$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa File: 326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa (raw, json) Hash identifier: YrRd+aAbyt8L1JYjDgSXoXSZjKCory+pIJS2RslmRHY= Subject key identifier: 73:B5:4B:74:12:42:53:22:9D:76:B3:11:F7:A9:40:CB:35:67:64:CD Certificate issuer: /CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Certificate serial: 4274C040CAB332FBB12B5AAEE8EE946BECED9E5F Authority key identifier: 5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa Signing time: Thu 15 Oct 2026 18:20:40 +0000 ROA not before: Thu 15 Oct 2026 18:15:40 +0000 ROA not after: Thu 14 Oct 2027 18:20:40 +0000 asID: 204464 IP address blocks: 2a14:7581:5010::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 16:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:74:c0:40:ca:b3:32:fb:b1:2b:5a:ae:e8:ee:94:6b:ec:ed:9e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Validity Not Before: Oct 15 18:15:40 2026 GMT Not After : Oct 14 18:20:40 2027 GMT Subject: CN=73B54B74124253229D76B311F7A940CB356764CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:b1:6a:b3:46:28:2f:09:76:7d:23:a9:28: 14:07:b5:13:bc:d9:66:8a:36:c8:33:55:c6:d8:f8: 13:3b:a0:60:e4:0d:9d:32:57:e3:4c:ee:f8:7a:ba: 3e:be:dc:04:94:12:f9:dd:30:52:09:cb:34:fd:f1: 79:23:44:f9:84:33:22:8f:67:32:5e:9c:77:e0:fe: 1c:ca:8c:8b:4b:15:80:d5:13:60:8e:68:c2:25:ec: b0:7f:d9:4d:43:4e:e7:07:67:8e:ee:e2:d7:13:5d: db:fb:e0:8c:b2:b6:d3:e0:92:f9:25:97:90:ed:cf: f4:d5:d1:d4:9b:b8:b5:51:9c:30:e1:45:de:77:ce: 7a:fb:83:7f:bc:41:93:aa:76:8e:e4:ae:7b:b6:c6: 70:64:95:18:e4:85:e1:a5:0e:44:c3:5a:03:0f:ad: 0d:e7:1f:56:53:26:ea:a4:df:9c:5f:4d:f4:51:dc: 84:04:6e:bd:d9:98:50:5a:17:ce:23:e4:63:d0:3c: 46:b0:56:45:58:33:1d:9c:83:35:c5:d5:98:10:2e: 6d:32:34:ae:bf:63:bd:f4:73:e1:51:06:03:aa:f5: e8:04:b2:7d:af:0b:9a:31:63:cc:11:02:d0:b3:e1: 12:e5:a3:a9:7c:54:0f:e0:56:72:e4:d4:40:59:0b: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B5:4B:74:12:42:53:22:9D:76:B3:11:F7:A9:40:CB:35:67:64:CD X509v3 Authority Key Identifier: keyid:5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353031303a3a2f34342d3438203d3e20323034343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:5010::/44 Signature Algorithm: sha256WithRSAEncryption 16:4f:a2:bf:59:45:95:77:38:33:b9:77:27:26:a2:c9:71:d8: 99:88:33:69:b4:0e:51:76:e4:e2:87:50:43:96:e2:7c:38:88: c3:ac:5a:0f:6a:5f:55:c4:b9:69:37:51:a6:34:f4:bc:ec:e9: 18:80:89:14:6a:31:84:70:b7:b5:b0:a7:7d:67:2a:8a:fc:9b: 2e:2a:04:f3:13:73:27:c3:cd:93:dd:40:6c:4a:90:a0:56:f1: ea:57:ca:df:c3:78:15:50:8e:64:f7:84:b5:45:b9:1b:f9:29: 88:ef:09:bd:5a:87:62:63:5c:a2:d3:7d:51:0f:d5:e7:02:08: 0a:40:ef:d5:fc:e6:48:72:e9:e3:9a:56:73:0a:42:86:27:52: 3c:6e:13:98:b9:38:d8:37:4c:41:88:48:c6:69:bc:8d:f9:f0: 04:45:ea:a7:05:26:9a:44:4d:38:7d:c8:1c:9e:a9:f7:8a:54: 41:f9:b6:d2:75:b4:aa:60:bd:85:09:31:68:83:1f:33:cb:4e: 81:22:d6:da:cf:dd:f2:5f:a2:82:bb:1f:4f:f2:cf:ca:88:5a: f6:1d:bf:44:48:15:e3:d0:d4:86:a9:a0:4b:6f:aa:6b:27:47: 60:0c:cd:c1:27:c0:ed:a5:67:2f:ec:0a:97:45:53:55:95:8f: b3:bd:18:05 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQnTAQMqzMvuxK1qu6O6Ua+ztnl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5 QzNDMDEzRjAeFw0yNjEwMTUxODE1NDBaFw0yNzEwMTQxODIwNDBaMDMxMTAvBgNV BAMTKDczQjU0Qjc0MTI0MjUzMjI5RDc2QjMxMUY3QTk0MENCMzU2NzY0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSubFqs0YoLwl2fSOpKBQHtRO8 2WaKNsgzVcbY+BM7oGDkDZ0yV+NM7vh6uj6+3ASUEvndMFIJyzT98XkjRPmEMyKP ZzJenHfg/hzKjItLFYDVE2COaMIl7LB/2U1DTucHZ47u4tcTXdv74IyyttPgkvkl l5Dtz/TV0dSbuLVRnDDhRd53znr7g3+8QZOqdo7krnu2xnBklRjkheGlDkTDWgMP rQ3nH1ZTJuqk35xfTfRR3IQEbr3ZmFBaF84j5GPQPEawVkVYMx2cgzXF1ZgQLm0y NK6/Y730c+FRBgOq9egEsn2vC5oxY8wRAtCz4RLlo6l8VA/gVnLk1EBZC4KHAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUc7VLdBJCUyKddrMR96lAyzVnZM0wHwYDVR0j BBgwFoAUXHU53SFyXSwt8ngqQQGlNpw8AT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzcvNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5QzNDMDEzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81Qzc1MzlERDIxNzI1RDJDMkRGMjc4MkE0 MTAxQTUzNjlDM0MwMTNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zY2JmYWQ5Ni03OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvNy8zMjYxMzEz NDNhMzczNTM4MzEzYTM1MzAzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM0MzQzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gVAQMA0GCSqGSIb3DQEBCwUAA4IBAQAW T6K/WUWVdzgzuXcnJqLJcdiZiDNptA5RduTih1BDluJ8OIjDrFoPal9VxLlpN1Gm NPS87OkYgIkUajGEcLe1sKd9ZyqK/JsuKgTzE3Mnw82T3UBsSpCgVvHqV8rfw3gV UI5k94S1Rbkb+SmI7wm9WodiY1yi031RD9XnAggKQO/V/OZIcunjmlZzCkKGJ1I8 bhOYuTjYN0xBiEjGabyN+fAEReqnBSaaRE04fcgcnqn3ilRB+bbSdbSqYL2FCTFo gx8zy06BItbaz93yX6KCux9P8s/KiFr2Hb9ESBXj0NSGqaBLb6prJ0dgDM3BJ8Dt pWcv7AqXRVNVlY+zvRgF -----END CERTIFICATE-----Generated at Fri Oct 23 07:28:23 2026 by rpki-client