$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130323a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373130323a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: C4fhxNeGDM+HeLH3b41FkuWlbnGFd2RgSDINRRzz0xg= Subject key identifier: 76:F8:9C:8B:04:96:7C:71:C1:91:A5:97:72:DE:B6:08:DF:F7:41:DA Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 7BB4751FA46894FB6E1C1312D4DC29E150F935A0 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130323a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7102::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 20:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b4:75:1f:a4:68:94:fb:6e:1c:13:12:d4:dc:29:e1:50:f9:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=76F89C8B04967C71C191A59772DEB608DFF741DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:6e:ac:2f:e5:6e:f3:d7:a2:d1:41:bd:a9: 37:bf:95:bd:05:73:f7:99:6b:02:8f:df:aa:e6:7f: bf:db:f8:be:fa:cc:ee:29:29:4b:5e:9d:61:3b:57: e0:28:7c:bb:96:6e:7d:62:4c:83:8a:8b:37:25:2c: ec:d9:7d:49:8e:8b:19:7c:08:06:32:07:2d:2d:3e: 35:f5:76:5f:da:d8:a4:79:50:a6:26:4f:07:9c:90: 16:cf:3b:92:3f:b0:d4:48:1a:a1:9f:16:b4:56:9c: 6f:5f:3c:0f:61:6b:89:47:d2:7a:b7:3e:ce:36:61: d8:aa:a4:4f:76:34:b9:f5:c1:90:0e:c0:97:6e:52: f6:9d:10:b6:89:20:98:ec:9d:25:df:ad:77:60:da: 53:4c:74:94:75:69:8f:de:5f:c8:d2:8a:17:b9:b1: f7:0c:59:35:85:3e:b2:b5:e7:f4:ef:d1:55:96:44: 3d:4c:9f:48:0b:4f:26:7c:f0:c6:0d:ec:91:4e:62: 64:8f:e8:08:95:ac:01:ec:5b:7a:a1:2f:1b:56:98: c5:0f:e2:64:78:d9:dd:a4:2a:42:8f:28:a3:d1:b5: e4:0e:15:e9:cc:a7:25:f1:05:07:82:87:4d:7a:ef: 95:ca:a9:e6:5c:fb:90:35:da:50:aa:18:8d:0d:b7: 7a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:9C:8B:04:96:7C:71:C1:91:A5:97:72:DE:B6:08:DF:F7:41:DA X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130323a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7102::/48 Signature Algorithm: sha256WithRSAEncryption 3f:3d:76:f3:b7:b0:9d:ec:25:38:ce:e5:16:ee:59:96:a6:f7: 5a:f5:fe:89:b6:1c:60:b2:d0:fc:22:92:0c:17:2a:22:b4:61: 44:5c:2e:30:f9:22:ee:45:f3:7d:85:df:6c:32:f1:53:b0:a5: ae:e5:ba:57:c1:aa:24:5c:8c:f5:72:27:eb:a3:96:40:bf:8b: 8b:b4:28:d4:4c:ba:45:2d:cb:a5:c1:89:31:f4:bc:c7:30:07: 71:05:8b:fe:66:5d:0d:30:a3:81:d5:28:ba:b9:47:86:69:eb: e0:e7:19:32:50:8f:48:99:d3:4e:03:8c:47:09:dc:d7:c2:3b: aa:cd:da:12:c1:4e:ab:1b:c7:81:6f:b5:0f:cd:8a:f9:9a:9e: 30:80:d0:40:1f:78:88:2b:1c:9c:af:be:63:a0:10:b3:38:48: 63:ac:99:18:f5:e5:df:10:44:9f:7f:17:a9:8e:d4:1b:53:88: f0:2f:cd:59:09:3c:6d:2c:7f:57:3e:ba:a0:55:4b:d4:4c:0c: bf:70:00:94:78:6e:51:80:07:d7:0e:fb:cc:26:23:a0:6d:e1: 7b:88:a3:6f:52:3d:47:e0:fb:04:fc:f9:c2:53:f0:a7:c8:b7: f2:67:31:dd:71:cb:d0:77:49:fd:27:7f:13:4a:0e:d3:25:ab: b8:6b:71:e1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUe7R1H6RolPtuHBMS1Nwp4VD5NaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKDc2Rjg5QzhCMDQ5NjdDNzFDMTkxQTU5NzcyREVCNjA4REZGNzQxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcm26sL+Vu89ei0UG9qTe/lb0F c/eZawKP36rmf7/b+L76zO4pKUtenWE7V+AofLuWbn1iTIOKizclLOzZfUmOixl8 CAYyBy0tPjX1dl/a2KR5UKYmTweckBbPO5I/sNRIGqGfFrRWnG9fPA9ha4lH0nq3 Ps42YdiqpE92NLn1wZAOwJduUvadELaJIJjsnSXfrXdg2lNMdJR1aY/eX8jSihe5 sfcMWTWFPrK15/Tv0VWWRD1Mn0gLTyZ88MYN7JFOYmSP6AiVrAHsW3qhLxtWmMUP 4mR42d2kKkKPKKPRteQOFenMpyXxBQeCh01675XKqeZc+5A12lCqGI0Nt3rBAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdviciwSWfHHBkaWXct62CN/3QdowHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzEzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXECMA0GCSqGSIb3DQEBCwUAA4IBAQA/ PXbzt7Cd7CU4zuUW7lmWpvda9f6JthxgstD8IpIMFyoitGFEXC4w+SLuRfN9hd9s MvFTsKWu5bpXwaokXIz1cifro5ZAv4uLtCjUTLpFLculwYkx9LzHMAdxBYv+Zl0N MKOB1Si6uUeGaevg5xkyUI9ImdNOA4xHCdzXwjuqzdoSwU6rG8eBb7UPzYr5mp4w gNBAH3iIKxycr75joBCzOEhjrJkY9eXfEESffxepjtQbU4jwL81ZCTxtLH9XPrqg VUvUTAy/cACUeG5RgAfXDvvMJiOgbeF7iKNvUj1H4PsE/PnCU/CnyLfyZzHdccvQ d0n9J38TSg7TJau4a3Hh -----END CERTIFICATE-----Generated at Sun Oct 25 09:13:13 2026 by rpki-client