$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: CqYBJlC9HxvR/lzF60EvrSr55WqoXGsIwp/JfWPn/XM= Subject key identifier: 38:F7:C6:36:92:93:CB:2C:01:94:4E:02:C0:5D:84:E7:99:F9:89:83 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 3A0BD05C0AC579E3DB3370FA06821E1CA4539CCA Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa Signing time: Mon 17 Aug 2026 07:34:29 +0000 ROA not before: Mon 17 Aug 2026 07:29:29 +0000 ROA not after: Mon 16 Aug 2027 07:34:29 +0000 asID: 209710 IP address blocks: 2a14:7580:ff50::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 06:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0b:d0:5c:0a:c5:79:e3:db:33:70:fa:06:82:1e:1c:a4:53:9c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Aug 17 07:29:29 2026 GMT Not After : Aug 16 07:34:29 2027 GMT Subject: CN=38F7C6369293CB2C01944E02C05D84E799F98983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:c6:6a:bb:7c:b0:f3:59:71:37:22:6f:ff: f9:ef:7a:8d:1d:84:37:32:5c:38:38:6f:20:b8:4d: 7d:f3:54:4c:d9:03:59:41:a1:46:7e:62:80:12:28: 6f:9b:3a:ce:f0:e1:e9:14:ed:ea:d0:8e:5f:2a:d5: 6c:ea:39:b3:33:2d:b5:ab:c4:f2:41:b1:17:76:cd: 29:ac:ab:d7:55:4d:53:27:71:d0:8a:69:e3:60:7a: 83:62:8b:4e:b9:b3:f4:ba:53:06:6a:01:bd:39:88: b4:b1:00:d8:da:95:45:41:76:bb:95:48:d2:5b:b0: 1f:21:56:53:51:4e:c3:78:de:22:b6:15:8f:fe:9f: c8:ac:c6:44:9b:00:64:9c:6c:f2:88:b8:cb:35:ff: 1c:69:88:51:dc:10:60:86:f0:a0:12:d3:d0:01:b7: e9:69:0f:49:ba:90:73:9c:b3:0f:ed:7f:ac:30:fa: 18:ae:7c:2b:ff:0b:6b:85:41:91:0f:ec:df:b0:ad: bd:91:c9:8d:4a:b4:05:7b:c3:8b:6e:ac:ef:6e:ad: 17:d3:ce:64:2d:e9:84:3a:71:0e:d6:71:fb:f0:6c: 4c:15:e4:83:53:cd:b7:19:d0:3d:7b:a8:b8:27:5d: 0c:8f:50:1a:e0:4d:48:d6:be:a9:ab:5f:2c:50:a8: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F7:C6:36:92:93:CB:2C:01:94:4E:02:C0:5D:84:E7:99:F9:89:83 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff50::/48 Signature Algorithm: sha256WithRSAEncryption 6a:c4:5c:e0:9b:1c:09:cd:5f:03:af:b0:bb:1c:aa:c3:7f:15: e6:ca:db:e1:b8:cb:c5:45:e8:1f:25:db:0c:20:04:fe:eb:e3: 17:df:c4:44:a2:90:5e:c0:a8:27:be:13:9d:56:1f:b9:45:d3: 7c:c6:1c:02:1a:08:e6:1c:b8:39:f6:f1:10:8f:cf:5b:b3:bc: 92:0b:fd:95:e5:d0:ea:58:a9:af:16:16:85:fe:d0:da:dd:bc: 9c:a7:a4:51:4a:ae:35:18:61:71:be:c1:8c:2d:9a:fb:3e:c7: d7:20:2d:16:77:ed:90:38:ab:cc:2d:f4:e2:99:e3:9b:ca:e9: 33:6e:21:c5:a3:7e:c3:af:da:ca:63:29:b7:bb:f2:3e:12:9f: 96:55:d2:92:65:e4:cd:43:24:20:72:ad:65:ad:f0:24:67:c6: 84:76:6b:08:39:0a:45:2f:47:4e:fc:61:aa:4d:22:26:8f:1d: 05:32:a3:e2:4f:3d:00:ea:9e:50:a7:05:6b:98:40:a4:4f:14: 09:6a:d2:03:64:69:d4:bf:69:5e:59:2b:dd:88:c2:2d:e1:97: 34:ac:22:ba:1a:ac:12:b4:d4:36:6b:a2:dd:7c:90:af:49:b9: 95:fd:70:5c:52:20:39:36:32:52:aa:63:75:72:2b:a7:da:fe: f2:64:53:10 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOgvQXArFeePbM3D6BoIeHKRTnMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA4MTcwNzI5MjlaFw0yNzA4MTYwNzM0MjlaMDMxMTAvBgNV BAMTKDM4RjdDNjM2OTI5M0NCMkMwMTk0NEUwMkMwNUQ4NEU3OTlGOTg5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FsZqu3yw81lxNyJv//nveo0d hDcyXDg4byC4TX3zVEzZA1lBoUZ+YoASKG+bOs7w4ekU7erQjl8q1WzqObMzLbWr xPJBsRd2zSmsq9dVTVMncdCKaeNgeoNii065s/S6UwZqAb05iLSxANjalUVBdruV SNJbsB8hVlNRTsN43iK2FY/+n8isxkSbAGScbPKIuMs1/xxpiFHcEGCG8KAS09AB t+lpD0m6kHOcsw/tf6ww+hiufCv/C2uFQZEP7N+wrb2RyY1KtAV7w4turO9urRfT zmQt6YQ6cQ7WcfvwbEwV5INTzbcZ0D17qLgnXQyPUBrgTUjWvqmrXyxQqELNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUOPfGNpKTyywBlE4CwF2E55n5iYMwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9QMA0GCSqGSIb3DQEBCwUAA4IBAQBq xFzgmxwJzV8Dr7C7HKrDfxXmytvhuMvFRegfJdsMIAT+6+MX38REopBewKgnvhOd Vh+5RdN8xhwCGgjmHLg59vEQj89bs7ySC/2V5dDqWKmvFhaF/tDa3bycp6RRSq41 GGFxvsGMLZr7PsfXIC0Wd+2QOKvMLfTimeObyukzbiHFo37Dr9rKYym3u/I+Ep+W VdKSZeTNQyQgcq1lrfAkZ8aEdmsIOQpFL0dO/GGqTSImjx0FMqPiTz0A6p5QpwVr mECkTxQJatIDZGnUv2leWSvdiMIt4Zc0rCK6GqwStNQ2a6LdfJCvSbmV/XBcUiA5 NjJSqmN1ciun2v7yZFMQ -----END CERTIFICATE-----Generated at Sat Sep 5 00:59:02 2026 by rpki-client