$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637303a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538313a396637303a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: PbnJV4v8C5QHnq2aBllU+RDCvAtSgAjZp/KgSmiAfVA= Subject key identifier: 1F:21:2D:2A:47:50:EB:82:96:7C:C4:CE:15:15:5A:07:E9:CB:0D:98 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 6E9C2DA789964232FE5F83FA1C8AEDB9F688E3E8 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637303a3a2f34382d3438203d3e20323039373130.roa Signing time: Sun 05 Jul 2026 04:46:34 +0000 ROA not before: Sun 05 Jul 2026 04:41:34 +0000 ROA not after: Sun 04 Jul 2027 04:46:34 +0000 asID: 209710 IP address blocks: 2a14:7581:9f70::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 00:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9c:2d:a7:89:96:42:32:fe:5f:83:fa:1c:8a:ed:b9:f6:88:e3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Jul 5 04:41:34 2026 GMT Not After : Jul 4 04:46:34 2027 GMT Subject: CN=1F212D2A4750EB82967CC4CE15155A07E9CB0D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a0:ef:d6:26:24:1d:64:b2:7c:85:10:c9:f9: dd:fa:88:a6:9e:82:b1:46:95:94:34:04:32:a2:21: 6c:9c:a6:02:d2:9b:d4:93:d6:75:4f:5a:9a:f7:0f: ef:7d:b4:5d:b8:7b:90:b1:3e:2c:24:98:dd:56:5d: 18:45:0e:bc:74:d6:e4:d3:37:b9:fd:77:5c:91:24: 2e:67:5b:82:40:f4:82:1a:4b:9a:fa:b0:23:36:ff: 91:de:a5:66:8f:51:89:78:ce:43:7e:31:fe:47:47: 0d:2b:9e:b1:1e:b7:d0:6b:92:87:df:0b:ed:e6:98: 14:9a:32:60:22:b1:1b:58:e4:09:36:aa:eb:3e:5b: ba:74:d8:0d:4c:fa:fd:63:90:25:4b:87:19:dc:3e: 10:6f:65:23:dd:f2:66:36:f5:ae:07:5c:a2:b1:4a: 7c:af:04:a4:bd:b5:8d:a7:ef:50:93:f5:37:a7:dc: 65:d7:e6:d1:3e:dd:31:4a:77:a2:99:7d:6e:8b:b4: 5d:a8:f3:77:77:b0:83:cc:cb:a0:34:2a:78:d4:e8: 0d:d3:60:92:6e:f0:62:55:ca:fc:46:a4:66:b2:8a: 04:b7:b8:71:e2:f3:c9:93:be:50:7a:ad:30:8f:20: 42:57:52:55:aa:08:e9:3a:37:21:67:d9:42:d2:ba: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:21:2D:2A:47:50:EB:82:96:7C:C4:CE:15:15:5A:07:E9:CB:0D:98 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637303a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9f70::/48 Signature Algorithm: sha256WithRSAEncryption ac:d8:b0:62:34:1b:3f:11:96:e8:b5:7c:bf:bc:3b:5b:55:0c: 53:bc:a4:1f:40:3b:70:fe:14:72:43:05:99:5e:d3:84:87:fa: 65:43:08:9e:21:50:f6:f1:e2:69:95:9b:fe:dc:71:83:a7:75: e3:41:72:b0:c3:26:cc:ab:17:26:3a:61:db:b9:8c:7d:1a:95: 9b:62:42:2c:c1:88:53:6f:49:82:81:57:67:03:5d:11:69:85: 8e:e9:84:62:aa:c8:1f:f7:2f:e8:f8:ae:50:34:18:f2:a2:a6: e0:69:cb:75:0f:db:84:c0:da:c1:8c:af:02:06:0f:82:51:45: ae:86:0d:96:a8:ed:03:ea:70:ca:ce:52:b4:8f:61:71:3b:9e: 90:bd:d1:48:8d:e4:e8:5b:68:5b:27:70:87:0d:32:84:e4:56: df:93:db:7a:65:0c:9a:88:db:64:c3:f2:14:b2:82:80:56:8e: 53:6a:a2:95:4b:3d:52:a6:93:f7:26:69:31:73:0b:ae:17:22: a3:18:e1:29:e2:69:f6:d7:67:29:7b:b8:5c:c2:19:dd:1f:94: 65:dd:be:49:ed:d4:92:70:f1:a4:69:cb:4b:53:f1:33:73:db: 4c:c2:33:f7:3a:5a:de:84:af:c1:f9:76:f6:32:02:fc:d2:a6: 18:ef:89:ea -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbpwtp4mWQjL+X4P6HIrtufaI4+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA3MDUwNDQxMzRaFw0yNzA3MDQwNDQ2MzRaMDMxMTAvBgNV BAMTKDFGMjEyRDJBNDc1MEVCODI5NjdDQzRDRTE1MTU1QTA3RTlDQjBEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkoO/WJiQdZLJ8hRDJ+d36iKae grFGlZQ0BDKiIWycpgLSm9ST1nVPWpr3D+99tF24e5CxPiwkmN1WXRhFDrx01uTT N7n9d1yRJC5nW4JA9IIaS5r6sCM2/5HepWaPUYl4zkN+Mf5HRw0rnrEet9Brkoff C+3mmBSaMmAisRtY5Ak2qus+W7p02A1M+v1jkCVLhxncPhBvZSPd8mY29a4HXKKx SnyvBKS9tY2n71CT9Ten3GXX5tE+3TFKd6KZfW6LtF2o83d3sIPMy6A0KnjU6A3T YJJu8GJVyvxGpGayigS3uHHi88mTvlB6rTCPIEJXUlWqCOk6NyFn2ULSuqrxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUHyEtKkdQ64KWfMTOFRVaB+nLDZgwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5NjYzNzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZ9wMA0GCSqGSIb3DQEBCwUAA4IBAQCs 2LBiNBs/EZbotXy/vDtbVQxTvKQfQDtw/hRyQwWZXtOEh/plQwieIVD28eJplZv+ 3HGDp3XjQXKwwybMqxcmOmHbuYx9GpWbYkIswYhTb0mCgVdnA10RaYWO6YRiqsgf 9y/o+K5QNBjyoqbgact1D9uEwNrBjK8CBg+CUUWuhg2WqO0D6nDKzlK0j2FxO56Q vdFIjeToW2hbJ3CHDTKE5Fbfk9t6ZQyaiNtkw/IUsoKAVo5TaqKVSz1SppP3Jmkx cwuuFyKjGOEp4mn212cpe7hcwhndH5Rl3b5J7dSScPGkactLU/Ezc9tMwjP3Olre hK/B+Xb2MgL80qYY74nq -----END CERTIFICATE-----Generated at Tue Jul 21 14:53:31 2026 by rpki-client