$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa File: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (raw, json) Hash identifier: uVoIN03AGEpRiwfW9ipOTJBOZfjNzfUt5bFPbgTp3oE= Subject key identifier: 5D:15:90:DC:06:1F:E0:3A:00:F1:B3:07:41:1C:99:96:88:83:36:DB Certificate issuer: /CN=6E57E27AC23C8932C53853BF557B28CD590488AC Certificate serial: 4404F29BAB5630E5ECF6FEA346943C2F40428D75 Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa Signing time: Fri 31 Jul 2026 13:51:22 +0000 ROA not before: Fri 31 Jul 2026 13:46:22 +0000 ROA not after: Fri 30 Jul 2027 13:51:22 +0000 asID: 205008 IP address blocks: 2a14:7583:f300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:04:f2:9b:ab:56:30:e5:ec:f6:fe:a3:46:94:3c:2f:40:42:8d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC Validity Not Before: Jul 31 13:46:22 2026 GMT Not After : Jul 30 13:51:22 2027 GMT Subject: CN=5D1590DC061FE03A00F1B307411C9996888336DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:d8:5c:f9:45:03:fe:a1:1e:ef:31:76:ad:61: cf:89:c0:76:d6:45:f3:95:6c:c1:5d:fb:a8:38:4d: dc:07:51:07:2e:4d:bc:fb:e3:42:ca:f9:ce:37:bf: 47:c9:00:e5:e7:97:95:fb:ab:a2:1a:c9:34:99:b5: 40:30:1c:b2:db:a2:9b:63:90:e2:96:aa:82:d1:71: 73:08:98:22:fe:3f:38:32:b5:31:fd:ff:f1:eb:04: 44:73:0e:f1:ce:b2:4e:b4:34:4c:3e:86:84:69:55: 52:5c:27:3d:8e:e2:18:23:f2:11:d5:74:2f:5b:fe: a4:5b:98:c6:ff:28:ce:dc:16:5f:10:15:31:56:57: 1b:2f:4f:a6:c5:de:14:d0:e0:42:a6:ba:a4:0a:08: 66:c9:bb:07:66:31:55:32:c6:96:fa:67:c8:a7:cd: 32:f3:60:a3:3f:4c:f6:01:02:7d:71:d6:28:80:fa: 68:6b:af:22:c3:d9:b5:53:9e:1d:6c:bd:a6:40:7d: dd:8c:f1:57:47:3c:80:9e:91:b3:04:98:71:c2:a5: 0a:52:41:d2:02:5b:78:36:1c:f1:e0:c4:6a:51:8f: e1:b6:cf:82:33:6e:dc:a2:8e:cd:2c:c5:82:e2:1f: b8:50:5b:c1:0b:40:7d:47:41:be:0c:a2:6c:2b:4b: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:15:90:DC:06:1F:E0:3A:00:F1:B3:07:41:1C:99:96:88:83:36:DB X509v3 Authority Key Identifier: keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f300::/40 Signature Algorithm: sha256WithRSAEncryption 8e:2f:1c:19:67:d2:4d:13:98:44:eb:fb:4c:bb:36:36:07:f0: 3f:2e:29:74:9c:c1:9f:7b:9d:c4:1d:80:56:44:7e:82:89:44: 35:96:63:7d:13:cf:82:21:11:04:be:91:9c:54:80:f3:10:10: e5:71:ab:cf:f9:a0:e9:67:66:46:16:b1:0a:72:11:5d:dc:b1: 07:4e:10:45:0b:df:76:a2:ab:63:7b:34:c5:f0:cc:cd:d2:96: c2:ad:df:d0:20:0b:67:22:6f:5b:4e:b5:5c:c2:0f:ac:3e:3c: 8c:47:d5:1b:a5:3d:22:97:5c:3b:1a:93:08:cb:07:3f:b4:09: 75:89:ea:19:fd:4a:b0:38:57:83:7d:33:3b:20:ca:a8:a1:b3: fd:a6:5c:66:1b:fb:26:35:9d:c6:71:51:ce:cf:90:76:2d:f9: 73:a0:88:52:46:d5:51:a5:a0:f2:7c:bb:d6:e1:a6:f3:f0:4c: b6:f3:69:03:9f:eb:4a:f3:40:cc:59:7b:aa:a9:d7:67:47:26: ae:fb:2b:f7:6b:d9:1f:a8:22:58:46:b8:9e:29:82:99:ee:15: 6c:ee:50:55:6c:f8:8d:81:79:4c:58:0b:11:ce:dc:5a:16:7d: 38:66:d8:3d:e8:3d:99:10:b5:41:8e:8f:01:b8:b6:02:d5:94: 5d:3b:a2:23 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIURATym6tWMOXs9v6jRpQ8L0BCjXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1 OTA0ODhBQzAeFw0yNjA3MzExMzQ2MjJaFw0yNzA3MzAxMzUxMjJaMDMxMTAvBgNV BAMTKDVEMTU5MERDMDYxRkUwM0EwMEYxQjMwNzQxMUM5OTk2ODg4MzM2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+2Fz5RQP+oR7vMXatYc+JwHbW RfOVbMFd+6g4TdwHUQcuTbz740LK+c43v0fJAOXnl5X7q6IayTSZtUAwHLLboptj kOKWqoLRcXMImCL+PzgytTH9//HrBERzDvHOsk60NEw+hoRpVVJcJz2O4hgj8hHV dC9b/qRbmMb/KM7cFl8QFTFWVxsvT6bF3hTQ4EKmuqQKCGbJuwdmMVUyxpb6Z8in zTLzYKM/TPYBAn1x1iiA+mhrryLD2bVTnh1svaZAfd2M8VdHPICekbMEmHHCpQpS QdICW3g2HPHgxGpRj+G2z4Izbtyijs0sxYLiH7hQW8ELQH1HQb4MomwrS1JvAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUXRWQ3AYf4DoA8bMHQRyZloiDNtswHwYDVR0j BBgwFoAUblfiesI8iTLFOFO/VXsozVkEiKwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzEvNkU1N0UyN0FDMjNDODkzMkM1Mzg1M0JGNTU3QjI4Q0Q1OTA0ODhBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RTU3RTI3QUMyM0M4OTMyQzUzODUzQkY1 NTdCMjhDRDU5MDQ4OEFDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yMjg1YmU2Zi01MTExLTRjM2MtODI1NC1kMmU0MTU1MTAyODQvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzMzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDM1MzAzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1g/MwDQYJKoZIhvcNAQELBQADggEBAI4v HBln0k0TmETr+0y7NjYH8D8uKXScwZ97ncQdgFZEfoKJRDWWY30Tz4IhEQS+kZxU gPMQEOVxq8/5oOlnZkYWsQpyEV3csQdOEEUL33aiq2N7NMXwzM3SlsKt39AgC2ci b1tOtVzCD6w+PIxH1RulPSKXXDsakwjLBz+0CXWJ6hn9SrA4V4N9Mzsgyqihs/2m XGYb+yY1ncZxUc7PkHYt+XOgiFJG1VGloPJ8u9bhpvPwTLbzaQOf60rzQMxZe6qp 12dHJq77K/dr2R+oIlhGuJ4pgpnuFWzuUFVs+I2BeUxYCxHO3FoWfThm2D3oPZkQ tUGOjwG4tgLVlF07oiM= -----END CERTIFICATE-----Generated at Fri Sep 4 15:17:06 2026 by rpki-client