$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373330303a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: 0LC71eiOhawrUW+WUAiqqDV3gt2pi2T/PVZDHI9+su0= Subject key identifier: 1B:6B:06:39:3A:3E:41:B0:B6:77:65:6E:4E:3B:D1:22:A9:47:78:B5 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 39AF4CDBC1A151CCE17E31B9922AE2D4F976FAB7 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7300::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 12:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:af:4c:db:c1:a1:51:cc:e1:7e:31:b9:92:2a:e2:d4:f9:76:fa:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=1B6B06393A3E41B0B677656E4E3BD122A94778B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:5e:84:e9:07:97:87:49:4a:e0:b8:21:a7: 41:85:40:8b:e2:98:92:aa:75:54:c6:af:56:ef:d5: bc:35:78:32:23:01:15:d5:1b:a5:46:fc:11:fc:a4: 02:da:df:e6:47:b7:26:d2:bc:a9:1d:e1:91:a3:39: d1:7c:ea:3f:b2:53:b3:ce:63:3e:06:38:ef:da:45: c5:b8:86:9e:c1:ff:6d:48:e5:29:d6:cb:60:c0:3e: 09:f1:f6:f4:58:a9:65:ed:c4:c5:b7:98:d6:eb:29: f6:52:ac:be:01:71:31:1d:6c:0b:13:91:01:e4:eb: 87:34:1a:13:ed:48:26:22:e0:a3:c8:c6:d8:8a:df: cb:a4:bd:cd:e8:fc:ab:6e:40:ff:46:09:94:7e:b6: 05:bc:5a:d0:19:ac:40:19:b6:9e:1c:93:79:6b:34: ef:d3:ca:bc:66:50:a0:60:79:6b:bb:7a:b2:9d:17: d9:f8:4a:7d:40:df:28:04:42:57:74:e0:19:1f:c5: 8f:ad:97:e1:63:06:35:60:41:f5:f8:e3:a3:cf:49: da:74:33:d1:90:a4:76:2f:d3:75:46:5a:9d:67:6a: d7:38:eb:df:d8:f8:06:dc:db:32:23:4d:a6:f4:1c: 95:6f:55:f1:68:7c:23:1d:99:ce:0c:31:d3:6e:03: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6B:06:39:3A:3E:41:B0:B6:77:65:6E:4E:3B:D1:22:A9:47:78:B5 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7300::/48 Signature Algorithm: sha256WithRSAEncryption 06:cb:69:fd:16:d7:51:56:54:18:c5:eb:11:ea:dd:03:f2:63: b6:99:28:ca:53:0c:b3:3d:cd:f1:8c:8d:d4:0d:d1:85:1b:6a: c9:ca:aa:0e:28:95:c5:a7:f8:bf:0e:fe:ee:68:b0:27:ae:4a: 16:04:5f:68:11:44:2b:86:52:0f:87:b5:6a:ad:d4:6a:45:b9: a4:c7:c4:45:27:7c:0f:99:30:15:14:42:2a:74:5a:20:a8:d0: c9:e7:52:af:dc:d7:15:de:f6:d1:35:17:10:26:3b:89:96:04: 76:1b:e9:c5:b7:b7:1b:76:06:b0:f6:27:15:45:ad:3a:a4:01: ba:8f:66:ff:25:b0:49:7a:b5:a4:a1:e5:db:89:dc:44:6e:0b: ff:ad:3e:c6:6c:f7:84:cc:28:01:cc:45:5c:0f:23:aa:1c:f9: e4:69:a6:76:ee:92:08:c2:ca:d0:88:f7:5c:42:e6:7b:f5:2d: c1:86:59:91:03:b7:f0:2a:33:c7:34:1c:ee:01:89:6f:8b:ba: cb:17:91:8b:e8:36:91:ba:30:c1:b2:4b:01:44:d8:00:62:69: 1e:2a:fb:de:bd:77:0a:a6:f5:03:dc:59:9f:d8:d0:03:6e:af: 1e:86:ff:d0:a4:67:7e:22:a4:b2:f5:34:de:65:46:ff:5b:2d: 68:fa:9f:cf -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOa9M28GhUczhfjG5kiri1Pl2+rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKDFCNkIwNjM5M0EzRTQxQjBCNjc3NjU2RTRFM0JEMTIyQTk0Nzc4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGNV6E6QeXh0lK4Lghp0GFQIvi mJKqdVTGr1bv1bw1eDIjARXVG6VG/BH8pALa3+ZHtybSvKkd4ZGjOdF86j+yU7PO Yz4GOO/aRcW4hp7B/21I5SnWy2DAPgnx9vRYqWXtxMW3mNbrKfZSrL4BcTEdbAsT kQHk64c0GhPtSCYi4KPIxtiK38ukvc3o/KtuQP9GCZR+tgW8WtAZrEAZtp4ck3lr NO/TyrxmUKBgeWu7erKdF9n4Sn1A3ygEQld04BkfxY+tl+FjBjVgQfX446PPSdp0 M9GQpHYv03VGWp1natc469/Y+Abc2zIjTab0HJVvVfFofCMdmc4MMdNuA//1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUG2sGOTo+QbC2d2VuTjvRIqlHeLUwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzMzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMAMA0GCSqGSIb3DQEBCwUAA4IBAQAG y2n9FtdRVlQYxesR6t0D8mO2mSjKUwyzPc3xjI3UDdGFG2rJyqoOKJXFp/i/Dv7u aLAnrkoWBF9oEUQrhlIPh7VqrdRqRbmkx8RFJ3wPmTAVFEIqdFogqNDJ51Kv3NcV 3vbRNRcQJjuJlgR2G+nFt7cbdgaw9icVRa06pAG6j2b/JbBJerWkoeXbidxEbgv/ rT7GbPeEzCgBzEVcDyOqHPnkaaZ27pIIwsrQiPdcQuZ79S3BhlmRA7fwKjPHNBzu AYlvi7rLF5GL6DaRujDBsksBRNgAYmkeKvvevXcKpvUD3Fmf2NADbq8ehv/QpGd+ IqSy9TTeZUb/Wy1o+p/P -----END CERTIFICATE-----Generated at Sat Oct 24 18:51:58 2026 by rpki-client