$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330343a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a373330343a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: g1mLR4KswhKYtG7ADE70XNin7fsPyKHK/GbLSsiBL3w= Subject key identifier: D6:01:0F:C0:BB:F6:CE:3D:AF:3D:64:BB:71:DC:1F:8B:24:6E:3C:29 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 55C98D047068839A79B56F7F9E36A1D47C47CDE9 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330343a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:35 +0000 ROA not before: Sun 04 Oct 2026 11:47:35 +0000 ROA not after: Sun 03 Oct 2027 11:52:35 +0000 asID: 200749 IP address blocks: 2a14:7581:7304::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c9:8d:04:70:68:83:9a:79:b5:6f:7f:9e:36:a1:d4:7c:47:cd:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:35 2026 GMT Not After : Oct 3 11:52:35 2027 GMT Subject: CN=D6010FC0BBF6CE3DAF3D64BB71DC1F8B246E3C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:e9:e9:ce:82:b9:f4:34:9d:ee:7f:05:46: cf:5a:37:4e:33:2a:0e:62:27:ff:32:00:53:f2:10: 82:66:05:f0:22:cf:78:07:b3:90:35:ad:97:c9:ba: 75:a4:85:1d:0b:4c:1d:8b:87:9a:0e:26:6d:7e:ec: 8c:5c:31:22:2c:a7:ab:b8:1a:6b:04:c4:22:ee:93: ab:49:c9:2a:3e:33:4c:f7:3a:5c:f5:91:91:6e:2b: e1:7c:63:24:43:3f:a6:53:20:d8:23:76:93:7b:fd: e0:10:3a:ef:28:80:00:f9:02:21:74:7b:a4:f9:d0: 54:c6:46:17:f0:23:cd:be:46:58:73:75:de:4d:2c: aa:c0:8f:a3:4e:09:52:d6:15:3c:d2:47:d9:1a:5d: f2:22:14:88:ae:27:d2:61:38:3f:73:b0:d0:94:c2: a3:a6:b3:1d:91:f2:01:d1:8a:11:a7:c7:d1:dc:22: d7:2c:43:33:8c:5a:d8:9d:81:32:1c:3f:bc:e1:7c: b3:a0:e0:6b:08:62:a5:18:85:a0:5f:bd:99:da:62: f4:26:cd:78:17:af:6d:78:0a:8f:a6:c3:23:40:8a: a0:bb:60:c0:fa:f6:b2:83:d4:a2:55:5b:26:f4:4d: a4:6c:17:ec:62:66:1e:ce:28:14:b5:34:6d:57:f5: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:0F:C0:BB:F6:CE:3D:AF:3D:64:BB:71:DC:1F:8B:24:6E:3C:29 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330343a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7304::/48 Signature Algorithm: sha256WithRSAEncryption 45:b9:3e:e6:5f:cb:a4:ef:fe:7d:37:68:27:84:cb:67:61:bf: 37:82:bb:98:9d:40:30:b1:49:9d:5b:ce:0f:a2:e3:47:d0:c5: 29:d5:9b:e8:3f:57:3c:d3:c2:9a:42:1e:20:e2:4e:af:c4:6f: 17:de:ab:16:6f:86:00:03:6e:44:1a:12:db:27:00:b0:20:05: 26:70:be:94:9f:3e:17:0f:32:dd:c1:cc:d0:af:2f:5d:1a:30: b6:5c:b9:bd:82:f6:ba:6c:6b:73:1f:ac:64:7e:4b:c5:2a:36: a1:c2:5b:96:67:04:12:aa:d4:c7:ad:67:c5:95:db:70:7f:4a: 9c:2a:f5:50:61:23:e3:eb:f6:2d:15:3b:3e:fe:93:6f:17:5a: 25:08:76:d5:1f:2f:59:4b:63:8d:53:b7:d1:b4:6a:bd:3c:8a: 24:24:3e:b8:92:6c:70:d7:df:90:f4:3a:1f:8b:15:d9:d3:44: 8e:bb:75:44:6e:44:1c:34:4c:aa:b4:b3:b0:e2:49:38:7d:05: 38:0b:9c:b8:6d:1e:bf:6b:ef:f9:8e:7f:32:93:c5:f8:c7:8b: c9:48:5e:fd:54:6a:f5:11:5e:81:f2:9e:15:4e:83:33:87:2a: c6:07:bd:69:b5:05:61:19:9f:3b:9f:eb:98:97:6d:ac:1a:73: 4b:16:0a:2c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVcmNBHBog5p5tW9/njah1HxHzekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzVaFw0yNzEwMDMxMTUyMzVaMDMxMTAvBgNV BAMTKEQ2MDEwRkMwQkJGNkNFM0RBRjNENjRCQjcxREMxRjhCMjQ2RTNDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQOnpzoK59DSd7n8FRs9aN04z Kg5iJ/8yAFPyEIJmBfAiz3gHs5A1rZfJunWkhR0LTB2Lh5oOJm1+7IxcMSIsp6u4 GmsExCLuk6tJySo+M0z3Olz1kZFuK+F8YyRDP6ZTINgjdpN7/eAQOu8ogAD5AiF0 e6T50FTGRhfwI82+Rlhzdd5NLKrAj6NOCVLWFTzSR9kaXfIiFIiuJ9JhOD9zsNCU wqOmsx2R8gHRihGnx9HcItcsQzOMWtidgTIcP7zhfLOg4GsIYqUYhaBfvZnaYvQm zXgXr214Co+mwyNAiqC7YMD69rKD1KJVWyb0TaRsF+xiZh7OKBS1NG1X9drLAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU1gEPwLv2zj2vPWS7cdwfiyRuPCkwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzMzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMEMA0GCSqGSIb3DQEBCwUAA4IBAQBF uT7mX8uk7/59N2gnhMtnYb83gruYnUAwsUmdW84PouNH0MUp1ZvoP1c808KaQh4g 4k6vxG8X3qsWb4YAA25EGhLbJwCwIAUmcL6Unz4XDzLdwczQry9dGjC2XLm9gva6 bGtzH6xkfkvFKjahwluWZwQSqtTHrWfFldtwf0qcKvVQYSPj6/YtFTs+/pNvF1ol CHbVHy9ZS2ONU7fRtGq9PIokJD64kmxw19+Q9DofixXZ00SOu3VEbkQcNEyqtLOw 4kk4fQU4C5y4bR6/a+/5jn8yk8X4x4vJSF79VGr1EV6B8p4VToMzhyrGB71ptQVh GZ87n+uYl22sGnNLFgos -----END CERTIFICATE-----Generated at Sun Oct 25 03:21:41 2026 by rpki-client