$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: BfyLlDqF0Edwl/zOmuvfdcVLnc4obqrtPh+ZM8Sxf3A= Subject key identifier: 53:9E:9E:91:DB:67:78:0D:6F:E7:39:20:BA:DE:0D:FA:5D:17:E3:02 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 4590C05310BF989C3290F537736BF086A4DCD581 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa Signing time: Sat 15 Aug 2026 16:55:55 +0000 ROA not before: Sat 15 Aug 2026 16:50:55 +0000 ROA not after: Sat 14 Aug 2027 16:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f708::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:90:c0:53:10:bf:98:9c:32:90:f5:37:73:6b:f0:86:a4:dc:d5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 15 16:50:55 2026 GMT Not After : Aug 14 16:55:55 2027 GMT Subject: CN=539E9E91DB67780D6FE73920BADE0DFA5D17E302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:df:93:d3:7e:d6:c8:0e:b9:3c:91:21:c7: fc:c6:29:4c:c2:49:ad:d0:31:22:d4:08:33:d8:c6: 43:9a:b4:0d:15:7f:9c:ff:39:f4:5d:61:21:f7:d5: 25:83:fc:7c:d5:43:65:dd:54:b5:16:35:66:5f:85: 89:de:2f:77:36:a9:1d:b6:d1:a9:54:e4:1b:66:b5: 53:c5:be:27:9b:00:29:17:ff:1d:07:63:f8:ea:b3: 47:ea:ad:a9:0e:c3:fc:33:3e:1c:cb:ac:db:5d:d4: aa:07:cd:40:3b:a0:ec:04:c7:e2:b5:e3:4e:50:0d: cb:9b:42:fc:6f:65:69:c3:e0:8d:2b:ab:d5:07:b5: 77:15:23:d8:02:0d:e6:cb:52:a7:41:67:2e:53:0e: c9:1b:98:75:bd:ce:27:26:6a:98:52:61:f2:ad:aa: 9e:50:98:aa:ad:96:d7:ed:fa:15:15:d7:e3:8b:aa: c5:73:78:f5:67:27:3b:61:fc:68:20:0f:2e:3d:5d: 12:8c:c4:19:be:a3:80:5b:f7:dc:a2:d5:58:09:9b: 11:2c:19:46:d5:68:12:1b:e1:9a:e6:4e:f8:a6:0b: 03:22:75:21:5e:2d:a5:09:79:b3:23:f2:36:46:08: 3f:95:a0:ad:b4:98:9e:db:b5:c4:29:3d:cf:2d:db: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:9E:91:DB:67:78:0D:6F:E7:39:20:BA:DE:0D:FA:5D:17:E3:02 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f708::/48 Signature Algorithm: sha256WithRSAEncryption 48:f1:00:c3:43:f9:47:e0:c5:c2:3e:db:e4:c0:be:9f:31:56: 70:85:7a:75:83:56:ad:f8:83:27:06:99:b6:8a:51:34:d8:64: de:18:21:c5:bd:10:9b:81:3b:db:be:cb:e6:22:da:45:95:85: 50:e7:6d:61:6c:5a:51:38:e5:a9:fd:91:69:9a:a8:b6:c3:3d: c9:48:62:d7:30:1d:16:ac:f2:06:68:ae:f4:97:3e:c0:42:cb: 6f:7e:82:fd:88:1d:2c:42:65:ce:5d:71:92:91:f2:cd:6b:53: 5d:69:7b:d1:fa:4a:89:9a:64:85:d1:e2:1b:3e:50:ce:76:62: 93:d3:57:f2:72:91:f4:54:7a:e4:16:ab:44:f7:9a:d5:4d:a7: c5:ef:20:27:e2:cd:fd:f8:72:9f:3c:5b:fd:83:4b:d5:37:10: d6:bb:c8:cb:8b:c9:62:c4:91:af:7b:6f:2c:58:27:9e:dd:10: a8:69:5b:0c:65:b8:df:82:86:a7:db:8d:62:5d:65:69:48:46: d2:79:d9:df:bf:45:08:d6:de:d6:5a:07:3c:eb:cb:68:28:fe: 9b:1a:05:87:07:6a:45:ef:c2:e2:ec:63:44:8e:07:ce:9b:1a: c2:3e:6d:e9:f3:f1:b7:d4:e7:ae:11:d4:99:26:1a:29:43:4f: 24:ed:98:03 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURZDAUxC/mJwykPU3c2vwhqTc1YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MTUxNjUwNTVaFw0yNzA4MTQxNjU1NTVaMDMxMTAvBgNV BAMTKDUzOUU5RTkxREI2Nzc4MEQ2RkU3MzkyMEJBREUwREZBNUQxN0UzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/t+T037WyA65PJEhx/zGKUzC Sa3QMSLUCDPYxkOatA0Vf5z/OfRdYSH31SWD/HzVQ2XdVLUWNWZfhYneL3c2qR22 0alU5BtmtVPFviebACkX/x0HY/jqs0fqrakOw/wzPhzLrNtd1KoHzUA7oOwEx+K1 405QDcubQvxvZWnD4I0rq9UHtXcVI9gCDebLUqdBZy5TDskbmHW9zicmaphSYfKt qp5QmKqtltft+hUV1+OLqsVzePVnJzth/GggDy49XRKMxBm+o4Bb99yi1VgJmxEs GUbVaBIb4ZrmTvimCwMidSFeLaUJebMj8jZGCD+VoK20mJ7btcQpPc8t20hNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUU56ekdtneA1v5zkgut4N+l0X4wIwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cIMA0GCSqGSIb3DQEBCwUAA4IBAQBI 8QDDQ/lH4MXCPtvkwL6fMVZwhXp1g1at+IMnBpm2ilE02GTeGCHFvRCbgTvbvsvm ItpFlYVQ521hbFpROOWp/ZFpmqi2wz3JSGLXMB0WrPIGaK70lz7AQstvfoL9iB0s QmXOXXGSkfLNa1NdaXvR+kqJmmSF0eIbPlDOdmKT01fycpH0VHrkFqtE95rVTafF 7yAn4s39+HKfPFv9g0vVNxDWu8jLi8lixJGve28sWCee3RCoaVsMZbjfgoan241i XWVpSEbSednfv0UI1t7WWgc868toKP6bGgWHB2pF78Li7GNEjgfOmxrCPm3p8/G3 1OeuEdSZJhopQ08k7ZgD -----END CERTIFICATE-----Generated at Thu Sep 10 17:38:35 2026 by rpki-client