$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa File: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (raw, json) Hash identifier: 5615Ny7sVmjEhhHlRGRDH3u/ySBnlb2mwndcttt3V9g= Subject key identifier: 64:9C:5C:48:DF:C1:A7:70:E6:8B:01:A6:3D:77:F7:3D:21:09:D9:9A Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 40C76D5414E0031677E372286DA619162CF59742 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa Signing time: Tue 29 Sep 2026 14:46:59 +0000 ROA not before: Tue 29 Sep 2026 14:41:59 +0000 ROA not after: Tue 28 Sep 2027 14:46:59 +0000 asID: 215093 IP address blocks: 2a14:1ec1:7b20::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c7:6d:54:14:e0:03:16:77:e3:72:28:6d:a6:19:16:2c:f5:97:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Sep 29 14:41:59 2026 GMT Not After : Sep 28 14:46:59 2027 GMT Subject: CN=649C5C48DFC1A770E68B01A63D77F73D2109D99A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:e5:79:4d:2a:23:8d:0a:dd:fb:bb:45:bf: b7:92:a8:9a:1d:71:eb:3e:b5:f2:6a:a1:55:1f:11: 7f:f6:80:f6:60:92:49:07:ca:d9:dc:f2:45:7b:bc: c9:bd:07:a3:fc:d0:40:e2:f1:41:b3:cc:65:01:0e: 0f:56:5e:53:8e:1a:a2:0b:f8:7d:9b:06:42:c3:c8: 18:74:14:aa:36:ec:e1:8c:88:21:d1:e7:31:36:19: 74:e8:cb:44:17:b0:b8:46:32:dc:85:6f:95:35:d4: ee:6d:bd:b0:78:ab:19:41:b0:63:4b:2f:58:81:9d: 93:a1:c2:3f:f9:a1:af:9d:5a:5f:ff:50:da:d6:c0: cc:67:dc:ee:11:8a:c3:f5:fe:27:18:83:0f:e7:0c: 47:d3:31:31:ce:58:7a:cd:0a:23:2c:29:05:22:0d: 6d:b1:0b:6e:06:e9:90:70:48:53:be:14:bb:c2:bf: b4:3e:fc:09:d7:e4:f7:c0:ee:4b:b8:c6:ba:a2:70: f3:b0:c3:3e:86:17:e2:12:1d:4f:61:15:ac:62:07: 62:6e:0c:7b:59:55:68:c1:18:97:9b:d0:46:2d:5f: c0:42:97:8c:c7:c1:f0:5f:24:60:75:ab:0d:cd:c8: 95:de:dc:e6:88:78:df:f7:bf:1d:f0:f7:8e:3e:ae: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:5C:48:DF:C1:A7:70:E6:8B:01:A6:3D:77:F7:3D:21:09:D9:9A X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec1:7b20::/44 Signature Algorithm: sha256WithRSAEncryption 37:82:28:0a:52:ec:6c:13:e8:33:f0:11:c5:43:9f:47:2a:00: 23:a6:cd:46:7d:d8:07:f8:06:59:d2:2d:a3:9f:2f:90:49:eb: ae:d4:25:79:11:f6:fb:7c:7d:1d:8f:d0:4d:aa:41:55:04:99: ef:de:ea:27:28:18:9c:ba:d3:3a:7b:a2:eb:0b:1a:b0:33:ae: 74:77:b7:b6:82:7f:d4:f7:b4:cb:ef:75:21:19:6e:cc:70:eb: 21:28:08:c3:cb:47:3c:42:85:7d:00:18:99:92:be:43:60:d6: 65:dd:7c:9e:d0:a7:90:ac:c5:8f:62:13:b9:fa:8e:da:70:a5: 35:0f:2d:bf:29:67:d2:2d:6c:e0:38:d6:47:fc:ee:c2:f0:da: 49:a9:6f:a3:53:03:61:09:91:9f:ac:4d:ac:7b:8a:bb:d2:08: 3e:e6:f5:25:bd:9d:37:32:36:8b:1f:38:34:b9:b7:2c:44:f7: 20:8e:f8:15:d1:ce:57:28:6c:81:af:b9:23:c5:06:19:3d:f6: f0:66:3a:7c:95:f5:12:f7:d1:30:96:c8:ce:4a:85:2e:85:c5: 41:de:df:e0:84:2f:d9:02:cf:bf:5f:cf:35:cb:c3:d4:f4:ef: 86:93:50:79:5c:56:fc:e3:8b:85:03:cb:85:6a:f7:40:a1:94: 9b:1c:db:03 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQMdtVBTgAxZ343IobaYZFiz1l0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA5MjkxNDQxNTlaFw0yNzA5MjgxNDQ2NTlaMDMxMTAvBgNV BAMTKDY0OUM1QzQ4REZDMUE3NzBFNjhCMDFBNjNENzdGNzNEMjEwOUQ5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiP+V5TSojjQrd+7tFv7eSqJod ces+tfJqoVUfEX/2gPZgkkkHytnc8kV7vMm9B6P80EDi8UGzzGUBDg9WXlOOGqIL +H2bBkLDyBh0FKo27OGMiCHR5zE2GXToy0QXsLhGMtyFb5U11O5tvbB4qxlBsGNL L1iBnZOhwj/5oa+dWl//UNrWwMxn3O4RisP1/icYgw/nDEfTMTHOWHrNCiMsKQUi DW2xC24G6ZBwSFO+FLvCv7Q+/AnX5PfA7ku4xrqicPOwwz6GF+ISHU9hFaxiB2Ju DHtZVWjBGJeb0EYtX8BCl4zHwfBfJGB1qw3NyJXe3OaIeN/3vx3w944+rqpTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUZJxcSN/Bp3DmiwGmPXf3PSEJ2ZowHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzEzYTM3NjIzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzAzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhQewXsgMA0GCSqGSIb3DQEBCwUAA4IBAQA3 gigKUuxsE+gz8BHFQ59HKgAjps1GfdgH+AZZ0i2jny+QSeuu1CV5Efb7fH0dj9BN qkFVBJnv3uonKBicutM6e6LrCxqwM650d7e2gn/U97TL73UhGW7McOshKAjDy0c8 QoV9ABiZkr5DYNZl3Xye0KeQrMWPYhO5+o7acKU1Dy2/KWfSLWzgONZH/O7C8NpJ qW+jUwNhCZGfrE2se4q70gg+5vUlvZ03MjaLHzg0ubcsRPcgjvgV0c5XKGyBr7kj xQYZPfbwZjp8lfUS99EwlsjOSoUuhcVB3t/ghC/ZAs+/X881y8PU9O+Gk1B5XFb8 44uFA8uFavdAoZSbHNsD -----END CERTIFICATE-----Generated at Thu Oct 1 08:21:29 2026 by rpki-client