$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: WJ98gf+04bqCc2wkbW8PUQ1n6vcZpCFo8z1U88LIVjM= Subject key identifier: 7D:1E:1B:DC:FF:72:83:1C:5B:90:26:EC:89:39:82:6D:32:18:B5:3C Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 7CE4008ACD7C86FDF06BFDAE60B991B6D850B409 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa Signing time: Tue 25 Aug 2026 17:55:55 +0000 ROA not before: Tue 25 Aug 2026 17:50:55 +0000 ROA not after: Tue 24 Aug 2027 17:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f70a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e4:00:8a:cd:7c:86:fd:f0:6b:fd:ae:60:b9:91:b6:d8:50:b4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 25 17:50:55 2026 GMT Not After : Aug 24 17:55:55 2027 GMT Subject: CN=7D1E1BDCFF72831C5B9026EC8939826D3218B53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:95:03:9d:3d:a8:ed:aa:a1:1c:11:13:b9: 40:1e:45:94:d2:33:12:7c:84:b4:45:a9:7b:19:f9: 5c:38:69:48:4a:fc:f5:29:71:fe:f0:d9:fd:4e:b1: e4:ae:5a:60:6b:1a:0d:ef:43:03:b7:0b:5a:3f:d4: 4b:a3:93:88:79:89:bb:11:72:9b:48:2a:8d:a8:57: da:c5:75:48:8c:eb:3a:0c:2f:ac:b8:66:c4:2c:81: 2c:31:b3:fa:b8:f9:5a:76:c4:de:0d:db:7b:87:06: 1b:f0:c8:7c:da:d6:3e:ad:9a:f0:5d:a9:e5:8b:63: 72:41:b9:bc:a9:ea:9b:2e:f0:6b:57:3e:2e:ed:79: 74:93:e7:02:0c:f2:f0:14:87:4a:d5:d9:63:f6:27: fe:76:d1:8e:14:67:ae:9d:48:fb:7d:88:41:0e:13: 29:be:f9:b7:5d:1c:a8:02:5b:e8:b0:21:5c:c1:9e: 5f:71:14:cd:a6:8d:53:da:c4:13:fa:e4:ef:98:2d: 52:df:73:1a:ab:78:c9:81:db:29:86:41:54:10:a8: be:a9:17:7f:cd:90:36:15:67:7b:4f:8b:30:b9:2e: 8e:1b:aa:ac:d2:d1:23:b4:22:09:07:0c:5f:5f:8e: 2d:e1:c9:43:af:30:70:8d:c1:bc:a1:cf:ca:e5:8c: f2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1E:1B:DC:FF:72:83:1C:5B:90:26:EC:89:39:82:6D:32:18:B5:3C X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f70a::/48 Signature Algorithm: sha256WithRSAEncryption 80:21:96:d9:1a:c5:29:89:51:2a:dc:7c:8c:6e:54:4d:81:62: f1:0e:f8:f5:ff:ad:b4:94:d5:c1:f2:d4:1e:b8:b8:53:1a:85: b9:69:6b:c8:71:8d:81:b4:09:92:5a:fa:3f:5e:44:3b:9f:3f: c8:84:07:4a:c2:9b:c9:48:4e:db:2a:9a:0c:35:aa:8e:2b:de: ff:ab:5f:77:f1:15:81:9d:b3:5e:ef:3c:52:0c:2f:d5:2b:e2: 90:ce:42:ed:ff:ec:1f:bf:05:08:c3:66:a9:ca:a5:ae:a6:1f: 35:24:d0:c5:2b:30:f4:51:c2:14:c4:32:94:3f:f6:22:3a:8e: 07:a0:ca:48:c1:23:20:5b:e3:d5:87:ec:f1:0d:eb:77:38:a6: af:3f:4e:7b:cf:9e:d0:3e:19:e3:c9:ca:97:d8:41:72:d5:5b: 2d:76:b5:9c:19:25:68:de:c4:87:14:87:fd:8d:24:f6:a8:64: fc:82:3a:29:65:d8:d1:b3:a1:30:22:15:cf:49:90:85:52:4d: 47:19:3d:cf:83:7c:cc:1b:1f:ad:b7:da:63:ef:dc:5e:d7:d6: 7a:1b:de:68:0b:73:9c:b3:db:71:f2:77:70:e3:c8:09:8c:72: ae:0e:ed:61:6a:4d:05:c0:50:15:ea:2c:bc:bd:e0:78:38:88: ea:20:fe:fd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUfOQAis18hv3wa/2uYLmRtthQtAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MjUxNzUwNTVaFw0yNzA4MjQxNzU1NTVaMDMxMTAvBgNV BAMTKDdEMUUxQkRDRkY3MjgzMUM1QjkwMjZFQzg5Mzk4MjZEMzIxOEI1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlZUDnT2o7aqhHBETuUAeRZTS MxJ8hLRFqXsZ+Vw4aUhK/PUpcf7w2f1OseSuWmBrGg3vQwO3C1o/1Eujk4h5ibsR cptIKo2oV9rFdUiM6zoML6y4ZsQsgSwxs/q4+Vp2xN4N23uHBhvwyHza1j6tmvBd qeWLY3JBubyp6psu8GtXPi7teXST5wIM8vAUh0rV2WP2J/520Y4UZ66dSPt9iEEO Eym++bddHKgCW+iwIVzBnl9xFM2mjVPaxBP65O+YLVLfcxqreMmB2ymGQVQQqL6p F3/NkDYVZ3tPizC5Lo4bqqzS0SO0IgkHDF9fji3hyUOvMHCNwbyhz8rljPIlAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUfR4b3P9ygxxbkCbsiTmCbTIYtTwwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cKMA0GCSqGSIb3DQEBCwUAA4IBAQCA IZbZGsUpiVEq3HyMblRNgWLxDvj1/620lNXB8tQeuLhTGoW5aWvIcY2BtAmSWvo/ XkQ7nz/IhAdKwpvJSE7bKpoMNaqOK97/q1938RWBnbNe7zxSDC/VK+KQzkLt/+wf vwUIw2apyqWuph81JNDFKzD0UcIUxDKUP/YiOo4HoMpIwSMgW+PVh+zxDet3OKav P057z57QPhnjycqX2EFy1VstdrWcGSVo3sSHFIf9jST2qGT8gjopZdjRs6EwIhXP SZCFUk1HGT3Pg3zMGx+tt9pj79xe19Z6G95oC3Ocs9tx8ndw48gJjHKuDu1hak0F wFAV6iy8veB4OIjqIP79 -----END CERTIFICATE-----Generated at Thu Sep 10 17:06:23 2026 by rpki-client