$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: XpDNChEgWAEC6kMqtH8GJv2xEc4sQx1hwhkpRZvuOlU= Subject key identifier: 77:12:AA:ED:81:ED:6C:F6:2B:7A:9A:25:45:88:0A:84:28:5D:A0:98 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 7B58AF05DEB8C61D435326BEA7EF4BB53FA7C896 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa Signing time: Sat 15 Aug 2026 14:55:55 +0000 ROA not before: Sat 15 Aug 2026 14:50:55 +0000 ROA not after: Sat 14 Aug 2027 14:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f707::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:58:af:05:de:b8:c6:1d:43:53:26:be:a7:ef:4b:b5:3f:a7:c8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 15 14:50:55 2026 GMT Not After : Aug 14 14:55:55 2027 GMT Subject: CN=7712AAED81ED6CF62B7A9A2545880A84285DA098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:ed:1f:4d:1e:7e:7d:9d:cb:f9:3f:1a:d7: 90:32:b6:74:1f:2a:76:39:d0:f0:f0:e0:d4:6c:17: 46:19:a0:50:1c:f9:98:7a:bc:07:8a:59:50:f0:0f: ea:06:a6:00:df:6b:13:31:dc:ad:e3:b0:6b:aa:63: 37:79:38:af:00:39:b9:f7:8f:d4:86:1c:b3:c8:c0: 18:ca:94:79:44:0d:9c:e6:47:d6:84:88:f0:8e:f0: 87:03:fb:fb:09:82:b2:16:70:31:c4:35:d1:f6:07: 16:87:26:8f:4c:31:5c:a5:4b:d0:05:38:66:e8:8f: dd:c6:11:07:c4:16:dc:43:84:99:3d:75:99:e2:ff: 9e:11:56:86:6d:7c:1c:32:20:9e:d1:1b:19:81:e1: c2:57:2e:0a:6f:14:2a:b8:c7:6b:c8:9a:b1:49:78: 25:54:ed:11:e7:74:f0:1b:a8:27:da:c2:bd:72:bc: 01:51:8d:87:cc:fd:b5:39:20:88:dd:6a:54:cb:05: f1:3e:4e:76:89:1c:a1:d0:73:68:f8:b9:29:0b:ea: 8d:51:f1:76:4e:7d:bb:7c:f1:b0:1d:be:ce:d5:de: 8d:74:17:5c:ae:5b:88:a3:5f:e0:f4:3e:b5:53:bb: f4:f9:61:94:19:0a:85:8b:a1:7a:37:1d:33:e2:58: 66:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:12:AA:ED:81:ED:6C:F6:2B:7A:9A:25:45:88:0A:84:28:5D:A0:98 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f707::/48 Signature Algorithm: sha256WithRSAEncryption 5a:2d:79:d0:bf:31:33:c8:42:11:c0:ae:eb:1b:f3:e1:df:38: 15:66:7b:f2:75:f9:04:a0:34:b1:6b:d4:3e:41:f1:f0:ab:48: bb:97:ed:57:2e:e7:08:a2:e1:73:9e:24:da:25:13:9c:1e:c8: 3e:7b:b1:55:d5:51:93:0b:a7:1d:5b:65:88:dd:7b:5f:29:63: 86:86:af:1d:e7:aa:1e:4e:89:24:10:94:03:bd:b8:dc:99:4d: ea:30:4d:9b:7f:f3:3e:7a:9e:4f:0e:88:f7:7c:9f:bc:ad:c6: a1:89:42:55:3e:28:67:c9:04:5f:e4:e1:bb:2e:07:ab:62:03: 9b:8d:b6:8e:6f:62:fb:01:05:32:d1:53:0d:da:ef:ff:17:37: 27:a0:b9:b5:c3:42:cb:a5:0c:a8:fe:9c:b2:27:e7:c9:df:01: 58:03:b1:f3:84:55:de:a1:a4:53:ef:02:c6:41:74:0e:1f:29: 4a:09:96:47:a1:e9:23:14:0d:b7:e4:74:4a:aa:78:fc:eb:52: 84:27:6d:aa:06:4b:dc:e3:38:1f:6a:a2:dc:c9:4e:4b:ee:19: 00:3c:1f:ad:a5:39:4b:0e:a2:af:61:8c:55:95:d4:f0:90:9c: 59:a7:a2:4b:df:c6:fd:ca:dd:e0:4b:f1:71:f0:7c:98:8a:36: e1:07:5a:b2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUe1ivBd64xh1DUya+p+9LtT+nyJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MTUxNDUwNTVaFw0yNzA4MTQxNDU1NTVaMDMxMTAvBgNV BAMTKDc3MTJBQUVEODFFRDZDRjYyQjdBOUEyNTQ1ODgwQTg0Mjg1REEwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaR+0fTR5+fZ3L+T8a15AytnQf KnY50PDw4NRsF0YZoFAc+Zh6vAeKWVDwD+oGpgDfaxMx3K3jsGuqYzd5OK8AObn3 j9SGHLPIwBjKlHlEDZzmR9aEiPCO8IcD+/sJgrIWcDHENdH2BxaHJo9MMVylS9AF OGboj93GEQfEFtxDhJk9dZni/54RVoZtfBwyIJ7RGxmB4cJXLgpvFCq4x2vImrFJ eCVU7RHndPAbqCfawr1yvAFRjYfM/bU5IIjdalTLBfE+TnaJHKHQc2j4uSkL6o1R 8XZOfbt88bAdvs7V3o10F1yuW4ijX+D0PrVTu/T5YZQZCoWLoXo3HTPiWGbhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdxKq7YHtbPYrepolRYgKhChdoJgwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cHMA0GCSqGSIb3DQEBCwUAA4IBAQBa LXnQvzEzyEIRwK7rG/Ph3zgVZnvydfkEoDSxa9Q+QfHwq0i7l+1XLucIouFzniTa JROcHsg+e7FV1VGTC6cdW2WI3XtfKWOGhq8d56oeTokkEJQDvbjcmU3qME2bf/M+ ep5PDoj3fJ+8rcahiUJVPihnyQRf5OG7LgerYgObjbaOb2L7AQUy0VMN2u//Fzcn oLm1w0LLpQyo/pyyJ+fJ3wFYA7HzhFXeoaRT7wLGQXQOHylKCZZHoekjFA235HRK qnj861KEJ22qBkvc4zgfaqLcyU5L7hkAPB+tpTlLDqKvYYxVldTwkJxZp6JL38b9 yt3gS/Fx8HyYijbhB1qy -----END CERTIFICATE-----Generated at Thu Sep 10 19:42:32 2026 by rpki-client