$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34302d3430203d3e20323030373439.roa File: 326131343a373538313a373030303a3a2f34302d3430203d3e20323030373439.roa (raw, json) Hash identifier: fjS3GEDbsmjjC7fSV83oZzaoHPEfPGKsbEUKgul+XsM= Subject key identifier: 86:87:57:C3:2A:66:CE:5D:69:9A:44:CB:ED:B4:8E:E4:0C:73:F5:4A Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 2940C1E1BDBE29E48BA53548C99D64EB39A3A2CF Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34302d3430203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:36 +0000 ROA not before: Sun 04 Oct 2026 11:47:36 +0000 ROA not after: Sun 03 Oct 2027 11:52:36 +0000 asID: 200749 IP address blocks: 2a14:7581:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:40:c1:e1:bd:be:29:e4:8b:a5:35:48:c9:9d:64:eb:39:a3:a2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:36 2026 GMT Not After : Oct 3 11:52:36 2027 GMT Subject: CN=868757C32A66CE5D699A44CBEDB48EE40C73F54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:bc:b4:66:1b:1b:59:a0:4b:35:0d:8a:ce: b3:80:e9:4e:e4:19:53:c2:d2:e7:b3:48:61:06:9e: 81:f3:cb:61:9a:4e:62:28:7d:c2:7e:6a:cc:07:db: 40:48:a2:2c:35:0c:08:60:e0:96:15:f1:0d:27:45: 88:67:e5:6e:19:76:a6:83:b4:9b:3e:1f:0a:b4:08: 51:87:14:b6:6c:9f:ac:ea:a9:f4:95:51:33:84:92: 5f:39:ba:d3:b9:f7:de:13:75:b0:a9:c7:0b:87:e7: 63:78:36:78:f2:e8:4d:2c:de:ac:c8:12:0e:33:59: 37:55:7c:bb:4e:55:17:2f:d1:16:f1:6b:12:4a:8e: 48:89:85:d3:c1:ad:4a:60:ca:91:5f:4a:c0:1d:d9: 5f:57:af:73:08:51:47:14:25:21:eb:05:10:d9:99: c0:2f:8a:ba:11:58:5f:75:9f:0f:ea:48:92:75:ae: b9:6b:ea:1a:de:b2:cd:bd:87:65:1a:89:6a:e7:23: 3e:3c:10:c2:dc:e1:b3:95:4e:1c:07:b2:d5:22:5d: a0:71:8d:0f:cf:b5:bb:57:5b:05:ce:ee:c6:40:50: c0:ad:db:d8:75:30:d9:23:0a:01:c8:00:75:02:ef: 95:0f:f0:be:c6:a8:6d:ce:bf:62:b7:b0:4e:a7:a4: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:57:C3:2A:66:CE:5D:69:9A:44:CB:ED:B4:8E:E4:0C:73:F5:4A X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34302d3430203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:10:2a:94:d9:c3:2c:a4:4b:ce:9c:77:ad:1e:43:52:b2:f9: 73:4f:56:85:0a:b6:2b:74:39:c3:fc:9f:ad:1a:39:4b:87:9c: 8f:3a:ab:53:2d:2c:a2:a1:83:b8:21:f8:df:b6:bd:aa:9a:1c: 44:9f:67:66:ef:e0:33:c8:9b:40:f9:6e:8c:9c:82:f6:14:89: da:89:cc:d7:23:4f:d0:0f:aa:e7:c4:83:f1:88:09:c1:cb:b4: fb:91:2e:94:a1:6e:14:d2:b9:9b:c5:92:fe:64:e1:da:0d:7b: 84:bb:79:46:4c:b5:03:e7:8e:26:5b:b4:fd:bb:42:b0:35:52: b3:90:21:27:b6:76:4a:69:9a:63:fb:1e:d4:94:88:f4:6f:66: 13:da:02:64:08:bc:c4:8e:9d:7a:0a:4b:28:60:41:ad:de:38: 9e:88:b3:f4:60:79:74:de:b0:42:16:7c:91:37:23:51:ea:35: b8:96:b0:82:e1:b7:92:6a:c3:cc:a7:61:8b:00:b8:c3:30:a3: 5f:84:91:b0:c8:fa:ac:41:41:cd:41:37:02:3b:b8:99:e9:e1: c1:cf:c8:d6:b3:39:82:a0:65:2d:0e:81:53:a8:15:54:12:6b: ad:7d:f8:76:2e:38:15:3e:09:92:78:56:96:e3:69:e9:6e:73: 98:fb:c2:99 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUKUDB4b2+KeSLpTVIyZ1k6zmjos8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzZaFw0yNzEwMDMxMTUyMzZaMDMxMTAvBgNV BAMTKDg2ODc1N0MzMkE2NkNFNUQ2OTlBNDRDQkVEQjQ4RUU0MEM3M0Y1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhry0ZhsbWaBLNQ2KzrOA6U7k GVPC0uezSGEGnoHzy2GaTmIofcJ+aswH20BIoiw1DAhg4JYV8Q0nRYhn5W4ZdqaD tJs+Hwq0CFGHFLZsn6zqqfSVUTOEkl85utO5994TdbCpxwuH52N4Nnjy6E0s3qzI Eg4zWTdVfLtOVRcv0RbxaxJKjkiJhdPBrUpgypFfSsAd2V9Xr3MIUUcUJSHrBRDZ mcAviroRWF91nw/qSJJ1rrlr6hress29h2UaiWrnIz48EMLc4bOVThwHstUiXaBx jQ/PtbtXWwXO7sZAUMCt29h1MNkjCgHIAHUC75UP8L7GqG3Ov2K3sE6npJRVAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUhodXwypmzl1pmkTL7bSO5Axz9UowHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gXAwDQYJKoZIhvcNAQELBQADggEBAGwQ KpTZwyykS86cd60eQ1Ky+XNPVoUKtit0OcP8n60aOUuHnI86q1MtLKKhg7gh+N+2 vaqaHESfZ2bv4DPIm0D5boycgvYUidqJzNcjT9APqufEg/GICcHLtPuRLpShbhTS uZvFkv5k4doNe4S7eUZMtQPnjiZbtP27QrA1UrOQISe2dkppmmP7HtSUiPRvZhPa AmQIvMSOnXoKSyhgQa3eOJ6Is/RgeXTesEIWfJE3I1HqNbiWsILht5Jqw8ynYYsA uMMwo1+EkbDI+qxBQc1BNwI7uJnp4cHPyNazOYKgZS0OgVOoFVQSa619+HYuOBU+ CZJ4Vpbjaeluc5j7wpk= -----END CERTIFICATE-----Generated at Tue Oct 27 05:39:02 2026 by rpki-client