$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/326131343a373538313a6663313a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a6663313a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: NgLXi6WSDkggy7r7WkuuC7KsW1goj6kdQLJDuE6oUvM= Subject key identifier: 98:E6:74:45:34:CB:13:BD:F4:51:E1:26:FE:6F:CD:49:37:4D:B3:48 Certificate issuer: /CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Certificate serial: 176E79393E348EB8E5F81F09514998902C2135AB Authority key identifier: 6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/326131343a373538313a6663313a3a2f34382d3438203d3e20323134333434.roa Signing time: Mon 24 Aug 2026 15:05:21 +0000 ROA not before: Mon 24 Aug 2026 15:00:21 +0000 ROA not after: Mon 23 Aug 2027 15:05:21 +0000 asID: 214344 IP address blocks: 2a14:7581:fc1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6e:79:39:3e:34:8e:b8:e5:f8:1f:09:51:49:98:90:2c:21:35:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Validity Not Before: Aug 24 15:00:21 2026 GMT Not After : Aug 23 15:05:21 2027 GMT Subject: CN=98E6744534CB13BDF451E126FE6FCD49374DB348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:01:63:c7:2c:aa:26:a1:39:23:2b:85:b9: 4d:60:8e:dd:b9:16:48:5b:e7:be:e9:82:b4:7d:55: 18:8a:a1:ad:2b:1e:6b:6a:b2:73:33:8b:07:b3:10: 62:f4:36:d4:f4:5e:7c:86:34:60:4f:ca:59:eb:45: db:09:01:0a:46:a3:38:33:f2:0f:ec:24:4c:7e:48: f3:ef:f4:3f:8f:77:34:61:14:ca:41:d3:dd:0e:cd: 21:a7:8c:2e:b6:c8:af:d9:4c:d9:4e:3c:e0:b9:a7: 7a:37:eb:9a:bc:1c:8d:3f:e7:d8:e7:0f:ad:46:9b: d0:b4:14:61:0e:e7:18:b6:9d:95:8a:e1:7a:e1:59: 10:df:1f:9d:d7:03:70:19:8d:82:8e:c5:a8:7f:14: a5:30:b2:9d:47:4a:a3:17:db:32:02:63:2b:95:6f: 93:94:2b:b2:c5:dc:63:f2:f2:74:57:5e:2a:88:d3: d0:c8:cb:80:b1:24:55:76:3e:a7:b6:7a:0d:48:78: 98:97:fe:20:e8:91:56:7d:6b:1d:bd:48:ed:27:2b: 61:de:2d:5f:e6:87:24:08:b9:d5:38:6e:65:82:fd: 7a:3e:34:91:e9:31:1d:81:9e:f2:28:54:3e:f4:71: 95:9c:29:b0:25:b8:90:42:39:94:7e:4c:1c:b2:da: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:74:45:34:CB:13:BD:F4:51:E1:26:FE:6F:CD:49:37:4D:B3:48 X509v3 Authority Key Identifier: keyid:6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/326131343a373538313a6663313a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:fc1::/48 Signature Algorithm: sha256WithRSAEncryption 57:c6:58:fb:4a:34:31:a4:98:93:60:25:ce:eb:06:3c:fd:f3: 79:f5:51:38:d8:9b:91:bd:6b:6b:2a:8f:00:8a:f0:26:9a:41: d3:77:97:b7:28:4f:c2:4f:64:20:13:24:47:b5:ee:f5:12:23: fa:d6:8b:ef:3a:0f:d0:2a:1d:64:b3:f0:9f:80:f8:6b:6e:e3: e3:f4:ed:a1:d8:76:5c:97:f9:a4:ec:a4:3b:d5:eb:25:a4:92: f1:4b:81:7e:83:6d:9e:66:c0:3c:da:0b:cd:c1:0c:8e:7b:c3: 00:08:83:b2:9e:68:ce:6d:67:8a:03:d5:93:cc:ef:5e:01:fd: 33:eb:1b:4d:0f:36:24:8e:fd:b0:16:6b:5c:d4:c5:49:00:2d: 58:ed:67:c3:a4:36:78:41:ca:41:59:b6:cd:d1:8e:d3:ad:6e: 6a:59:09:25:5f:bd:fa:85:94:46:59:ea:6a:78:e7:b3:0c:7c: 1f:d6:10:4d:36:e5:c4:76:c6:51:25:9c:43:c9:16:7f:15:61: a6:73:64:dc:e4:85:39:60:a8:0f:b7:e6:c2:fd:80:81:af:08: fb:f7:41:0e:0f:f5:dd:37:98:aa:a9:51:63:c4:63:d1:bb:e8: f0:6b:20:97:5c:84:39:c1:20:9c:9b:40:0d:00:9f:60:30:fb: 28:42:c1:83 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUF255OT40jrjl+B8JUUmYkCwhNaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJG NzMxNDI3OTAeFw0yNjA4MjQxNTAwMjFaFw0yNzA4MjMxNTA1MjFaMDMxMTAvBgNV BAMTKDk4RTY3NDQ1MzRDQjEzQkRGNDUxRTEyNkZFNkZDRDQ5Mzc0REIzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXzAFjxyyqJqE5IyuFuU1gjt25 Fkhb577pgrR9VRiKoa0rHmtqsnMziwezEGL0NtT0XnyGNGBPylnrRdsJAQpGozgz 8g/sJEx+SPPv9D+PdzRhFMpB090OzSGnjC62yK/ZTNlOPOC5p3o365q8HI0/59jn D61Gm9C0FGEO5xi2nZWK4XrhWRDfH53XA3AZjYKOxah/FKUwsp1HSqMX2zICYyuV b5OUK7LF3GPy8nRXXiqI09DIy4CxJFV2Pqe2eg1IeJiX/iDokVZ9ax29SO0nK2He LV/mhyQIudU4bmWC/Xo+NJHpMR2BnvIoVD70cZWcKbAluJBCOZR+TByy2mE5AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUmOZ0RTTLE730UeEm/m/NSTdNs0gwHwYDVR0j BBgwFoAUbRILbYUb04xp5dNZn9jA+/cxQnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzIvNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJGNzMxNDI3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RDEyMEI2RDg1MUJEMzhDNjlFNUQzNTk5 RkQ4QzBGQkY3MzE0Mjc5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hMmUyNTdkZi05OTMwLTQ0ZTYtODY2ZS00MWE0ODk4NjUyMzIvMi8zMjYxMzEz NDNhMzczNTM4MzEzYTY2NjMzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEPwTANBgkqhkiG9w0BAQsFAAOCAQEAV8ZY +0o0MaSYk2AlzusGPP3zefVRONibkb1rayqPAIrwJppB03eXtyhPwk9kIBMkR7Xu 9RIj+taL7zoP0CodZLPwn4D4a27j4/Ttodh2XJf5pOykO9XrJaSS8UuBfoNtnmbA PNoLzcEMjnvDAAiDsp5ozm1nigPVk8zvXgH9M+sbTQ82JI79sBZrXNTFSQAtWO1n w6Q2eEHKQVm2zdGO061ualkJJV+9+oWURlnqanjnswx8H9YQTTblxHbGUSWcQ8kW fxVhpnNk3OSFOWCoD7fmwv2Aga8I+/dBDg/13TeYqqlRY8Rj0bvo8Gsgl1yEOcEg nJtADQCfYDD7KELBgw== -----END CERTIFICATE-----Generated at Wed Aug 26 07:51:38 2026 by rpki-client