$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030343a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373030343a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: LZqL2yvFUvjEiOAVWlVIe9oWxiaPWpLPFP/zOavwzB4= Subject key identifier: 39:AF:89:2C:A2:F3:B6:00:C9:8D:0E:D6:92:2F:31:67:3F:7C:34:A4 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 7BF3B46E35274EFDEBF533C81EDF1F505AD4F5D5 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030343a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7004::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 20:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f3:b4:6e:35:27:4e:fd:eb:f5:33:c8:1e:df:1f:50:5a:d4:f5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=39AF892CA2F3B600C98D0ED6922F31673F7C34A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:44:b1:a9:47:66:5b:24:6b:7d:ec:be:82: ee:fc:d3:d6:d3:d0:fc:f2:ec:79:81:09:b3:93:70: 27:20:d3:13:64:a4:3c:a3:32:78:29:e4:59:d1:8d: 78:0b:ea:63:54:6b:2a:52:7a:db:15:7c:b6:1c:bf: 89:d1:4f:9f:73:5d:0d:a0:74:52:ff:6f:9c:d1:bc: e3:ea:c5:86:3f:70:a1:84:86:08:e4:11:ef:e3:75: 85:e4:e9:dd:2b:18:73:39:9e:7f:41:d7:42:9c:2d: 45:5a:03:96:ee:cf:d1:43:50:00:cb:12:36:f9:3d: 63:88:26:07:84:74:61:79:31:c7:37:18:a1:6e:3b: 25:98:f1:71:59:cd:6c:36:b5:88:2e:64:6b:45:e7: cd:fc:92:5e:7f:8a:74:d6:38:03:58:5f:f4:5f:2f: f1:d0:98:91:b2:53:9d:b6:7c:90:e8:4c:f2:6b:9b: ba:77:b8:3f:53:45:8d:f6:4f:eb:2f:49:2a:10:74: 56:26:f9:30:68:c7:da:ec:76:61:5a:a9:27:df:39: 7e:6d:e5:4b:04:3f:f7:68:c9:aa:f6:d6:56:28:36: fd:58:7c:77:83:e9:fb:ea:f9:86:fa:51:b5:29:ab: 45:97:de:5e:f2:a1:3d:ae:51:85:93:53:77:0b:2d: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:89:2C:A2:F3:B6:00:C9:8D:0E:D6:92:2F:31:67:3F:7C:34:A4 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030343a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7004::/48 Signature Algorithm: sha256WithRSAEncryption 93:94:f9:0f:7b:bb:d8:30:05:b3:9f:ec:12:c9:9c:25:56:eb: 23:85:d8:df:77:43:11:6d:8b:41:3b:0a:af:a0:4f:3e:f3:86: 6b:d4:bc:27:4c:cc:cf:a6:60:29:bb:8f:6a:b4:e9:cd:b0:26: f7:c5:76:33:9d:92:d3:8e:c5:a7:23:86:7b:10:35:67:ff:35: 01:45:be:b2:57:b3:26:14:c1:31:a5:bb:a3:a2:19:01:21:3f: c7:7f:de:eb:48:17:8d:64:60:50:89:be:74:97:d8:00:c5:04: 8e:fc:b7:4c:25:b2:82:d3:a7:c5:68:e5:6a:ef:20:a6:2b:af: 04:30:35:21:44:df:43:fc:ce:d6:6f:31:e4:b7:ff:16:12:3a: ee:cb:f1:6d:ed:20:1f:3f:01:8f:4d:44:a7:77:04:5d:28:40: bb:c1:a3:17:fa:0c:aa:1c:19:0b:96:7b:1b:79:7d:67:22:97: 3e:1f:1e:ec:15:be:4c:f3:6c:b3:2e:62:ad:5c:38:91:5b:65: 36:94:53:c1:f5:e8:49:c7:c6:2a:fd:10:68:61:44:f0:51:69: 35:ce:81:9d:66:03:dc:64:1e:3b:2d:98:29:6b:be:dc:80:f0: a0:14:38:84:41:42:5e:08:dd:84:d6:47:7c:41:12:7b:b4:a5: 34:cb:da:7d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUe/O0bjUnTv3r9TPIHt8fUFrU9dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKDM5QUY4OTJDQTJGM0I2MDBDOThEMEVENjkyMkYzMTY3M0Y3QzM0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoESxqUdmWyRrfey+gu7809bT 0Pzy7HmBCbOTcCcg0xNkpDyjMngp5FnRjXgL6mNUaypSetsVfLYcv4nRT59zXQ2g dFL/b5zRvOPqxYY/cKGEhgjkEe/jdYXk6d0rGHM5nn9B10KcLUVaA5buz9FDUADL Ejb5PWOIJgeEdGF5Mcc3GKFuOyWY8XFZzWw2tYguZGtF5838kl5/inTWOANYX/Rf L/HQmJGyU522fJDoTPJrm7p3uD9TRY32T+svSSoQdFYm+TBox9rsdmFaqSffOX5t 5UsEP/doyar21lYoNv1YfHeD6fvq+Yb6UbUpq0WX3l7yoT2uUYWTU3cLLUFnAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUOa+JLKLztgDJjQ7Wki8xZz98NKQwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzAzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXAEMA0GCSqGSIb3DQEBCwUAA4IBAQCT lPkPe7vYMAWzn+wSyZwlVusjhdjfd0MRbYtBOwqvoE8+84Zr1LwnTMzPpmApu49q tOnNsCb3xXYznZLTjsWnI4Z7EDVn/zUBRb6yV7MmFMExpbujohkBIT/Hf97rSBeN ZGBQib50l9gAxQSO/LdMJbKC06fFaOVq7yCmK68EMDUhRN9D/M7WbzHkt/8WEjru y/Ft7SAfPwGPTUSndwRdKEC7waMX+gyqHBkLlnsbeX1nIpc+Hx7sFb5M82yzLmKt XDiRW2U2lFPB9ehJx8Yq/RBoYUTwUWk1zoGdZgPcZB47LZgpa77cgPCgFDiEQUJe CN2E1kd8QRJ7tKU0y9p9 -----END CERTIFICATE-----Generated at Sat Oct 24 12:46:36 2026 by rpki-client