$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa File: 326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa (raw, json) Hash identifier: t0fyMS70w2sKbXm+rw7xWIunJVCWcYTOkdarqGuSj1I= Subject key identifier: 77:DE:92:0D:E9:5D:B7:AA:28:63:16:CD:47:79:8C:8C:02:84:A2:91 Certificate issuer: /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Certificate serial: 3A55E74CB52507F76244B4491C666EC7A0686933 Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa Signing time: Mon 26 Jan 2026 07:08:12 +0000 ROA not before: Mon 26 Jan 2026 07:03:12 +0000 ROA not after: Mon 25 Jan 2027 07:08:12 +0000 asID: 214344 IP address blocks: 2a14:7580:fa10::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 21:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:55:e7:4c:b5:25:07:f7:62:44:b4:49:1c:66:6e:c7:a0:68:69:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Validity Not Before: Jan 26 07:03:12 2026 GMT Not After : Jan 25 07:08:12 2027 GMT Subject: CN=77DE920DE95DB7AA286316CD47798C8C0284A291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:ad:bc:f9:c5:91:8d:9c:ad:48:7e:8b:fc: 80:a3:88:18:fd:54:0d:e0:54:43:86:60:03:e0:a2: aa:6d:b6:76:05:b0:b7:0f:a6:a9:6e:ba:11:96:fd: 7d:77:8b:b7:72:b7:3b:f4:55:ad:00:7a:49:47:6a: 60:22:fe:dc:96:0b:5a:b6:4a:4d:54:64:d6:39:dc: 54:fa:2b:74:88:b9:a5:66:df:0f:4b:99:fa:76:26: 96:d3:25:65:52:64:83:30:d0:ec:df:88:31:67:e3: ef:62:22:9b:eb:04:8f:c9:d3:1c:a2:d1:d8:4f:ce: 2e:56:d1:d0:3a:a7:37:c1:e6:5d:30:f9:e4:17:99: a1:b5:98:59:19:9f:5e:d8:cd:98:61:c5:fd:dd:7d: 8e:8a:a1:b5:fc:e7:6c:31:75:c9:76:41:fd:f2:e7: 75:f5:77:6e:17:e5:f9:3e:4e:8e:a5:92:57:d7:e0: c9:2c:4a:4c:0b:a9:61:1d:cd:82:18:6c:a0:88:15: 79:3a:3a:6f:72:a8:c7:3f:7a:8a:bf:fb:d7:23:ab: d8:75:c6:1b:3f:36:f1:eb:7c:35:d2:a2:d7:b9:a7: 9c:6c:46:55:df:e9:bd:76:17:c9:37:72:9d:51:3f: b7:d1:19:a3:96:50:67:ef:99:dc:29:d4:01:dc:aa: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DE:92:0D:E9:5D:B7:AA:28:63:16:CD:47:79:8C:8C:02:84:A2:91 X509v3 Authority Key Identifier: keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666131303a3a2f34342d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fa10::/44 Signature Algorithm: sha256WithRSAEncryption 66:ce:e9:76:6a:2b:d8:f1:11:3a:4d:70:c9:24:f0:ef:31:8a: 4a:2b:6b:03:26:05:e5:7e:c4:a3:01:af:dc:14:da:1f:20:8b: ee:dd:8b:36:96:76:a7:7a:74:ba:96:25:ef:48:33:0a:12:e3: 73:72:30:d2:f4:16:fc:a2:2c:60:b4:55:c8:70:61:dd:17:7b: c9:18:4e:ca:1a:c0:31:e2:26:ed:50:35:b9:1e:09:ea:ed:0e: c3:dd:c1:2b:bc:19:2f:aa:8a:5e:90:c8:d0:69:9a:08:95:8a: dd:e0:27:61:e4:08:0e:81:f0:26:a2:c9:d1:cc:67:d6:4e:b9: 9c:59:f0:73:cd:4e:40:65:cc:c8:a4:4d:0a:aa:04:fa:66:7e: de:30:0c:67:33:ae:3b:b6:d9:04:ef:fa:0b:d7:34:3a:17:8d: 27:92:88:90:c4:5d:5b:de:01:54:98:dc:d8:41:37:f3:c2:a2: e7:4c:f8:7d:e5:80:5c:e4:e5:f4:ce:73:6b:48:ee:2e:e7:9f: 67:8c:c7:15:a4:96:e4:5d:e6:9a:17:98:5b:70:12:0c:92:df: 9b:c7:71:74:69:53:8c:49:8a:7b:3b:38:e9:41:64:1f:b0:87: e3:06:d9:f9:d8:df:c2:7e:9d:63:49:1a:85:46:e7:a6:bb:b3: 0e:2d:a9:1b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOlXnTLUlB/diRLRJHGZux6BoaTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF QzFFQ0U1NDAeFw0yNjAxMjYwNzAzMTJaFw0yNzAxMjUwNzA4MTJaMDMxMTAvBgNV BAMTKDc3REU5MjBERTk1REI3QUEyODYzMTZDRDQ3Nzk4QzhDMDI4NEEyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rK28+cWRjZytSH6L/ICjiBj9 VA3gVEOGYAPgoqpttnYFsLcPpqluuhGW/X13i7dytzv0Va0AeklHamAi/tyWC1q2 Sk1UZNY53FT6K3SIuaVm3w9Lmfp2JpbTJWVSZIMw0OzfiDFn4+9iIpvrBI/J0xyi 0dhPzi5W0dA6pzfB5l0w+eQXmaG1mFkZn17YzZhhxf3dfY6KobX852wxdcl2Qf3y 53X1d24X5fk+To6lklfX4MksSkwLqWEdzYIYbKCIFXk6Om9yqMc/eoq/+9cjq9h1 xhs/NvHrfDXSote5p5xsRlXf6b12F8k3cp1RP7fRGaOWUGfvmdwp1AHcqu7vAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUd96SDeldt6ooYxbNR3mMjAKEopEwHwYDVR0j BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0 NzQ2RDJBNUVDMUVDRTU0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvNC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjEzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPoQMA0GCSqGSIb3DQEBCwUAA4IBAQBm zul2aivY8RE6TXDJJPDvMYpKK2sDJgXlfsSjAa/cFNofIIvu3Ys2lnanenS6liXv SDMKEuNzcjDS9Bb8oixgtFXIcGHdF3vJGE7KGsAx4ibtUDW5Hgnq7Q7D3cErvBkv qopekMjQaZoIlYrd4Cdh5AgOgfAmosnRzGfWTrmcWfBzzU5AZczIpE0KqgT6Zn7e MAxnM647ttkE7/oL1zQ6F40nkoiQxF1b3gFUmNzYQTfzwqLnTPh95YBc5OX0znNr SO4u559njMcVpJbkXeaaF5hbcBIMkt+bx3F0aVOMSYp7OzjpQWQfsIfjBtn52N/C fp1jSRqFRuemu7MOLakb -----END CERTIFICATE-----Generated at Mon Feb 23 06:25:05 2026 by rpki-client