$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: VeUJyfT74mzmYyns5eihJo8AIvB5/kXqpPen5nLIFGE= Subject key identifier: 6F:2A:52:4D:26:92:04:64:87:55:1E:65:76:36:A5:64:F7:93:B3:D7 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 5BE0726B3B8258D1B8B70A5C8615C0C3024D7C01 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa Signing time: Thu 06 Aug 2026 23:55:55 +0000 ROA not before: Thu 06 Aug 2026 23:50:55 +0000 ROA not after: Thu 05 Aug 2027 23:55:55 +0000 asID: 214955 IP address blocks: 2a14:7583:f743::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e0:72:6b:3b:82:58:d1:b8:b7:0a:5c:86:15:c0:c3:02:4d:7c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Aug 6 23:50:55 2026 GMT Not After : Aug 5 23:55:55 2027 GMT Subject: CN=6F2A524D2692046487551E657636A564F793B3D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:f8:26:d4:3d:fd:24:35:53:01:95:8c:ab: 52:80:09:f7:fa:82:de:7b:9a:6c:10:f5:e7:cb:7e: bc:e6:df:4b:19:be:86:06:0a:25:cc:b4:75:04:6e: e6:31:5c:73:42:4b:82:7c:a6:0b:58:64:f7:38:89: fd:31:58:fb:cc:88:6b:24:af:cd:44:d2:0f:d1:58: 9f:26:b6:f6:79:1e:4f:43:09:75:e3:9b:04:43:21: 56:55:5c:07:aa:1e:89:62:ed:30:f6:ca:1a:5e:ec: 42:7d:ca:ad:ca:3e:83:7d:87:5b:11:b2:33:c2:81: 66:ea:b9:27:a9:56:f9:16:8f:da:94:4e:76:3b:1b: ea:52:05:36:7a:b1:78:e7:e8:a4:06:81:67:9c:f9: c3:c4:60:38:8e:25:bf:06:79:4b:03:33:c5:42:0d: 8f:b9:5c:84:ac:92:c0:33:22:e4:87:bf:cc:7f:71: c4:0c:2d:f3:d5:a2:4b:da:f8:47:1c:95:65:f1:71: df:06:3f:7a:dc:94:a5:d8:aa:f2:0f:4e:b9:f4:37: b6:a3:fb:74:22:c3:1e:be:13:18:40:99:ab:7f:a1: 9f:73:08:46:04:ac:7a:c2:4d:88:a1:75:6a:12:ed: 51:04:e0:fb:24:66:68:88:cd:5f:7f:04:46:65:8c: ac:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2A:52:4D:26:92:04:64:87:55:1E:65:76:36:A5:64:F7:93:B3:D7 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f743::/48 Signature Algorithm: sha256WithRSAEncryption bf:78:1c:a3:2a:47:34:7a:e7:03:52:72:b3:b6:81:a9:73:2e: fd:86:02:b0:1b:99:67:55:55:2a:cc:b6:0c:d3:c2:a4:00:88: 64:c4:57:58:32:57:02:c3:26:e0:e7:8a:23:0b:2d:5c:67:f1: de:da:64:ca:75:9f:6e:f5:7a:d7:40:2c:e1:49:37:14:0b:5f: dc:4f:2c:56:b4:27:af:04:4e:bf:e7:ca:fa:d8:82:a4:84:52: 14:d3:07:de:8c:92:27:d4:ff:56:9d:81:62:4b:bf:e6:f0:dd: 9d:af:f3:75:aa:2d:28:76:07:a5:49:1a:a4:3c:89:1a:d7:df: 61:24:90:19:de:92:95:0d:3d:5d:cf:fd:e8:68:28:db:39:79: d3:d0:b0:fc:5d:de:12:fb:26:33:5a:3b:0c:5c:96:d5:38:3c: 9a:6e:9e:66:6a:e1:1e:3b:97:f7:38:bb:52:74:d7:ba:27:bb: 05:30:5a:36:cf:29:52:5c:f4:93:d3:b7:ec:a4:e2:73:fa:b0: 71:37:47:bb:d0:7c:51:32:bf:75:1f:f1:0c:16:fb:e3:04:4f: 1d:41:52:55:7f:f2:b1:50:f8:5a:17:09:6b:a6:83:a8:3b:0e: f6:bb:1c:38:db:df:c9:af:f5:e4:66:7f:9f:de:90:56:1b:50: dc:82:5e:96 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUW+ByazuCWNG4twpchhXAwwJNfAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNjA4MDYyMzUwNTVaFw0yNzA4MDUyMzU1NTVaMDMxMTAvBgNV BAMTKDZGMkE1MjREMjY5MjA0NjQ4NzU1MUU2NTc2MzZBNTY0Rjc5M0IzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMPgm1D39JDVTAZWMq1KACff6 gt57mmwQ9efLfrzm30sZvoYGCiXMtHUEbuYxXHNCS4J8pgtYZPc4if0xWPvMiGsk r81E0g/RWJ8mtvZ5Hk9DCXXjmwRDIVZVXAeqHoli7TD2yhpe7EJ9yq3KPoN9h1sR sjPCgWbquSepVvkWj9qUTnY7G+pSBTZ6sXjn6KQGgWec+cPEYDiOJb8GeUsDM8VC DY+5XISsksAzIuSHv8x/ccQMLfPVokva+EcclWXxcd8GP3rclKXYqvIPTrn0N7aj +3Qiwx6+ExhAmat/oZ9zCEYErHrCTYihdWoS7VEE4PskZmiIzV9/BEZljKynAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUbypSTSaSBGSHVR5ldjalZPeTs9cwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczNDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/dDMA0GCSqGSIb3DQEBCwUAA4IBAQC/ eByjKkc0eucDUnKztoGpcy79hgKwG5lnVVUqzLYM08KkAIhkxFdYMlcCwybg54oj Cy1cZ/He2mTKdZ9u9XrXQCzhSTcUC1/cTyxWtCevBE6/58r62IKkhFIU0wfejJIn 1P9WnYFiS7/m8N2dr/N1qi0odgelSRqkPIka199hJJAZ3pKVDT1dz/3oaCjbOXnT 0LD8Xd4S+yYzWjsMXJbVODyabp5mauEeO5f3OLtSdNe6J7sFMFo2zylSXPST07fs pOJz+rBxN0e70HxRMr91H/EMFvvjBE8dQVJVf/KxUPhaFwlrpoOoOw72uxw429/J r/XkZn+f3pBWG1Dcgl6W -----END CERTIFICATE-----Generated at Thu Sep 10 12:45:36 2026 by rpki-client