$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130303a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373130303a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: xm8xduYEVKDzza4Kc4ZJ4XFKu8CBAqH+hGoLpXBm1RI= Subject key identifier: 66:9B:2A:C6:55:9A:E6:E6:96:A1:74:5C:39:AA:A1:49:A7:74:C0:F6 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 0C937AF41E414C16ED9876E73460064615145FBC Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130303a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:36 +0000 ROA not before: Sun 04 Oct 2026 11:47:36 +0000 ROA not after: Sun 03 Oct 2027 11:52:36 +0000 asID: 200749 IP address blocks: 2a14:7581:7100::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:93:7a:f4:1e:41:4c:16:ed:98:76:e7:34:60:06:46:15:14:5f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:36 2026 GMT Not After : Oct 3 11:52:36 2027 GMT Subject: CN=669B2AC6559AE6E696A1745C39AAA149A774C0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:07:78:67:f7:1e:63:16:0e:25:ca:ed:5c: c6:69:09:cd:2a:68:3c:7c:9a:e6:da:a1:a8:80:81: 05:c5:c8:3e:25:6b:1b:c3:d6:2b:85:17:34:25:5a: f2:91:07:82:62:95:30:df:d4:08:f0:62:1d:3e:95: ce:e1:62:eb:56:f3:0c:0c:7f:7a:45:ed:5f:9c:b9: 8a:e0:2e:5d:fd:2a:de:a3:2e:48:87:43:f9:07:b2: b8:10:79:f1:a6:cf:37:5d:58:2d:4a:b2:3f:20:f8: cb:b4:f2:07:9f:60:b9:2c:97:74:c2:31:d2:83:15: 08:70:15:53:26:59:53:4e:e7:db:c7:0a:cb:d4:df: b7:22:61:4a:47:c9:8c:77:11:0c:81:d6:82:14:45: 11:ad:38:b1:ae:e4:7d:27:2a:e0:fa:d2:c7:8f:ba: ac:a7:62:1c:53:11:23:20:e2:67:44:c0:f0:1f:64: e4:c6:9f:84:59:b9:bc:e3:04:cf:28:06:9b:e7:55: 15:ec:0e:41:c9:ab:d7:b3:a1:70:ab:18:87:d3:f8: e2:2c:1a:36:52:e2:8a:ba:5d:64:2a:7d:a4:23:79: a1:18:76:53:44:2b:49:46:aa:f9:6c:79:ae:40:40: b2:0c:8c:cd:74:2c:56:e8:4d:e9:cb:75:ef:21:d5: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:2A:C6:55:9A:E6:E6:96:A1:74:5C:39:AA:A1:49:A7:74:C0:F6 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130303a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7100::/48 Signature Algorithm: sha256WithRSAEncryption 5b:7b:fd:bf:30:35:5a:59:83:65:cc:2c:47:08:a8:ff:73:6a: 92:60:f7:cd:68:ee:e3:49:61:bb:dc:52:c4:aa:ce:2d:49:04: ff:6d:8e:89:b0:1d:9a:d6:d9:fd:29:1a:81:1b:e5:48:a3:43: 53:63:55:33:ee:36:29:13:6f:74:9b:21:60:4d:0d:ce:1c:37: 69:b7:f9:05:f7:45:e1:fd:9c:a7:0d:38:ac:61:6b:5c:74:98: 79:ac:af:e2:dd:e8:cf:64:64:f9:7c:c5:bb:fc:43:9f:de:f0: 2b:bb:a2:70:a7:f1:89:7b:e5:0a:f7:22:e3:49:4d:7c:7b:a2: b7:e4:8b:e4:c6:f9:5b:ce:c3:08:cd:13:c5:88:52:5a:71:f7: fa:18:83:78:d0:0b:b2:23:57:3a:3a:4c:4c:b1:1a:60:af:f4: c7:04:57:e9:67:f9:11:f6:83:c7:7d:1c:cf:3e:3c:f9:62:23: 5c:06:d2:b1:52:48:cc:fd:a4:72:88:3b:df:3a:6d:67:e7:cf: 2d:37:db:1f:45:2e:4a:fe:ef:c9:3e:6f:39:86:3f:28:c9:53: 82:32:59:3b:e1:07:d3:34:b6:60:d3:1d:0c:ea:8d:67:aa:e2: d2:09:76:ba:81:cc:fa:2b:5b:ed:33:f4:a0:64:00:55:a5:e4: af:65:61:b6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDJN69B5BTBbtmHbnNGAGRhUUX7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzZaFw0yNzEwMDMxMTUyMzZaMDMxMTAvBgNV BAMTKDY2OUIyQUM2NTU5QUU2RTY5NkExNzQ1QzM5QUFBMTQ5QTc3NEMwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCagd4Z/ceYxYOJcrtXMZpCc0q aDx8mubaoaiAgQXFyD4laxvD1iuFFzQlWvKRB4JilTDf1AjwYh0+lc7hYutW8wwM f3pF7V+cuYrgLl39Kt6jLkiHQ/kHsrgQefGmzzddWC1Ksj8g+Mu08gefYLksl3TC MdKDFQhwFVMmWVNO59vHCsvU37ciYUpHyYx3EQyB1oIURRGtOLGu5H0nKuD60seP uqynYhxTESMg4mdEwPAfZOTGn4RZubzjBM8oBpvnVRXsDkHJq9ezoXCrGIfT+OIs GjZS4oq6XWQqfaQjeaEYdlNEK0lGqvlsea5AQLIMjM10LFboTenLde8h1cbPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUZpsqxlWa5uaWoXRcOaqhSad0wPYwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzEzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXEAMA0GCSqGSIb3DQEBCwUAA4IBAQBb e/2/MDVaWYNlzCxHCKj/c2qSYPfNaO7jSWG73FLEqs4tSQT/bY6JsB2a1tn9KRqB G+VIo0NTY1Uz7jYpE290myFgTQ3OHDdpt/kF90Xh/ZynDTisYWtcdJh5rK/i3ejP ZGT5fMW7/EOf3vAru6Jwp/GJe+UK9yLjSU18e6K35IvkxvlbzsMIzRPFiFJacff6 GIN40AuyI1c6OkxMsRpgr/THBFfpZ/kR9oPHfRzPPjz5YiNcBtKxUkjM/aRyiDvf Om1n588tN9sfRS5K/u/JPm85hj8oyVOCMlk74QfTNLZg0x0M6o1nquLSCXa6gcz6 K1vtM/SgZABVpeSvZWG2 -----END CERTIFICATE-----Generated at Sun Oct 25 01:15:11 2026 by rpki-client