$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030333a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373030333a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: 753yNKMAX48JvSyO+nDvKj7t93w8JddMdt+0PtPQcZU= Subject key identifier: 60:BC:9C:9C:92:8F:39:A8:EE:7E:AF:8F:70:FE:A7:3E:D1:BC:C9:89 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 6EC5957677B7A8130DB21DD2CEF5BF0DE7688DEE Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030333a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:34 +0000 ROA not before: Sun 04 Oct 2026 11:47:34 +0000 ROA not after: Sun 03 Oct 2027 11:52:34 +0000 asID: 200749 IP address blocks: 2a14:7581:7003::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 20:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c5:95:76:77:b7:a8:13:0d:b2:1d:d2:ce:f5:bf:0d:e7:68:8d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:34 2026 GMT Not After : Oct 3 11:52:34 2027 GMT Subject: CN=60BC9C9C928F39A8EE7EAF8F70FEA73ED1BCC989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:75:66:00:dd:55:d4:dc:df:40:a7:9c:22: ee:2f:42:61:f9:c4:3a:80:e1:b7:11:e3:18:c8:b4: 6c:77:01:77:bc:bd:74:a7:40:f9:11:d7:9a:84:e7: 19:19:63:d2:10:5a:48:d5:81:9a:3a:9d:a6:8c:77: 73:a6:83:d3:66:b3:0c:3d:b4:53:49:8c:0b:64:41: 74:57:42:00:08:9a:e4:b6:d9:a2:fc:90:d7:c5:be: 91:f9:7f:62:ba:da:12:eb:63:97:c6:07:b1:67:13: 3b:e4:f5:5c:37:91:52:72:ea:f2:63:c6:10:fe:0d: 8d:81:00:0b:cd:f2:1f:dd:b0:d0:43:cd:10:82:42: 30:7a:67:26:61:8b:7a:ab:6b:eb:5d:29:1d:a9:3e: e9:4b:75:d1:21:9b:f4:93:17:99:74:e6:07:82:c3: 2b:78:c5:dc:1a:86:46:87:0b:21:8c:74:be:c6:0d: 9c:a5:91:7c:fd:1b:3f:c0:b9:08:8c:db:bd:d1:60: 6d:70:b4:99:2d:aa:a0:05:2c:77:5f:2e:a5:2e:27: 25:6e:4e:5e:2c:d7:f3:cb:b8:96:c5:58:63:7d:de: 59:94:f6:f0:b0:8c:db:ab:ae:89:64:9d:6e:41:8c: 98:c3:4b:d0:ec:3c:47:c9:21:ab:e2:1d:10:67:0f: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:9C:9C:92:8F:39:A8:EE:7E:AF:8F:70:FE:A7:3E:D1:BC:C9:89 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030333a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7003::/48 Signature Algorithm: sha256WithRSAEncryption 9a:53:de:72:38:0d:3b:ab:d8:0f:08:6e:f8:7f:f1:c3:a6:eb: 58:8e:3c:0a:52:31:0b:51:ab:fd:86:f9:f5:19:3a:2f:16:8e: 09:c6:3f:44:a0:38:82:1d:8f:59:e1:2e:2e:18:63:26:81:ae: 86:27:4c:85:a1:6a:f1:e5:6c:c7:11:fc:9a:ea:b2:f2:85:e8: 84:cf:6c:e9:c1:d1:2c:b9:8f:da:aa:2a:6a:f6:f5:64:b5:c4: 96:4a:c5:20:85:99:28:46:96:50:36:46:e3:8a:2a:fe:0f:e9: b0:00:39:b3:08:9d:eb:70:05:85:54:cc:18:f3:d8:37:ff:bb: 4d:8e:88:1c:da:4f:38:56:5a:1d:a5:c2:72:0f:00:c5:0f:75: 37:b7:d9:2e:eb:b2:84:a4:ec:e5:24:94:c3:ba:33:ad:6c:08: f8:f5:1c:9e:f6:33:da:85:bf:59:3f:87:39:0c:8b:c2:dc:7a: 07:ea:66:49:0a:e9:4a:a0:12:a2:12:df:86:4b:a0:9b:72:49: 24:64:a7:f1:3c:ee:a1:3c:e2:ca:70:97:e2:21:b7:8a:2c:b9: 20:9d:74:86:d1:b1:03:9a:a3:73:bd:20:bf:5e:c0:52:4c:e6: 15:39:00:53:00:5c:2f:48:68:8c:88:6a:da:42:7a:16:6c:29: 24:7d:6f:13 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbsWVdne3qBMNsh3SzvW/Dedoje4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzRaFw0yNzEwMDMxMTUyMzRaMDMxMTAvBgNV BAMTKDYwQkM5QzlDOTI4RjM5QThFRTdFQUY4RjcwRkVBNzNFRDFCQ0M5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMXVmAN1V1NzfQKecIu4vQmH5 xDqA4bcR4xjItGx3AXe8vXSnQPkR15qE5xkZY9IQWkjVgZo6naaMd3Omg9Nmsww9 tFNJjAtkQXRXQgAImuS22aL8kNfFvpH5f2K62hLrY5fGB7FnEzvk9Vw3kVJy6vJj xhD+DY2BAAvN8h/dsNBDzRCCQjB6ZyZhi3qra+tdKR2pPulLddEhm/STF5l05geC wyt4xdwahkaHCyGMdL7GDZylkXz9Gz/AuQiM273RYG1wtJktqqAFLHdfLqUuJyVu Tl4s1/PLuJbFWGN93lmU9vCwjNurrolknW5BjJjDS9DsPEfJIaviHRBnD+q7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUYLycnJKPOajufq+PcP6nPtG8yYkwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzAzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXADMA0GCSqGSIb3DQEBCwUAA4IBAQCa U95yOA07q9gPCG74f/HDputYjjwKUjELUav9hvn1GTovFo4Jxj9EoDiCHY9Z4S4u GGMmga6GJ0yFoWrx5WzHEfya6rLyheiEz2zpwdEsuY/aqipq9vVktcSWSsUghZko RpZQNkbjiir+D+mwADmzCJ3rcAWFVMwY89g3/7tNjogc2k84VlodpcJyDwDFD3U3 t9ku67KEpOzlJJTDujOtbAj49Rye9jPahb9ZP4c5DIvC3HoH6mZJCulKoBKiEt+G S6CbckkkZKfxPO6hPOLKcJfiIbeKLLkgnXSG0bEDmqNzvSC/XsBSTOYVOQBTAFwv SGiMiGraQnoWbCkkfW8T -----END CERTIFICATE-----Generated at Sun Oct 25 14:37:51 2026 by rpki-client