$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa File: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (raw, json) Hash identifier: oaOjsA/ea8mh2yvq3UO+jvNNoyPO/R0rHNTp+hGKo9A= Subject key identifier: B4:F2:06:C8:A1:79:0F:D3:75:4F:C6:3E:D7:E3:6C:AF:36:CF:DC:03 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 34EABD7E9A6074FB251BFA55D03AFC7079E72E3B Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa Signing time: Sun 23 Aug 2026 00:24:05 +0000 ROA not before: Sun 23 Aug 2026 00:19:05 +0000 ROA not after: Sun 22 Aug 2027 00:24:05 +0000 asID: 208453 IP address blocks: 2a14:1ec7:f00f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Aug 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ea:bd:7e:9a:60:74:fb:25:1b:fa:55:d0:3a:fc:70:79:e7:2e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Aug 23 00:19:05 2026 GMT Not After : Aug 22 00:24:05 2027 GMT Subject: CN=B4F206C8A1790FD3754FC63ED7E36CAF36CFDC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:3c:4a:1f:47:a2:5a:4b:15:2e:28:29:65: 85:d0:65:f1:20:03:21:38:33:96:5e:5a:3f:95:1c: b6:75:7f:52:54:3e:61:64:7a:d2:c8:35:af:8e:6b: d7:c2:11:d8:c0:8e:35:39:6d:9d:bb:4a:24:50:e4: 51:69:3f:c6:5c:35:fd:14:04:2c:2d:7d:70:c5:93: 35:1c:d1:aa:74:66:c3:a3:ed:9e:28:78:81:47:27: 25:2d:fe:87:68:d8:e5:ba:ba:06:a4:32:6e:d3:a5: 35:f2:c3:c0:d7:54:9a:b5:e1:4e:2a:95:5c:3a:19: 95:ab:29:37:61:3a:6c:66:23:21:2f:cf:bb:f3:9c: 2e:1c:3c:31:01:ae:92:70:b8:09:df:72:87:fe:1a: 73:d4:5d:a7:77:a7:96:0b:83:29:c4:72:93:d9:19: 42:e9:e9:ab:01:e5:2b:97:c4:15:e6:6e:4e:c1:6f: bb:cc:51:5f:55:58:40:05:23:ee:86:91:6f:2a:e1: ad:50:ab:2a:34:db:d5:84:d0:2a:a3:37:2f:47:21: 8e:54:9a:99:9f:e8:91:4c:0b:cd:29:d5:ed:12:21: ac:4c:e4:c9:48:59:c6:d0:25:92:44:90:b2:ba:43: ca:30:b3:dd:43:46:50:33:69:e9:05:1b:3b:d2:3a: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F2:06:C8:A1:79:0F:D3:75:4F:C6:3E:D7:E3:6C:AF:36:CF:DC:03 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f00f::/48 Signature Algorithm: sha256WithRSAEncryption c0:fe:e5:ea:7c:20:bf:c8:a2:84:75:96:7b:59:57:e2:79:47: 3a:da:09:44:c8:a4:77:cc:01:cc:17:f6:7b:41:5a:d4:5c:44: b3:b4:01:bc:e2:ba:c8:7c:e3:af:5b:77:54:43:6f:50:65:63: 79:a4:21:51:ac:6d:ca:69:22:34:0f:c0:24:56:8c:8d:7c:59: 5d:d3:ba:24:43:3c:fe:e2:9a:65:49:54:55:74:37:f2:e6:03: 0f:63:14:69:cc:e2:30:dc:22:42:95:9e:8c:08:8d:ca:9c:f0: e8:a3:7c:94:9b:70:8f:96:a0:c7:7b:a7:34:5e:2c:20:c8:72: 52:c3:a5:f6:4d:7b:d7:62:99:ec:58:88:6a:49:c8:71:8b:06: 75:21:82:0e:f9:5f:a7:0d:9d:08:01:4a:f5:13:f5:42:33:03: 8c:d9:60:49:40:cc:41:fd:23:bc:58:67:c9:84:cc:de:1d:14: 7c:5c:b1:38:df:23:26:fa:72:4d:85:8f:c1:0f:5d:04:16:c9: 83:4a:f3:9f:ba:db:4e:7e:30:58:32:1f:24:41:55:59:2a:4d: 41:87:6f:3f:9b:ca:66:da:7d:85:29:72:0c:1b:1a:39:11:62: e2:fd:2a:b0:10:f3:58:4a:75:1c:a8:ea:4d:26:cf:b5:89:13: b8:8f:d2:3a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUNOq9fppgdPslG/pV0Dr8cHnnLjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA4MjMwMDE5MDVaFw0yNzA4MjIwMDI0MDVaMDMxMTAvBgNV BAMTKEI0RjIwNkM4QTE3OTBGRDM3NTRGQzYzRUQ3RTM2Q0FGMzZDRkRDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGjxKH0eiWksVLigpZYXQZfEg AyE4M5ZeWj+VHLZ1f1JUPmFketLINa+Oa9fCEdjAjjU5bZ27SiRQ5FFpP8ZcNf0U BCwtfXDFkzUc0ap0ZsOj7Z4oeIFHJyUt/odo2OW6ugakMm7TpTXyw8DXVJq14U4q lVw6GZWrKTdhOmxmIyEvz7vznC4cPDEBrpJwuAnfcof+GnPUXad3p5YLgynEcpPZ GULp6asB5SuXxBXmbk7Bb7vMUV9VWEAFI+6GkW8q4a1Qqyo029WE0CqjNy9HIY5U mpmf6JFMC80p1e0SIaxM5MlIWcbQJZJEkLK6Q8ows91DRlAzaekFGzvSOhZtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUtPIGyKF5D9N1T8Y+1+NsrzbP3AMwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MTQ3NmQ2Mi05Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMi8zMjYxMzEz NDNhMzE2NTYzMzczYTY2MzAzMDY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM4MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhQex/APMA0GCSqGSIb3DQEBCwUAA4IBAQDA /uXqfCC/yKKEdZZ7WVfieUc62glEyKR3zAHMF/Z7QVrUXESztAG84rrIfOOvW3dU Q29QZWN5pCFRrG3KaSI0D8AkVoyNfFld07okQzz+4pplSVRVdDfy5gMPYxRpzOIw 3CJClZ6MCI3KnPDoo3yUm3CPlqDHe6c0XiwgyHJSw6X2TXvXYpnsWIhqSchxiwZ1 IYIO+V+nDZ0IAUr1E/VCMwOM2WBJQMxB/SO8WGfJhMzeHRR8XLE43yMm+nJNhY/B D10EFsmDSvOfuttOfjBYMh8kQVVZKk1Bh28/m8pm2n2FKXIMGxo5EWLi/SqwEPNY SnUcqOpNJs+1iRO4j9I6 -----END CERTIFICATE-----Generated at Thu Aug 27 16:53:09 2026 by rpki-client