$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: C17xF/SvFNgTZ+VDgUs7ZyetbfwwqZRUzPBPCIMJ6AY= Subject key identifier: 91:B2:67:02:CF:04:DE:01:D8:B3:92:0A:C9:8C:59:73:5E:DB:BB:CE Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 2D064990C675C72C591DAAD2F388B2DAA06F61F4 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa Signing time: Wed 12 Aug 2026 08:55:55 +0000 ROA not before: Wed 12 Aug 2026 08:50:55 +0000 ROA not after: Wed 11 Aug 2027 08:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f704::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:06:49:90:c6:75:c7:2c:59:1d:aa:d2:f3:88:b2:da:a0:6f:61:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 12 08:50:55 2026 GMT Not After : Aug 11 08:55:55 2027 GMT Subject: CN=91B26702CF04DE01D8B3920AC98C59735EDBBBCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:5b:cb:3c:6a:eb:a2:17:d5:2f:db:84:90: 14:79:e0:7f:1b:2c:50:3b:a9:8c:c3:51:df:4f:f8: 14:ef:38:bb:07:d7:2c:4a:7c:2f:2e:b0:6b:3b:26: a5:ba:ad:b6:c2:8f:81:e6:5a:cd:cb:21:95:10:8b: 6b:c5:43:ad:ea:86:b3:7f:fa:59:8e:75:bb:89:12: de:7f:39:5f:4f:8d:28:d4:66:21:b1:28:b7:3b:16: eb:47:8a:70:2e:46:8c:37:90:94:c0:f7:3a:84:31: 31:57:4d:89:d7:fc:85:ac:5c:64:ef:4c:b1:82:a7: 03:bb:b8:e2:26:22:89:77:f8:c1:84:1a:bc:1f:b6: 39:6f:bb:10:78:96:e2:76:9f:f1:49:36:67:c8:14: fa:74:3a:47:fa:8d:b5:7b:79:48:5e:72:c8:1e:3e: 4b:45:be:a8:51:cd:c4:af:a4:5a:cf:46:0e:8f:1a: 3a:b3:82:5f:12:49:67:f4:6e:d2:c9:8a:0c:9e:1c: ba:63:55:c2:04:e6:03:44:e5:b4:b2:50:63:0a:77: 2a:cc:6b:ce:f4:71:b9:29:e3:6e:77:e4:5d:2a:8d: 4e:89:1d:15:8f:ab:53:8b:20:38:9a:d6:56:15:75: c6:91:9b:f4:85:df:b4:9f:cb:7d:42:dc:a1:d5:e5: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:67:02:CF:04:DE:01:D8:B3:92:0A:C9:8C:59:73:5E:DB:BB:CE X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f704::/48 Signature Algorithm: sha256WithRSAEncryption 9d:74:6f:d2:fb:c3:10:2e:39:cb:a2:34:ce:1d:42:a6:dc:8a: 73:b7:05:41:fc:60:16:9f:53:c5:e7:76:ee:47:af:cb:ae:8e: 01:28:e7:a6:c0:f3:ce:7e:90:20:24:64:23:2b:ef:e9:9a:7e: e1:46:74:e3:cf:55:0f:83:55:62:06:23:de:57:96:3d:2c:0c: 34:60:38:80:a4:dd:04:63:c9:41:9f:bd:e5:25:99:b1:b3:ab: a5:48:45:e8:71:4d:1c:b2:80:85:31:5f:df:ae:0b:02:85:81: 6e:2f:5c:8b:fb:20:61:ec:2d:e5:e9:21:09:5a:9c:96:82:cc: 3b:8c:30:0d:48:64:ec:5c:3f:ca:9e:eb:70:1a:a9:d9:f0:98: 79:a3:8a:f1:08:07:4a:7b:fa:d2:a0:48:17:a1:27:89:86:cd: 8c:00:83:a2:15:93:9a:c2:55:84:5e:f0:3b:6a:ba:4f:de:86: e1:aa:39:b0:ac:9d:78:ec:9e:eb:6e:f6:f9:b4:4a:94:e9:a3: 07:f7:d8:d5:c9:89:07:aa:79:5e:bb:ab:b6:6c:e5:e3:1d:70: 3f:d8:f6:7d:41:05:2d:71:35:af:5b:e8:c5:fc:f8:67:c8:23: 67:f7:4d:8e:5b:48:66:5a:13:3b:cb:da:cf:08:fc:96:70:40: 3d:5d:d7:aa -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULQZJkMZ1xyxZHarS84iy2qBvYfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MTIwODUwNTVaFw0yNzA4MTEwODU1NTVaMDMxMTAvBgNV BAMTKDkxQjI2NzAyQ0YwNERFMDFEOEIzOTIwQUM5OEM1OTczNUVEQkJCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQFvLPGrrohfVL9uEkBR54H8b LFA7qYzDUd9P+BTvOLsH1yxKfC8usGs7JqW6rbbCj4HmWs3LIZUQi2vFQ63qhrN/ +lmOdbuJEt5/OV9PjSjUZiGxKLc7FutHinAuRow3kJTA9zqEMTFXTYnX/IWsXGTv TLGCpwO7uOImIol3+MGEGrwftjlvuxB4luJ2n/FJNmfIFPp0Okf6jbV7eUhecsge PktFvqhRzcSvpFrPRg6PGjqzgl8SSWf0btLJigyeHLpjVcIE5gNE5bSyUGMKdyrM a870cbkp42535F0qjU6JHRWPq1OLIDia1lYVdcaRm/SF37Sfy31C3KHV5StfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUkbJnAs8E3gHYs5IKyYxZc17bu84wHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cEMA0GCSqGSIb3DQEBCwUAA4IBAQCd dG/S+8MQLjnLojTOHUKm3IpztwVB/GAWn1PF53buR6/Lro4BKOemwPPOfpAgJGQj K+/pmn7hRnTjz1UPg1ViBiPeV5Y9LAw0YDiApN0EY8lBn73lJZmxs6ulSEXocU0c soCFMV/frgsChYFuL1yL+yBh7C3l6SEJWpyWgsw7jDANSGTsXD/KnutwGqnZ8Jh5 o4rxCAdKe/rSoEgXoSeJhs2MAIOiFZOawlWEXvA7arpP3obhqjmwrJ147J7rbvb5 tEqU6aMH99jVyYkHqnleu6u2bOXjHXA/2PZ9QQUtcTWvW+jF/PhnyCNn902OW0hm WhM7y9rPCPyWcEA9Xdeq -----END CERTIFICATE-----Generated at Thu Sep 10 13:23:55 2026 by rpki-client