$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330323a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373330323a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: RR8x6qycCyiSckXHB+Mo5731S/bbTpfOIUfxF+H8syQ= Subject key identifier: 16:1A:B6:32:1A:37:02:A7:7C:0D:CD:BD:CB:49:72:5C:0F:FA:59:AB Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 3E49E62BE012190DC34CC85985C7372E0CE65577 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330323a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7302::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:49:e6:2b:e0:12:19:0d:c3:4c:c8:59:85:c7:37:2e:0c:e6:55:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=161AB6321A3702A77C0DCDBDCB49725C0FFA59AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:24:d6:8d:cc:15:3c:42:73:09:82:2e:6f: 99:4a:39:d0:72:59:4c:16:39:ea:65:dd:94:f1:3d: 49:2a:51:97:8f:0c:b3:c8:e2:c5:31:9f:c5:d1:eb: ed:6b:ee:00:8a:59:c3:e0:3f:4e:c6:8f:c7:e2:47: 5f:4a:b0:25:88:9c:36:af:06:3d:a3:fb:df:c9:b2: 8a:87:0c:6c:41:35:27:6b:11:11:6f:28:a4:d2:fa: d3:73:84:75:f5:2a:53:ba:32:f3:22:7a:97:42:95: 62:3f:18:6c:38:0e:a2:12:80:50:24:23:c2:10:14: 6b:56:23:da:e7:6a:17:61:5c:05:6c:bf:6f:3b:ec: 3c:2a:83:d0:d9:73:ad:8c:41:28:35:10:7a:79:9d: ce:f2:58:06:f3:d4:c3:40:4c:43:d4:f1:22:b2:60: c8:e8:30:f4:72:1b:81:3c:b4:04:b8:0e:b1:b3:03: 7b:a0:72:3c:ad:00:96:3d:9c:91:ca:e1:4a:c4:fa: 73:67:51:bb:3f:82:38:6a:63:5a:bb:bd:55:75:ac: c2:b8:12:76:b9:20:e7:e0:5e:23:5b:56:dc:34:a8: e7:50:ba:7e:0e:76:48:99:54:f3:91:b1:63:8c:0e: 57:a9:c4:3d:7c:ab:a5:b7:02:94:7f:9d:4d:2f:35: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1A:B6:32:1A:37:02:A7:7C:0D:CD:BD:CB:49:72:5C:0F:FA:59:AB X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330323a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7302::/48 Signature Algorithm: sha256WithRSAEncryption a1:fd:8d:f7:82:3a:6d:1c:41:f3:06:f8:de:78:83:0f:bc:3c: 2a:50:c3:21:8a:e1:01:21:a7:9a:38:2f:29:c6:f6:b8:07:2e: 34:f5:b0:39:c2:71:5c:6c:58:d1:fe:07:28:08:ac:7a:31:ee: b1:81:1b:37:01:e8:ab:07:47:4f:ee:36:48:af:d0:5c:5b:9c: c6:70:ed:4a:fc:60:9d:51:b5:40:f1:5f:c7:cb:ac:7d:cf:0e: fc:6c:5e:46:b8:8f:06:45:fa:37:a1:87:97:c7:57:2d:e5:be: b0:ea:d1:81:1c:3e:41:4d:37:05:69:eb:23:f6:cb:94:18:2c: ee:9d:68:be:1a:84:fa:41:86:60:c1:39:41:ad:a5:1c:4f:d9: 2b:06:ae:9e:71:95:a4:77:45:33:2b:f8:97:61:5e:25:e8:89: c7:5c:3a:ae:63:19:c6:23:35:8e:4d:d6:78:f6:f7:c0:03:27: 5d:ba:6f:fc:60:db:5c:55:1e:b5:82:51:2c:33:3f:74:40:87: 00:e4:21:7a:13:cb:d1:05:2d:2a:04:72:91:15:88:94:9e:ed: d5:a9:85:e9:49:6d:83:85:28:87:2a:b8:9c:e5:cf:98:9f:48: 9f:e5:8f:f9:15:d2:1f:b8:a7:3f:93:9d:73:99:b8:b3:6c:26: 29:f5:69:67 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPknmK+ASGQ3DTMhZhcc3LgzmVXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKDE2MUFCNjMyMUEzNzAyQTc3QzBEQ0RCRENCNDk3MjVDMEZGQTU5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xiTWjcwVPEJzCYIub5lKOdBy WUwWOepl3ZTxPUkqUZePDLPI4sUxn8XR6+1r7gCKWcPgP07Gj8fiR19KsCWInDav Bj2j+9/JsoqHDGxBNSdrERFvKKTS+tNzhHX1KlO6MvMiepdClWI/GGw4DqISgFAk I8IQFGtWI9rnahdhXAVsv2877Dwqg9DZc62MQSg1EHp5nc7yWAbz1MNATEPU8SKy YMjoMPRyG4E8tAS4DrGzA3ugcjytAJY9nJHK4UrE+nNnUbs/gjhqY1q7vVV1rMK4 Ena5IOfgXiNbVtw0qOdQun4OdkiZVPORsWOMDlepxD18q6W3ApR/nU0vNZGhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUFhq2Mho3Aqd8Dc29y0lyXA/6WaswHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzMzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMCMA0GCSqGSIb3DQEBCwUAA4IBAQCh /Y33gjptHEHzBvjeeIMPvDwqUMMhiuEBIaeaOC8pxva4By409bA5wnFcbFjR/gco CKx6Me6xgRs3AeirB0dP7jZIr9BcW5zGcO1K/GCdUbVA8V/Hy6x9zw78bF5GuI8G Rfo3oYeXx1ct5b6w6tGBHD5BTTcFaesj9suUGCzunWi+GoT6QYZgwTlBraUcT9kr Bq6ecZWkd0UzK/iXYV4l6InHXDquYxnGIzWOTdZ49vfAAyddum/8YNtcVR61glEs Mz90QIcA5CF6E8vRBS0qBHKRFYiUnu3VqYXpSW2DhSiHKric5c+Yn0if5Y/5FdIf uKc/k51zmbizbCYp9Wln -----END CERTIFICATE-----Generated at Sun Oct 25 06:47:38 2026 by rpki-client