$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: CplFscx8cCO4S8dYM048y2aNxXev0VXDMkExRtnK2o8= Subject key identifier: 4F:DD:5A:41:7B:B2:7E:55:C9:F4:34:62:66:98:FB:6B:B8:01:EA:13 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 2DE7E88D72569F6B62E4926FA36B6161917D50C7 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa Signing time: Mon 10 Aug 2026 00:55:55 +0000 ROA not before: Mon 10 Aug 2026 00:50:55 +0000 ROA not after: Mon 09 Aug 2027 00:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f703::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e7:e8:8d:72:56:9f:6b:62:e4:92:6f:a3:6b:61:61:91:7d:50:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 10 00:50:55 2026 GMT Not After : Aug 9 00:55:55 2027 GMT Subject: CN=4FDD5A417BB27E55C9F434626698FB6BB801EA13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:95:05:b9:33:8d:d0:24:07:a6:9a:af:95: 3c:63:0a:fb:1e:21:98:1a:47:dd:a0:bc:4e:f4:88: 62:57:1d:12:6f:df:a3:e5:3b:29:71:2f:c2:fe:57: 7c:91:00:a6:4f:ea:42:90:ec:fd:10:b1:a2:46:32: 39:2c:90:2a:52:d5:27:b4:f4:fc:e6:2e:a3:1d:e4: f9:38:7f:11:20:78:38:0b:01:3b:89:4b:ce:b1:f5: b8:e5:07:6b:01:65:c8:16:b5:d6:a7:3d:78:c0:f8: 9c:bd:11:42:98:b7:d5:d3:3d:28:16:32:2c:7d:b0: 2b:06:5d:3a:71:f2:b8:b7:ef:54:0b:a1:fe:08:46: d6:6b:ab:85:20:8c:e8:2d:67:dc:17:f4:e2:4e:3b: 5e:14:32:9f:09:f6:82:de:18:90:44:aa:5e:5e:11: a9:e0:6b:b5:97:64:b6:e7:cf:8b:54:1a:9f:a9:c6: c9:31:b4:17:f9:2c:7e:68:d2:c6:bc:bc:bb:40:6f: 51:c0:0c:2b:88:3a:23:fb:ab:2a:97:59:07:c1:3e: 12:16:25:ce:6d:ba:e3:54:bb:7e:de:33:c9:36:cf: 81:db:ce:9c:e8:c5:b6:3b:4d:0b:42:08:70:14:04: 4b:61:d6:3f:ae:5d:2c:09:d1:04:d7:f1:7b:64:85: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DD:5A:41:7B:B2:7E:55:C9:F4:34:62:66:98:FB:6B:B8:01:EA:13 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f703::/48 Signature Algorithm: sha256WithRSAEncryption 7b:d4:13:55:3b:a2:f0:80:8c:54:b2:14:09:52:d5:59:c6:f6: 22:73:a5:a3:d2:e4:0f:63:24:d6:db:3e:f7:53:c3:b9:3e:46: 4c:74:d0:df:33:8c:9f:82:da:d0:20:cb:f1:99:52:26:e9:c3: 93:00:82:37:18:19:d2:b3:c1:c4:c8:5c:83:25:b3:d9:48:76: 5e:3b:40:1f:4c:76:ef:38:8a:2b:43:0c:31:de:c7:8e:21:85: ad:c4:42:fa:14:0e:1a:c9:ad:ab:43:7d:c9:44:cc:68:7c:31: ad:d3:3a:e7:b6:05:08:33:c3:6a:34:7a:b4:47:96:e5:12:c1: 3b:4f:51:78:cb:6b:c0:75:bc:f4:b8:e7:e5:17:45:72:7c:28: 12:02:4b:13:c6:99:c6:ed:af:b6:56:c5:23:f6:96:da:af:f8: 95:d4:79:a7:a5:dd:43:42:22:23:6b:7f:38:a1:12:d7:f2:e4: 3a:88:29:d8:ab:b3:98:6e:f6:ec:7c:b1:85:11:1b:09:5a:ad: 39:07:7d:a9:0d:ee:55:69:ef:8a:d3:f0:fd:c1:49:9f:b6:86: c4:34:ad:13:27:8d:2d:b6:de:4d:c6:be:2d:af:0b:a5:94:3a: 94:7c:e4:6a:4d:29:52:8b:97:5a:29:4d:10:f3:1e:75:75:6d: 2a:a5:f0:ce -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULefojXJWn2ti5JJvo2thYZF9UMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MTAwMDUwNTVaFw0yNzA4MDkwMDU1NTVaMDMxMTAvBgNV BAMTKDRGREQ1QTQxN0JCMjdFNTVDOUY0MzQ2MjY2OThGQjZCQjgwMUVBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQppUFuTON0CQHppqvlTxjCvse IZgaR92gvE70iGJXHRJv36PlOylxL8L+V3yRAKZP6kKQ7P0QsaJGMjkskCpS1Se0 9PzmLqMd5Pk4fxEgeDgLATuJS86x9bjlB2sBZcgWtdanPXjA+Jy9EUKYt9XTPSgW Mix9sCsGXTpx8ri371QLof4IRtZrq4UgjOgtZ9wX9OJOO14UMp8J9oLeGJBEql5e Eanga7WXZLbnz4tUGp+pxskxtBf5LH5o0sa8vLtAb1HADCuIOiP7qyqXWQfBPhIW Jc5tuuNUu37eM8k2z4HbzpzoxbY7TQtCCHAUBEth1j+uXSwJ0QTX8XtkheIfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUT91aQXuyflXJ9DRiZpj7a7gB6hMwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cDMA0GCSqGSIb3DQEBCwUAA4IBAQB7 1BNVO6LwgIxUshQJUtVZxvYic6Wj0uQPYyTW2z73U8O5PkZMdNDfM4yfgtrQIMvx mVIm6cOTAII3GBnSs8HEyFyDJbPZSHZeO0AfTHbvOIorQwwx3seOIYWtxEL6FA4a ya2rQ33JRMxofDGt0zrntgUIM8NqNHq0R5blEsE7T1F4y2vAdbz0uOflF0VyfCgS AksTxpnG7a+2VsUj9pbar/iV1Hmnpd1DQiIja384oRLX8uQ6iCnYq7OYbvbsfLGF ERsJWq05B32pDe5Vae+K0/D9wUmftobENK0TJ40ttt5Nxr4trwullDqUfORqTSlS i5daKU0Q8x51dW0qpfDO -----END CERTIFICATE-----Generated at Thu Sep 10 17:38:43 2026 by rpki-client