$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: XUt70KrO/DZgEBIx3i5TbfQXGZ+eg7uSXb1GJc8l4hI= Subject key identifier: 47:94:34:F7:51:84:73:C6:AC:D1:2C:83:B1:CC:31:F7:B3:E2:37:66 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 1E166577FECAFE3F4C3AF2D6242ADAD06F3EAE74 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa Signing time: Fri 07 Aug 2026 01:55:55 +0000 ROA not before: Fri 07 Aug 2026 01:50:55 +0000 ROA not after: Fri 06 Aug 2027 01:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f701::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:16:65:77:fe:ca:fe:3f:4c:3a:f2:d6:24:2a:da:d0:6f:3e:ae:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 7 01:50:55 2026 GMT Not After : Aug 6 01:55:55 2027 GMT Subject: CN=479434F7518473C6ACD12C83B1CC31F7B3E23766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:d8:dd:b3:9a:ed:b5:4d:3e:b2:82:71:c6: 37:81:33:0d:ab:ea:fd:f9:8f:dc:f1:52:f2:a1:27: e9:03:d3:9b:bd:9c:8a:2f:e8:f9:0c:0a:5b:b3:c0: d3:4e:e0:95:ea:a4:e0:75:01:6b:5c:58:cf:28:9d: 26:43:24:bf:ee:6a:5d:50:b8:76:37:5b:b4:8b:3f: ac:26:9a:9e:91:50:d1:1d:9d:2b:eb:a6:68:69:2a: db:be:d5:b6:7c:94:c2:cb:ab:de:49:be:bc:72:1e: 5e:b7:e7:f0:da:0d:dc:40:b0:f0:53:54:fe:e3:b2: 0f:01:34:f9:67:9b:36:5a:d4:8b:3d:8a:d0:f7:9c: a6:ca:20:20:b3:7f:54:83:b8:8b:aa:e4:9b:73:59: 46:e1:09:da:53:6b:30:a1:56:32:44:22:41:ec:6f: 2b:fc:0d:10:8e:6f:59:36:54:e2:d6:64:25:66:c2: c3:69:c1:cf:55:a0:2b:6d:e0:74:86:c7:87:ee:a0: ac:6b:b6:21:56:0b:67:c6:6d:df:df:7a:58:81:6c: ed:04:97:5a:72:83:cc:cd:b8:88:13:f9:37:8f:5f: 0b:3f:62:8b:e1:1b:66:16:a7:eb:2d:26:2a:67:0c: 68:42:50:c6:ad:41:dc:e3:12:33:80:4e:23:fc:72: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:94:34:F7:51:84:73:C6:AC:D1:2C:83:B1:CC:31:F7:B3:E2:37:66 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f701::/48 Signature Algorithm: sha256WithRSAEncryption a2:87:14:47:ea:f9:37:b3:fe:33:9f:34:96:3d:e9:7c:68:62: b6:ca:0c:eb:b0:bb:76:91:ce:ae:a1:46:d9:ab:58:b6:7f:03: f4:47:c6:9a:30:e9:72:fb:ea:1b:bc:6f:71:78:ed:dd:0e:2b: 66:ba:37:e8:92:84:41:6c:28:97:16:8d:8e:5b:e0:bc:0f:4b: 16:47:e8:36:ef:2e:7a:64:99:12:76:f3:ab:41:e3:7a:b4:38: cf:66:f5:a5:ff:dc:07:30:4e:8a:e5:82:1b:cc:b3:42:c4:76: c9:1a:9b:0f:c3:0f:66:cd:f5:a1:d1:07:90:1c:8e:3b:2d:cb: b8:28:14:13:81:de:a9:c2:b1:f2:fc:e9:4c:71:a7:01:36:1d: a8:a5:33:0a:af:3d:75:8f:3a:ae:65:30:49:21:0c:d2:24:5b: 50:da:21:ea:9b:bc:e1:ae:7c:84:92:1a:3d:04:d0:ec:54:5d: 2c:4a:a5:ce:68:70:0d:1e:88:22:5e:ab:ff:2d:11:dc:4c:13: 3f:f0:68:13:6e:6a:23:10:73:32:42:a9:8e:25:53:b1:dd:89: 6d:3e:73:e3:13:9e:29:1c:79:af:bf:89:5d:35:24:83:d5:8b: 0a:5a:35:bd:c4:22:f3:1c:56:58:f5:b2:1c:0d:20:8c:09:82: 76:fe:41:83 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHhZld/7K/j9MOvLWJCra0G8+rnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MDcwMTUwNTVaFw0yNzA4MDYwMTU1NTVaMDMxMTAvBgNV BAMTKDQ3OTQzNEY3NTE4NDczQzZBQ0QxMkM4M0IxQ0MzMUY3QjNFMjM3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpM9jds5rttU0+soJxxjeBMw2r 6v35j9zxUvKhJ+kD05u9nIov6PkMCluzwNNO4JXqpOB1AWtcWM8onSZDJL/ual1Q uHY3W7SLP6wmmp6RUNEdnSvrpmhpKtu+1bZ8lMLLq95JvrxyHl635/DaDdxAsPBT VP7jsg8BNPlnmzZa1Is9itD3nKbKICCzf1SDuIuq5JtzWUbhCdpTazChVjJEIkHs byv8DRCOb1k2VOLWZCVmwsNpwc9VoCtt4HSGx4fuoKxrtiFWC2fGbd/feliBbO0E l1pyg8zNuIgT+TePXws/YovhG2YWp+stJipnDGhCUMatQdzjEjOATiP8cng/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUR5Q091GEc8as0SyDscwx97PiN2YwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cBMA0GCSqGSIb3DQEBCwUAA4IBAQCi hxRH6vk3s/4znzSWPel8aGK2ygzrsLt2kc6uoUbZq1i2fwP0R8aaMOly++obvG9x eO3dDitmujfokoRBbCiXFo2OW+C8D0sWR+g27y56ZJkSdvOrQeN6tDjPZvWl/9wH ME6K5YIbzLNCxHbJGpsPww9mzfWh0QeQHI47Lcu4KBQTgd6pwrHy/OlMcacBNh2o pTMKrz11jzquZTBJIQzSJFtQ2iHqm7zhrnyEkho9BNDsVF0sSqXOaHANHogiXqv/ LRHcTBM/8GgTbmojEHMyQqmOJVOx3YltPnPjE54pHHmvv4ldNSSD1YsKWjW9xCLz HFZY9bIcDSCMCYJ2/kGD -----END CERTIFICATE-----Generated at Thu Sep 10 12:46:45 2026 by rpki-client