$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353036303a3a2f34342d3438203d3e20323138343730.roa File: 326131343a373538313a353036303a3a2f34342d3438203d3e20323138343730.roa (raw, json) Hash identifier: E5TUkzsoXixE1UHQjocswgEgtrUuo742Pnd7YhTr9bk= Subject key identifier: E3:49:EC:ED:91:F1:8A:5C:0D:9C:01:20:C2:F2:6A:E1:8A:95:53:00 Certificate issuer: /CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Certificate serial: 4528470816D05F07BBF6EF25FEE17658DED1CC19 Authority key identifier: 5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353036303a3a2f34342d3438203d3e20323138343730.roa Signing time: Thu 15 Oct 2026 18:22:10 +0000 ROA not before: Thu 15 Oct 2026 18:17:10 +0000 ROA not after: Thu 14 Oct 2027 18:22:10 +0000 asID: 218470 IP address blocks: 2a14:7581:5060::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:28:47:08:16:d0:5f:07:bb:f6:ef:25:fe:e1:76:58:de:d1:cc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Validity Not Before: Oct 15 18:17:10 2026 GMT Not After : Oct 14 18:22:10 2027 GMT Subject: CN=E349ECED91F18A5C0D9C0120C2F26AE18A955300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:37:a3:2e:29:4f:a2:88:3f:dc:24:cd:d5: 06:b5:a8:f3:7b:b4:3d:f4:10:1b:d6:a8:19:4d:0a: a8:16:3e:e7:44:35:12:f7:74:d0:18:c8:ff:e7:bf: 6f:22:75:7b:d1:2b:50:93:97:aa:f6:3e:b0:a2:d4: 5e:c4:9c:ab:87:47:c7:cf:8d:86:8b:46:c4:03:2a: d5:a3:79:70:5c:0d:78:e5:5f:1d:18:9c:2d:6c:99: 0c:ac:bc:f2:44:b7:4b:0d:c0:60:ef:7f:27:b2:1b: 41:ee:bc:82:cd:d1:35:40:8d:6e:b8:25:8c:71:c5: 96:fa:08:54:d5:2b:26:a8:16:93:e0:f8:be:2c:ac: 70:78:5e:32:f9:7b:54:b2:b8:a3:28:ae:7d:ba:4f: e4:58:3b:d2:56:a9:0e:ac:1b:34:3b:01:87:a3:3f: 6e:66:1b:c3:24:6b:a1:e2:23:31:8c:fc:ab:96:59: 6d:81:da:bf:ed:fe:6d:a2:8d:a5:90:ee:41:b1:35: 88:1b:e1:31:a8:35:9d:61:c1:0b:a2:fc:04:11:b7: 7d:c5:8f:5b:90:fa:b3:3e:4d:cd:b9:d8:b4:b5:ef: 13:41:60:0b:e2:bc:87:4f:8d:fa:0c:e0:7f:0d:f5: 2b:7a:bd:58:65:47:e9:9f:6e:3c:80:6c:6e:b5:45: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:49:EC:ED:91:F1:8A:5C:0D:9C:01:20:C2:F2:6A:E1:8A:95:53:00 X509v3 Authority Key Identifier: keyid:5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353036303a3a2f34342d3438203d3e20323138343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:5060::/44 Signature Algorithm: sha256WithRSAEncryption 08:27:5f:e0:f7:1f:ff:93:f3:18:15:3d:4f:98:3c:ba:6b:41: 9e:3a:6b:30:6f:8d:a0:4d:42:98:99:5d:ed:21:ea:32:3f:37: 67:b7:52:7c:fd:12:9d:5f:27:b5:9e:f0:94:2f:4c:5b:38:ff: e0:e6:ab:7e:7e:79:0a:04:83:6f:2e:6f:74:4f:5e:9f:45:60: 7f:bb:b0:9e:7f:2c:dd:80:50:4c:a8:b1:b7:24:c9:30:d1:f3: 28:94:9c:5f:4e:fa:3b:38:9c:cd:4f:42:20:d5:64:cc:a4:db: e5:54:1b:7b:ac:1b:af:b8:35:6c:12:98:be:7b:d3:25:b2:32: 2a:16:cc:98:55:3f:14:a9:25:6f:03:0d:96:48:73:e1:c1:2f: 89:07:25:2f:82:a3:5e:03:84:5b:e9:7f:a3:41:35:98:e2:c5: a6:0b:c5:27:12:31:36:15:73:e8:4d:f2:88:0f:21:37:72:1b: 63:c2:e5:08:ca:bd:5f:7d:2a:c6:b5:0b:e2:7a:5b:23:3e:c2: 46:b9:00:b9:8e:1b:d3:25:45:59:86:79:78:8a:4f:2d:d7:30: 0c:e9:2d:1a:e4:90:1d:7a:be:58:32:1b:6e:f3:f2:75:f5:fc: 9d:ed:92:1c:1a:4d:c4:e7:f5:c7:56:e3:c9:b6:5c:92:d7:ab: e5:06:f9:e1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURShHCBbQXwe79u8l/uF2WN7RzBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5 QzNDMDEzRjAeFw0yNjEwMTUxODE3MTBaFw0yNzEwMTQxODIyMTBaMDMxMTAvBgNV BAMTKEUzNDlFQ0VEOTFGMThBNUMwRDlDMDEyMEMyRjI2QUUxOEE5NTUzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsDejLilPoog/3CTN1Qa1qPN7 tD30EBvWqBlNCqgWPudENRL3dNAYyP/nv28idXvRK1CTl6r2PrCi1F7EnKuHR8fP jYaLRsQDKtWjeXBcDXjlXx0YnC1smQysvPJEt0sNwGDvfyeyG0HuvILN0TVAjW64 JYxxxZb6CFTVKyaoFpPg+L4srHB4XjL5e1SyuKMorn26T+RYO9JWqQ6sGzQ7AYej P25mG8Mka6HiIzGM/KuWWW2B2r/t/m2ijaWQ7kGxNYgb4TGoNZ1hwQui/AQRt33F j1uQ+rM+Tc252LS17xNBYAvivIdPjfoM4H8N9St6vVhlR+mfbjyAbG61RSUVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU40ns7ZHxilwNnAEgwvJq4YqVUwAwHwYDVR0j BBgwFoAUXHU53SFyXSwt8ngqQQGlNpw8AT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzcvNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5QzNDMDEzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81Qzc1MzlERDIxNzI1RDJDMkRGMjc4MkE0 MTAxQTUzNjlDM0MwMTNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zY2JmYWQ5Ni03OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvNy8zMjYxMzEz NDNhMzczNTM4MzEzYTM1MzAzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM4MzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gVBgMA0GCSqGSIb3DQEBCwUAA4IBAQAI J1/g9x//k/MYFT1PmDy6a0GeOmswb42gTUKYmV3tIeoyPzdnt1J8/RKdXye1nvCU L0xbOP/g5qt+fnkKBINvLm90T16fRWB/u7CefyzdgFBMqLG3JMkw0fMolJxfTvo7 OJzNT0Ig1WTMpNvlVBt7rBuvuDVsEpi+e9MlsjIqFsyYVT8UqSVvAw2WSHPhwS+J ByUvgqNeA4Rb6X+jQTWY4sWmC8UnEjE2FXPoTfKIDyE3chtjwuUIyr1ffSrGtQvi elsjPsJGuQC5jhvTJUVZhnl4ik8t1zAM6S0a5JAder5YMhtu8/J19fyd7ZIcGk3E 5/XHVuPJtlyS16vlBvnh -----END CERTIFICATE-----Generated at Sat Oct 24 10:40:08 2026 by rpki-client