$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: bP6Vil1ntI/A7DETceUwP8FoIfBhjfD0YLUgBJ8zYgw= Subject key identifier: 11:D6:8B:6A:A4:AF:95:A6:2A:BD:D0:C8:78:15:3E:D8:8D:96:55:17 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 79F1AE2F3A97644D4C33CB0F7961DBC08413C7A0 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa Signing time: Tue 25 Aug 2026 03:55:55 +0000 ROA not before: Tue 25 Aug 2026 03:50:55 +0000 ROA not after: Tue 24 Aug 2027 03:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f709::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f1:ae:2f:3a:97:64:4d:4c:33:cb:0f:79:61:db:c0:84:13:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 25 03:50:55 2026 GMT Not After : Aug 24 03:55:55 2027 GMT Subject: CN=11D68B6AA4AF95A62ABDD0C878153ED88D965517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:ae:10:9c:55:ae:af:f8:46:3e:2d:3c:75: 5a:60:8a:97:e1:59:c9:c0:80:4c:d4:ca:3b:51:a9: 2b:09:51:4b:b9:4d:bb:e3:83:b7:e1:eb:4f:1b:3d: 2b:4e:7f:9d:aa:88:8d:e6:da:85:ca:54:13:82:4e: b6:0f:ea:ad:a5:44:3c:46:50:cd:7b:87:5a:8a:8f: 87:c8:0a:bf:e7:46:a1:08:e4:e5:c0:6a:54:66:04: 93:0a:03:d7:a0:8f:33:16:e3:e2:aa:4e:74:ec:fc: a7:aa:4e:22:58:0f:b7:6c:f2:e7:3d:52:06:36:89: 92:99:ad:66:f6:e5:f5:a0:c7:24:5d:cc:22:53:7d: 41:e6:f8:68:f5:f6:26:0b:74:71:d1:e8:fa:58:2d: 58:77:d1:fb:de:1a:a4:77:26:96:24:d2:46:fc:bc: 3f:a8:e8:70:46:fd:de:2a:38:bd:30:1e:45:5f:17: 87:3c:43:d2:27:91:36:85:89:97:36:d7:f2:3e:4c: 72:5e:8a:04:30:40:fc:c9:72:20:b6:28:b3:e2:93: ff:14:a0:f6:22:bd:cb:8d:f9:ae:39:62:b5:14:68: c0:f7:8b:52:bc:38:da:72:cb:b6:7a:a4:48:c1:21: 3f:7f:70:8a:d1:b9:6e:a8:0f:9e:63:0e:a6:eb:b3: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D6:8B:6A:A4:AF:95:A6:2A:BD:D0:C8:78:15:3E:D8:8D:96:55:17 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f709::/48 Signature Algorithm: sha256WithRSAEncryption 55:93:43:0d:53:7b:c8:29:16:79:52:27:66:2b:21:80:90:3f: b3:ad:7b:48:39:68:f2:19:50:ce:66:bb:27:07:15:19:33:93: ea:4d:46:85:5e:35:0b:88:e7:88:e7:11:f4:d5:ff:13:dd:15: fd:eb:2a:48:59:ff:bd:71:c0:00:38:3d:ed:45:f1:6a:ff:c4: fd:66:4d:7a:ac:76:f1:60:41:1e:d0:4b:59:6f:de:fb:ba:48: 09:88:52:c7:68:b4:85:bd:4b:10:c2:99:d2:e8:af:47:ce:21: f1:8e:df:0a:eb:c6:3d:9a:8c:a9:be:32:45:0b:cc:cf:10:df: 92:23:89:14:98:b7:14:41:70:a9:cf:85:3b:4f:be:7f:5d:49: 37:b4:bd:59:70:73:ed:00:0f:33:c8:60:ac:91:c1:6e:04:cd: ef:f5:ba:5d:9e:ee:ac:58:5f:bd:70:e7:5d:bf:c1:b2:f3:d2: af:65:e1:9d:7b:63:57:bf:4f:f7:5a:91:71:18:22:9f:bb:b3: df:14:03:91:bf:20:76:23:37:f4:74:12:39:63:8f:f2:23:1c: b8:6c:d1:8d:e7:59:4a:5a:4e:c6:69:d7:cd:f2:5b:c7:21:e2: 87:e8:68:85:d7:b4:17:34:88:f5:0e:17:4a:3b:f3:c4:43:65: 9a:de:2f:82 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUefGuLzqXZE1MM8sPeWHbwIQTx6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MjUwMzUwNTVaFw0yNzA4MjQwMzU1NTVaMDMxMTAvBgNV BAMTKDExRDY4QjZBQTRBRjk1QTYyQUJERDBDODc4MTUzRUQ4OEQ5NjU1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNE64QnFWur/hGPi08dVpgipfh WcnAgEzUyjtRqSsJUUu5Tbvjg7fh608bPStOf52qiI3m2oXKVBOCTrYP6q2lRDxG UM17h1qKj4fICr/nRqEI5OXAalRmBJMKA9egjzMW4+KqTnTs/KeqTiJYD7ds8uc9 UgY2iZKZrWb25fWgxyRdzCJTfUHm+Gj19iYLdHHR6PpYLVh30fveGqR3JpYk0kb8 vD+o6HBG/d4qOL0wHkVfF4c8Q9InkTaFiZc21/I+THJeigQwQPzJciC2KLPik/8U oPYivcuN+a45YrUUaMD3i1K8ONpyy7Z6pEjBIT9/cIrRuW6oD55jDqbrs5F/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUEdaLaqSvlaYqvdDIeBU+2I2WVRcwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cJMA0GCSqGSIb3DQEBCwUAA4IBAQBV k0MNU3vIKRZ5UidmKyGAkD+zrXtIOWjyGVDOZrsnBxUZM5PqTUaFXjULiOeI5xH0 1f8T3RX96ypIWf+9ccAAOD3tRfFq/8T9Zk16rHbxYEEe0EtZb977ukgJiFLHaLSF vUsQwpnS6K9HziHxjt8K68Y9moypvjJFC8zPEN+SI4kUmLcUQXCpz4U7T75/XUk3 tL1ZcHPtAA8zyGCskcFuBM3v9bpdnu6sWF+9cOddv8Gy89KvZeGde2NXv0/3WpFx GCKfu7PfFAORvyB2Izf0dBI5Y4/yIxy4bNGN51lKWk7GadfN8lvHIeKH6GiF17QX NIj1DhdKO/PEQ2Wa3i+C -----END CERTIFICATE-----Generated at Thu Sep 10 17:47:27 2026 by rpki-client