$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: Y5G8XKTZkVVsjw8mhjg5SqlJ1TRgLMIPSRTRFixRX5M= Subject key identifier: 35:ED:04:A3:98:54:AA:B3:40:D3:BD:EA:64:04:1B:31:6A:71:87:E0 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 5409292DD8D8FBF201C8EDFAADE092D6FBC3DB1F Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa Signing time: Wed 12 Aug 2026 09:55:55 +0000 ROA not before: Wed 12 Aug 2026 09:50:55 +0000 ROA not after: Wed 11 Aug 2027 09:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f705::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:09:29:2d:d8:d8:fb:f2:01:c8:ed:fa:ad:e0:92:d6:fb:c3:db:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 12 09:50:55 2026 GMT Not After : Aug 11 09:55:55 2027 GMT Subject: CN=35ED04A39854AAB340D3BDEA64041B316A7187E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:d8:9d:ec:e1:55:99:42:ce:3b:2d:46:88: f1:25:3b:81:3c:00:6d:c2:97:51:05:b9:58:12:9f: 7c:33:28:f1:c3:f9:7e:96:91:d6:54:9a:90:1e:81: 94:6a:e2:d7:07:1d:fd:e1:17:a9:ed:e4:32:f4:5b: 8e:fc:93:c3:1e:c4:66:af:e9:ae:6f:ad:68:af:7d: 05:3d:29:27:d0:24:36:62:5f:0c:a4:c7:ba:4f:a1: 25:2a:8a:7f:d6:5d:13:10:f1:28:a5:40:18:33:c0: ae:3b:2e:2f:89:3c:27:7d:b0:ef:18:4e:82:84:4a: 80:bd:fb:86:19:ac:95:32:8d:bc:ab:e3:2a:65:0c: bf:89:8d:c3:1f:5f:b4:4a:f3:1f:3f:70:c6:3d:d8: 23:d3:d1:0c:af:70:c5:44:7d:35:47:d8:0a:04:a4: 98:ab:9c:d7:63:4e:16:3c:cb:55:b9:a2:53:34:32: 79:46:5f:b7:c8:1b:2c:cd:31:d8:09:a0:ad:e4:0d: 4b:b5:cf:ed:7a:96:c9:a1:8e:aa:87:b9:2a:82:e0: 5c:65:6e:8a:ee:f1:d4:57:7e:f1:0e:ee:d1:46:eb: a7:d4:0a:bb:5c:08:30:d5:af:35:a1:b0:67:a4:81: bf:e9:a1:b2:35:0b:35:41:e7:bc:6a:e5:f8:dd:13: a2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:ED:04:A3:98:54:AA:B3:40:D3:BD:EA:64:04:1B:31:6A:71:87:E0 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f705::/48 Signature Algorithm: sha256WithRSAEncryption 2a:36:b1:04:fd:4c:5f:4b:32:e9:48:ad:32:40:49:c2:60:ab: 11:45:fa:1e:74:5c:1e:a7:08:93:94:eb:77:29:a3:bc:1a:62: 38:d3:bb:01:06:ef:04:b9:d0:46:a2:77:d4:4f:d0:11:fb:ae: 9d:9c:d3:f8:75:93:4f:67:89:62:31:d9:86:d6:7d:df:17:4f: 10:51:6d:d6:d7:cd:31:c8:28:c8:d8:a2:15:66:38:77:73:43: 35:1d:ab:a2:55:88:0a:66:41:8f:ee:8c:71:af:2f:75:90:9a: 5f:b2:6c:b7:54:bc:4f:5e:1e:16:22:fe:83:4f:05:67:aa:26: 20:d1:fc:5a:e4:73:87:b8:3e:79:63:46:cb:f9:94:2e:e7:78: f3:25:bc:ef:5b:c7:87:95:4e:2c:65:5e:da:ec:78:74:a4:87: ca:08:19:55:7f:9a:29:5a:93:ee:08:77:16:de:2e:b7:3c:bc: 7a:65:a6:02:29:5b:eb:a0:3d:69:b1:14:e9:32:72:5f:98:e7: dd:67:bf:56:15:d8:df:ac:7d:01:8d:69:e7:4b:27:62:6e:68: 5d:c5:22:96:86:92:23:01:18:6d:b2:08:32:44:c6:27:76:80: 28:74:8d:84:a9:bc:f3:17:13:ff:be:21:5a:f8:bd:d6:ec:6c: 6c:38:61:89 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVAkpLdjY+/IByO36reCS1vvD2x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MTIwOTUwNTVaFw0yNzA4MTEwOTU1NTVaMDMxMTAvBgNV BAMTKDM1RUQwNEEzOTg1NEFBQjM0MEQzQkRFQTY0MDQxQjMxNkE3MTg3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFctid7OFVmULOOy1GiPElO4E8 AG3Cl1EFuVgSn3wzKPHD+X6WkdZUmpAegZRq4tcHHf3hF6nt5DL0W478k8MexGav 6a5vrWivfQU9KSfQJDZiXwykx7pPoSUqin/WXRMQ8SilQBgzwK47Li+JPCd9sO8Y ToKESoC9+4YZrJUyjbyr4yplDL+JjcMfX7RK8x8/cMY92CPT0QyvcMVEfTVH2AoE pJirnNdjThY8y1W5olM0MnlGX7fIGyzNMdgJoK3kDUu1z+16lsmhjqqHuSqC4Fxl boru8dRXfvEO7tFG66fUCrtcCDDVrzWhsGekgb/pobI1CzVB57xq5fjdE6KtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUNe0Eo5hUqrNA073qZAQbMWpxh+AwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cFMA0GCSqGSIb3DQEBCwUAA4IBAQAq NrEE/UxfSzLpSK0yQEnCYKsRRfoedFwepwiTlOt3KaO8GmI407sBBu8EudBGonfU T9AR+66dnNP4dZNPZ4liMdmG1n3fF08QUW3W180xyCjI2KIVZjh3c0M1HauiVYgK ZkGP7oxxry91kJpfsmy3VLxPXh4WIv6DTwVnqiYg0fxa5HOHuD55Y0bL+ZQu53jz JbzvW8eHlU4sZV7a7Hh0pIfKCBlVf5opWpPuCHcW3i63PLx6ZaYCKVvroD1psRTp MnJfmOfdZ79WFdjfrH0BjWnnSydibmhdxSKWhpIjARhtsggyRMYndoAodI2Eqbzz FxP/viFa+L3W7GxsOGGJ -----END CERTIFICATE-----Generated at Thu Sep 10 14:54:01 2026 by rpki-client