$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130313a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373130313a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: hS2yXOtmwxT3SSNC18L4sJTachuvWaO3YUwne2qrU60= Subject key identifier: 76:9E:BA:61:F9:3D:A4:5D:88:0E:07:DB:02:B4:C1:41:0F:FC:BE:69 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 3838BB4E7905463A8BCF1E489535D999C79B19DA Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130313a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7101::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:38:bb:4e:79:05:46:3a:8b:cf:1e:48:95:35:d9:99:c7:9b:19:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=769EBA61F93DA45D880E07DB02B4C1410FFCBE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:ce:a5:00:e8:f8:8c:35:53:01:be:b8:e9: 44:90:ad:1c:f8:91:89:33:c1:e7:cd:8f:b7:c7:a4: 7a:b3:7a:06:65:42:78:f2:36:2a:d2:9a:d8:03:21: 82:01:0a:cb:ea:89:11:a7:2f:f9:66:e7:4b:9b:57: 1f:7c:34:e8:7f:c4:70:f5:dd:d9:b6:92:07:ae:00: 62:5a:fe:28:fa:2d:cb:c1:bc:3f:87:d2:1f:22:ef: 36:ba:77:ef:7f:66:fc:76:60:a2:82:da:ff:bb:d2: dd:94:ff:c6:99:76:25:56:73:b4:8c:ff:14:85:37: 0a:c2:a1:33:72:6d:f1:4e:c4:c4:a3:b8:4c:e9:65: 55:d2:8c:11:7a:ab:20:e8:dd:a8:e3:5e:fe:57:39: 19:3b:57:c6:eb:89:52:7d:81:a8:0e:16:79:87:d6: f6:71:45:33:ca:33:db:09:7e:48:37:ca:62:bf:4b: 4e:e8:74:a1:db:c2:c4:19:f8:14:fc:6c:be:07:82: 25:35:e9:f4:d2:71:c6:65:38:04:5f:13:dd:5d:8c: e2:c6:6d:9e:59:c5:45:09:17:07:e4:2d:12:64:18: ed:6e:1d:29:02:7a:6d:ad:24:8c:34:3d:fa:4f:ed: b0:93:06:2e:b9:b4:17:0d:ea:b7:af:bd:bb:8c:a7: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9E:BA:61:F9:3D:A4:5D:88:0E:07:DB:02:B4:C1:41:0F:FC:BE:69 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130313a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7101::/48 Signature Algorithm: sha256WithRSAEncryption 9f:22:f3:37:ed:35:54:d9:6a:e4:f1:92:b5:87:3e:d8:be:af: 5a:0e:b3:76:bd:8b:ac:7a:53:ac:65:35:29:20:4a:84:d5:ac: e3:50:46:3b:30:47:ed:aa:14:e1:6e:7f:43:d2:6a:e2:13:9f: 0c:50:c8:7f:77:fb:65:46:b8:aa:68:39:ed:30:59:00:48:36: ca:af:53:37:55:c4:4e:85:58:e4:19:dc:ce:fc:ea:8a:07:f5: 7f:3a:7c:64:40:53:26:43:56:47:62:61:48:e1:ed:79:4a:4a: a3:70:9c:0e:df:b3:f9:30:10:0f:02:62:71:9f:ee:5c:f4:9f: 9c:26:43:bd:8a:9c:e9:a9:b7:b0:a9:ef:79:fa:28:c1:53:bb: d6:d9:a7:21:ef:ab:c0:b3:db:1e:82:46:0c:4d:9f:f6:f5:8b: 09:ed:24:a8:e7:a8:b6:91:1b:42:23:bc:bf:9a:d5:18:61:08: 5d:09:67:ab:12:25:67:fc:bb:6c:d7:db:32:07:76:e1:c2:6a: b0:a1:00:e9:f2:79:54:23:e4:32:15:ea:a3:1e:55:5a:9c:51: a9:89:63:12:5e:c3:fc:6f:fa:d7:15:ab:88:6a:52:b2:2a:9f: 85:7a:cd:df:d5:d5:c4:f3:1c:5d:6e:49:a3:e9:49:e7:cf:b3: ee:53:a0:87 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUODi7TnkFRjqLzx5IlTXZmcebGdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKDc2OUVCQTYxRjkzREE0NUQ4ODBFMDdEQjAyQjRDMTQxMEZGQ0JFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbs6lAOj4jDVTAb646USQrRz4 kYkzwefNj7fHpHqzegZlQnjyNirSmtgDIYIBCsvqiRGnL/lm50ubVx98NOh/xHD1 3dm2kgeuAGJa/ij6LcvBvD+H0h8i7za6d+9/Zvx2YKKC2v+70t2U/8aZdiVWc7SM /xSFNwrCoTNybfFOxMSjuEzpZVXSjBF6qyDo3ajjXv5XORk7V8briVJ9gagOFnmH 1vZxRTPKM9sJfkg3ymK/S07odKHbwsQZ+BT8bL4HgiU16fTSccZlOARfE91djOLG bZ5ZxUUJFwfkLRJkGO1uHSkCem2tJIw0PfpP7bCTBi65tBcN6revvbuMp9GnAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdp66Yfk9pF2IDgfbArTBQQ/8vmkwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzEzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXEBMA0GCSqGSIb3DQEBCwUAA4IBAQCf IvM37TVU2Wrk8ZK1hz7Yvq9aDrN2vYuselOsZTUpIEqE1azjUEY7MEftqhThbn9D 0mriE58MUMh/d/tlRriqaDntMFkASDbKr1M3VcROhVjkGdzO/OqKB/V/OnxkQFMm Q1ZHYmFI4e15SkqjcJwO37P5MBAPAmJxn+5c9J+cJkO9ipzpqbewqe95+ijBU7vW 2ach76vAs9segkYMTZ/29YsJ7SSo56i2kRtCI7y/mtUYYQhdCWerEiVn/Lts19sy B3bhwmqwoQDp8nlUI+QyFeqjHlVanFGpiWMSXsP8b/rXFauIalKyKp+Fes3f1dXE 8xxdbkmj6Unnz7PuU6CH -----END CERTIFICATE-----Generated at Sat Oct 24 21:00:17 2026 by rpki-client