$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373030303a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: b0a+CB+mtMNhqTbLlhjXmr9psL4tY+eYhgH2YP16dMw= Subject key identifier: 63:74:EE:1D:33:BF:10:E5:C1:D5:42:83:EB:36:BD:33:61:78:D1:96 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 13F12DDA07F8C4C173A5C938EB23991CB6F2A8E7 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f1:2d:da:07:f8:c4:c1:73:a5:c9:38:eb:23:99:1c:b6:f2:a8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=6374EE1D33BF10E5C1D54283EB36BD336178D196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:9c:c9:a7:13:ef:05:fa:47:20:4a:01:38: a5:f3:f4:24:d9:0d:1a:62:c0:f8:52:da:f4:3f:e6: 24:c0:21:ec:64:ef:3a:90:02:ef:8a:3c:a2:7d:7e: 4f:df:dd:08:29:72:d2:2e:23:f7:f7:dc:ab:cf:44: 95:6a:09:3f:73:fb:1f:b5:e7:9a:4f:e2:a4:30:97: 49:0a:f3:ce:85:36:74:c1:10:1c:f2:28:a5:23:55: a5:70:2a:fb:50:b6:99:66:13:c4:0e:20:8b:f6:95: 5d:99:75:e7:44:1e:14:b2:bc:f0:38:32:38:30:66: f0:b1:53:9b:c9:c3:00:75:ee:25:4d:47:9a:7f:58: a7:c6:02:c8:ba:5d:20:10:f1:c4:a6:13:dc:cb:12: 67:25:8f:cf:20:8f:57:8c:79:7b:f5:69:e7:1c:4d: 0a:30:78:cb:9d:5a:ea:9f:ea:28:9e:5b:4a:01:fd: 63:3a:a2:c2:28:a5:f5:3f:c3:49:21:a1:71:cd:c7: 69:2b:14:f2:88:3c:1b:62:56:2a:50:d7:18:82:38: d1:d0:19:92:f5:9e:4d:73:4b:ac:43:61:71:d4:c7: f7:08:b2:f9:82:4f:9d:60:a2:81:cc:fa:70:b2:2f: b4:98:85:6f:6e:ae:ff:af:45:48:3c:4b:21:fe:7a: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:74:EE:1D:33:BF:10:E5:C1:D5:42:83:EB:36:BD:33:61:78:D1:96 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7000::/48 Signature Algorithm: sha256WithRSAEncryption 1c:b7:ae:cc:59:09:bb:af:6f:05:bf:ca:82:26:84:c6:c1:88: 82:32:ec:15:a0:da:83:d5:ef:19:aa:01:9a:a5:b0:a6:2a:87: d5:b2:fa:de:49:c8:74:f5:4d:1a:26:a7:86:1f:88:7b:14:41: cf:25:4f:99:f4:95:53:10:f6:7d:f9:d6:ce:ee:ff:1c:10:a9: 10:98:c0:d1:b7:b1:f2:9f:90:bd:48:d2:7c:03:1c:21:54:69: fc:10:c0:7f:1a:5f:95:3e:4a:37:bb:0d:06:37:ac:35:bb:af: 8c:22:97:29:f7:be:e7:67:97:33:f7:9b:94:c9:ef:a4:dc:e2: 70:98:b1:69:09:18:d7:d7:02:e4:03:57:a9:32:41:63:96:a1: 5f:3c:eb:0a:ef:96:01:40:40:c3:b7:bd:03:f6:96:5e:b2:a7: 0b:66:b8:0f:45:f5:81:2f:ff:a6:83:b5:68:c4:45:ac:4f:6f: 40:01:8a:d0:78:c9:a3:fe:e7:2b:11:47:5f:42:72:7e:f9:b3: 9d:51:68:05:21:b2:5c:9a:c9:17:85:4f:32:4a:3c:55:4c:e3: 8d:d3:a2:1e:96:2c:7e:f0:23:28:4d:23:f3:06:84:a5:2d:f3: 12:14:c5:aa:8f:f3:e6:0f:ae:76:5b:b7:52:98:83:38:65:8b: 42:0d:fc:a9 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUE/Et2gf4xMFzpck46yOZHLbyqOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKDYzNzRFRTFEMzNCRjEwRTVDMUQ1NDI4M0VCMzZCRDMzNjE3OEQxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC395zJpxPvBfpHIEoBOKXz9CTZ DRpiwPhS2vQ/5iTAIexk7zqQAu+KPKJ9fk/f3QgpctIuI/f33KvPRJVqCT9z+x+1 55pP4qQwl0kK886FNnTBEBzyKKUjVaVwKvtQtplmE8QOIIv2lV2ZdedEHhSyvPA4 MjgwZvCxU5vJwwB17iVNR5p/WKfGAsi6XSAQ8cSmE9zLEmclj88gj1eMeXv1aecc TQoweMudWuqf6iieW0oB/WM6osIopfU/w0khoXHNx2krFPKIPBtiVipQ1xiCONHQ GZL1nk1zS6xDYXHUx/cIsvmCT51gooHM+nCyL7SYhW9urv+vRUg8SyH+ek0xAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUY3TuHTO/EOXB1UKD6za9M2F40ZYwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXAAMA0GCSqGSIb3DQEBCwUAA4IBAQAc t67MWQm7r28Fv8qCJoTGwYiCMuwVoNqD1e8ZqgGapbCmKofVsvreSch09U0aJqeG H4h7FEHPJU+Z9JVTEPZ9+dbO7v8cEKkQmMDRt7Hyn5C9SNJ8AxwhVGn8EMB/Gl+V Pko3uw0GN6w1u6+MIpcp977nZ5cz95uUye+k3OJwmLFpCRjX1wLkA1epMkFjlqFf POsK75YBQEDDt70D9pZesqcLZrgPRfWBL/+mg7VoxEWsT29AAYrQeMmj/ucrEUdf QnJ++bOdUWgFIbJcmskXhU8ySjxVTOON06Ielix+8CMoTSPzBoSlLfMSFMWqj/Pm D652W7dSmIM4ZYtCDfyp -----END CERTIFICATE-----Generated at Sun Oct 25 14:37:57 2026 by rpki-client