$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353037303a3a2f34342d3438203d3e20323138343731.roa File: 326131343a373538313a353037303a3a2f34342d3438203d3e20323138343731.roa (raw, json) Hash identifier: xZSyf8tuaQMy8IWk2/+qMG+yIh0GUvoRB3ZqCCv+8wY= Subject key identifier: 78:D9:B5:DE:24:E3:62:41:F7:9F:75:DE:8D:08:E1:E6:09:CF:25:1F Certificate issuer: /CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Certificate serial: 0DD161642DD0EA8FBC6C351BD538E8E52AD6294D Authority key identifier: 5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353037303a3a2f34342d3438203d3e20323138343731.roa Signing time: Thu 15 Oct 2026 18:23:20 +0000 ROA not before: Thu 15 Oct 2026 18:18:20 +0000 ROA not after: Thu 14 Oct 2027 18:23:20 +0000 asID: 218471 IP address blocks: 2a14:7581:5070::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d1:61:64:2d:d0:ea:8f:bc:6c:35:1b:d5:38:e8:e5:2a:d6:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F Validity Not Before: Oct 15 18:18:20 2026 GMT Not After : Oct 14 18:23:20 2027 GMT Subject: CN=78D9B5DE24E36241F79F75DE8D08E1E609CF251F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f0:1a:5c:a1:06:ab:c8:00:b7:95:0c:1f:dc: d5:68:f8:96:f4:81:45:9d:8d:c0:ea:3a:34:39:be: 7f:49:15:b6:fa:45:d2:24:63:6e:9a:b5:6b:f5:79: a9:c3:9b:8b:f4:f4:1b:50:24:8b:d4:52:4a:68:9d: 74:58:51:ee:00:54:fb:48:f7:95:d1:62:d6:ca:ba: ed:49:94:70:85:5d:8c:dc:23:4b:a0:36:f5:6e:93: 74:78:f3:85:fa:7b:23:9a:3f:91:62:c5:c2:c0:14: dd:64:b4:8e:64:2f:99:4a:ca:05:9b:56:b0:6c:09: 07:18:ab:b7:aa:a2:c4:07:65:a4:85:4d:fc:65:db: fa:32:44:27:92:3d:2f:7f:a0:0d:a3:c3:00:61:c4: 19:66:2c:68:64:39:b0:3e:bd:28:48:cf:e8:6f:cc: f4:c7:40:ec:34:d8:5c:a1:40:a4:c1:0c:52:b5:2d: a8:f6:b2:c2:57:24:8b:19:b0:da:59:98:e9:a6:f8: 0b:cd:17:52:63:1b:d5:02:1f:1a:22:e1:e6:c2:a5: 9a:e8:17:7b:88:b5:fa:d1:bd:c7:a6:4c:24:32:11: e2:d9:42:e9:c4:25:f0:dc:d2:9c:f6:f8:9d:de:5e: c4:73:b3:80:a9:3b:d3:e4:da:3b:80:b9:55:13:56: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D9:B5:DE:24:E3:62:41:F7:9F:75:DE:8D:08:E1:E6:09:CF:25:1F X509v3 Authority Key Identifier: keyid:5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/326131343a373538313a353037303a3a2f34342d3438203d3e20323138343731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:5070::/44 Signature Algorithm: sha256WithRSAEncryption 56:9e:bd:05:19:10:97:67:74:df:3c:ae:ba:96:f8:a4:eb:08: 09:86:5c:e4:74:30:53:35:28:50:3e:ba:e5:86:16:6f:78:7c: 74:cd:93:35:f1:e6:3e:6b:d0:fb:2f:56:9b:ee:6f:cc:e5:e0: 9b:df:5d:8d:43:88:3e:ad:98:bc:8b:a3:d2:2d:1e:5f:fd:65: a4:8e:12:ac:0d:64:be:1b:54:d7:98:11:58:eb:b3:51:c7:cd: 0d:9b:a1:f6:f8:83:91:f5:64:e8:a8:2a:65:f3:06:12:33:a5: c7:a1:f2:f1:1a:ac:ea:aa:28:43:5f:33:82:f9:cc:ef:f7:6c: fa:d9:87:d0:fc:16:9a:6a:7a:d0:11:2f:f4:28:1b:95:36:23: 45:0f:2c:48:80:2d:cc:93:3c:02:70:51:e0:f4:45:79:93:7d: f5:ff:d2:10:93:78:be:46:f8:a4:7a:fe:2e:a0:90:fc:15:37: 66:83:58:4f:66:a9:69:1f:29:04:89:24:bb:1a:cb:72:65:41: 18:2a:7a:00:d1:e4:8f:65:7f:12:98:f8:8a:7f:9a:e7:be:51: c9:73:b7:ad:ca:7a:13:3d:5d:70:7c:6b:72:ec:07:82:2d:43: b6:bd:d8:fb:4e:bd:72:27:be:be:72:cd:8c:71:9b:33:83:c3: 06:62:ca:0a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDdFhZC3Q6o+8bDUb1Tjo5SrWKU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5 QzNDMDEzRjAeFw0yNjEwMTUxODE4MjBaFw0yNzEwMTQxODIzMjBaMDMxMTAvBgNV BAMTKDc4RDlCNURFMjRFMzYyNDFGNzlGNzVERThEMDhFMUU2MDlDRjI1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8BpcoQaryAC3lQwf3NVo+Jb0 gUWdjcDqOjQ5vn9JFbb6RdIkY26atWv1eanDm4v09BtQJIvUUkponXRYUe4AVPtI 95XRYtbKuu1JlHCFXYzcI0ugNvVuk3R484X6eyOaP5FixcLAFN1ktI5kL5lKygWb VrBsCQcYq7eqosQHZaSFTfxl2/oyRCeSPS9/oA2jwwBhxBlmLGhkObA+vShIz+hv zPTHQOw02FyhQKTBDFK1Laj2ssJXJIsZsNpZmOmm+AvNF1JjG9UCHxoi4ebCpZro F3uItfrRvcemTCQyEeLZQunEJfDc0pz2+J3eXsRzs4CpO9Pk2juAuVUTVraxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUeNm13iTjYkH3n3XejQjh5gnPJR8wHwYDVR0j BBgwFoAUXHU53SFyXSwt8ngqQQGlNpw8AT8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzcvNUM3NTM5REQyMTcyNUQyQzJERjI3ODJBNDEwMUE1MzY5QzNDMDEzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81Qzc1MzlERDIxNzI1RDJDMkRGMjc4MkE0 MTAxQTUzNjlDM0MwMTNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zY2JmYWQ5Ni03OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvNy8zMjYxMzEz NDNhMzczNTM4MzEzYTM1MzAzNzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM4MzQzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gVBwMA0GCSqGSIb3DQEBCwUAA4IBAQBW nr0FGRCXZ3TfPK66lvik6wgJhlzkdDBTNShQPrrlhhZveHx0zZM18eY+a9D7L1ab 7m/M5eCb312NQ4g+rZi8i6PSLR5f/WWkjhKsDWS+G1TXmBFY67NRx80Nm6H2+IOR 9WToqCpl8wYSM6XHofLxGqzqqihDXzOC+czv92z62YfQ/BaaanrQES/0KBuVNiNF DyxIgC3MkzwCcFHg9EV5k331/9IQk3i+Rvikev4uoJD8FTdmg1hPZqlpHykEiSS7 GstyZUEYKnoA0eSPZX8SmPiKf5rnvlHJc7etynoTPV1wfGty7AeCLUO2vdj7Tr1y J76+cs2McZszg8MGYsoK -----END CERTIFICATE-----Generated at Sat Oct 24 10:39:42 2026 by rpki-client