$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635343a3a2f34382d3438203d3e20323139313130.roa File: 326131343a373538333a656635343a3a2f34382d3438203d3e20323139313130.roa (raw, json) Hash identifier: iDftdBCsthJXN/ndb+q/GQx72Gzjt+eyR9jMDK8uFwA= Subject key identifier: 48:1E:E4:F7:E8:E5:AC:A8:35:5E:5F:7F:EC:1F:DE:8E:F5:1D:73:03 Certificate issuer: /CN=B75F3781BC9C2E7301754988659F92686704E570 Certificate serial: 56F0DAB9600812F5B94E46F0C07A7B2E2E141E9B Authority key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635343a3a2f34382d3438203d3e20323139313130.roa Signing time: Mon 03 Aug 2026 19:41:13 +0000 ROA not before: Mon 03 Aug 2026 19:36:13 +0000 ROA not after: Mon 02 Aug 2027 19:41:13 +0000 asID: 219110 IP address blocks: 2a14:7583:ef54::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 10:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f0:da:b9:60:08:12:f5:b9:4e:46:f0:c0:7a:7b:2e:2e:14:1e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F3781BC9C2E7301754988659F92686704E570 Validity Not Before: Aug 3 19:36:13 2026 GMT Not After : Aug 2 19:41:13 2027 GMT Subject: CN=481EE4F7E8E5ACA8355E5F7FEC1FDE8EF51D7303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:1a:3b:fb:ae:bd:ff:d8:94:80:81:93:dc: 29:d3:22:08:e6:7c:59:e1:aa:fa:e4:c6:8c:97:e6: e8:32:a0:a3:79:ce:b6:d6:bb:94:fa:87:15:c9:6f: 46:7c:e4:46:51:ec:36:7c:64:d8:ef:a3:f3:67:f3: b8:ce:f2:63:48:69:8d:74:b4:41:97:cc:de:c3:76: 43:bc:5f:af:ae:5d:5c:b7:d0:71:d5:ed:77:e4:c2: 8b:85:ea:45:fa:f1:f4:34:35:cd:19:c2:64:f2:85: 64:a5:f1:3a:31:bf:40:57:8e:51:32:57:b2:d6:98: c4:c3:9a:8e:ea:15:bb:8f:f0:e5:53:51:36:c2:01: 3a:f5:6e:51:1f:ad:aa:59:d6:b5:8d:6b:fb:1e:71: 70:30:52:80:5f:4c:53:f9:40:4f:a6:ee:c2:20:21: 2f:76:56:55:6b:10:bf:f0:e8:05:44:1d:48:19:41: 38:6f:a1:4b:79:6a:a2:1b:34:98:54:c5:8f:2a:3f: d6:9e:58:94:48:b1:cd:c0:53:63:dd:08:5c:bd:29: ed:e1:3b:85:b4:6e:d4:76:72:e8:f3:0f:04:8e:74: 38:2e:d9:34:f7:a4:fa:c7:5d:23:8d:3b:d3:e4:be: 07:8c:b9:1a:82:f8:a3:25:ea:5e:bf:41:c5:7d:b5: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:E4:F7:E8:E5:AC:A8:35:5E:5F:7F:EC:1F:DE:8E:F5:1D:73:03 X509v3 Authority Key Identifier: keyid:B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635343a3a2f34382d3438203d3e20323139313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:ef54::/48 Signature Algorithm: sha256WithRSAEncryption 81:e4:e9:72:5b:e8:30:e4:c6:94:fa:f9:43:41:8d:8b:dd:9e: 23:a5:30:27:0b:a8:62:c2:8c:e6:56:67:cd:bb:93:5a:75:2d: 9e:13:ef:f0:4d:fd:bb:d2:3c:0b:4c:9b:4f:22:a3:e7:ce:77: 05:ab:e9:48:06:97:bb:4b:13:0e:36:c9:ba:1b:5a:2d:f1:cc: db:d2:93:86:94:31:10:35:fc:05:13:d6:1c:46:df:5f:86:7c: d8:e3:12:81:91:ef:d6:95:5d:92:6a:16:3a:4c:99:44:15:2c: 20:d0:03:bf:76:73:ac:06:32:d3:44:93:f5:ae:c2:93:66:c7: ae:6b:71:ba:9d:17:8f:f1:7d:cb:c2:2e:0c:29:34:8f:f7:08: a8:79:c8:4b:85:14:2f:67:ca:4b:cb:4a:14:89:fa:b6:13:3b: cd:5e:4b:6a:93:c4:11:42:b2:3c:91:c1:dd:54:ef:ae:b5:84: 88:5c:fc:e5:11:b0:bf:9e:e1:a8:05:78:2c:f8:3d:ef:4a:2b: 33:b1:a9:21:9c:d0:82:e1:02:32:d4:84:53:49:fa:a7:63:51: 16:b9:6e:c1:1c:1b:fe:ca:04:1e:39:3b:5e:fb:cf:44:eb:72: 6f:4b:50:a8:7b:c2:2e:85:af:4f:d4:f4:ce:22:73:86:3d:eb: 7e:20:56:e0 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVvDauWAIEvW5TkbwwHp7Li4UHpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1RjM3ODFCQzlDMkU3MzAxNzU0OTg4NjU5RjkyNjg2 NzA0RTU3MDAeFw0yNjA4MDMxOTM2MTNaFw0yNzA4MDIxOTQxMTNaMDMxMTAvBgNV BAMTKDQ4MUVFNEY3RThFNUFDQTgzNTVFNUY3RkVDMUZERThFRjUxRDczMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBRo7+669/9iUgIGT3CnTIgjm fFnhqvrkxoyX5ugyoKN5zrbWu5T6hxXJb0Z85EZR7DZ8ZNjvo/Nn87jO8mNIaY10 tEGXzN7DdkO8X6+uXVy30HHV7XfkwouF6kX68fQ0Nc0ZwmTyhWSl8Toxv0BXjlEy V7LWmMTDmo7qFbuP8OVTUTbCATr1blEfrapZ1rWNa/secXAwUoBfTFP5QE+m7sIg IS92VlVrEL/w6AVEHUgZQThvoUt5aqIbNJhUxY8qP9aeWJRIsc3AU2PdCFy9Ke3h O4W0btR2cujzDwSOdDgu2TT3pPrHXSONO9PkvgeMuRqC+KMl6l6/QcV9tVN1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUSB7k9+jlrKg1Xl9/7B/ejvUdcwMwHwYDVR0j BBgwFoAUt183gbycLnMBdUmIZZ+SaGcE5XAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1 NTU2LzEvQjc1RjM3ODFCQzlDMkU3MzAxNzU0OTg4NjU5RjkyNjg2NzA0RTU3MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNzVGMzc4MUJDOUMyRTczMDE3NTQ5ODg2 NTlGOTI2ODY3MDRFNTcwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zNzQ2MDUyOS02OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY1NjYzNTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM5MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g+9UMA0GCSqGSIb3DQEBCwUAA4IBAQCB 5OlyW+gw5MaU+vlDQY2L3Z4jpTAnC6hiwozmVmfNu5NadS2eE+/wTf270jwLTJtP IqPnzncFq+lIBpe7SxMONsm6G1ot8czb0pOGlDEQNfwFE9YcRt9fhnzY4xKBke/W lV2SahY6TJlEFSwg0AO/dnOsBjLTRJP1rsKTZseua3G6nReP8X3Lwi4MKTSP9wio echLhRQvZ8pLy0oUifq2EzvNXktqk8QRQrI8kcHdVO+utYSIXPzlEbC/nuGoBXgs +D3vSiszsakhnNCC4QIy1IRTSfqnY1EWuW7BHBv+ygQeOTte+89E63JvS1Coe8Iu ha9P1PTOInOGPet+IFbg -----END CERTIFICATE-----Generated at Wed Aug 12 19:27:28 2026 by rpki-client