$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376530303a3a2f34382d3438203d3e20323030373439.roa File: 326131343a373538313a376530303a3a2f34382d3438203d3e20323030373439.roa (raw, json) Hash identifier: 6EwMhIyQK3KFnaHPRYaZ82KCks0ecSz4mUHDl2oLbi0= Subject key identifier: 7E:66:69:02:4B:BD:35:F0:5D:C9:50:FE:20:F2:34:77:68:7C:90:9C Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5 Certificate serial: 0727C5D0B8898709727750EB9521EB1C939F30BF Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376530303a3a2f34382d3438203d3e20323030373439.roa Signing time: Sun 04 Oct 2026 11:52:36 +0000 ROA not before: Sun 04 Oct 2026 11:47:36 +0000 ROA not after: Sun 03 Oct 2027 11:52:36 +0000 asID: 200749 IP address blocks: 2a14:7581:7e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 20:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:27:c5:d0:b8:89:87:09:72:77:50:eb:95:21:eb:1c:93:9f:30:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5 Validity Not Before: Oct 4 11:47:36 2026 GMT Not After : Oct 3 11:52:36 2027 GMT Subject: CN=7E6669024BBD35F05DC950FE20F23477687C909C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:54:f1:b7:ca:5d:82:b9:7a:58:c6:a1:b4: 58:b1:71:24:d9:1d:bc:e4:39:13:ab:e8:4c:0a:29: 97:18:21:d4:a1:53:0e:e3:ba:cb:42:1d:3b:d4:35: 54:45:0c:84:60:c0:62:a3:6a:35:57:78:ea:a1:8b: bc:bc:cd:3e:39:4c:b5:ad:42:00:70:9a:a4:d4:8d: 22:57:1a:ba:01:f2:e2:51:2c:de:d7:89:30:4a:5f: 7e:4f:87:7d:65:aa:ef:bc:26:bc:9b:85:17:a7:a8: f5:5c:b9:39:37:ad:75:14:3e:3d:5a:19:a2:a5:f3: 18:11:08:0f:ca:06:e8:60:c7:e9:6e:e0:8f:bb:39: 93:64:4d:de:9e:91:cf:2d:9e:ec:b5:c8:fd:18:03: 01:86:61:7b:cb:f8:ca:c4:a0:47:b3:52:70:08:73: 78:f0:84:e6:b4:c3:e4:98:92:88:0a:1f:1a:80:c9: 18:a4:11:2b:e5:42:ba:fc:56:20:9f:3f:2e:16:6d: 96:ef:47:b7:b3:70:27:0c:39:85:a1:b2:dc:60:94: da:4e:82:cf:9a:3e:9a:dd:5d:72:1d:31:62:68:c4: 2c:1f:97:4c:9d:4f:6c:12:ed:da:f5:cc:65:a3:97: 66:99:b9:1e:f7:e7:50:f5:6f:a2:9d:76:7a:ca:1c: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:66:69:02:4B:BD:35:F0:5D:C9:50:FE:20:F2:34:77:68:7C:90:9C X509v3 Authority Key Identifier: keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376530303a3a2f34382d3438203d3e20323030373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:7e00::/48 Signature Algorithm: sha256WithRSAEncryption 32:7f:87:fc:ad:d1:1b:ba:76:a7:c5:52:d4:cc:a5:9f:62:5b: 56:b3:9e:52:cd:e8:75:ee:6e:55:34:7e:78:65:2e:26:05:39: 9e:b7:46:5b:dc:7d:24:cc:fe:27:d9:b9:d1:9d:ce:2f:b8:bb: be:b9:bc:30:0e:30:79:7b:48:59:5b:dc:9c:13:fc:f1:f0:07: 60:2c:31:53:72:9d:c8:a6:e5:c6:34:db:40:57:76:00:fe:02: fb:b5:6e:11:15:70:df:81:8a:ef:91:e7:2b:4d:bb:34:76:c4: 73:d4:17:aa:78:23:9d:b8:d6:f5:a2:3a:01:e0:01:b6:f1:4e: b2:de:1c:3c:44:00:83:6a:65:f7:5b:fc:5a:64:ac:db:ff:79: 9d:e3:e9:70:d9:10:b3:c5:15:27:c5:c9:98:80:93:e7:19:2d: ba:d8:6e:6e:36:ab:d4:c0:4f:9d:86:4e:4a:a7:a3:c9:fc:f2: 25:35:47:7d:9e:bd:44:55:71:a4:d3:03:72:be:ff:5d:83:bf: 19:2f:35:92:9d:86:cd:37:3a:b6:a7:0a:f9:67:b5:31:8b:c0: 1b:52:91:d4:b7:2c:ed:8d:0d:d0:96:35:0a:5c:d3:1e:ac:b2: 14:f9:c1:26:88:98:37:8e:fd:69:ec:50:34:71:e0:15:a4:ac: 37:78:15:73 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUByfF0LiJhwlyd1DrlSHrHJOfML8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC MzlCMDNBNTAeFw0yNjEwMDQxMTQ3MzZaFw0yNzEwMDMxMTUyMzZaMDMxMTAvBgNV BAMTKDdFNjY2OTAyNEJCRDM1RjA1REM5NTBGRTIwRjIzNDc3Njg3QzkwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgVTxt8pdgrl6WMahtFixcSTZ HbzkOROr6EwKKZcYIdShUw7justCHTvUNVRFDIRgwGKjajVXeOqhi7y8zT45TLWt QgBwmqTUjSJXGroB8uJRLN7XiTBKX35Ph31lqu+8JrybhRenqPVcuTk3rXUUPj1a GaKl8xgRCA/KBuhgx+lu4I+7OZNkTd6ekc8tnuy1yP0YAwGGYXvL+MrEoEezUnAI c3jwhOa0w+SYkogKHxqAyRikESvlQrr8ViCfPy4WbZbvR7ezcCcMOYWhstxglNpO gs+aPprdXXIdMWJoxCwfl0ydT2wS7dr1zGWjl2aZuR7351D1b6KddnrKHP2/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUfmZpAku9NfBdyVD+IPI0d2h8kJwwHwYDVR0j BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3NjUzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMwMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gX4AMA0GCSqGSIb3DQEBCwUAA4IBAQAy f4f8rdEbunanxVLUzKWfYltWs55Szeh17m5VNH54ZS4mBTmet0Zb3H0kzP4n2bnR nc4vuLu+ubwwDjB5e0hZW9ycE/zx8AdgLDFTcp3IpuXGNNtAV3YA/gL7tW4RFXDf gYrvkecrTbs0dsRz1BeqeCOduNb1ojoB4AG28U6y3hw8RACDamX3W/xaZKzb/3md 4+lw2RCzxRUnxcmYgJPnGS262G5uNqvUwE+dhk5Kp6PJ/PIlNUd9nr1EVXGk0wNy vv9dg78ZLzWSnYbNNzq2pwr5Z7Uxi8AbUpHUtyztjQ3QljUKXNMerLIU+cEmiJg3 jv1p7FA0ceAVpKw3eBVz -----END CERTIFICATE-----Generated at Sun Oct 25 14:21:09 2026 by rpki-client