$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330313a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373330313a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: RvY1degQ3vfe7/ScnHCRQ+lBLMGEdwJ+Z4uoUoa9zug= Subject key identifier: B0:0D:28:75:AB:33:82:96:F5:76:1C:3F:A3:CD:CA:F3:B0:04:BF:E7 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 25EFCEB689F0B56A28FEA876943D5CFF0A48CA0A Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330313a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:34 +0000 ROA not before: Sun 04 Oct 2026 11:47:34 +0000 ROA not after: Sun 03 Oct 2027 11:52:34 +0000 asID: 200749 IP address blocks: 2a14:7581:7301::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ef:ce:b6:89:f0:b5:6a:28:fe:a8:76:94:3d:5c:ff:0a:48:ca:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:34 2026 GMT Not After : Oct 3 11:52:34 2027 GMT Subject: CN=B00D2875AB338296F5761C3FA3CDCAF3B004BFE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:b4:c7:a4:5f:fa:02:ab:70:dc:88:0e:29: e9:0c:19:43:fe:3a:dd:ab:38:f8:f5:f9:59:ca:19: 47:b0:fa:30:cb:61:95:6f:08:26:48:36:97:45:32: 3e:d5:45:41:b5:99:6a:a8:86:ba:ba:9e:7a:f5:ed: 95:d0:68:99:ff:c9:6e:b8:71:d5:fd:55:02:80:71: a6:bb:83:01:de:c6:5f:77:8c:71:7f:17:93:c3:fa: 84:65:0e:88:3e:0b:e6:01:0b:25:d7:ee:bc:16:1b: 31:c5:39:5f:bf:ee:06:d4:a0:67:dd:72:0f:68:28: 2f:eb:5a:59:9f:c2:d5:9f:43:90:66:c0:66:7b:79: 83:94:83:e4:39:26:c7:4f:ce:5f:59:07:c5:c1:4e: 21:9e:c1:31:ba:9e:e7:8e:67:67:03:04:cd:22:92: d9:b2:d7:47:8a:11:56:85:2a:2c:71:f7:34:d6:18: ac:5e:1f:54:64:80:bd:ad:64:20:11:bc:fb:d7:93: 63:02:58:7a:8f:92:b6:6c:0b:e2:b6:49:ea:29:da: 12:f5:63:96:40:4a:29:53:b4:b0:5b:f8:36:71:9d: 64:30:0f:83:ab:8b:96:09:b3:d2:35:8c:c6:35:31: d2:90:56:68:0c:df:99:8e:49:1f:24:1b:d5:d2:ae: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0D:28:75:AB:33:82:96:F5:76:1C:3F:A3:CD:CA:F3:B0:04:BF:E7 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330313a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7301::/48 Signature Algorithm: sha256WithRSAEncryption 28:18:50:0b:3e:54:e7:3d:d3:f4:34:fe:02:ed:29:fb:72:86: 55:53:d8:6b:b4:f1:c6:26:94:71:7c:75:34:bd:d2:94:fd:fb: 62:1a:2d:2d:70:f5:6c:9c:99:82:83:ac:0f:46:0f:07:83:ba: 1a:51:6f:9e:8f:41:95:10:4e:cc:61:02:ac:05:f4:e0:2d:62: 71:aa:a5:02:1d:80:94:5c:f9:7b:5d:10:19:12:1e:f3:17:d1: a6:3b:aa:ea:ac:40:75:ce:8c:5d:2a:6a:85:3f:83:9e:8b:ab: f5:f1:6b:ae:6f:81:66:fd:c8:c1:6d:19:92:16:bc:7b:a6:00: 54:79:4e:31:e7:9a:75:24:f6:1d:6e:c5:f6:f6:31:b1:2f:a9: 70:74:dc:24:ce:d0:79:c6:19:f4:fd:0e:c9:92:c1:b2:d7:80: 58:64:e8:f9:98:17:a6:04:12:3f:76:fa:ff:b6:f9:60:bf:7b: f9:2f:1a:be:e8:e9:b1:80:bd:18:4d:be:63:e1:33:20:ad:04: fb:8a:91:02:47:3d:0e:37:d8:99:b7:9a:50:60:59:31:6b:ad: a4:ed:7a:81:e1:87:3e:56:44:2e:23:b3:77:73:cd:a1:aa:66: 21:82:03:d3:8c:f9:62:43:85:63:b6:c8:1b:80:02:f7:b0:91: 66:10:0c:b2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJe/OtonwtWoo/qh2lD1c/wpIygowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzRaFw0yNzEwMDMxMTUyMzRaMDMxMTAvBgNV BAMTKEIwMEQyODc1QUIzMzgyOTZGNTc2MUMzRkEzQ0RDQUYzQjAwNEJGRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJE7THpF/6Aqtw3IgOKekMGUP+ Ot2rOPj1+VnKGUew+jDLYZVvCCZINpdFMj7VRUG1mWqohrq6nnr17ZXQaJn/yW64 cdX9VQKAcaa7gwHexl93jHF/F5PD+oRlDog+C+YBCyXX7rwWGzHFOV+/7gbUoGfd cg9oKC/rWlmfwtWfQ5BmwGZ7eYOUg+Q5JsdPzl9ZB8XBTiGewTG6nueOZ2cDBM0i ktmy10eKEVaFKixx9zTWGKxeH1RkgL2tZCARvPvXk2MCWHqPkrZsC+K2Seop2hL1 Y5ZASilTtLBb+DZxnWQwD4Ori5YJs9I1jMY1MdKQVmgM35mOSR8kG9XSrv9/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUsA0odaszgpb1dhw/o83K87AEv+cwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzMzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMBMA0GCSqGSIb3DQEBCwUAA4IBAQAo GFALPlTnPdP0NP4C7Sn7coZVU9hrtPHGJpRxfHU0vdKU/ftiGi0tcPVsnJmCg6wP Rg8Hg7oaUW+ej0GVEE7MYQKsBfTgLWJxqqUCHYCUXPl7XRAZEh7zF9GmO6rqrEB1 zoxdKmqFP4Oei6v18Wuub4Fm/cjBbRmSFrx7pgBUeU4x55p1JPYdbsX29jGxL6lw dNwkztB5xhn0/Q7JksGy14BYZOj5mBemBBI/dvr/tvlgv3v5Lxq+6OmxgL0YTb5j 4TMgrQT7ipECRz0ON9iZt5pQYFkxa62k7XqB4Yc+VkQuI7N3c82hqmYhggPTjPli Q4VjtsgbgAL3sJFmEAyy -----END CERTIFICATE-----Generated at Sat Oct 24 15:47:29 2026 by rpki-client