$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34302d3430203d3e20323030373439.roa File: 326131343a373538313a373330303a3a2f34302d3430203d3e20323030373439.roa (raw, json) Hash identifier: Ww3Y2aP/Zzw0ny0EFF2WBBwzeX1O0FyI1SUz9FnpIdA= Subject key identifier: EB:B3:22:77:99:98:7E:92:3E:8F:BD:A5:4F:09:7F:39:BB:02:D0:66 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 0C7C4B4A5FE9DC4ACED61EC8E1532FF82ABE3E6F Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34302d3430203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7300::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 20:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7c:4b:4a:5f:e9:dc:4a:ce:d6:1e:c8:e1:53:2f:f8:2a:be:3e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=EBB3227799987E923E8FBDA54F097F39BB02D066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:1c:ea:c4:3a:74:c5:54:b4:66:64:76:2f: 50:23:c2:0a:5a:f8:d3:6a:16:63:b0:12:b0:6a:2f: 4f:ed:3b:51:d2:bc:f2:74:ba:5a:26:df:e8:a4:cd: 15:57:65:8d:ca:9c:e7:31:6c:76:22:ab:34:49:3b: f1:d6:a1:a0:ac:95:9c:e6:bb:87:4e:da:42:4f:ce: 0d:49:57:76:1d:23:c5:f8:fc:6d:4e:bb:f4:19:d8: 7b:e9:47:1f:ea:4b:0d:08:51:f6:05:d8:e5:d6:d9: e5:d1:ca:64:b1:24:fc:10:91:b4:83:e0:3a:0d:51: ba:8e:96:eb:f4:d0:b8:8b:f9:03:8f:c7:05:ed:a1: ef:5f:a1:f6:0a:ca:23:57:99:e0:bd:cb:38:bf:c3: 0d:03:3d:a1:56:c8:22:36:00:81:9e:f7:41:8e:00: 31:b6:1c:9e:db:33:9f:2f:bc:b1:5e:9a:2e:ee:ec: e6:1b:a6:44:f9:91:ab:96:e8:f8:63:dd:f3:fc:2a: 84:05:74:46:54:40:74:33:46:2c:81:91:40:57:1b: e2:fd:e4:9a:52:c6:48:24:bd:10:50:c4:03:c0:cd: 0f:38:a4:1c:2a:e9:62:76:b4:87:16:5c:49:c5:11: fc:39:70:36:49:e8:7e:01:35:8f:69:21:a2:33:9a: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B3:22:77:99:98:7E:92:3E:8F:BD:A5:4F:09:7F:39:BB:02:D0:66 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34302d3430203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7300::/40 Signature Algorithm: sha256WithRSAEncryption 78:d8:be:04:de:3f:22:27:b8:1d:dd:f0:ad:d6:6f:22:cd:07: 0b:34:b5:f4:c8:ce:97:51:85:7c:95:3e:ba:2e:1e:29:2e:65: 76:9d:8d:4c:48:e8:0e:0e:41:c9:3c:05:c6:0f:41:7e:df:ba: 18:6d:f6:bb:3f:51:0f:f5:94:bc:10:95:2b:43:7e:fc:d8:47: 9c:e7:48:5d:ea:43:a1:29:39:fa:62:ad:79:b7:3c:54:c5:bf: 65:54:1f:b9:66:66:05:4a:32:b7:41:f8:7c:8f:e5:4a:a4:95: 38:8d:9a:a9:80:a1:9a:84:cb:bf:29:c0:09:61:a2:da:7b:a4: 36:a3:42:0b:5f:a6:31:bf:c8:7b:86:10:28:29:1e:aa:ee:e8: 8b:d2:ae:4e:51:2a:b9:e1:b8:1a:fa:03:59:64:0c:18:b9:4d: 0b:3d:01:4d:42:60:33:ab:99:bb:0d:7b:39:76:d7:a8:13:5a: 14:95:34:c9:37:29:91:4e:26:9e:f9:f6:19:8f:87:0f:ef:6a: 4a:00:bc:70:8c:bc:18:9c:cb:f2:c2:c9:5b:48:e1:1a:fa:05: 70:84:f1:7c:50:4b:c7:91:6a:1d:2e:60:aa:ea:00:f6:3d:5f: b1:be:4c:46:c0:76:23:10:24:f9:e6:b1:bb:bb:e8:d4:72:26: b2:f1:e4:b5 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUDHxLSl/p3ErO1h7I4VMv+Cq+Pm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKEVCQjMyMjc3OTk5ODdFOTIzRThGQkRBNTRGMDk3RjM5QkIwMkQwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPhzqxDp0xVS0ZmR2L1Ajwgpa +NNqFmOwErBqL0/tO1HSvPJ0ulom3+ikzRVXZY3KnOcxbHYiqzRJO/HWoaCslZzm u4dO2kJPzg1JV3YdI8X4/G1Ou/QZ2HvpRx/qSw0IUfYF2OXW2eXRymSxJPwQkbSD 4DoNUbqOluv00LiL+QOPxwXtoe9fofYKyiNXmeC9yzi/ww0DPaFWyCI2AIGe90GO ADG2HJ7bM58vvLFemi7u7OYbpkT5kauW6Phj3fP8KoQFdEZUQHQzRiyBkUBXG+L9 5JpSxkgkvRBQxAPAzQ84pBwq6WJ2tIcWXEnFEfw5cDZJ6H4BNY9pIaIzmg2VAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU67Mid5mYfpI+j72lTwl/ObsC0GYwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzMzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gXMwDQYJKoZIhvcNAQELBQADggEBAHjY vgTePyInuB3d8K3WbyLNBws0tfTIzpdRhXyVProuHikuZXadjUxI6A4OQck8BcYP QX7fuhht9rs/UQ/1lLwQlStDfvzYR5znSF3qQ6EpOfpirXm3PFTFv2VUH7lmZgVK MrdB+HyP5UqklTiNmqmAoZqEy78pwAlhotp7pDajQgtfpjG/yHuGECgpHqru6IvS rk5RKrnhuBr6A1lkDBi5TQs9AU1CYDOrmbsNezl216gTWhSVNMk3KZFOJp759hmP hw/vakoAvHCMvBicy/LCyVtI4Rr6BXCE8XxQS8eRah0uYKrqAPY9X7G+TEbAdiMQ JPnmsbu76NRyJrLx5LU= -----END CERTIFICATE-----Generated at Sun Oct 25 14:32:30 2026 by rpki-client