$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3563303a3a2f34342d3438203d3e20323030393833.roa File: 326131343a373538303a3563303a3a2f34342d3438203d3e20323030393833.roa (raw, json) Hash identifier: LWgSbiG8v12rmho8doO09JfDrfMqGywJ9H2+gVPGrQM= Subject key identifier: 9F:C9:34:24:07:32:AC:F5:48:DB:78:E5:AF:42:C0:60:D8:E3:4F:D6 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 5F12218449AB491180D82B6BF53D8D38C9F44F9C Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3563303a3a2f34342d3438203d3e20323030393833.roa Signing time: Tue 24 Feb 2026 18:02:41 +0000 ROA not before: Tue 24 Feb 2026 17:57:41 +0000 ROA not after: Tue 23 Feb 2027 18:02:41 +0000 asID: 200983 IP address blocks: 2a14:7580:5c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Feb 2026 20:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:12:21:84:49:ab:49:11:80:d8:2b:6b:f5:3d:8d:38:c9:f4:4f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Feb 24 17:57:41 2026 GMT Not After : Feb 23 18:02:41 2027 GMT Subject: CN=9FC934240732ACF548DB78E5AF42C060D8E34FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:88:9c:d8:cd:f7:78:32:eb:6b:70:39:7d: 46:02:9b:b9:c5:2d:2e:cc:3d:e7:9b:93:86:5f:3f: 7c:e9:c4:7b:4e:4b:c3:7c:b6:c8:ce:66:0d:f2:09: 1a:3d:e7:40:1d:7d:01:14:61:65:fd:88:cd:e1:9d: f4:0a:e9:61:66:cf:d2:1e:7c:54:e2:f7:e5:d4:77: 20:ad:ea:72:8a:40:aa:12:04:c9:be:6e:ce:9f:b3: dd:62:09:65:53:50:dc:a0:fb:b3:ad:dc:76:7b:f8: 4b:71:f2:ea:2e:c7:6d:13:ff:1b:e0:e9:c0:80:1b: 09:a5:17:1f:56:a8:27:fa:a1:d7:3d:d6:a1:54:2b: 0c:a6:69:45:cc:5f:c7:44:65:aa:2f:2d:22:b7:15: 96:36:60:e4:eb:86:25:38:4f:db:55:5f:e8:47:f6: af:2d:fc:f2:ad:8a:1e:9c:c6:d2:1c:f9:b3:e3:02: 46:5b:3b:59:5e:f6:3c:36:64:c5:9c:32:26:c5:c6: e9:ad:5c:5f:5b:d6:2b:7a:26:22:37:48:1e:22:a6: ce:52:d1:a6:1f:9b:f4:71:bb:0b:c9:2c:93:a7:ee: 40:75:15:c9:e8:4f:0a:91:18:53:0a:1c:84:88:a6: 81:94:2c:f4:c5:4c:1a:98:23:d7:95:30:b0:44:c7: 7d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C9:34:24:07:32:AC:F5:48:DB:78:E5:AF:42:C0:60:D8:E3:4F:D6 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3563303a3a2f34342d3438203d3e20323030393833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:5c0::/44 Signature Algorithm: sha256WithRSAEncryption 3c:11:75:f2:41:ce:df:60:e5:06:be:f3:96:c4:2f:15:cd:d0: 7a:79:cb:45:ff:98:51:cd:d8:1e:47:4a:08:de:4b:51:8d:08: 85:54:6d:a0:ff:f7:4b:30:05:bb:a6:b4:b4:63:c8:cb:08:8a: 7e:57:a2:7f:42:de:31:16:44:3d:4c:e8:34:89:73:e3:8e:02: 94:68:4b:3e:e4:86:f6:ad:41:94:9a:58:79:4a:11:77:f8:59: 04:b7:0e:05:e3:92:7d:13:a5:78:e8:c6:57:0d:1f:d5:28:2d: c3:ec:2b:65:34:49:f2:68:06:b2:6e:9e:54:85:d2:36:dd:73: 67:33:b0:41:02:70:e7:8f:42:81:2e:a2:4d:ff:eb:70:16:55: 85:cb:87:2c:f6:8b:88:a5:33:2f:51:00:0a:19:8a:58:b3:20: 71:04:4f:e2:b4:10:62:51:04:8f:3b:a1:15:fa:db:52:5d:83: b7:08:5f:75:0f:0e:a3:d1:c1:c2:62:ce:98:68:f3:ac:be:52: 58:b3:99:27:a0:89:7f:f4:6e:a8:ac:07:f5:0f:a5:f5:26:47: c9:10:21:e3:31:02:50:be:2a:65:82:52:29:a3:29:a8:69:0d: e0:eb:c8:cf:82:78:7c:51:5e:a6:54:cf:25:dd:f6:a0:33:00: 13:96:79:73 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUXxIhhEmrSRGA2Ctr9T2NOMn0T5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjAyMjQxNzU3NDFaFw0yNzAyMjMxODAyNDFaMDMxMTAvBgNV BAMTKDlGQzkzNDI0MDczMkFDRjU0OERCNzhFNUFGNDJDMDYwRDhFMzRGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJYic2M33eDLra3A5fUYCm7nF LS7MPeebk4ZfP3zpxHtOS8N8tsjOZg3yCRo950AdfQEUYWX9iM3hnfQK6WFmz9Ie fFTi9+XUdyCt6nKKQKoSBMm+bs6fs91iCWVTUNyg+7Ot3HZ7+Etx8uoux20T/xvg 6cCAGwmlFx9WqCf6odc91qFUKwymaUXMX8dEZaovLSK3FZY2YOTrhiU4T9tVX+hH 9q8t/PKtih6cxtIc+bPjAkZbO1le9jw2ZMWcMibFxumtXF9b1it6JiI3SB4ips5S 0aYfm/RxuwvJLJOn7kB1FcnoTwqRGFMKHISIpoGULPTFTBqYI9eVMLBEx31JAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUn8k0JAcyrPVI23jlr0LAYNjjT9YwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTM1NjMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAz MDM5MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYAFwDANBgkqhkiG9w0BAQsFAAOCAQEAPBF1 8kHO32DlBr7zlsQvFc3QennLRf+YUc3YHkdKCN5LUY0IhVRtoP/3SzAFu6a0tGPI ywiKfleif0LeMRZEPUzoNIlz444ClGhLPuSG9q1BlJpYeUoRd/hZBLcOBeOSfROl eOjGVw0f1Sgtw+wrZTRJ8mgGsm6eVIXSNt1zZzOwQQJw549CgS6iTf/rcBZVhcuH LPaLiKUzL1EAChmKWLMgcQRP4rQQYlEEjzuhFfrbUl2DtwhfdQ8Oo9HBwmLOmGjz rL5SWLOZJ6CJf/RuqKwH9Q+l9SZHyRAh4zECUL4qZYJSKaMpqGkN4OvIz4J4fFFe plTPJd32oDMAE5Z5cw== -----END CERTIFICATE-----Generated at Thu Feb 26 06:28:39 2026 by rpki-client