$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376330303a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a376330303a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: J52AJW9hhkIqKt6YvN5vm5OESuYkQSrpVCGrH3b94xk= Subject key identifier: D0:A8:C7:CE:98:32:4B:2B:97:17:72:63:FC:B9:B7:CA:11:D2:7D:91 Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 4F3235149FF0C4FFCDCD35AC7E8058F75C41D79D Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376330303a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:34 +0000 ROA not before: Sun 04 Oct 2026 11:47:34 +0000 ROA not after: Sun 03 Oct 2027 11:52:34 +0000 asID: 200749 IP address blocks: 2a14:7581:7c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:32:35:14:9f:f0:c4:ff:cd:cd:35:ac:7e:80:58:f7:5c:41:d7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:34 2026 GMT Not After : Oct 3 11:52:34 2027 GMT Subject: CN=D0A8C7CE98324B2B97177263FCB9B7CA11D27D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:7c:8a:41:0c:9d:e8:c1:d8:a0:63:b4:f8: 31:07:6a:0f:e2:e5:e2:e8:9e:fe:f8:80:45:ad:43: 06:fa:0d:ae:d2:02:3a:80:2c:60:4d:04:5f:39:f9: 3f:36:10:a7:4d:08:70:1c:49:32:a2:b1:63:2c:46: 6d:14:53:05:bd:da:8b:4f:e8:ed:9a:b7:79:1b:57: 18:41:29:6b:3e:6d:4a:4d:dd:88:ee:ad:dc:d3:53: 43:0d:2c:09:3c:13:c6:b3:ab:d4:34:11:52:1f:1a: 81:9a:33:25:93:20:89:2b:da:24:6a:df:36:9e:7c: 76:8d:6c:0e:5e:c3:50:19:9a:09:07:96:52:28:80: 0f:76:d2:d6:5c:d0:50:2b:d7:12:ce:1a:d3:90:9e: f2:09:6d:f7:61:cf:e1:6b:52:ce:f3:89:6a:58:51: 6e:64:a0:f2:09:c1:56:d0:34:89:ce:93:00:96:c3: d7:06:d3:a8:3b:1d:19:32:0e:e5:3c:af:31:41:56: b1:e9:11:0b:4c:82:3d:49:d9:ab:d3:75:4d:56:bb: 79:f8:83:50:4d:9c:64:fa:e1:1a:c4:6f:dc:0e:8a: 95:00:4c:a7:1f:01:9b:59:70:87:92:5f:01:f5:55: bf:26:80:ed:16:4e:6e:69:e4:78:ab:d4:fb:e4:df: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A8:C7:CE:98:32:4B:2B:97:17:72:63:FC:B9:B7:CA:11:D2:7D:91 X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376330303a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7c00::/48 Signature Algorithm: sha256WithRSAEncryption 6f:c4:e4:22:5a:af:98:de:10:03:0e:f1:be:0d:c7:00:37:e7: b7:82:ef:15:ac:60:cd:6c:47:5c:49:94:98:b4:63:03:03:b6: 08:16:8f:cd:c3:42:86:53:4a:75:ca:07:fa:73:c3:c8:89:c6: 9f:06:36:64:b2:20:aa:ef:81:41:52:30:f7:8e:ed:5b:a9:d6: de:00:44:14:e2:76:7a:f2:e6:51:ee:15:18:f7:32:0d:c8:c5: 8b:ad:16:7c:8c:26:e8:92:3a:2c:9b:3c:c2:44:a0:8e:07:f9: 0f:44:47:66:c0:7e:ec:8d:4c:f3:a4:2d:6e:b0:f1:3b:9e:d2: e5:b1:2e:dd:4e:ab:8c:a9:09:a2:bb:40:e2:79:92:ec:64:b6: 59:34:e9:b6:21:0f:ac:ad:0d:af:0f:35:f4:7a:48:8f:6d:39: 5f:11:c9:c2:33:0e:61:2c:11:81:79:b0:94:3c:c0:20:12:f1: 28:eb:14:b2:bb:1c:62:16:d5:95:f3:40:8c:5c:cb:a0:6d:f2: 28:4d:a6:31:60:b3:cf:e4:e4:0c:af:88:be:94:41:9d:75:c2: f9:c5:4f:2a:fb:b9:7a:cc:6a:2d:c0:e8:ae:ee:73:8a:ec:fd: ba:47:3b:40:36:e6:d6:c2:b7:ca:3e:3f:2f:8b:b3:9b:01:a6: e8:e3:d9:b4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTzI1FJ/wxP/NzTWsfoBY91xB150wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzRaFw0yNzEwMDMxMTUyMzRaMDMxMTAvBgNV BAMTKEQwQThDN0NFOTgzMjRCMkI5NzE3NzI2M0ZDQjlCN0NBMTFEMjdEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueXyKQQyd6MHYoGO0+DEHag/i 5eLonv74gEWtQwb6Da7SAjqALGBNBF85+T82EKdNCHAcSTKisWMsRm0UUwW92otP 6O2at3kbVxhBKWs+bUpN3YjurdzTU0MNLAk8E8azq9Q0EVIfGoGaMyWTIIkr2iRq 3zaefHaNbA5ew1AZmgkHllIogA920tZc0FAr1xLOGtOQnvIJbfdhz+FrUs7ziWpY UW5koPIJwVbQNInOkwCWw9cG06g7HRkyDuU8rzFBVrHpEQtMgj1J2avTdU1Wu3n4 g1BNnGT64RrEb9wOipUATKcfAZtZcIeSXwH1Vb8mgO0WTm5p5Hir1Pvk33FxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU0KjHzpgySyuXF3Jj/Lm3yhHSfZEwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3NjMzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXwAMA0GCSqGSIb3DQEBCwUAA4IBAQBv xOQiWq+Y3hADDvG+DccAN+e3gu8VrGDNbEdcSZSYtGMDA7YIFo/Nw0KGU0p1ygf6 c8PIicafBjZksiCq74FBUjD3ju1bqdbeAEQU4nZ68uZR7hUY9zINyMWLrRZ8jCbo kjosmzzCRKCOB/kPREdmwH7sjUzzpC1usPE7ntLlsS7dTquMqQmiu0DieZLsZLZZ NOm2IQ+srQ2vDzX0ekiPbTlfEcnCMw5hLBGBebCUPMAgEvEo6xSyuxxiFtWV80CM XMugbfIoTaYxYLPP5OQMr4i+lEGddcL5xU8q+7l6zGotwOiu7nOK7P26RztANubW wrfKPj8vi7ObAabo49m0 -----END CERTIFICATE-----Generated at Sun Oct 25 01:15:10 2026 by rpki-client