$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa File: 326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa (raw, json) Hash identifier: olY89yTABZjQ0ftteHnlRH1moi3gjSYsqLAwYW3Vjro= Subject key identifier: D3:DD:F4:25:92:A3:9F:4F:4C:03:04:36:34:99:28:D0:41:94:9B:BD Certificate issuer: /CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Certificate serial: 1336C7C5DA5C09331E51CDC2A9E6907105244B5D Authority key identifier: 5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa Signing time: Thu 15 Oct 2026 18:21:33 +0000 ROA not before: Thu 15 Oct 2026 18:16:33 +0000 ROA not after: Thu 14 Oct 2027 18:21:33 +0000 asID: 218904 IP address blocks: 2a14:7581:5040::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:36:c7:c5:da:5c:09:33:1e:51:cd:c2:a9:e6:90:71:05:24:4b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Validity Not Before: Oct 15 18:16:33 2026 GMT Not After : Oct 14 18:21:33 2027 GMT Subject: CN=D3DDF42592A39F4F4C030436349928D041949BBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:bf:a7:e2:10:9b:a2:ed:41:23:9c:62:cf: 4d:d5:4d:10:cb:d7:cc:1c:62:52:bc:6d:8e:e3:c0: d4:05:2b:7c:c5:c3:7f:73:7e:14:64:6a:36:6b:fc: 71:30:ce:b9:83:0c:22:4a:4c:8a:87:9b:cb:a3:b5: 8d:06:da:ed:c9:2a:85:75:7f:eb:35:ad:b0:3b:c1: cf:d8:69:8c:f4:49:69:ee:9a:16:18:c2:5b:9a:fa: f7:d3:89:76:83:a5:80:a5:50:3e:90:47:ac:c9:33: 87:da:69:7c:1b:d5:f2:99:fd:e2:8c:3b:d3:e0:a5: 9a:76:36:db:db:66:ea:39:0f:9f:bf:b7:fb:7e:28: 2c:87:ef:ba:97:38:bb:e7:12:95:99:2e:7b:48:25: 83:22:26:5e:b8:01:7f:cf:7b:df:ba:b2:6f:58:68: 7c:57:26:b0:33:bc:cc:c5:31:ea:de:0d:36:1b:89: ab:74:8f:b0:8a:d5:0c:37:2d:0e:e3:88:25:03:1f: 91:50:bd:ca:41:b1:c2:82:f2:a4:a4:20:a1:65:8f: ef:42:ce:ea:6c:f1:7f:99:39:fd:45:b6:ef:b1:f3: 3c:d5:d6:f9:e2:af:9b:c4:f4:fa:51:76:63:62:39: 02:59:97:6c:46:cf:cd:81:74:8b:41:4a:21:89:78: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DD:F4:25:92:A3:9F:4F:4C:03:04:36:34:99:28:D0:41:94:9B:BD X509v3 Authority Key Identifier: keyid:5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353034303a3a2f34342d3438203d3e20323138393034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:5040::/44 Signature Algorithm: sha256WithRSAEncryption 20:89:2d:d1:84:9a:72:77:f3:52:d3:3d:01:cc:f4:4b:f2:29: e9:f2:2f:5f:9f:33:29:fa:25:1c:7d:e5:26:c2:5e:81:16:26: f3:87:e3:b3:46:b0:4d:d7:f0:ef:2e:c0:24:6a:21:3f:50:33: 9a:4c:95:56:57:36:60:9b:6a:f0:64:f5:85:fa:d0:b0:ab:de: e3:27:3b:e7:eb:8d:fe:27:18:6d:f9:2b:b9:9b:4d:da:22:fa: 22:cd:b8:e3:84:82:e6:de:8f:85:25:e4:fd:c5:5b:56:01:b6: 55:f2:79:e8:9f:ed:b9:a9:c5:bf:b4:70:58:b7:d5:8c:a9:1d: 38:92:dc:f4:8c:e2:fd:87:cb:49:ea:ca:26:d5:f9:bd:f8:15: 0f:eb:12:0a:75:11:53:9b:d6:1f:11:0e:80:8b:9a:31:5a:35: 31:1e:37:c3:e1:b1:d9:7f:d1:fd:e8:56:95:a9:86:94:58:51: d9:56:83:e9:19:8c:2c:b8:70:3e:45:3e:a7:75:40:0d:34:af: 9c:28:e4:cb:17:c7:14:3f:5d:90:87:aa:c3:9d:9a:a7:20:eb: 44:17:05:24:27:b6:38:3c:df:7f:bd:43:54:d1:ea:18:e2:53: ea:57:aa:0e:58:22:23:0c:42:a2:04:61:9d:27:d7:1f:16:98: 45:cf:27:6f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEzbHxdpcCTMeUc3CqeaQcQUkS10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5 QzNDMDEzRjAeFw0yNjEwMTUxODE2MzNaFw0yNzEwMTQxODIxMzNaMDMxMTAvBgNV BAMTKEQzRERGNDI1OTJBMzlGNEY0QzAzMDQzNjM0OTkyOEQwNDE5NDlCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4f7+n4hCbou1BI5xiz03VTRDL 18wcYlK8bY7jwNQFK3zFw39zfhRkajZr/HEwzrmDDCJKTIqHm8ujtY0G2u3JKoV1 f+s1rbA7wc/YaYz0SWnumhYYwlua+vfTiXaDpYClUD6QR6zJM4faaXwb1fKZ/eKM O9PgpZp2NtvbZuo5D5+/t/t+KCyH77qXOLvnEpWZLntIJYMiJl64AX/Pe9+6sm9Y aHxXJrAzvMzFMereDTYbiat0j7CK1Qw3LQ7jiCUDH5FQvcpBscKC8qSkIKFlj+9C zups8X+ZOf1Ftu+x8zzV1vnir5vE9PpRdmNiOQJZl2xGz82BdItBSiGJeNJZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU0930JZKjn09MAwQ2NJko0EGUm70wHwYDVR0j BBgwFoAUXHU53SFyXSwt8ngqQQGlNpw8AT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzcvNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5QzNDMDEzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81Qzc1MzlERDIxNzI1RDJDMkRGMjc4MkE0 MTAxQTUzNjlDM0MwMTNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zY2JmYWQ5Ni03OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvNy8zMjYxMzEz NDNhMzczNTM4MzEzYTM1MzAzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM4MzkzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gVBAMA0GCSqGSIb3DQEBCwUAA4IBAQAg iS3RhJpyd/NS0z0BzPRL8inp8i9fnzMp+iUcfeUmwl6BFibzh+OzRrBN1/DvLsAk aiE/UDOaTJVWVzZgm2rwZPWF+tCwq97jJzvn643+Jxht+Su5m03aIvoizbjjhILm 3o+FJeT9xVtWAbZV8nnon+25qcW/tHBYt9WMqR04ktz0jOL9h8tJ6som1fm9+BUP 6xIKdRFTm9YfEQ6Ai5oxWjUxHjfD4bHZf9H96FaVqYaUWFHZVoPpGYwsuHA+RT6n dUANNK+cKOTLF8cUP12Qh6rDnZqnIOtEFwUkJ7Y4PN9/vUNU0eoY4lPqV6oOWCIj DEKiBGGdJ9cfFphFzydv -----END CERTIFICATE-----Generated at Fri Oct 23 14:11:09 2026 by rpki-client