$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/92430c8f-0f2f-46d0-adaa-706daf917e7e/1/326131343a373538323a613030303a3a2f33362d3438203d3e20323138353830.roa File: 326131343a373538323a613030303a3a2f33362d3438203d3e20323138353830.roa (raw, json) Hash identifier: XgtODNvZ5dvFj8yR98wLQGHgLsXXef7cNUabWX9Ma5w= Subject key identifier: D6:63:EF:84:72:34:9D:D7:98:29:1B:D0:BB:4C:03:54:3E:5F:97:C8 Certificate issuer: /CN=B79B112BE743781F5E9C4636DFB6D6EE87233A3B Certificate serial: 70F7895C8DA433BF1FE30AA281FEBFC1071ABBF7 Authority key identifier: B7:9B:11:2B:E7:43:78:1F:5E:9C:46:36:DF:B6:D6:EE:87:23:3A:3B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B79B112BE743781F5E9C4636DFB6D6EE87233A3B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/92430c8f-0f2f-46d0-adaa-706daf917e7e/1/326131343a373538323a613030303a3a2f33362d3438203d3e20323138353830.roa Signing time: Fri 25 Sep 2026 21:16:23 +0000 ROA not before: Fri 25 Sep 2026 21:11:23 +0000 ROA not after: Fri 24 Sep 2027 21:16:23 +0000 asID: 218580 IP address blocks: 2a14:7582:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/92430c8f-0f2f-46d0-adaa-706daf917e7e/1/B79B112BE743781F5E9C4636DFB6D6EE87233A3B.crl rsync://rsync.paas.rpki.ripe.net/repository/92430c8f-0f2f-46d0-adaa-706daf917e7e/1/B79B112BE743781F5E9C4636DFB6D6EE87233A3B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B79B112BE743781F5E9C4636DFB6D6EE87233A3B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 13:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f7:89:5c:8d:a4:33:bf:1f:e3:0a:a2:81:fe:bf:c1:07:1a:bb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B79B112BE743781F5E9C4636DFB6D6EE87233A3B Validity Not Before: Sep 25 21:11:23 2026 GMT Not After : Sep 24 21:16:23 2027 GMT Subject: CN=D663EF8472349DD798291BD0BB4C03543E5F97C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:ac:d2:90:d1:86:75:cf:6b:52:e2:c0:34: 2a:80:c5:bf:78:6c:98:28:f6:99:bc:28:1b:16:76: 1a:2b:3a:eb:75:8c:e7:62:53:1b:6f:28:51:78:d3: e5:f1:da:32:55:88:6f:41:66:14:17:b7:dd:67:23: b0:14:5d:6b:a7:e8:2e:59:61:33:37:0f:18:55:18: 60:9c:8f:61:8b:5f:20:6b:e5:cb:d6:4e:8d:65:e1: de:24:83:07:53:23:68:00:31:6a:16:af:aa:fb:f0: 59:12:a9:5e:9d:db:d1:0b:9f:05:b7:ad:3d:3c:d0: d5:49:9f:3f:bf:e4:3b:3e:f3:97:c8:8f:a7:d5:ad: 24:aa:35:31:e8:03:6e:cb:5c:df:9d:78:d7:64:14: 83:49:01:12:e8:61:ec:76:3d:33:ac:97:e1:a7:01: 0e:e4:d2:40:f1:b8:44:02:38:12:ee:42:34:b4:1c: df:f2:d3:cf:60:52:34:65:95:11:9d:30:0b:ef:ce: b5:58:bd:86:3a:8d:cb:07:28:c1:ea:ec:dd:6f:f1: d5:f9:61:ba:b4:92:1f:9a:1f:b2:e3:75:86:24:94: 45:9f:4b:0d:ec:31:e2:1f:f8:8d:c2:cc:7a:cd:e7: 79:45:4d:23:b9:8e:da:31:9f:9f:47:ea:42:08:76: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:63:EF:84:72:34:9D:D7:98:29:1B:D0:BB:4C:03:54:3E:5F:97:C8 X509v3 Authority Key Identifier: keyid:B7:9B:11:2B:E7:43:78:1F:5E:9C:46:36:DF:B6:D6:EE:87:23:3A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/92430c8f-0f2f-46d0-adaa-706daf917e7e/1/B79B112BE743781F5E9C4636DFB6D6EE87233A3B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B79B112BE743781F5E9C4636DFB6D6EE87233A3B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/92430c8f-0f2f-46d0-adaa-706daf917e7e/1/326131343a373538323a613030303a3a2f33362d3438203d3e20323138353830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7582:a000::/36 Signature Algorithm: sha256WithRSAEncryption 57:a6:9a:68:47:38:5a:b2:c6:1b:3d:54:79:71:8c:45:7a:44: 2a:b4:e7:e9:02:8a:03:5f:62:02:2c:aa:da:bc:03:e0:b2:00: 16:4d:5e:47:20:aa:0b:b3:c4:ce:bc:54:eb:dd:89:f7:1f:24: 2b:e8:b8:e0:5d:08:b6:77:4a:9f:65:a4:4d:7e:76:c8:f3:47: 56:5d:e0:b0:f0:e7:d0:0d:12:a5:c4:0f:ca:31:61:2b:db:08: 5f:3c:ad:71:b6:38:b1:e9:3d:c7:7c:52:f1:af:fd:85:93:24: 36:ff:d4:02:4a:1d:3d:9f:cc:cb:79:3e:ce:45:8a:2f:1b:9e: 46:1b:3d:99:b8:ac:d8:5c:3f:a9:2c:d6:80:6c:e2:ff:c6:91: 43:e9:14:ab:0a:47:df:b8:b5:d6:3d:dd:9f:d6:85:df:a3:29: 71:51:10:34:96:25:3b:24:39:6e:f9:0d:b1:20:3c:9b:3d:b9: f4:45:4c:00:27:99:62:1c:01:9d:8a:34:bc:c2:0e:e4:27:7a: 3d:09:2c:87:03:38:a8:a2:2a:66:02:93:77:44:45:5e:a8:1f: 2b:a0:72:dc:0e:39:e6:1b:28:37:d7:42:84:61:aa:6e:ba:18: 72:35:9f:8a:a9:da:45:ec:ac:58:55:49:ec:9c:56:02:13:e2: 32:96:3c:bb -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUcPeJXI2kM78f4wqigf6/wQcau/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5QjExMkJFNzQzNzgxRjVFOUM0NjM2REZCNkQ2RUU4 NzIzM0EzQjAeFw0yNjA5MjUyMTExMjNaFw0yNzA5MjQyMTE2MjNaMDMxMTAvBgNV BAMTKEQ2NjNFRjg0NzIzNDlERDc5ODI5MUJEMEJCNEMwMzU0M0U1Rjk3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYbKzSkNGGdc9rUuLANCqAxb94 bJgo9pm8KBsWdhorOut1jOdiUxtvKFF40+Xx2jJViG9BZhQXt91nI7AUXWun6C5Z YTM3DxhVGGCcj2GLXyBr5cvWTo1l4d4kgwdTI2gAMWoWr6r78FkSqV6d29ELnwW3 rT080NVJnz+/5Ds+85fIj6fVrSSqNTHoA27LXN+deNdkFINJARLoYex2PTOsl+Gn AQ7k0kDxuEQCOBLuQjS0HN/y089gUjRllRGdMAvvzrVYvYY6jcsHKMHq7N1v8dX5 Ybq0kh+aH7LjdYYklEWfSw3sMeIf+I3CzHrN53lFTSO5jtoxn59H6kIIdvTdAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU1mPvhHI0ndeYKRvQu0wDVD5fl8gwHwYDVR0j BBgwFoAUt5sRK+dDeB9enEY237bW7ocjOjswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTI0MzBjOGYtMGYyZi00NmQwLWFkYWEtNzA2ZGFmOTE3 ZTdlLzEvQjc5QjExMkJFNzQzNzgxRjVFOUM0NjM2REZCNkQ2RUU4NzIzM0EzQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNzlCMTEyQkU3NDM3ODFGNUU5QzQ2MzZE RkI2RDZFRTg3MjMzQTNCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85MjQzMGM4Zi0wZjJmLTQ2ZDAtYWRhYS03MDZkYWY5MTdlN2UvMS8zMjYxMzEz NDNhMzczNTM4MzIzYTYxMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM4MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gqAwDQYJKoZIhvcNAQELBQADggEBAFem mmhHOFqyxhs9VHlxjEV6RCq05+kCigNfYgIsqtq8A+CyABZNXkcgqguzxM68VOvd ifcfJCvouOBdCLZ3Sp9lpE1+dsjzR1Zd4LDw59ANEqXED8oxYSvbCF88rXG2OLHp Pcd8UvGv/YWTJDb/1AJKHT2fzMt5Ps5Fii8bnkYbPZm4rNhcP6ks1oBs4v/GkUPp FKsKR9+4tdY93Z/Whd+jKXFREDSWJTskOW75DbEgPJs9ufRFTAAnmWIcAZ2KNLzC DuQnej0JLIcDOKiiKmYCk3dERV6oHyugctwOOeYbKDfXQoRhqm66GHI1n4qp2kXs rFhVSeycVgIT4jKWPLs= -----END CERTIFICATE-----Generated at Sat Oct 24 06:55:10 2026 by rpki-client