$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130343a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373130343a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: XLUrF/U9huUasZnrWNuuirmfEvZXF4PEWFQ9CQIHzI0= Subject key identifier: 04:55:02:C5:C8:97:27:2B:85:48:3B:06:9F:E2:00:F0:72:04:CC:A4 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 689DB40FBBFB67138025B6C8E4B4E7A4B40DB58A Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130343a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:34 +0000 ROA not before: Sun 04 Oct 2026 11:47:34 +0000 ROA not after: Sun 03 Oct 2027 11:52:34 +0000 asID: 200749 IP address blocks: 2a14:7581:7104::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9d:b4:0f:bb:fb:67:13:80:25:b6:c8:e4:b4:e7:a4:b4:0d:b5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:34 2026 GMT Not After : Oct 3 11:52:34 2027 GMT Subject: CN=045502C5C897272B85483B069FE200F07204CCA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:85:39:86:63:85:c3:a3:00:49:45:b8:a3: 7f:82:28:d4:56:92:8a:c0:58:6e:ec:6c:64:a9:5e: 67:4f:53:8e:21:cd:80:c9:5e:4a:df:4f:00:8c:c0: f8:f8:1a:1e:a9:54:a7:ed:d3:3e:02:f4:8e:50:9f: 65:98:72:25:f3:7c:ab:7a:f7:fc:bb:1d:f4:a9:62: a9:79:2f:20:4d:0c:21:a0:cd:ab:d6:b2:fa:60:32: a2:f5:87:2c:38:bb:9c:ec:33:d7:75:4c:d7:5c:b5: aa:8f:b7:c5:6b:bd:b7:c3:2e:20:f8:be:ea:62:2f: 38:44:09:2c:dc:85:9f:93:3e:46:4e:ab:86:7b:36: dc:1b:a5:38:14:46:a7:a8:0e:32:4a:cb:ba:21:c8: f8:03:87:e6:9f:12:d7:42:eb:28:9a:6d:f2:9f:52: 48:33:29:71:e5:09:9f:3c:62:c5:24:83:ea:c3:e4: 95:c2:a0:23:03:f2:4c:08:3e:f4:99:ca:c2:f6:d7: 14:98:f7:a7:ac:ae:59:3f:e9:01:66:9e:e4:f5:a6: bb:c9:40:46:69:77:de:2f:14:3d:fc:f6:7d:75:a2: 8b:ef:4d:d3:12:94:5c:4f:b9:c6:fb:32:d8:89:de: db:a7:8a:08:53:a4:73:62:6d:4b:9f:89:bd:4f:f9: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:55:02:C5:C8:97:27:2B:85:48:3B:06:9F:E2:00:F0:72:04:CC:A4 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130343a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7104::/48 Signature Algorithm: sha256WithRSAEncryption 6f:6f:01:e9:f5:d5:99:6e:8b:3a:98:b7:54:d3:62:c4:1c:c8: a5:75:3b:d5:65:1d:50:c5:98:2f:9e:eb:11:fc:8a:60:f5:64: 76:a2:d6:9b:f4:9f:a4:57:0a:bc:19:0b:f1:2a:fb:31:6d:50: 82:7b:7c:f7:75:e6:1f:f7:c8:7d:65:c1:88:cf:52:54:f8:5f: da:e0:e6:5a:37:92:17:35:e4:4a:9c:34:51:c7:ee:4c:c5:cc: 28:4d:6c:18:3b:19:63:47:04:ce:d1:5c:97:db:ab:51:49:60: 04:e9:5e:b6:a0:09:10:d7:f2:1c:41:4c:ec:c4:ab:a7:60:b6: 91:c6:76:26:ae:10:9e:12:37:b6:ba:fc:1c:5b:3b:8a:dd:b6: 88:ca:01:8f:73:ed:6e:06:25:47:10:b0:64:27:86:80:34:c8: 46:3a:87:53:08:57:50:60:54:5f:30:36:7d:ad:c0:86:d2:d8: 43:af:e0:6e:c3:1e:3f:76:b8:ba:c1:e3:f6:a0:91:90:c4:7c: 78:5f:1a:b8:f4:8a:bb:08:5e:24:78:46:05:fd:1e:3e:3e:dd: d1:64:11:17:77:8d:dd:02:cc:d4:29:00:e5:13:70:e4:82:59: f2:e0:97:2e:3a:39:e6:c8:94:ba:b7:70:97:fd:05:5a:a2:6a: de:29:9d:3d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUaJ20D7v7ZxOAJbbI5LTnpLQNtYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzRaFw0yNzEwMDMxMTUyMzRaMDMxMTAvBgNV BAMTKDA0NTUwMkM1Qzg5NzI3MkI4NTQ4M0IwNjlGRTIwMEYwNzIwNENDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeK4U5hmOFw6MASUW4o3+CKNRW korAWG7sbGSpXmdPU44hzYDJXkrfTwCMwPj4Gh6pVKft0z4C9I5Qn2WYciXzfKt6 9/y7HfSpYql5LyBNDCGgzavWsvpgMqL1hyw4u5zsM9d1TNdctaqPt8VrvbfDLiD4 vupiLzhECSzchZ+TPkZOq4Z7NtwbpTgURqeoDjJKy7ohyPgDh+afEtdC6yiabfKf UkgzKXHlCZ88YsUkg+rD5JXCoCMD8kwIPvSZysL21xSY96esrlk/6QFmnuT1prvJ QEZpd94vFD389n11oovvTdMSlFxPucb7MtiJ3tunighTpHNibUufib1P+UCHAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUBFUCxciXJyuFSDsGn+IA8HIEzKQwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzEzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXEEMA0GCSqGSIb3DQEBCwUAA4IBAQBv bwHp9dWZbos6mLdU02LEHMildTvVZR1QxZgvnusR/Ipg9WR2otab9J+kVwq8GQvx KvsxbVCCe3z3deYf98h9ZcGIz1JU+F/a4OZaN5IXNeRKnDRRx+5MxcwoTWwYOxlj RwTO0VyX26tRSWAE6V62oAkQ1/IcQUzsxKunYLaRxnYmrhCeEje2uvwcWzuK3baI ygGPc+1uBiVHELBkJ4aANMhGOodTCFdQYFRfMDZ9rcCG0thDr+Buwx4/dri6weP2 oJGQxHx4Xxq49Iq7CF4keEYF/R4+Pt3RZBEXd43dAszUKQDlE3Dkglny4JcuOjnm yJS6t3CX/QVaomreKZ09 -----END CERTIFICATE-----Generated at Sat Oct 24 15:46:57 2026 by rpki-client