$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa File: 326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa (raw, json) Hash identifier: D26rbX3psrVmaD+T/bDXuaJV8uOWmhZNX1TYvDQmeqo= Subject key identifier: 1E:82:55:84:3C:B5:2B:5D:5E:10:3F:40:13:55:18:23:31:80:29:32 Certificate issuer: /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Certificate serial: 1BABCE7B6D2E9874BA00DE98236CC1832BF6E6F0 Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa Signing time: Mon 26 Jan 2026 07:08:51 +0000 ROA not before: Mon 26 Jan 2026 07:03:51 +0000 ROA not after: Mon 25 Jan 2027 07:08:51 +0000 asID: 214344 IP address blocks: 2a14:7580:fa40::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 21:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ab:ce:7b:6d:2e:98:74:ba:00:de:98:23:6c:c1:83:2b:f6:e6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Validity Not Before: Jan 26 07:03:51 2026 GMT Not After : Jan 25 07:08:51 2027 GMT Subject: CN=1E8255843CB52B5D5E103F401355182331802932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:74:c8:1a:11:36:1d:95:97:7d:32:7d:20: 70:52:ba:9f:db:56:35:c7:d5:1c:5d:74:da:a7:6d: ca:57:6e:bf:32:30:cf:58:ef:91:d5:77:a8:83:c7: fc:16:49:3f:25:06:a3:5e:19:32:06:10:bc:3e:a3: 8a:0a:65:3a:da:d4:52:bb:27:38:42:e5:21:c2:0b: 9b:02:88:67:ce:b9:4c:f9:52:e1:98:56:0e:dc:6c: b1:a9:de:c0:60:6b:a7:95:a3:6a:08:1b:21:30:2c: b1:1d:7f:54:9a:fc:04:b7:1e:51:80:e9:c5:e5:b2: 1b:1f:b2:47:07:c6:ba:f8:13:ec:e8:23:c0:9e:ba: fa:7a:01:85:76:5d:58:cf:07:9e:33:7a:13:ef:9c: 49:02:d3:d9:bd:47:49:d2:de:a1:58:63:be:98:e0: 07:f8:de:69:1c:9f:5b:71:1b:a7:20:ed:88:c7:7b: b7:32:3d:2e:69:5f:b2:53:92:b9:16:34:2e:08:b9: 32:08:4f:12:a0:d6:62:07:74:d0:bd:6e:4f:43:c4: 54:07:27:90:47:0a:aa:2d:14:af:73:63:b5:08:e8: 69:6a:39:db:a8:3f:14:25:4a:05:d7:d9:49:16:0c: 97:be:d1:aa:11:f8:d7:66:41:97:a0:69:6e:76:ee: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:82:55:84:3C:B5:2B:5D:5E:10:3F:40:13:55:18:23:31:80:29:32 X509v3 Authority Key Identifier: keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666134303a3a2f34342d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fa40::/44 Signature Algorithm: sha256WithRSAEncryption 5e:22:66:af:90:82:27:06:02:58:56:42:b0:1e:50:61:01:4c: 3c:d9:df:c9:bb:af:fe:00:46:b6:3a:37:cd:a9:b8:d8:c7:1e: 3d:13:88:87:61:9c:3d:da:a9:45:67:8e:37:7c:86:8a:de:e4: fd:71:7a:77:03:1b:8c:3d:ab:1d:63:bb:e4:a2:1e:50:12:94: 62:f5:7e:3e:c8:b8:1b:ff:e8:22:45:80:89:10:eb:dd:94:43: 8d:74:36:43:e1:d6:4e:aa:bd:e6:31:0c:f2:2d:ef:16:f4:c9: d2:70:f1:a1:28:67:d4:1d:90:1e:4c:3b:37:9e:82:a6:ce:9a: 3a:f5:51:92:b2:9e:2c:23:cd:1f:af:fa:73:e4:78:a3:9d:50: 00:20:33:f7:28:47:01:88:38:e9:e4:c6:53:eb:d5:e1:50:34: 28:ae:ea:b4:00:b3:91:4d:f9:c6:60:b1:9f:12:e6:36:2a:10: 7b:4e:10:a7:44:6a:72:a1:33:c2:a8:f3:06:55:0e:50:c9:87: 51:46:b0:69:38:6f:b6:26:5f:64:80:89:6a:e4:b9:e0:2a:89: e1:9f:52:57:c1:63:d5:a2:72:a2:13:35:1e:76:de:c1:01:6e: df:68:41:41:6b:70:af:2c:e5:05:48:26:32:7d:d8:80:6a:71: de:2d:c1:fb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUG6vOe20umHS6AN6YI2zBgyv25vAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF QzFFQ0U1NDAeFw0yNjAxMjYwNzAzNTFaFw0yNzAxMjUwNzA4NTFaMDMxMTAvBgNV BAMTKDFFODI1NTg0M0NCNTJCNUQ1RTEwM0Y0MDEzNTUxODIzMzE4MDI5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4nTIGhE2HZWXfTJ9IHBSup/b VjXH1RxddNqnbcpXbr8yMM9Y75HVd6iDx/wWST8lBqNeGTIGELw+o4oKZTra1FK7 JzhC5SHCC5sCiGfOuUz5UuGYVg7cbLGp3sBga6eVo2oIGyEwLLEdf1Sa/AS3HlGA 6cXlshsfskcHxrr4E+zoI8Ceuvp6AYV2XVjPB54zehPvnEkC09m9R0nS3qFYY76Y 4Af43mkcn1txG6cg7YjHe7cyPS5pX7JTkrkWNC4IuTIITxKg1mIHdNC9bk9DxFQH J5BHCqotFK9zY7UI6GlqOduoPxQlSgXX2UkWDJe+0aoR+NdmQZegaW527qx3AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUHoJVhDy1K11eED9AE1UYIzGAKTIwHwYDVR0j BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0 NzQ2RDJBNUVDMUVDRTU0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvNC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjEzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPpAMA0GCSqGSIb3DQEBCwUAA4IBAQBe ImavkIInBgJYVkKwHlBhAUw82d/Ju6/+AEa2OjfNqbjYxx49E4iHYZw92qlFZ443 fIaK3uT9cXp3AxuMPasdY7vkoh5QEpRi9X4+yLgb/+giRYCJEOvdlEONdDZD4dZO qr3mMQzyLe8W9MnScPGhKGfUHZAeTDs3noKmzpo69VGSsp4sI80fr/pz5HijnVAA IDP3KEcBiDjp5MZT69XhUDQoruq0ALORTfnGYLGfEuY2KhB7ThCnRGpyoTPCqPMG VQ5QyYdRRrBpOG+2Jl9kgIlq5LngKonhn1JXwWPVonKiEzUedt7BAW7faEFBa3Cv LOUFSCYyfdiAanHeLcH7 -----END CERTIFICATE-----Generated at Mon Feb 23 06:25:02 2026 by rpki-client