$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: kUZeICjpWfmdYTRcttJdWcKKKLNcsbHL+pwflJZJ2VU= Subject key identifier: DD:5B:C1:FB:05:98:89:D8:A8:23:40:8A:93:26:BD:EF:60:33:84:6C Certificate issuer: /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Certificate serial: 61197655F64ECA0D5CD7ABCE36EC3E9689A7F5B7 Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa Signing time: Sat 28 Mar 2026 10:50:40 +0000 ROA not before: Sat 28 Mar 2026 10:45:40 +0000 ROA not after: Sat 27 Mar 2027 10:50:40 +0000 asID: 214344 IP address blocks: 2a14:7580:faf0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 14:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:19:76:55:f6:4e:ca:0d:5c:d7:ab:ce:36:ec:3e:96:89:a7:f5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Validity Not Before: Mar 28 10:45:40 2026 GMT Not After : Mar 27 10:50:40 2027 GMT Subject: CN=DD5BC1FB059889D8A823408A9326BDEF6033846C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:28:d1:d8:98:19:13:22:2b:b1:cd:ba:4f: 12:c4:33:b1:62:35:fe:56:f0:2a:d2:d9:7c:96:ea: 42:61:60:8d:3b:a7:f9:ed:41:c4:15:a1:b3:ca:63: ca:b9:b0:90:e7:58:16:cc:e4:ae:d0:1d:61:80:6f: 6c:50:90:75:f5:81:5b:77:d6:c6:0f:80:ef:77:e3: 85:88:51:c2:99:65:dc:f0:fc:34:de:da:89:39:84: be:b4:4b:79:2f:6d:66:2d:86:8c:4b:a8:a7:4f:db: 08:52:5a:a0:84:17:3f:85:b4:67:87:71:47:14:77: 13:cd:ef:7b:bc:5b:37:eb:63:33:62:6a:c7:99:b8: 70:b9:89:0f:3e:88:49:a8:18:87:28:42:91:dc:04: 85:0f:29:c2:08:46:3a:3b:33:fb:89:bd:5b:b6:aa: 48:d5:7e:53:6a:09:d0:1d:ac:a5:f9:8a:9a:1f:1e: 62:ad:f4:08:05:d6:91:32:c0:97:b8:ed:58:e8:ab: 28:fb:ae:57:e8:18:21:ea:ae:74:20:c1:90:1a:89: 3b:74:e5:09:65:0a:4d:5e:bb:f5:82:95:e0:75:7e: cb:ee:a1:fb:0b:32:8f:6f:0e:8f:f0:44:47:cc:ab: 2a:bb:5b:39:21:b4:aa:ff:43:8e:c8:41:a7:46:c8: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:C1:FB:05:98:89:D8:A8:23:40:8A:93:26:BD:EF:60:33:84:6C X509v3 Authority Key Identifier: keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:faf0::/48 Signature Algorithm: sha256WithRSAEncryption cd:44:40:72:42:33:24:4d:32:1d:f9:7b:ad:e7:41:56:bc:da: 3e:cc:af:fd:be:80:82:b0:81:dc:b6:3a:32:b0:72:a8:33:b9: 96:37:42:28:1d:cf:2f:be:2d:05:d0:06:f8:6a:a9:60:32:53: a0:0c:9b:c1:1a:1a:0b:de:59:6b:c9:1a:71:68:6d:1a:ce:6b: e3:64:5b:44:bb:2f:b9:57:34:50:18:fd:e3:1d:40:02:d9:0a: b6:be:81:41:6c:58:af:74:eb:e3:3e:a2:ef:85:36:2e:a3:17: 60:aa:30:4b:6c:1b:20:48:14:c6:b5:71:42:c1:ad:54:38:35: 43:c6:4d:69:2e:b8:7b:04:db:f7:f0:12:8b:37:6f:05:12:e4: 69:c9:6b:10:aa:57:27:1a:6e:64:16:26:06:05:be:b9:1f:46: ea:e4:da:c2:80:d2:95:de:40:50:60:4a:79:2a:58:bd:bc:23: c8:d3:34:18:76:c8:b4:da:8a:26:2f:e0:78:e6:e2:e5:8a:e9: ac:76:32:21:4b:8b:ef:4e:02:5b:ae:a6:1f:2a:be:9c:ff:5e: fa:d0:fd:11:79:a5:31:f8:17:8e:51:c8:ae:a5:cb:87:03:44: 92:0c:8f:51:89:0c:07:67:db:65:2a:16:5a:93:c8:70:0a:df: f7:72:8f:8c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYRl2VfZOyg1c16vONuw+lomn9bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF QzFFQ0U1NDAeFw0yNjAzMjgxMDQ1NDBaFw0yNzAzMjcxMDUwNDBaMDMxMTAvBgNV BAMTKERENUJDMUZCMDU5ODg5RDhBODIzNDA4QTkzMjZCREVGNjAzMzg0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0yjR2JgZEyIrsc26TxLEM7Fi Nf5W8CrS2XyW6kJhYI07p/ntQcQVobPKY8q5sJDnWBbM5K7QHWGAb2xQkHX1gVt3 1sYPgO9344WIUcKZZdzw/DTe2ok5hL60S3kvbWYthoxLqKdP2whSWqCEFz+FtGeH cUcUdxPN73u8WzfrYzNiaseZuHC5iQ8+iEmoGIcoQpHcBIUPKcIIRjo7M/uJvVu2 qkjVflNqCdAdrKX5ipofHmKt9AgF1pEywJe47Vjoqyj7rlfoGCHqrnQgwZAaiTt0 5QllCk1eu/WCleB1fsvuofsLMo9vDo/wREfMqyq7WzkhtKr/Q47IQadGyCdbAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU3VvB+wWYidioI0CKkya972AzhGwwHwYDVR0j BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0 NzQ2RDJBNUVDMUVDRTU0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvNC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjE2NjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gPrwMA0GCSqGSIb3DQEBCwUAA4IBAQDN REByQjMkTTId+Xut50FWvNo+zK/9voCCsIHctjoysHKoM7mWN0IoHc8vvi0F0Ab4 aqlgMlOgDJvBGhoL3llryRpxaG0azmvjZFtEuy+5VzRQGP3jHUAC2Qq2voFBbFiv dOvjPqLvhTYuoxdgqjBLbBsgSBTGtXFCwa1UODVDxk1pLrh7BNv38BKLN28FEuRp yWsQqlcnGm5kFiYGBb65H0bq5NrCgNKV3kBQYEp5Kli9vCPI0zQYdsi02oomL+B4 5uLliumsdjIhS4vvTgJbrqYfKr6c/1760P0ReaUx+BeOUciupcuHA0SSDI9RiQwH Z9tlKhZak8hwCt/3co+M -----END CERTIFICATE-----Generated at Thu Apr 9 22:17:34 2026 by rpki-client