$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa File: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (raw, json) Hash identifier: e7C6bpyqbbQ1ceJQT1KsYKlx6V//pBEex11FT3+7HyE= Subject key identifier: CB:79:D8:F0:36:15:3D:F3:4A:A1:D9:D5:42:67:BC:DD:AB:0C:27:2B Certificate issuer: /CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Certificate serial: 0C695F1923F4F241645220E573E794B13F8DF6D3 Authority key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa Signing time: Thu 03 Sep 2026 20:16:42 +0000 ROA not before: Thu 03 Sep 2026 20:11:42 +0000 ROA not after: Thu 02 Sep 2027 20:16:42 +0000 asID: 199763 IP address blocks: 2a14:7581:39ff::/48 maxlen: 64 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:69:5f:19:23:f4:f2:41:64:52:20:e5:73:e7:94:b1:3f:8d:f6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE Validity Not Before: Sep 3 20:11:42 2026 GMT Not After : Sep 2 20:16:42 2027 GMT Subject: CN=CB79D8F036153DF34AA1D9D54267BCDDAB0C272B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:63:45:88:ad:25:ff:e6:53:c9:25:81:00: 7c:0d:86:8f:57:3e:4a:21:f8:07:f6:32:e4:8b:0c: ed:a6:ca:46:4c:23:b3:5f:19:be:68:09:36:40:15: 90:44:89:f3:30:db:28:2c:b6:59:53:0f:a7:7b:0b: c7:ac:78:f6:41:7d:5d:ef:a5:c6:8f:1b:8f:b7:1c: 68:07:aa:33:fd:8f:a6:0f:88:5b:00:4a:9c:10:cf: e8:5f:e0:4f:f3:ca:bd:88:db:ae:7e:e9:a7:91:8a: 43:31:a0:40:6d:fb:c9:bd:6e:28:bb:31:81:46:dc: 29:cc:4f:db:cb:bb:f6:c4:56:0f:25:07:a0:b7:b0: c3:cb:fa:96:dc:54:89:90:ae:38:b8:fa:27:49:22: 2d:f9:f7:50:d1:90:e1:d0:2d:67:c8:d7:91:a9:ba: a0:4c:43:a8:ef:a5:01:40:07:bb:db:80:0d:f6:08: ad:2c:6a:1b:22:a0:70:9f:ff:df:be:75:67:f5:3c: 98:af:88:0b:43:c1:c3:f4:29:c3:ce:c9:37:84:ec: ee:e9:be:f0:b4:f0:37:69:fd:6b:e7:03:3f:f5:a4: 70:4e:6b:8a:07:45:b8:62:87:8d:86:f5:31:f4:02: 84:60:76:96:6c:19:53:30:da:77:06:be:b7:a6:96: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:79:D8:F0:36:15:3D:F3:4A:A1:D9:D5:42:67:BC:DD:AB:0C:27:2B X509v3 Authority Key Identifier: keyid:BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:39ff::/48 Signature Algorithm: sha256WithRSAEncryption 78:f9:18:db:64:fa:81:fe:cd:04:f8:4d:c2:c2:26:88:06:bd: 5d:db:27:46:3a:4e:02:48:3e:39:cd:85:ab:54:de:ec:15:68: 17:d3:bc:29:dc:12:d5:6c:8d:28:d9:2a:28:24:fc:40:ba:26: 71:94:73:28:7c:76:b7:62:a9:3a:b7:f0:54:d6:c1:68:b3:ef: b7:45:25:11:98:a7:ff:32:83:f5:79:c5:fd:53:0d:66:55:88: d7:bf:d7:dd:5a:6f:5c:36:cd:fd:d1:c8:fb:07:32:d3:b8:b2: 6b:19:01:a8:0b:8a:d8:36:4b:d0:b9:11:9f:37:82:ca:24:fd: 06:18:e6:91:eb:90:21:ac:ab:9e:c1:ad:0e:8c:98:71:c4:c6: 23:2e:d3:4b:75:82:78:a7:61:28:82:03:c7:8f:9b:7b:65:02: ed:75:6b:3a:4c:14:c6:f7:c9:a4:3e:21:83:a8:fa:26:1a:05: 86:de:5a:22:b5:fe:eb:ba:6e:c9:ff:64:5d:cd:bd:f0:06:5a: 7a:5e:44:23:0c:ed:4c:ec:9c:79:60:3a:8f:36:ec:98:90:82: e3:3a:1e:2f:30:ce:0b:66:1b:ba:67:dc:7d:9d:97:d6:a2:6c: 1b:c8:c2:d2:99:58:89:ff:e3:5a:34:1e:17:07:c2:6c:b4:e1: 80:e5:d3:4d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDGlfGSP08kFkUiDlc+eUsT+N9tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRF NkI1RjdCRTAeFw0yNjA5MDMyMDExNDJaFw0yNzA5MDIyMDE2NDJaMDMxMTAvBgNV BAMTKENCNzlEOEYwMzYxNTNERjM0QUExRDlENTQyNjdCQ0REQUIwQzI3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCGNFiK0l/+ZTySWBAHwNho9X Pkoh+Af2MuSLDO2mykZMI7NfGb5oCTZAFZBEifMw2ygstllTD6d7C8esePZBfV3v pcaPG4+3HGgHqjP9j6YPiFsASpwQz+hf4E/zyr2I265+6aeRikMxoEBt+8m9bii7 MYFG3CnMT9vLu/bEVg8lB6C3sMPL+pbcVImQrji4+idJIi3591DRkOHQLWfI15Gp uqBMQ6jvpQFAB7vbgA32CK0sahsioHCf/9++dWf1PJiviAtDwcP0KcPOyTeE7O7p vvC08Ddp/WvnAz/1pHBOa4oHRbhih42G9TH0AoRgdpZsGVMw2ncGvremlrBRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUy3nY8DYVPfNKodnVQme83asMJyswHwYDVR0j BBgwFoAUu+urqkOKxFDcu1OWZTjlVOa1974wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDM3OTFiZmItYzFkZS00YmJmLTgzOTAtY2MyOGIxZDQx NWFiLzAvQkJFQkFCQUE0MzhBQzQ1MERDQkI1Mzk2NjUzOEU1NTRFNkI1RjdCRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQkVCQUJBQTQzOEFDNDUwRENCQjUzOTY2 NTM4RTU1NEU2QjVGN0JFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMzc5MWJmYi1jMWRlLTRiYmYtODM5MC1jYzI4YjFkNDE1YWIvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzk2NjY2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTn/MA0GCSqGSIb3DQEBCwUAA4IBAQB4 +RjbZPqB/s0E+E3CwiaIBr1d2ydGOk4CSD45zYWrVN7sFWgX07wp3BLVbI0o2Soo JPxAuiZxlHMofHa3Yqk6t/BU1sFos++3RSURmKf/MoP1ecX9Uw1mVYjXv9fdWm9c Ns390cj7BzLTuLJrGQGoC4rYNkvQuRGfN4LKJP0GGOaR65AhrKuewa0OjJhxxMYj LtNLdYJ4p2EoggPHj5t7ZQLtdWs6TBTG98mkPiGDqPomGgWG3loitf7rum7J/2Rd zb3wBlp6XkQjDO1M7Jx5YDqPNuyYkILjOh4vMM4LZhu6Z9x9nZfWomwbyMLSmViJ /+NaNB4XB8JstOGA5dNN -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:58 2026 by rpki-client