$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643430303a3a2f34302d3430203d3e20313531363630.roa File: 326131343a373538313a643430303a3a2f34302d3430203d3e20313531363630.roa (raw, json) Hash identifier: 0AwAEanklKkVfpMZ0UBVRSpRAdbMemkORRhs15qJVmk= Subject key identifier: F8:58:94:5C:50:ED:4B:8A:18:8C:AC:28:7F:F3:27:B2:6C:C6:04:AC Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 4C2E6E401E93D286A8B28919C6AA934D3E12DD51 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643430303a3a2f34302d3430203d3e20313531363630.roa Signing time: Wed 14 Oct 2026 22:48:48 +0000 ROA not before: Wed 14 Oct 2026 22:43:48 +0000 ROA not after: Wed 13 Oct 2027 22:48:48 +0000 asID: 151660 IP address blocks: 2a14:7581:d400::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 11:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2e:6e:40:1e:93:d2:86:a8:b2:89:19:c6:aa:93:4d:3e:12:dd:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Oct 14 22:43:48 2026 GMT Not After : Oct 13 22:48:48 2027 GMT Subject: CN=F858945C50ED4B8A188CAC287FF327B26CC604AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:bb:cf:2c:6b:a3:8d:31:46:0d:7f:9f:46: 12:5b:58:ac:c2:f7:63:51:9d:65:64:60:11:c9:8c: 96:3b:70:76:a8:4d:b9:ea:dd:72:dd:0f:23:ea:19: f7:ef:3d:82:b9:d9:3d:18:89:79:49:d0:e5:bc:bd: 0e:40:42:bc:50:92:54:86:06:09:8d:bf:d6:67:46: c8:80:27:ce:09:a5:0b:00:49:0c:db:c7:66:c0:e5: 48:37:ec:4d:99:8a:51:02:ef:6a:8c:03:a4:d1:5c: e7:fd:6a:6b:b2:45:ea:bc:7c:f7:d4:39:32:a5:76: 22:65:a6:0f:46:28:44:16:e7:28:a4:0b:ad:50:e8: b4:7f:92:fd:e6:73:45:d0:c8:5b:1a:2e:51:0d:c0: 82:b6:64:45:d0:63:af:16:40:25:84:9a:ab:69:86: ae:94:7e:6e:18:b4:1a:8f:93:30:72:8a:58:7a:62: c8:d9:0e:09:cb:13:9e:7f:4f:b6:60:37:28:bf:8e: bf:d8:c8:c3:ff:ba:2b:61:c1:cf:65:ca:69:b3:87: 67:db:d5:b1:92:85:2e:1b:b1:00:06:ea:99:ce:fc: f8:94:1e:21:9c:da:7d:37:c2:c9:8f:13:42:d6:f6: 01:dc:1c:52:8d:f2:18:f4:5d:07:9c:0f:8b:ca:f0: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:94:5C:50:ED:4B:8A:18:8C:AC:28:7F:F3:27:B2:6C:C6:04:AC X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643430303a3a2f34302d3430203d3e20313531363630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d400::/40 Signature Algorithm: sha256WithRSAEncryption 85:cb:ec:a6:5a:69:6f:c1:0a:14:ac:58:04:31:19:a0:4e:9d: 22:a1:ee:90:8e:47:c4:bd:aa:03:94:04:71:f3:b0:05:00:93: a2:fc:51:53:07:54:78:c0:83:23:30:be:8e:3a:17:c6:5d:eb: ea:0c:18:3e:22:7a:f5:c5:e9:56:4a:a3:ab:e4:b6:cd:68:53: 5d:6f:36:bf:9a:38:1e:b1:1d:ed:cc:f6:12:2d:3d:ac:c4:21: 9e:b9:64:3d:17:a8:81:cd:97:0e:2b:6a:91:0a:a7:63:59:7a: 4c:50:6a:fa:5e:8f:5c:07:ef:ff:94:18:e0:21:41:cd:39:52: ff:8d:c0:48:cd:c5:bf:85:3a:db:e8:fc:00:64:00:f1:34:50: 30:34:85:ca:62:e5:ee:71:34:f8:c6:f7:22:43:e0:6d:1e:e9: 18:bb:07:96:4a:a0:6e:c2:e8:58:04:6f:64:4b:bd:1d:1a:1e: 8a:67:b3:d7:ff:4c:18:3d:d0:93:18:79:63:91:03:7b:aa:0c: 41:a5:b3:f7:d7:03:c5:c9:a2:c6:b9:92:8b:10:a6:1b:ce:e5: 65:e3:59:c2:d1:1f:41:41:e9:82:74:3e:a7:c6:b0:16:4a:0b: 82:e2:17:a9:b0:71:f7:8d:ab:80:54:92:2e:c8:75:76:26:ee: e5:79:9c:60 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUTC5uQB6T0oaosokZxqqTTT4S3VEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjEwMTQyMjQzNDhaFw0yNzEwMTMyMjQ4NDhaMDMxMTAvBgNV BAMTKEY4NTg5NDVDNTBFRDRCOEExODhDQUMyODdGRjMyN0IyNkNDNjA0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwLvPLGujjTFGDX+fRhJbWKzC 92NRnWVkYBHJjJY7cHaoTbnq3XLdDyPqGffvPYK52T0YiXlJ0OW8vQ5AQrxQklSG BgmNv9ZnRsiAJ84JpQsASQzbx2bA5Ug37E2ZilEC72qMA6TRXOf9amuyReq8fPfU OTKldiJlpg9GKEQW5yikC61Q6LR/kv3mc0XQyFsaLlENwIK2ZEXQY68WQCWEmqtp hq6Ufm4YtBqPkzByilh6YsjZDgnLE55/T7ZgNyi/jr/YyMP/uithwc9lymmzh2fb 1bGShS4bsQAG6pnO/PiUHiGc2n03wsmPE0LW9gHcHFKN8hj0XQecD4vK8LvhAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU+FiUXFDtS4oYjKwof/MnsmzGBKwwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzQzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEz NTMxMzYzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gdQwDQYJKoZIhvcNAQELBQADggEBAIXL 7KZaaW/BChSsWAQxGaBOnSKh7pCOR8S9qgOUBHHzsAUAk6L8UVMHVHjAgyMwvo46 F8Zd6+oMGD4ievXF6VZKo6vkts1oU11vNr+aOB6xHe3M9hItPazEIZ65ZD0XqIHN lw4rapEKp2NZekxQavpej1wH7/+UGOAhQc05Uv+NwEjNxb+FOtvo/ABkAPE0UDA0 hcpi5e5xNPjG9yJD4G0e6Ri7B5ZKoG7C6FgEb2RLvR0aHopns9f/TBg90JMYeWOR A3uqDEGls/fXA8XJosa5kosQphvO5WXjWcLRH0FB6YJ0PqfGsBZKC4LiF6mwcfeN q4BUki7IdXYm7uV5nGA= -----END CERTIFICATE-----Generated at Wed Oct 28 04:34:45 2026 by rpki-client