$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230333a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373230333a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: 3Y3KLL47TqTZrVS2wv2BfxjSZMRsw5A4tCV4hmpw7MU= Subject key identifier: 57:10:03:A2:37:F1:36:FC:F1:CE:1E:B8:F5:55:4B:11:D4:00:6A:4B Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 4DC6B618B37F3C2624A67C002DDE1E78738F7BB5 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230333a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:34 +0000 ROA not before: Sun 04 Oct 2026 11:47:34 +0000 ROA not after: Sun 03 Oct 2027 11:52:34 +0000 asID: 200749 IP address blocks: 2a14:7581:7203::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c6:b6:18:b3:7f:3c:26:24:a6:7c:00:2d:de:1e:78:73:8f:7b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:34 2026 GMT Not After : Oct 3 11:52:34 2027 GMT Subject: CN=571003A237F136FCF1CE1EB8F5554B11D4006A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:bb:6c:60:a8:01:0b:3d:9c:b5:ee:e0:ca: 27:5d:1f:04:31:70:d5:e6:96:77:58:ed:17:e9:94: 67:76:a0:d9:9f:f8:ca:9d:ae:d9:0a:12:ff:56:42: b5:74:5b:4d:72:dc:4a:7d:39:43:30:5b:e4:75:54: f9:60:a6:c5:3e:03:a4:e9:f4:cc:8b:46:f5:c1:ef: ba:14:e6:52:f0:6c:4f:ba:25:7e:74:7a:4a:62:20: cc:94:a0:b7:f1:b7:4a:61:b3:92:79:2d:11:75:eb: 8a:f5:c3:a9:8b:00:f3:1f:c8:43:58:01:ee:e6:7b: 00:08:75:1e:55:4c:7c:e0:eb:14:0b:70:25:49:51: cb:3a:8c:cc:30:7b:53:c8:fd:45:20:53:cf:99:2c: ae:a1:17:ca:67:46:a8:44:61:e0:ae:ca:69:dd:bb: 8b:ef:63:e4:90:e6:7f:c6:ce:6c:d0:49:54:bf:8d: 09:cd:75:9d:3e:02:65:72:a2:7f:3b:ec:aa:fd:64: d8:4e:da:8d:2f:15:aa:a5:fb:18:b1:93:d5:4c:d3: b1:91:e6:e9:3a:a7:f2:9c:e6:49:cc:0f:0c:af:0e: 85:7c:5d:6a:db:64:30:d8:da:fd:1a:27:9d:67:05: 5a:5e:59:64:95:5e:92:e2:58:b1:c5:6a:fd:b2:8c: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:10:03:A2:37:F1:36:FC:F1:CE:1E:B8:F5:55:4B:11:D4:00:6A:4B X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230333a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7203::/48 Signature Algorithm: sha256WithRSAEncryption 04:f2:f8:3e:66:4b:ec:14:e7:54:bb:1a:dd:92:e8:74:6e:d3: 3c:7b:c5:67:ef:02:4e:ed:04:f1:c3:47:00:3c:c3:e6:42:03: 85:b4:4d:06:46:d7:4d:43:ac:ce:47:03:40:d4:67:64:ae:50: e2:2d:23:36:77:88:61:dc:3e:d3:6e:36:8d:6d:c2:f3:b8:1e: d8:98:e0:ac:a9:5e:9b:db:77:af:4b:36:e0:2a:c6:8f:73:be: 37:88:b7:b4:b4:04:9b:a7:e8:ee:e0:16:e1:d4:9d:5c:1b:92: 6d:8c:0c:38:2d:10:f2:26:75:5a:36:82:1f:b9:91:02:54:5b: 37:50:d0:ec:17:e9:c9:58:3d:60:71:70:5c:4b:7d:68:52:7c: d1:07:43:da:6a:16:58:53:9f:c5:4b:78:33:19:85:52:0f:74: 6f:ff:68:76:4d:d5:e5:28:92:9f:cc:1a:d7:12:b3:06:51:9b: 4e:c2:a8:fc:e0:1d:68:f6:4d:bf:53:e5:45:43:3c:01:ed:31: 46:38:7e:1b:46:51:71:1c:82:a7:d0:11:64:41:3c:46:26:a9: e9:a2:ac:dc:36:25:23:e7:61:c1:a1:8c:06:3d:95:55:84:b6: b5:38:2b:50:93:23:73:b5:ce:71:68:22:05:de:7e:0c:02:38: 6b:0b:9e:8d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTca2GLN/PCYkpnwALd4eeHOPe7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzRaFw0yNzEwMDMxMTUyMzRaMDMxMTAvBgNV BAMTKDU3MTAwM0EyMzdGMTM2RkNGMUNFMUVCOEY1NTU0QjExRDQwMDZBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8LtsYKgBCz2cte7gyiddHwQx cNXmlndY7RfplGd2oNmf+MqdrtkKEv9WQrV0W01y3Ep9OUMwW+R1VPlgpsU+A6Tp 9MyLRvXB77oU5lLwbE+6JX50ekpiIMyUoLfxt0phs5J5LRF164r1w6mLAPMfyENY Ae7mewAIdR5VTHzg6xQLcCVJUcs6jMwwe1PI/UUgU8+ZLK6hF8pnRqhEYeCuymnd u4vvY+SQ5n/GzmzQSVS/jQnNdZ0+AmVyon877Kr9ZNhO2o0vFaql+xixk9VM07GR 5uk6p/Kc5knMDwyvDoV8XWrbZDDY2v0aJ51nBVpeWWSVXpLiWLHFav2yjJQVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUVxADojfxNvzxzh649VVLEdQAakswHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzIzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXIDMA0GCSqGSIb3DQEBCwUAA4IBAQAE 8vg+ZkvsFOdUuxrdkuh0btM8e8Vn7wJO7QTxw0cAPMPmQgOFtE0GRtdNQ6zORwNA 1GdkrlDiLSM2d4hh3D7TbjaNbcLzuB7YmOCsqV6b23evSzbgKsaPc743iLe0tASb p+ju4Bbh1J1cG5JtjAw4LRDyJnVaNoIfuZECVFs3UNDsF+nJWD1gcXBcS31oUnzR B0PaahZYU5/FS3gzGYVSD3Rv/2h2TdXlKJKfzBrXErMGUZtOwqj84B1o9k2/U+VF QzwB7TFGOH4bRlFxHIKn0BFkQTxGJqnpoqzcNiUj52HBoYwGPZVVhLa1OCtQkyNz tc5xaCIF3n4MAjhrC56N -----END CERTIFICATE-----Generated at Sat Oct 24 15:48:08 2026 by rpki-client