$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: T8xZyybzsyw+7Y6G2xpepmRbN1sxHF8csgmYS+6ax4g= Subject key identifier: 3A:53:04:9A:DF:32:F6:D1:2B:91:7E:FA:68:43:96:4E:8E:6E:D6:46 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 34B76AA70D7CFF6C141FC003071FBEC822CD0C02 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa Signing time: Sun 09 Aug 2026 14:55:55 +0000 ROA not before: Sun 09 Aug 2026 14:50:55 +0000 ROA not after: Sun 08 Aug 2027 14:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f702::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b7:6a:a7:0d:7c:ff:6c:14:1f:c0:03:07:1f:be:c8:22:cd:0c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 9 14:50:55 2026 GMT Not After : Aug 8 14:55:55 2027 GMT Subject: CN=3A53049ADF32F6D12B917EFA6843964E8E6ED646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:64:db:6e:3d:9a:a2:6b:f1:b7:8a:15:82: b3:0b:ab:4e:9f:15:32:8c:dd:b1:6e:36:60:66:98: 66:05:38:19:a1:97:12:b3:d2:dc:31:43:82:8c:a2: 30:24:ac:72:cc:4b:fe:9c:6e:e6:61:65:5d:c8:7b: 92:7c:fd:ec:08:d2:d8:ff:a3:cd:ba:10:0f:f6:62: 89:d7:41:26:7e:22:c5:b9:c3:9b:bc:58:79:b1:2a: 12:2a:cf:cc:87:ee:98:eb:e6:8a:bf:40:99:bd:b2: 57:96:38:3f:58:8a:42:a1:9b:d6:d2:e5:57:2c:d0: 6c:3a:2e:66:78:72:23:8a:b0:9f:5c:50:58:88:17: 51:9c:a7:80:c3:00:e2:9e:dd:55:80:fe:16:0c:a0: 4c:4b:e8:1c:02:7d:e5:f8:34:d4:53:0a:3e:b2:56: 08:7e:42:04:ce:c6:03:62:cb:1a:29:00:10:71:b1: f0:51:10:1c:62:dc:32:7c:93:5e:60:3a:a1:59:12: 0c:69:74:c7:9e:11:78:93:d8:6d:a7:16:44:1e:a7: 88:ee:79:6a:64:de:c7:31:d7:38:6d:23:8b:5a:d7: cb:f5:5a:48:81:c5:a1:e1:5c:98:07:70:2c:c8:5c: 5a:74:02:c4:88:61:01:fc:54:f3:90:d9:5d:0f:e4: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:04:9A:DF:32:F6:D1:2B:91:7E:FA:68:43:96:4E:8E:6E:D6:46 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f702::/48 Signature Algorithm: sha256WithRSAEncryption 51:7d:d7:45:ec:10:73:53:94:90:f1:73:68:cf:ea:5e:91:d5: 94:11:0b:b2:47:e2:a4:85:bb:e0:ce:53:94:5b:66:8c:6a:11: bb:ec:45:42:86:90:31:fe:ad:e5:ca:26:1d:5a:95:0e:87:0e: e3:cc:48:e2:9e:51:9d:68:7c:2b:91:36:f3:83:93:0b:1c:3d: bb:65:e4:18:1a:a0:ec:95:54:5b:6c:93:df:8f:48:50:04:cf: 21:30:25:42:86:07:98:67:4f:33:f1:80:6d:c0:99:d9:6f:b3: 47:86:6d:3c:9e:fb:9f:d9:bc:92:bf:d2:81:2d:8f:77:f9:0d: 63:f4:3f:6a:55:98:f1:aa:67:c5:4b:03:88:f4:eb:47:40:5a: a1:98:74:7e:db:6d:32:90:39:7b:f3:43:7c:11:2e:a4:1e:4b: 28:cf:a6:d7:70:78:01:76:85:0f:3b:d7:6b:4b:2f:be:f6:b5: d2:54:23:a8:3e:56:51:1d:3a:9f:23:ee:75:68:af:dd:9d:35: 55:2e:37:7b:be:9e:9f:25:2f:91:01:c9:bb:1c:d9:70:15:64: 77:cb:6a:b0:dd:77:5d:4b:da:1a:1b:13:99:ad:64:52:b1:d4: 7d:3a:de:23:a4:43:e0:c6:45:3d:6d:c8:2a:a9:41:df:46:97: 1d:3d:f5:6b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUNLdqpw18/2wUH8ADBx++yCLNDAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MDkxNDUwNTVaFw0yNzA4MDgxNDU1NTVaMDMxMTAvBgNV BAMTKDNBNTMwNDlBREYzMkY2RDEyQjkxN0VGQTY4NDM5NjRFOEU2RUQ2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASGTbbj2aomvxt4oVgrMLq06f FTKM3bFuNmBmmGYFOBmhlxKz0twxQ4KMojAkrHLMS/6cbuZhZV3Ie5J8/ewI0tj/ o826EA/2YonXQSZ+IsW5w5u8WHmxKhIqz8yH7pjr5oq/QJm9sleWOD9YikKhm9bS 5Vcs0Gw6LmZ4ciOKsJ9cUFiIF1Gcp4DDAOKe3VWA/hYMoExL6BwCfeX4NNRTCj6y Vgh+QgTOxgNiyxopABBxsfBREBxi3DJ8k15gOqFZEgxpdMeeEXiT2G2nFkQep4ju eWpk3scx1zhtI4ta18v1WkiBxaHhXJgHcCzIXFp0AsSIYQH8VPOQ2V0P5BztAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUOlMEmt8y9tErkX76aEOWTo5u1kYwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cCMA0GCSqGSIb3DQEBCwUAA4IBAQBR fddF7BBzU5SQ8XNoz+pekdWUEQuyR+KkhbvgzlOUW2aMahG77EVChpAx/q3lyiYd WpUOhw7jzEjinlGdaHwrkTbzg5MLHD27ZeQYGqDslVRbbJPfj0hQBM8hMCVChgeY Z08z8YBtwJnZb7NHhm08nvuf2bySv9KBLY93+Q1j9D9qVZjxqmfFSwOI9OtHQFqh mHR+220ykDl780N8ES6kHksoz6bXcHgBdoUPO9drSy++9rXSVCOoPlZRHTqfI+51 aK/dnTVVLjd7vp6fJS+RAcm7HNlwFWR3y2qw3XddS9oaGxOZrWRSsdR9Ot4jpEPg xkU9bcgqqUHfRpcdPfVr -----END CERTIFICATE-----Generated at Thu Sep 10 13:24:19 2026 by rpki-client