$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: PWE5971C7QuLNwwp3st4YltR0tvfMKcd2CD25VQDDXc= Subject key identifier: D8:29:10:8C:8B:B2:D5:08:08:AF:B7:FB:49:88:95:F3:9C:0A:CB:C5 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 4040B0D5838C76D477B15BFF027C6F21A053FFAC Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa Signing time: Mon 03 Aug 2026 15:58:21 +0000 ROA not before: Mon 03 Aug 2026 15:53:21 +0000 ROA not after: Mon 02 Aug 2027 15:58:21 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:40:b0:d5:83:8c:76:d4:77:b1:5b:ff:02:7c:6f:21:a0:53:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Aug 3 15:53:21 2026 GMT Not After : Aug 2 15:58:21 2027 GMT Subject: CN=D829108C8BB2D50808AFB7FB498895F39C0ACBC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:07:1c:30:eb:27:83:8c:2c:55:9e:61:d5: 90:b2:2a:94:32:e0:c0:d7:b0:b5:ad:8e:c7:7a:36: 9d:c3:d3:e2:af:11:89:e1:99:38:80:a8:9f:bb:62: c1:de:6e:5d:89:a5:9b:33:81:13:cf:9c:fb:15:a3: f3:31:03:d5:69:d1:69:17:34:79:43:4c:19:04:d3: 9f:c5:97:9b:2f:96:70:78:14:12:7c:34:6b:29:8b: a5:46:2c:52:46:92:49:a2:3d:1c:98:e8:15:c1:f8: 77:a0:1e:e7:a2:b1:cd:15:a0:cd:79:06:4e:cd:b7: 76:7b:53:7b:cf:df:bc:0b:a5:2b:ce:13:ce:4d:d0: 01:9c:26:44:77:20:67:28:38:ba:eb:dc:ef:10:c5: ca:da:a4:e2:c8:4b:3c:48:a8:4d:63:c6:76:d5:6f: ec:79:c9:97:ae:97:a8:4f:5e:fd:b0:4e:49:7f:ee: fd:38:8c:10:6d:44:18:06:ca:09:fb:91:8f:66:20: 40:ad:42:27:1a:53:68:63:3e:20:7c:26:73:e6:6b: 54:96:9d:7d:b0:27:98:df:9a:e0:fe:5b:16:95:f0: 18:8e:d7:17:f3:98:42:d3:0b:b2:67:28:7b:a6:d1: 04:49:59:12:48:10:cf:e6:37:7c:dd:e1:97:2b:c7: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:29:10:8C:8B:B2:D5:08:08:AF:B7:FB:49:88:95:F3:9C:0A:CB:C5 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7a::/48 Signature Algorithm: sha256WithRSAEncryption ba:dc:0a:99:b9:f6:32:74:4f:7e:a1:ce:c2:c4:99:ae:6b:23: 02:14:fb:12:7c:22:20:21:e7:79:81:54:94:44:35:e7:5c:fd: ca:d9:fa:3d:3a:03:93:7f:ca:38:d6:be:f6:6c:20:38:2a:af: f7:58:55:e6:a3:68:0a:49:a7:f9:8f:b0:28:40:13:f5:c7:b7: dd:38:7d:78:72:91:e6:ed:65:ae:77:bf:57:d5:1e:79:7f:51: 0c:d3:e0:38:b5:0c:5d:46:bc:0b:f9:1c:82:72:5e:5b:68:fd: 2c:ac:ed:c1:7a:d1:23:75:c6:f2:2c:02:14:41:37:88:19:60: e0:1e:cb:7a:7e:d1:36:ee:56:21:55:a0:f0:eb:9a:9f:ba:54: 6c:83:16:11:0c:02:52:59:de:5d:d6:19:1f:d9:ff:0d:eb:eb: 67:e2:ff:6d:32:29:b1:c1:d3:fe:fe:7f:3f:37:fa:7c:57:b7: 6d:a3:98:e3:a6:15:18:ef:bb:a7:c5:db:da:74:92:23:60:ee: ca:fe:9e:27:eb:9c:12:ef:5f:d4:fc:58:4e:31:c3:f8:57:88: db:b4:3d:e4:22:dc:d2:76:f7:b3:dd:24:29:10:3c:1a:8a:d0: 1c:82:e6:d4:fb:c4:77:31:b4:dc:2d:48:3a:86:98:e3:99:73: bc:f2:6b:11 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQECw1YOMdtR3sVv/AnxvIaBT/6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA4MDMxNTUzMjFaFw0yNzA4MDIxNTU4MjFaMDMxMTAvBgNV BAMTKEQ4MjkxMDhDOEJCMkQ1MDgwOEFGQjdGQjQ5ODg5NUYzOUMwQUNCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9QccMOsng4wsVZ5h1ZCyKpQy 4MDXsLWtjsd6Np3D0+KvEYnhmTiAqJ+7YsHebl2JpZszgRPPnPsVo/MxA9Vp0WkX NHlDTBkE05/Fl5svlnB4FBJ8NGspi6VGLFJGkkmiPRyY6BXB+HegHueisc0VoM15 Bk7Nt3Z7U3vP37wLpSvOE85N0AGcJkR3IGcoOLrr3O8QxcrapOLISzxIqE1jxnbV b+x5yZeul6hPXv2wTkl/7v04jBBtRBgGygn7kY9mIECtQicaU2hjPiB8JnPma1SW nX2wJ5jfmuD+WxaV8BiO1xfzmELTC7JnKHum0QRJWRJIEM/mN3zd4ZcrxwIhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU2CkQjIuy1QgIr7f7SYiV85wKy8UwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP96MA0GCSqGSIb3DQEBCwUAA4IBAQC6 3AqZufYydE9+oc7CxJmuayMCFPsSfCIgIed5gVSURDXnXP3K2fo9OgOTf8o41r72 bCA4Kq/3WFXmo2gKSaf5j7AoQBP1x7fdOH14cpHm7WWud79X1R55f1EM0+A4tQxd RrwL+RyCcl5baP0srO3BetEjdcbyLAIUQTeIGWDgHst6ftE27lYhVaDw65qfulRs gxYRDAJSWd5d1hkf2f8N6+tn4v9tMimxwdP+/n8/N/p8V7dto5jjphUY77unxdva dJIjYO7K/p4n65wS71/U/FhOMcP4V4jbtD3kItzSdvez3SQpEDwaitAcgubU+8R3 MbTcLUg6hpjjmXO88msR -----END CERTIFICATE-----Generated at Sat Aug 15 02:08:51 2026 by rpki-client