$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/326131343a373538313a6663303a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a6663303a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: UltyaMScBuYdJeR2Xu8A1kmWI3QQ39lmb0XVapFcCh4= Subject key identifier: 81:66:0C:1F:54:59:D7:64:D2:6C:3F:CA:20:83:2E:5A:6C:29:35:A7 Certificate issuer: /CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Certificate serial: 087DF06AC64AF654359FC546E53FBAF790532F21 Authority key identifier: 6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/326131343a373538313a6663303a3a2f34382d3438203d3e20323134333434.roa Signing time: Mon 24 Aug 2026 15:05:08 +0000 ROA not before: Mon 24 Aug 2026 15:00:08 +0000 ROA not after: Mon 23 Aug 2027 15:05:08 +0000 asID: 214344 IP address blocks: 2a14:7581:fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 15:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7d:f0:6a:c6:4a:f6:54:35:9f:c5:46:e5:3f:ba:f7:90:53:2f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Validity Not Before: Aug 24 15:00:08 2026 GMT Not After : Aug 23 15:05:08 2027 GMT Subject: CN=81660C1F5459D764D26C3FCA20832E5A6C2935A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:da:ce:7b:2a:c3:72:78:1f:46:6b:a6:05: c2:42:f4:29:87:af:47:dc:84:ee:a1:8d:ec:b3:f8: c1:3c:d5:1a:1c:10:a5:13:cd:1a:fe:3f:e0:37:cc: 98:df:ac:17:3c:47:1d:4a:5e:46:26:69:19:b7:13: a2:7d:c5:ef:d7:ad:d5:22:b9:92:a7:9c:de:2a:f6: 7f:6f:84:14:9e:26:73:c9:22:dc:2e:f5:60:66:eb: 38:eb:2c:05:bb:bb:ee:7c:5e:2d:41:e3:34:7e:ea: fd:28:11:6e:a1:23:11:b3:40:d8:a4:3e:ba:a4:0f: 2f:b0:a3:7e:9c:fb:2e:5c:86:ba:76:65:b1:97:d8: 35:57:69:a4:b5:45:6f:89:8f:89:3f:9a:e8:58:89: 29:cf:e9:2e:af:35:be:9b:30:22:c5:cf:40:c3:2b: 59:ee:56:74:f0:c4:10:de:82:1d:06:a8:b9:9d:04: fe:30:18:53:47:66:58:56:9e:4f:a5:7e:78:1f:47: 35:12:a3:62:36:1e:68:12:6b:2f:95:de:6b:12:5e: 26:e1:e2:b5:41:8a:57:d6:d7:ed:a0:a1:ee:18:10: 3d:07:c2:a5:77:82:51:5d:3f:24:c2:89:54:06:01: ee:7f:de:a1:99:be:64:7c:1d:63:17:e6:a4:c9:a0: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:66:0C:1F:54:59:D7:64:D2:6C:3F:CA:20:83:2E:5A:6C:29:35:A7 X509v3 Authority Key Identifier: keyid:6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/326131343a373538313a6663303a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:fc0::/48 Signature Algorithm: sha256WithRSAEncryption aa:de:65:ef:b1:85:2d:30:e1:55:e9:ab:43:87:f3:16:7f:5e: 26:7b:99:6b:2c:df:8e:86:0b:05:0b:9d:90:b5:28:50:43:da: 31:88:d3:1a:7f:fd:88:8d:e2:f1:4d:a8:be:43:1e:0e:80:a5: 19:51:10:d9:41:3a:58:a9:9a:bf:91:27:7f:a7:10:68:4c:c9: 61:7d:f9:3d:89:4c:78:7e:bf:8c:7d:26:58:12:93:10:ab:ad: 48:0e:2f:7d:75:3f:14:a2:dc:b6:92:27:69:58:7a:59:cf:63: 91:c3:90:f9:b4:74:be:af:b0:23:b7:86:2a:8f:9e:8d:c2:a1: 05:48:d8:bd:66:d5:68:d7:42:c0:b5:dd:23:5d:02:fe:0d:d5: 5a:a2:74:f1:56:36:6a:30:d9:69:6c:62:bd:9b:45:ee:c2:23: 8e:92:41:0b:75:65:39:8e:dd:c6:4c:72:19:26:8c:1e:7e:12: a5:b0:5a:7e:3c:9d:99:b0:a8:f2:2c:f5:74:e6:a8:50:15:4f: e7:60:64:2a:a1:9f:89:60:60:b5:4c:07:99:cc:ec:b9:5b:34: fc:f7:52:51:28:59:e3:0e:d7:d7:00:c4:3e:65:3a:8c:19:97: bc:98:16:ff:9e:c4:a4:9f:8e:45:a9:61:09:82:59:c2:53:36: 29:65:7e:a5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUCH3wasZK9lQ1n8VG5T+695BTLyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJG NzMxNDI3OTAeFw0yNjA4MjQxNTAwMDhaFw0yNzA4MjMxNTA1MDhaMDMxMTAvBgNV BAMTKDgxNjYwQzFGNTQ1OUQ3NjREMjZDM0ZDQTIwODMyRTVBNkMyOTM1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1trOeyrDcngfRmumBcJC9CmH r0fchO6hjeyz+ME81RocEKUTzRr+P+A3zJjfrBc8Rx1KXkYmaRm3E6J9xe/XrdUi uZKnnN4q9n9vhBSeJnPJItwu9WBm6zjrLAW7u+58Xi1B4zR+6v0oEW6hIxGzQNik PrqkDy+wo36c+y5chrp2ZbGX2DVXaaS1RW+Jj4k/muhYiSnP6S6vNb6bMCLFz0DD K1nuVnTwxBDegh0GqLmdBP4wGFNHZlhWnk+lfngfRzUSo2I2HmgSay+V3msSXibh 4rVBilfW1+2goe4YED0HwqV3glFdPyTCiVQGAe5/3qGZvmR8HWMX5qTJoNsdAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUgWYMH1RZ12TSbD/KIIMuWmwpNacwHwYDVR0j BBgwFoAUbRILbYUb04xp5dNZn9jA+/cxQnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzIvNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJGNzMxNDI3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RDEyMEI2RDg1MUJEMzhDNjlFNUQzNTk5 RkQ4QzBGQkY3MzE0Mjc5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hMmUyNTdkZi05OTMwLTQ0ZTYtODY2ZS00MWE0ODk4NjUyMzIvMi8zMjYxMzEz NDNhMzczNTM4MzEzYTY2NjMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEPwDANBgkqhkiG9w0BAQsFAAOCAQEAqt5l 77GFLTDhVemrQ4fzFn9eJnuZayzfjoYLBQudkLUoUEPaMYjTGn/9iI3i8U2ovkMe DoClGVEQ2UE6WKmav5Enf6cQaEzJYX35PYlMeH6/jH0mWBKTEKutSA4vfXU/FKLc tpInaVh6Wc9jkcOQ+bR0vq+wI7eGKo+ejcKhBUjYvWbVaNdCwLXdI10C/g3VWqJ0 8VY2ajDZaWxivZtF7sIjjpJBC3VlOY7dxkxyGSaMHn4SpbBafjydmbCo8iz1dOao UBVP52BkKqGfiWBgtUwHmczsuVs0/PdSUShZ4w7X1wDEPmU6jBmXvJgW/57EpJ+O RalhCYJZwlM2KWV+pQ== -----END CERTIFICATE-----Generated at Wed Aug 26 02:07:57 2026 by rpki-client