8e:15:05:b6:8c:9a:65:d2:9f:61:d6:29: b2:68:ed:fc:0e:63:c4:8a:21:01:99:29:2a:a2:18: 7c:5e:82:b0:f2:7f:34:da:f0:45:d2:34:5c:9b:82: 9a:64:cf:a5:7b:e3:64:ef:06:79:a3:21:a9:dd:e3: df:26:51:a1:12:c4:a9:30:26:65:b2:75:14:69:36: d0:5f:cf:d9:9e:72:43:15:f5:96:43:a9:f3:59:a7: 1d:ff:ae:ea:a3:29:f0:fc:2e:19:5a:db:7f:80:c0: 35:25:98:a9:40:f8:07:6d:07:1f:7a:bb:2d:eb:2f: 7f:9f:79:69:60:06:00:47:bd:46:64:4a:5f:35:09: 0c:34:53:a9:7e:c3:a7:8e:58:7f:17:fd:95:20:1a: 3a:70:b1:b7:f4:b1:14:cf:e2:e0:3f:6c:40:ca:51: 00:a6:c7:a8:f9:d7:74:24:d4:8b:d0:bc:70:1f:9d: 80:25:7d:44:d4:4c:f0:9c:54:ab:78:2d:bb:d1:30: d6:e6:75:45:0b:52:20:dc:3b:df:91:e6:21:17:81: cf:92:4a:e2:3d:d4:32:5d:1d:a8:d3:c1:03:f1:d7: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:83:9D:E1:0B:F3:CB:2D:35:C0:79:5B:58:38:D1:7C:C6:4A:85:ED X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3977::/48 Signature Algorithm: sha256WithRSAEncryption 1e:ee:e2:cd:e0:ca:92:44:3d:80:f1:bb:12:e3:3a:75:9e:8d: 2c:dc:4c:7f:ba:3b:48:7f:27:04:d2:a3:f9:ea:36:23:9c:d2: 27:f8:4d:75:f5:c0:2b:17:ba:71:f5:6d:00:da:6d:34:4c:90: 77:49:6c:b4:5e:e0:7f:d7:5a:3d:34:9b:1a:11:ae:ff:78:9b: f2:ce:1b:4d:1d:75:05:14:d7:3c:fd:83:6e:b4:b7:58:e2:b7: 89:97:8c:d6:32:36:dd:68:4a:a2:5a:50:39:d3:29:4b:d9:5a: 3e:ae:e9:62:b6:c8:9a:90:76:fe:97:d7:c2:53:6d:08:4a:69: b6:ac:81:af:11:3e:b2:d9:34:74:2e:93:44:c6:d8:45:fe:20: 6a:70:3d:d2:13:38:6d:42:9d:05:18:56:42:8c:12:d4:86:84: 89:8f:6d:b8:fa:c6:49:7c:8e:eb:48:71:9c:26:54:2a:cf:63: 44:66:af:49:31:49:f0:ae:4c:da:9e:ef:c8:88:f4:99:6a:38: d0:e3:09:db:fd:e9:ea:6f:09:3f:55:02:be:19:06:81:ee:84: ff:40:cd:7d:40:dd:52:5c:31:93:3d:1b:1c:23:75:fc:23:58: 42:81:cc:f5:f8:e1:70:dd:84:eb:db:3c:78:24:02:16:95:c3: da:be:59:83 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUGLqOnfLBJ9t+SO2zhMhHk5RsWwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDMyMDExNDBaFw0yNzA5MDIyMDE2NDBaMDMxMTAvBgNV BAMTKDJDODM5REUxMEJGM0NCMkQzNUMwNzk1QjU4MzhEMTdDQzY0QTg1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5bbbgzkvjr+DPMXWczmmt839 7jKlwZ/TdiE3ydfgX44VBbaMmmXSn2HWKbJo7fwOY8SKIQGZKSqiGHxegrDyfzTa 8EXSNFybgppkz6V742TvBnmjIand498mUaESxKkwJmWydRRpNtBfz9meckMV9ZZD qfNZpx3/ruqjKfD8Lhla23+AwDUlmKlA+AdtBx96uy3rL3+feWlgBgBHvUZkSl81 CQw0U6l+w6eOWH8X/ZUgGjpwsbf0sRTP4uA/bEDKUQCmx6j513Qk1IvQvHAfnYAl fUTUTPCcVKt4LbvRMNbmdUULUiDcO9+R5iEXgc+SSuI91DJdHajTwQPx1/GTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQULIOd4Qvzyy01wHlbWDjRfMZKhe0wHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMzc5MWJmYi1jMWRlLTRiYmYtODM5MC1jYzI4YjFkNDE1YWIvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzkzNzM3M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTl3MA0GCSqGSIb3DQEBCwUAA4IBAQAe 7uLN4MqSRD2A8bsS4zp1no0s3Ex/ujtIfycE0qP56jYjnNIn+E119cArF7px9W0A 2m00TJB3SWy0XuB/11o9NJsaEa7/eJvyzhtNHXUFFNc8/YNutLdY4reJl4zWMjbd aEqiWlA50ylL2Vo+rulitsiakHb+l9fCU20ISmm2rIGvET6y2TR0LpNExthF/iBq cD3SEzhtQp0FGFZCjBLUhoSJj224+sZJfI7rSHGcJlQqz2NEZq9JMUnwrkzanu/I iPSZajjQ4wnb/enqbwk/VQK+GQaB7oT/QM19QN1SXDGTPRscI3X8I1hCgcz1+OFw 3YTr2zx4JAIWlcPavlmD -----END CERTIFICATE-----Generated at Sat Sep 5 00:45:38 2026 by rpki-client