$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373830303a3a2f33372d3337203d3e20323030373439.roa File: 326131343a373538313a373830303a3a2f33372d3337203d3e20323030373439.roa (raw, json) Hash identifier: QqyTEcq6eNh4ysUpM1giF7wfmMoOSPTbfdDUXbg5y7U= Subject key identifier: B4:8F:5A:17:89:8E:9A:F9:58:08:4C:4F:13:89:E6:F2:63:10:01:DF Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 23216DD5BB8C30189865D729803ACB08911CED09 Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373830303a3a2f33372d3337203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:34 +0000 ROA not before: Sun 04 Oct 2026 11:47:34 +0000 ROA not after: Sun 03 Oct 2027 11:52:34 +0000 asID: 200749 IP address blocks: 2a14:7581:7800::/37 maxlen: 37 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:21:6d:d5:bb:8c:30:18:98:65:d7:29:80:3a:cb:08:91:1c:ed:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:34 2026 GMT Not After : Oct 3 11:52:34 2027 GMT Subject: CN=B48F5A17898E9AF958084C4F1389E6F2631001DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a0:98:2d:7c:49:d8:47:47:b9:cc:26:4b:b2: 2f:6c:11:33:43:0c:6f:d6:e1:4d:0c:ac:1f:5a:95: 87:27:f7:c9:8c:50:d8:4d:e0:0a:07:52:0f:0f:12: a4:42:23:ba:f4:09:d7:c1:d8:e7:97:2d:48:81:56: 49:89:5d:41:93:b9:96:99:15:7b:ce:30:28:45:d9: 9d:74:06:a4:0f:75:f5:07:f8:98:ed:17:28:16:7a: 5a:a5:b4:ef:b6:53:11:5f:35:c6:67:a3:12:ef:3c: 91:b5:39:32:2f:2e:c9:ad:b3:41:02:6e:6e:0a:1c: 5e:26:43:e6:c4:d0:dc:1e:8b:ed:ac:66:0c:ae:8b: a2:bf:b2:45:65:67:73:fc:ba:4d:50:1d:0c:08:91: 5d:3b:25:9a:69:54:a0:30:fa:46:5d:f7:b8:ea:38: 9b:f3:1d:9d:ed:4d:23:b1:0e:7d:f0:65:6c:9b:b3: 63:9d:7e:d8:27:64:0a:23:b5:17:f8:56:c4:32:cd: 42:98:eb:6e:f2:56:e6:06:52:ad:f7:8f:1c:ed:28: 68:08:a3:84:0f:66:87:a8:6c:b1:8c:af:d6:0b:71: 77:fc:1d:37:3c:47:d4:14:25:ee:61:95:6c:f9:de: 5b:d8:06:b2:ee:fe:9e:06:31:ac:6e:10:3c:ab:2d: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8F:5A:17:89:8E:9A:F9:58:08:4C:4F:13:89:E6:F2:63:10:01:DF X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373830303a3a2f33372d3337203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7800::/37 Signature Algorithm: sha256WithRSAEncryption 0a:4f:46:ee:2b:1f:75:07:3d:5b:d9:2b:ca:35:af:db:25:65: 6c:04:91:99:f8:83:7d:2a:db:fd:73:83:ab:65:b3:99:51:75: 06:4e:4e:b6:76:40:c2:b6:d5:ee:65:d3:69:5b:61:d5:69:ba: d7:0b:a8:3f:e1:e1:ec:7b:3d:29:66:44:36:14:89:15:0d:21: d7:99:1d:a3:bc:ea:9b:ef:89:60:f6:b6:12:c8:6a:89:40:e9: 72:8d:01:28:67:63:fb:5e:77:2a:8f:77:27:ec:4f:ed:1b:12: 2f:ca:ef:8c:98:31:50:12:99:59:d2:b0:db:f5:f0:f1:86:eb: 14:a0:e0:31:61:57:85:4e:cf:f0:57:cc:b5:60:0f:b6:51:21: 6d:4b:e3:78:da:a4:e0:42:7b:f2:6a:06:96:93:05:4d:b7:eb: c1:de:a1:7f:09:d4:1d:b3:c6:0b:6e:96:a7:d9:59:f2:c1:17: d5:23:a8:28:b8:f8:f1:35:d7:5c:76:e8:de:75:4b:2e:78:eb: 3c:3f:61:91:8b:f3:df:57:40:bf:dc:a3:94:d3:a6:51:3c:90: 09:f8:7d:fc:99:6e:06:c6:c5:54:a6:2c:22:69:0a:99:ff:19: a0:4c:db:21:e0:82:93:a5:7e:a1:3a:11:d1:79:09:b1:f3:45: ea:da:ce:11 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUIyFt1buMMBiYZdcpgDrLCJEc7QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzRaFw0yNzEwMDMxMTUyMzRaMDMxMTAvBgNV BAMTKEI0OEY1QTE3ODk4RTlBRjk1ODA4NEM0RjEzODlFNkYyNjMxMDAxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfoJgtfEnYR0e5zCZLsi9sETND DG/W4U0MrB9alYcn98mMUNhN4AoHUg8PEqRCI7r0CdfB2OeXLUiBVkmJXUGTuZaZ FXvOMChF2Z10BqQPdfUH+JjtFygWelqltO+2UxFfNcZnoxLvPJG1OTIvLsmts0EC bm4KHF4mQ+bE0Nwei+2sZgyui6K/skVlZ3P8uk1QHQwIkV07JZppVKAw+kZd97jq OJvzHZ3tTSOxDn3wZWybs2OdftgnZAojtRf4VsQyzUKY627yVuYGUq33jxztKGgI o4QPZoeobLGMr9YLcXf8HTc8R9QUJe5hlWz53lvYBrLu/p4GMaxuEDyrLenPAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUtI9aF4mOmvlYCExPE4nm8mMQAd8wHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzgzMDMwM2EzYTJmMzMzNzJkMzMzNzIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYDKhR1gXgwDQYJKoZIhvcNAQELBQADggEBAApP Ru4rH3UHPVvZK8o1r9slZWwEkZn4g30q2/1zg6tls5lRdQZOTrZ2QMK21e5l02lb YdVputcLqD/h4ex7PSlmRDYUiRUNIdeZHaO86pvviWD2thLIaolA6XKNAShnY/te dyqPdyfsT+0bEi/K74yYMVASmVnSsNv18PGG6xSg4DFhV4VOz/BXzLVgD7ZRIW1L 43japOBCe/JqBpaTBU2368HeoX8J1B2zxgtulqfZWfLBF9UjqCi4+PE111x26N51 Sy546zw/YZGL899XQL/co5TTplE8kAn4ffyZbgbGxVSmLCJpCpn/GaBM2yHggpOl fqE6EdF5CbHzRerazhE= -----END CERTIFICATE-----Generated at Sun Oct 25 03:22:03 2026 by rpki-client