$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643530303a3a2f34302d3430203d3e20313531363630.roa File: 326131343a373538313a643530303a3a2f34302d3430203d3e20313531363630.roa (raw, json) Hash identifier: SusIlM5PXddnSUL6Cx9YM0CLkPPxyDOatE0KFrN1v5w= Subject key identifier: 4F:46:75:E1:32:DD:30:5C:39:84:75:A8:4D:1F:20:B6:FF:27:2D:D0 Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 4E5F1A8DC863315138BD5B02C9D9C0CBD896733D Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643530303a3a2f34302d3430203d3e20313531363630.roa Signing time: Wed 14 Oct 2026 23:49:29 +0000 ROA not before: Wed 14 Oct 2026 23:44:29 +0000 ROA not after: Wed 13 Oct 2027 23:49:29 +0000 asID: 151660 IP address blocks: 2a14:7581:d500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5f:1a:8d:c8:63:31:51:38:bd:5b:02:c9:d9:c0:cb:d8:96:73:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Oct 14 23:44:29 2026 GMT Not After : Oct 13 23:49:29 2027 GMT Subject: CN=4F4675E132DD305C398475A84D1F20B6FF272DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:d0:8e:cb:df:7b:02:0f:0c:ba:96:c0:61: ae:61:84:08:d7:f0:d5:34:50:88:bd:9e:ac:87:ea: cd:bd:f7:41:3f:54:39:30:ea:b2:c2:0f:f6:24:46: 05:a5:8d:5f:f4:61:ca:27:ba:2d:50:ff:45:e8:dd: 9e:85:a4:26:3f:f0:ac:53:5d:f0:1f:dd:8c:25:d5: e0:d8:af:5a:b9:2d:a7:54:f1:21:29:16:54:39:d8: 4d:f9:11:56:a3:a2:4a:3e:6a:52:74:42:0c:95:cb: aa:5e:5e:11:e0:79:aa:73:89:7b:5c:61:ea:f4:b2: b1:1d:67:3e:48:7a:cf:0f:7a:dc:b0:66:48:53:c1: 44:df:32:48:5f:2f:97:0c:c5:2c:59:ab:ea:41:b2: 92:49:e1:a9:b9:e1:a5:e4:fc:e6:9d:63:7b:87:0c: 4e:c5:ec:72:b2:d6:da:0b:b7:eb:c3:33:e7:f9:b4: 5c:e9:4c:61:c7:45:08:4a:ea:66:44:75:5f:8e:c6: 14:96:17:32:b9:67:5b:bd:1e:7d:73:fb:e3:f3:ad: ee:2e:ac:4a:42:00:b8:24:58:41:2c:c7:38:b7:1b: 87:83:e8:56:03:0b:16:df:b6:89:d6:ac:db:b2:fc: 72:e0:65:0e:b9:4d:63:54:9c:d2:76:b0:2e:39:b6: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:75:E1:32:DD:30:5C:39:84:75:A8:4D:1F:20:B6:FF:27:2D:D0 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643530303a3a2f34302d3430203d3e20313531363630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d500::/40 Signature Algorithm: sha256WithRSAEncryption 6d:f7:d1:24:a4:c2:7f:26:1b:2a:ca:2b:95:98:12:94:64:17: 6d:8d:6e:de:65:1e:b9:92:7e:46:11:76:c4:c9:f1:0d:f0:c7: 8f:04:dd:bd:00:e4:d3:e4:c2:dd:c2:30:34:9f:2e:ed:94:f4: 2e:99:9f:42:fd:9b:68:9f:b8:00:f2:cd:42:e6:6b:2c:2d:1c: 09:08:99:b9:b3:a6:ee:f0:98:b6:7b:57:5c:d0:cf:75:07:fa: 44:9f:ab:05:68:ba:72:b0:06:d8:6a:e3:ad:c4:85:da:3e:98: 2a:aa:32:c6:1f:39:0a:c6:54:df:19:f6:bd:e8:d9:2c:b9:c5: 3b:5d:a8:c3:d0:62:9f:26:c2:09:49:fc:a7:31:5e:bd:58:6c: 91:10:be:17:a2:7f:ba:99:2d:6c:c7:21:ec:32:5b:26:0d:b4: cb:4a:19:c3:02:68:26:6a:01:28:35:5d:3a:55:b6:71:d2:97: 97:9b:73:77:c7:f4:fa:10:a6:7a:c4:f0:61:8c:89:a2:f4:20: a4:2c:3e:d4:69:d7:d4:d9:36:09:eb:c9:00:9f:7f:24:7c:3c: c4:ab:d3:65:41:ca:73:72:ed:fc:b0:f4:0c:52:09:38:a9:76: 7c:28:a2:1e:a2:88:cd:cd:ec:ad:40:76:6a:8c:fc:f4:5c:cd: 1f:7d:e6:34 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUTl8ajchjMVE4vVsCydnAy9iWcz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjEwMTQyMzQ0MjlaFw0yNzEwMTMyMzQ5MjlaMDMxMTAvBgNV BAMTKDRGNDY3NUUxMzJERDMwNUMzOTg0NzVBODREMUYyMEI2RkYyNzJERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8NCOy997Ag8MupbAYa5hhAjX 8NU0UIi9nqyH6s2990E/VDkw6rLCD/YkRgWljV/0Yconui1Q/0Xo3Z6FpCY/8KxT XfAf3Ywl1eDYr1q5LadU8SEpFlQ52E35EVajoko+alJ0QgyVy6peXhHgeapziXtc Yer0srEdZz5Ies8PetywZkhTwUTfMkhfL5cMxSxZq+pBspJJ4am54aXk/OadY3uH DE7F7HKy1toLt+vDM+f5tFzpTGHHRQhK6mZEdV+OxhSWFzK5Z1u9Hn1z++Pzre4u rEpCALgkWEEsxzi3G4eD6FYDCxbftonWrNuy/HLgZQ65TWNUnNJ2sC45trdNAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUT0Z14TLdMFw5hHWoTR8gtv8nLdAwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEz NTMxMzYzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gdUwDQYJKoZIhvcNAQELBQADggEBAG33 0SSkwn8mGyrKK5WYEpRkF22Nbt5lHrmSfkYRdsTJ8Q3wx48E3b0A5NPkwt3CMDSf Lu2U9C6Zn0L9m2ifuADyzULmaywtHAkImbmzpu7wmLZ7V1zQz3UH+kSfqwVounKw Bthq463Ehdo+mCqqMsYfOQrGVN8Z9r3o2Sy5xTtdqMPQYp8mwglJ/KcxXr1YbJEQ vheif7qZLWzHIewyWyYNtMtKGcMCaCZqASg1XTpVtnHSl5ebc3fH9PoQpnrE8GGM iaL0IKQsPtRp19TZNgnryQCffyR8PMSr02VBynNy7fyw9AxSCTipdnwooh6iiM3N 7K1AdmqM/PRczR995jQ= -----END CERTIFICATE-----Generated at Wed Oct 28 06:14:47 2026 by rpki-client