$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34302d3430203d3e20323030373439.roa File: 326131343a373538313a373230303a3a2f34302d3430203d3e20323030373439.roa (raw, json) Hash identifier: bAsmzUKlVrECBOq/scwySImzwh1jn4XSccPluS8WUZ4= Subject key identifier: D9:C3:8A:9E:EF:E5:75:5E:74:51:B9:98:57:87:68:D6:3D:EF:C4:10 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 16ECC20DC575B83E7A7F0F3728F3B5480D1771B2 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34302d3430203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:34 +0000 ROA not before: Sun 04 Oct 2026 11:47:34 +0000 ROA not after: Sun 03 Oct 2027 11:52:34 +0000 asID: 200749 IP address blocks: 2a14:7581:7200::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ec:c2:0d:c5:75:b8:3e:7a:7f:0f:37:28:f3:b5:48:0d:17:71:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:34 2026 GMT Not After : Oct 3 11:52:34 2027 GMT Subject: CN=D9C38A9EEFE5755E7451B998578768D63DEFC410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:cf:73:fc:e3:07:4f:21:5d:11:d9:85:34: b9:e7:f1:71:f5:f0:59:01:c3:55:fd:94:53:25:50: 78:af:38:98:e5:cf:b7:d4:ab:ae:00:2c:05:dd:22: e7:7a:43:84:8e:c7:4a:33:5f:be:ff:82:00:26:ab: e7:74:04:5e:60:59:1b:d2:51:4d:ba:b4:bf:c8:cf: b6:6b:2c:d2:ee:ee:fb:e2:28:3a:1a:2a:52:e0:44: 32:50:27:b5:f9:5e:26:d7:2c:64:99:83:12:f2:c7: 8b:04:51:98:ba:7c:58:ec:20:5d:4a:0c:bb:a0:7c: e6:55:86:4d:97:0d:f4:ea:1e:ad:b9:72:83:0e:90: 67:a1:65:3c:c1:59:db:4b:f8:f2:75:55:95:0d:ff: 34:13:0f:ce:d6:c9:9e:eb:25:ce:59:f8:44:84:17: ce:20:b6:ab:bc:c6:2d:89:1f:34:09:1d:06:e8:92: 56:2c:4a:51:de:3e:b4:4f:0a:ae:e2:78:cf:29:dd: cc:15:21:e6:0b:82:4c:7d:d5:19:d9:70:f2:54:d9: 0c:3c:56:ff:93:3e:4d:09:90:78:ef:a1:27:25:d5: 2d:3a:6d:83:1c:09:da:79:91:4a:67:ec:e5:42:ff: a7:54:8e:0a:7f:ee:6d:8a:2b:f1:e5:a2:09:a4:63: ed:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C3:8A:9E:EF:E5:75:5E:74:51:B9:98:57:87:68:D6:3D:EF:C4:10 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34302d3430203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7200::/40 Signature Algorithm: sha256WithRSAEncryption 81:bf:4f:2d:c0:cf:b6:51:08:6c:f6:aa:17:aa:b6:de:d5:ef: cf:be:9a:dc:71:33:4d:b4:f8:6f:1f:43:49:44:7b:56:de:e4: f3:4e:87:12:77:b4:0e:08:48:68:28:8c:e3:02:6f:6a:ee:9d: 12:1f:5e:bb:b7:f3:bd:70:50:69:0e:cf:87:18:0a:aa:b5:b9: 6d:10:5b:cf:3c:17:1a:29:66:e8:0e:d8:e7:21:a9:af:0b:3f: 5c:1b:c4:e9:fe:f7:5e:b3:6d:b8:ff:93:94:35:47:2d:54:5c: fd:3e:78:39:74:d2:12:d5:99:d9:8b:e1:79:15:12:97:ec:a2: bc:d7:12:a5:6f:0e:f2:dd:37:2f:8c:b6:e5:ee:7f:18:5f:a1: ab:e0:f7:e6:cc:63:c0:a6:e3:f2:2c:75:13:3a:c0:ec:11:d1: b6:b2:29:44:89:76:8e:f9:9d:79:3b:7e:0d:b2:e6:74:89:ba: e5:87:8a:54:62:84:f6:42:e8:71:c2:24:59:90:78:1c:93:dc: 68:d2:6a:33:62:06:23:e4:fd:ec:07:94:21:95:4d:09:d8:02: d9:d1:f2:08:1b:4f:9e:08:7b:f3:70:97:0c:a8:dc:23:75:92: fd:a9:e4:af:8f:1a:0a:ed:8e:59:95:70:44:36:7a:83:73:4d: 3e:78:be:1e -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUFuzCDcV1uD56fw83KPO1SA0XcbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzRaFw0yNzEwMDMxMTUyMzRaMDMxMTAvBgNV BAMTKEQ5QzM4QTlFRUZFNTc1NUU3NDUxQjk5ODU3ODc2OEQ2M0RFRkM0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6c9z/OMHTyFdEdmFNLnn8XH1 8FkBw1X9lFMlUHivOJjlz7fUq64ALAXdIud6Q4SOx0ozX77/ggAmq+d0BF5gWRvS UU26tL/Iz7ZrLNLu7vviKDoaKlLgRDJQJ7X5XibXLGSZgxLyx4sEUZi6fFjsIF1K DLugfOZVhk2XDfTqHq25coMOkGehZTzBWdtL+PJ1VZUN/zQTD87WyZ7rJc5Z+ESE F84gtqu8xi2JHzQJHQboklYsSlHePrRPCq7ieM8p3cwVIeYLgkx91RnZcPJU2Qw8 Vv+TPk0JkHjvoScl1S06bYMcCdp5kUpn7OVC/6dUjgp/7m2KK/HlogmkY+1vAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU2cOKnu/ldV50UbmYV4do1j3vxBAwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gXIwDQYJKoZIhvcNAQELBQADggEBAIG/ Ty3Az7ZRCGz2qheqtt7V78++mtxxM020+G8fQ0lEe1be5PNOhxJ3tA4ISGgojOMC b2runRIfXru3871wUGkOz4cYCqq1uW0QW888FxopZugO2Ochqa8LP1wbxOn+916z bbj/k5Q1Ry1UXP0+eDl00hLVmdmL4XkVEpfsorzXEqVvDvLdNy+MtuXufxhfoavg 9+bMY8Cm4/IsdRM6wOwR0bayKUSJdo75nXk7fg2y5nSJuuWHilRihPZC6HHCJFmQ eByT3GjSajNiBiPk/ewHlCGVTQnYAtnR8ggbT54Ie/Nwlwyo3CN1kv2p5K+PGgrt jlmVcEQ2eoNzTT54vh4= -----END CERTIFICATE-----Generated at Sun Oct 25 03:22:05 2026 by rpki-client