$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230313a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373230313a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: AxwANv+fk7JHopF7DmE20WYSOw0thGygo04GEPmOLiY= Subject key identifier: 6E:C1:BB:52:4A:04:E7:48:16:44:96:A9:20:63:C8:FB:B3:4B:AE:F5 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 1A97B4A8BBDC54DDBDAE8A1A1E8BC6F2DC03C53A Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230313a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7201::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:97:b4:a8:bb:dc:54:dd:bd:ae:8a:1a:1e:8b:c6:f2:dc:03:c5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=6EC1BB524A04E748164496A92063C8FBB34BAEF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cd:b6:24:f3:7a:0a:d8:64:28:24:86:0e:ad: ee:49:a0:d7:24:1c:7c:01:d1:10:60:79:9b:aa:87: 20:cf:ca:77:a2:f8:a2:a0:2f:bf:32:43:d7:78:90: d4:ed:01:8f:f7:9c:36:93:0c:73:98:fb:0c:82:5e: 8d:4f:6d:97:f6:1b:a6:53:1f:a7:7e:90:bd:e8:59: f1:48:2f:7f:e9:21:8e:84:64:2d:e2:65:65:f3:c2: c3:5b:40:e6:d9:16:01:ff:1e:7e:8c:2f:f6:26:0f: a4:56:3a:7e:ef:01:53:39:2e:a5:db:4f:4b:3d:12: 05:16:fa:db:5b:ac:48:1b:b5:16:f0:6b:9f:73:e3: be:f3:9f:9e:fa:50:a9:bb:e8:9b:70:3e:09:a6:f2: b9:f7:af:35:25:52:31:b8:df:a7:f1:7d:6e:76:8a: 03:36:f7:ae:80:94:8a:1a:99:75:4b:0f:95:5d:fd: 9a:b7:03:06:75:a4:1b:9d:89:42:c8:13:09:5e:0a: e9:67:40:18:2c:54:29:44:35:ad:64:3b:bb:45:fa: 80:11:66:6b:6a:8e:28:34:41:7c:75:9d:f2:e2:ec: f1:6f:99:14:ff:4c:a2:0e:0c:7f:7e:61:e6:9f:e4: 16:ee:eb:a5:ce:df:eb:b8:51:0d:ac:22:c1:97:65: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C1:BB:52:4A:04:E7:48:16:44:96:A9:20:63:C8:FB:B3:4B:AE:F5 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230313a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7201::/48 Signature Algorithm: sha256WithRSAEncryption 18:6f:d6:8a:bb:b0:f1:02:95:ec:39:c0:fb:28:a1:5d:a1:70: e6:9e:cb:a8:11:05:48:36:19:47:ae:b9:2e:8e:13:63:19:e2: 96:9a:53:ac:14:f8:ff:f6:ae:92:73:f8:fc:ea:42:3d:40:48: 4c:32:75:07:d5:74:a2:b7:52:78:7f:63:54:d6:df:31:94:2b: e4:72:7c:fa:ee:14:7c:35:de:db:cf:9e:b2:68:19:5e:7f:d8: 32:cc:f2:6f:22:f6:84:46:79:1a:fe:a3:66:5e:19:42:d4:67: 08:b6:40:0c:a9:eb:ad:51:e7:48:39:42:ad:1e:19:4e:d2:62: 06:68:2a:da:da:24:73:81:a8:74:4e:c9:53:4b:93:a0:a5:f5: f8:cc:50:5f:05:95:ae:a8:a1:4e:a5:f3:2b:e8:47:ed:d9:a6: b6:1e:aa:92:35:4d:7b:90:9f:85:60:95:2a:bd:e6:40:32:ec: 65:40:dd:de:67:e9:f6:17:26:c4:ea:93:f4:ba:d2:85:53:bb: e4:60:9e:58:d8:f9:db:02:3c:c8:09:77:40:6b:b6:af:9b:dd: 30:44:89:b6:1e:f7:44:ba:6b:5e:f9:09:6b:1c:38:99:0a:e9: 92:78:9f:90:2f:da:1c:44:83:5b:b6:f5:15:fe:1d:2a:e4:96: f4:5b:58:27 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUGpe0qLvcVN29rooaHovG8twDxTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKDZFQzFCQjUyNEEwNEU3NDgxNjQ0OTZBOTIwNjNDOEZCQjM0QkFFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2zbYk83oK2GQoJIYOre5JoNck HHwB0RBgeZuqhyDPynei+KKgL78yQ9d4kNTtAY/3nDaTDHOY+wyCXo1PbZf2G6ZT H6d+kL3oWfFIL3/pIY6EZC3iZWXzwsNbQObZFgH/Hn6ML/YmD6RWOn7vAVM5LqXb T0s9EgUW+ttbrEgbtRbwa59z477zn576UKm76JtwPgmm8rn3rzUlUjG436fxfW52 igM2966AlIoamXVLD5Vd/Zq3AwZ1pBudiULIEwleCulnQBgsVClENa1kO7tF+oAR Zmtqjig0QXx1nfLi7PFvmRT/TKIODH9+Yeaf5Bbu66XO3+u4UQ2sIsGXZawjAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUbsG7UkoE50gWRJapIGPI+7NLrvUwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzIzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXIBMA0GCSqGSIb3DQEBCwUAA4IBAQAY b9aKu7DxApXsOcD7KKFdoXDmnsuoEQVINhlHrrkujhNjGeKWmlOsFPj/9q6Sc/j8 6kI9QEhMMnUH1XSit1J4f2NU1t8xlCvkcnz67hR8Nd7bz56yaBlef9gyzPJvIvaE Rnka/qNmXhlC1GcItkAMqeutUedIOUKtHhlO0mIGaCra2iRzgah0TslTS5OgpfX4 zFBfBZWuqKFOpfMr6Eft2aa2HqqSNU17kJ+FYJUqveZAMuxlQN3eZ+n2FybE6pP0 utKFU7vkYJ5Y2PnbAjzICXdAa7avm90wRIm2HvdEumte+QlrHDiZCumSeJ+QL9oc RINbtvUV/h0q5Jb0W1gn -----END CERTIFICATE-----Generated at Sat Oct 24 15:56:30 2026 by rpki-client