$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa File: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (raw, json) Hash identifier: 7XqZ13Ef/+b1VNSXq2rgololpGJoJrZKisEm3FKehVE= Subject key identifier: 83:4E:0A:3B:91:5B:42:2E:2D:E0:CE:9E:88:53:09:00:02:B7:EE:2C Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 476AFC28EAA54A7C80CB4A6C5E71C0F4719C2472 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa Signing time: Sat 22 Aug 2026 08:35:07 +0000 ROA not before: Sat 22 Aug 2026 08:30:07 +0000 ROA not after: Sat 21 Aug 2027 08:35:07 +0000 asID: 48700 IP address blocks: 2a14:1ec7:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6a:fc:28:ea:a5:4a:7c:80:cb:4a:6c:5e:71:c0:f4:71:9c:24:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Aug 22 08:30:07 2026 GMT Not After : Aug 21 08:35:07 2027 GMT Subject: CN=834E0A3B915B422E2DE0CE9E8853090002B7EE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:8c:32:10:88:fe:1c:f8:b5:cb:41:2b:df: 80:f1:79:b4:dc:b2:7c:52:b4:13:78:cd:9b:9d:25: 3c:69:ec:1b:ef:25:2e:62:ac:e3:80:85:e4:f4:a6: 3d:72:07:30:92:d5:e7:bd:26:3e:71:8a:16:15:2c: 6f:9d:2f:87:41:1d:cd:73:45:ea:32:dc:d9:bf:b9: 29:0b:a5:61:d8:df:51:55:cf:c2:3d:8a:dd:25:c5: 12:cc:31:6a:28:54:6d:71:e5:3f:93:da:65:aa:9d: 28:c7:d8:54:1a:0b:75:d4:17:2d:1d:a8:57:53:04: 16:39:ba:3c:9e:b9:83:18:9d:0e:7b:45:97:8b:c0: 1b:f8:b9:ca:31:5d:e7:3a:6c:fd:80:c3:f4:f9:e6: b7:0d:f6:f4:a8:dc:e9:85:ef:d5:6d:72:cc:0b:84: 0b:d9:e5:65:b5:55:97:71:1c:cb:be:c7:11:2d:f5: 55:aa:0e:fa:db:a9:28:67:74:d3:eb:24:62:07:8a: 39:50:e8:03:8d:b5:e5:96:26:61:a2:5c:77:e6:0e: 96:43:98:97:24:5c:80:83:19:f8:a4:5f:4c:08:2b: 63:1f:02:66:8a:22:46:01:24:30:00:10:01:3d:bb: 59:63:32:ca:9a:de:cc:be:c8:e1:4e:89:f1:c9:b3: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4E:0A:3B:91:5B:42:2E:2D:E0:CE:9E:88:53:09:00:02:B7:EE:2C X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:c000::/36 Signature Algorithm: sha256WithRSAEncryption 04:ff:78:c7:3b:33:f4:96:29:4a:ad:d6:80:3b:be:25:4b:9a: 03:05:ff:b1:14:e2:94:64:b3:a7:58:64:e7:1a:24:ed:29:22: 19:ea:d2:2d:a9:fe:6b:7f:1c:09:0f:9d:88:90:a0:01:52:79: 17:ab:fa:a5:f2:91:f1:05:51:10:cf:a7:a0:43:96:42:0c:aa: 47:94:11:d1:f7:da:aa:c7:f0:b8:8d:f3:12:30:96:cc:e5:3b: f0:bd:91:a0:b0:47:9d:19:b1:2a:c0:4a:0d:66:78:55:bc:16: 5e:15:4d:58:41:b3:e7:79:54:63:9a:ff:d4:91:7e:52:52:6f: ab:68:f7:4d:a4:45:d0:95:a7:d5:a8:c0:f6:19:a5:84:74:65: 15:b6:c4:bc:fb:a7:34:12:2e:bb:06:96:5e:67:e8:a0:74:fc: 60:f5:01:d4:47:0a:58:02:37:bd:81:72:ae:35:10:dd:ef:f8: 84:2a:3c:71:7c:07:83:26:e9:9d:ee:7d:ba:ad:3e:6a:2c:7e: c4:3a:48:20:ed:1c:22:6e:27:13:c1:10:91:c8:ee:10:a3:12: 1b:e0:2b:5b:d7:37:60:24:39:e6:fe:9e:8e:5d:b6:7c:6a:fc: 6d:d8:a1:49:72:f7:c3:a1:c8:d8:7c:b0:8c:8c:33:b1:45:93: 68:0b:8f:7a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR2r8KOqlSnyAy0psXnHA9HGcJHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA4MjIwODMwMDdaFw0yNzA4MjEwODM1MDdaMDMxMTAvBgNV BAMTKDgzNEUwQTNCOTE1QjQyMkUyREUwQ0U5RTg4NTMwOTAwMDJCN0VFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCst4wyEIj+HPi1y0Er34DxebTc snxStBN4zZudJTxp7BvvJS5irOOAheT0pj1yBzCS1ee9Jj5xihYVLG+dL4dBHc1z Reoy3Nm/uSkLpWHY31FVz8I9it0lxRLMMWooVG1x5T+T2mWqnSjH2FQaC3XUFy0d qFdTBBY5ujyeuYMYnQ57RZeLwBv4ucoxXec6bP2Aw/T55rcN9vSo3OmF79VtcswL hAvZ5WW1VZdxHMu+xxEt9VWqDvrbqShndNPrJGIHijlQ6AONteWWJmGiXHfmDpZD mJckXICDGfikX0wIK2MfAmaKIkYBJDAAEAE9u1ljMsqa3sy+yOFOifHJs+hdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUg04KO5FbQi4t4M6eiFMJAAK37iwwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzczYTYzMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzQz ODM3MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGBCoUHsfAMA0GCSqGSIb3DQEBCwUAA4IBAQAE/3jH OzP0lilKrdaAO74lS5oDBf+xFOKUZLOnWGTnGiTtKSIZ6tItqf5rfxwJD52IkKAB UnkXq/ql8pHxBVEQz6egQ5ZCDKpHlBHR99qqx/C4jfMSMJbM5TvwvZGgsEedGbEq wEoNZnhVvBZeFU1YQbPneVRjmv/UkX5SUm+raPdNpEXQlafVqMD2GaWEdGUVtsS8 +6c0Ei67BpZeZ+igdPxg9QHURwpYAje9gXKuNRDd7/iEKjxxfAeDJumd7n26rT5q LH7EOkgg7RwibicTwRCRyO4QoxIb4Ctb1zdgJDnm/p6OXbZ8avxt2KFJcvfDocjY fLCMjDOxRZNoC496 -----END CERTIFICATE-----Generated at Thu Oct 1 03:49:27 2026 by rpki-client