$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643630303a3a2f34302d3430203d3e20313531363630.roa File: 326131343a373538313a643630303a3a2f34302d3430203d3e20313531363630.roa (raw, json) Hash identifier: jpXfTb+KklgwI1bE6gc3LhYNvDTBoCVcWcWoyRdLs10= Subject key identifier: ED:DC:F7:5E:98:8E:F2:CC:AC:B5:DB:B3:DB:71:3E:83:9D:25:3F:95 Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 405E317FEBC942FE440DE98464461E3D5C78D4A6 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643630303a3a2f34302d3430203d3e20313531363630.roa Signing time: Thu 15 Oct 2026 00:19:08 +0000 ROA not before: Thu 15 Oct 2026 00:14:08 +0000 ROA not after: Thu 14 Oct 2027 00:19:08 +0000 asID: 151660 IP address blocks: 2a14:7581:d600::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5e:31:7f:eb:c9:42:fe:44:0d:e9:84:64:46:1e:3d:5c:78:d4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Oct 15 00:14:08 2026 GMT Not After : Oct 14 00:19:08 2027 GMT Subject: CN=EDDCF75E988EF2CCACB5DBB3DB713E839D253F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:96:45:bf:3b:10:35:a0:96:8a:94:cc:ba: 77:85:57:0a:25:e9:8a:a4:da:50:d5:77:dd:23:91: ce:d4:09:8e:33:9c:82:bf:bd:8c:94:89:e0:f7:4e: 07:a4:07:f5:8e:9c:6d:24:71:2f:48:2b:75:20:fa: 5b:02:f5:0e:57:d2:e0:25:62:f8:9b:d6:e1:6d:d8: 2e:a0:e9:e9:e6:d3:16:54:41:46:b8:79:ca:ad:83: ba:fb:f4:fd:49:0c:8c:79:39:2e:df:51:e5:eb:e4: 1e:ef:9a:6c:70:d5:2f:48:f1:a7:41:ed:4a:51:35: ed:9b:3e:6e:dc:3e:c2:a2:bc:7b:af:c2:01:18:ef: 7c:c4:25:4e:05:b3:a8:96:e4:ed:87:3f:94:9c:d5: 47:4a:d3:4d:4d:0e:1b:2f:89:10:06:49:56:51:2f: fc:f4:1b:fd:09:ce:ed:a9:a5:04:e7:ef:1c:4e:9a: de:4b:6e:f8:be:34:1f:78:1c:80:59:c3:8e:e1:f4: 0e:4d:9b:e5:3d:46:a5:bf:c8:dd:d0:e4:81:d5:9f: 9e:24:4b:44:9b:6e:67:7d:5a:24:85:3d:92:5c:d9: 85:bc:85:67:e9:fe:a4:e7:18:b9:d2:a6:08:0e:40: 7b:c6:c0:84:f3:4a:f7:6f:1e:ca:ef:5a:fb:3d:6f: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DC:F7:5E:98:8E:F2:CC:AC:B5:DB:B3:DB:71:3E:83:9D:25:3F:95 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643630303a3a2f34302d3430203d3e20313531363630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d600::/40 Signature Algorithm: sha256WithRSAEncryption 2a:8e:4f:1b:0e:c4:4a:e3:b5:20:1e:ea:2a:ad:cd:77:8f:8e: 4a:ea:98:17:33:8f:93:67:6a:52:3d:4b:16:a6:f5:6b:ce:2b: 77:70:6a:52:32:d7:3c:da:6f:67:3b:0e:88:a2:b7:03:ba:d3: 88:70:3f:18:62:a8:be:6d:af:73:b4:57:27:af:a0:f6:77:ab: 25:ba:a0:0a:81:7e:db:cb:57:c9:e8:aa:4e:fa:d8:ba:2e:6f: 0a:70:22:f7:9a:22:03:e9:e7:8a:78:70:d5:fa:8a:35:84:74: 59:da:89:aa:a2:9f:ad:5d:08:7e:f2:33:43:d0:47:72:8a:30: 26:7d:6a:bd:6c:72:1b:5a:80:50:ff:50:62:c8:f2:e9:91:ed: c4:db:e7:27:c0:dc:f3:c8:ee:6a:43:25:b6:a1:84:aa:05:66: a2:0a:90:d7:82:af:0d:35:59:3a:c7:4e:b5:56:80:19:55:a3: 35:80:6f:08:eb:d7:c1:a8:44:48:2b:bc:89:93:8c:99:f5:84: d7:23:da:f9:cc:36:3d:c2:8c:e2:85:2d:1e:d6:24:84:81:d0: 51:28:07:b0:0c:4f:af:a9:32:83:bf:c5:d0:bd:29:33:a1:b6: 3c:17:ce:c2:6b:bd:a6:a5:8e:84:c9:36:a6:f3:bb:58:46:bf: 67:8b:30:9f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUQF4xf+vJQv5EDemEZEYePVx41KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjEwMTUwMDE0MDhaFw0yNzEwMTQwMDE5MDhaMDMxMTAvBgNV BAMTKEVERENGNzVFOTg4RUYyQ0NBQ0I1REJCM0RCNzEzRTgzOUQyNTNGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXZZFvzsQNaCWipTMuneFVwol 6Yqk2lDVd90jkc7UCY4znIK/vYyUieD3TgekB/WOnG0kcS9IK3Ug+lsC9Q5X0uAl Yvib1uFt2C6g6enm0xZUQUa4ecqtg7r79P1JDIx5OS7fUeXr5B7vmmxw1S9I8adB 7UpRNe2bPm7cPsKivHuvwgEY73zEJU4Fs6iW5O2HP5Sc1UdK001NDhsviRAGSVZR L/z0G/0Jzu2ppQTn7xxOmt5Lbvi+NB94HIBZw47h9A5Nm+U9RqW/yN3Q5IHVn54k S0Sbbmd9WiSFPZJc2YW8hWfp/qTnGLnSpggOQHvGwITzSvdvHsrvWvs9bz8jAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU7dz3XpiO8systduz23E+g50lP5UwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzYzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEz NTMxMzYzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gdYwDQYJKoZIhvcNAQELBQADggEBACqO TxsOxErjtSAe6iqtzXePjkrqmBczj5NnalI9Sxam9WvOK3dwalIy1zzab2c7Doii twO604hwPxhiqL5tr3O0VyevoPZ3qyW6oAqBftvLV8noqk762LoubwpwIveaIgPp 54p4cNX6ijWEdFnaiaqin61dCH7yM0PQR3KKMCZ9ar1schtagFD/UGLI8umR7cTb 5yfA3PPI7mpDJbahhKoFZqIKkNeCrw01WTrHTrVWgBlVozWAbwjr18GoREgrvImT jJn1hNcj2vnMNj3CjOKFLR7WJISB0FEoB7AMT6+pMoO/xdC9KTOhtjwXzsJrvaal joTJNqbzu1hGv2eLMJ8= -----END CERTIFICATE-----Generated at Wed Oct 28 06:14:52 2026 by rpki-client