$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa File: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (raw, json) Hash identifier: cxJ2EfGW3Gw41SsKZJkYgUq6pKjZBBiREvTQVJOiK1o= Subject key identifier: 7D:17:BD:53:EF:C7:41:3E:6A:C8:51:D0:6F:EE:9D:2B:3E:55:0E:54 Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 3FD3BA2E7E9CBBE37095346B5EEBC479422224E8 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa Signing time: Fri 03 Apr 2026 16:33:46 +0000 ROA not before: Fri 03 Apr 2026 16:28:46 +0000 ROA not after: Fri 02 Apr 2027 16:33:46 +0000 asID: 31898 IP address blocks: 2a14:7580:903::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 02:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d3:ba:2e:7e:9c:bb:e3:70:95:34:6b:5e:eb:c4:79:42:22:24:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Apr 3 16:28:46 2026 GMT Not After : Apr 2 16:33:46 2027 GMT Subject: CN=7D17BD53EFC7413E6AC851D06FEE9D2B3E550E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:06:4c:0a:f3:45:bc:4c:57:b8:63:a4:3d: a6:35:f6:1d:15:d3:d9:de:48:ac:e3:a6:62:cf:68: b8:8b:8e:53:72:f8:4a:95:44:58:08:21:05:31:58: a1:37:c3:af:80:da:b4:67:e7:09:7c:eb:a1:b9:ca: 67:50:bb:e2:99:14:4b:f3:fb:16:11:dd:91:a6:f3: 31:32:3e:7b:86:3d:a3:04:75:43:91:f7:d0:3e:0c: 31:db:7f:4f:8b:2f:d5:45:11:17:c7:5e:f1:ba:4d: d5:63:85:8d:09:dc:89:4c:02:74:db:fb:1b:3c:35: ac:a4:d3:3e:bd:36:8a:ae:1d:d8:d3:1c:2c:14:f7: 49:7f:d2:f8:81:84:1a:ef:b4:50:2c:68:95:ec:ad: 79:5a:d8:dd:61:cb:7b:ab:75:64:6f:d9:ff:80:0f: 82:13:9e:32:b0:04:13:26:3e:87:ed:78:1e:db:24: 59:6c:5d:ec:db:df:bf:1b:fc:19:30:a9:e1:72:1b: f6:94:6d:c4:32:be:d5:38:dd:4f:91:83:f9:49:39: eb:ee:21:96:46:7d:67:d9:60:23:0c:32:f6:98:2a: d4:3e:48:d1:70:d0:35:d1:28:8c:45:56:d6:ea:b8: 21:59:0e:1d:7e:d5:1e:93:ad:96:66:e6:f9:51:a9: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:17:BD:53:EF:C7:41:3E:6A:C8:51:D0:6F:EE:9D:2B:3E:55:0E:54 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:903::/48 Signature Algorithm: sha256WithRSAEncryption 4e:36:c1:2c:cb:43:b1:ea:ca:f8:c9:2b:4c:b9:d0:37:ba:31: 74:f5:c0:9a:aa:24:de:19:66:c6:a2:92:2a:8f:4f:8d:55:74: 10:6a:3a:59:84:81:c5:d6:38:64:f5:a5:a8:74:40:b6:b1:c2: f1:fd:b9:da:01:e0:86:6d:58:68:ef:f1:5e:4a:bb:b1:1c:4c: b3:8a:9e:a1:92:de:2f:af:12:28:bb:8b:48:59:46:e8:be:a1: 96:da:31:e0:29:a6:14:8e:33:1e:7d:f0:3b:2f:fe:cb:54:3a: 75:84:02:44:c1:c9:28:f7:4d:66:19:58:17:24:01:97:9d:58: d9:74:fa:bc:e0:94:8e:29:96:dd:1e:24:1f:85:16:fe:c7:cb: 20:86:9e:15:e5:cf:18:76:19:7e:bb:e1:d9:0c:c4:43:f8:da: 2b:15:4b:3d:bc:99:12:6d:24:9c:d7:5b:ba:03:f3:7a:f7:49: f8:b9:69:46:6e:cd:e9:e3:51:a4:65:1e:47:2c:a3:97:35:5d: d8:67:35:87:d7:85:71:17:29:1e:72:ca:4e:f2:23:3e:44:bb: d3:e8:8c:a5:90:fb:04:d3:d9:74:0a:b2:69:4f:2c:99:95:95: 8f:e5:00:d6:2c:05:23:e6:d5:07:f9:61:77:96:38:3d:27:f5: ee:ba:1d:b7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUP9O6Ln6cu+NwlTRrXuvEeUIiJOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjA0MDMxNjI4NDZaFw0yNzA0MDIxNjMzNDZaMDMxMTAvBgNV BAMTKDdEMTdCRDUzRUZDNzQxM0U2QUM4NTFEMDZGRUU5RDJCM0U1NTBFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxgZMCvNFvExXuGOkPaY19h0V 09neSKzjpmLPaLiLjlNy+EqVRFgIIQUxWKE3w6+A2rRn5wl866G5ymdQu+KZFEvz +xYR3ZGm8zEyPnuGPaMEdUOR99A+DDHbf0+LL9VFERfHXvG6TdVjhY0J3IlMAnTb +xs8Nayk0z69NoquHdjTHCwU90l/0viBhBrvtFAsaJXsrXla2N1hy3urdWRv2f+A D4ITnjKwBBMmPofteB7bJFlsXezb378b/BkwqeFyG/aUbcQyvtU43U+Rg/lJOevu IZZGfWfZYCMMMvaYKtQ+SNFw0DXRKIxFVtbquCFZDh1+1R6TrZZm5vlRqeZhAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUfRe9U+/HQT5qyFHQb+6dKz5VDlQwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xM2Y2ODU2MS0wYTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTM5MzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzEz ODM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqFHWACQMwDQYJKoZIhvcNAQELBQADggEBAE42wSzL Q7HqyvjJK0y50De6MXT1wJqqJN4ZZsaikiqPT41VdBBqOlmEgcXWOGT1pah0QLax wvH9udoB4IZtWGjv8V5Ku7EcTLOKnqGS3i+vEii7i0hZRui+oZbaMeApphSOMx59 8Dsv/stUOnWEAkTBySj3TWYZWBckAZedWNl0+rzglI4plt0eJB+FFv7HyyCGnhXl zxh2GX674dkMxEP42isVSz28mRJtJJzXW7oD83r3Sfi5aUZuzenjUaRlHkcso5c1 XdhnNYfXhXEXKR5yyk7yIz5Eu9PojKWQ+wTT2XQKsmlPLJmVlY/lANYsBSPm1Qf5 YXeWOD0n9e66Hbc= -----END CERTIFICATE-----Generated at Mon Apr 13 14:39:23 2026 by rpki-client