$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666135303a3a2f34342d3434203d3e20323134333434.roa File: 326131343a373538303a666135303a3a2f34342d3434203d3e20323134333434.roa (raw, json) Hash identifier: 3GsbmrMybNGGMqFWCj6ZzYcMoQXQKmUw/PlMdyaUGls= Subject key identifier: 18:F7:CC:FA:87:F1:42:7F:09:25:39:85:08:AC:D8:43:6F:B6:87:E5 Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Certificate serial: 29FA6FD1698CB6B6F7FADEDE51CE79BE53889E93 Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666135303a3a2f34342d3434203d3e20323134333434.roa Signing time: Wed 05 Aug 2026 11:54:59 +0000 ROA not before: Wed 05 Aug 2026 11:49:59 +0000 ROA not after: Wed 04 Aug 2027 11:54:59 +0000 asID: 214344 IP address blocks: 2a14:7580:fa50::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 12:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fa:6f:d1:69:8c:b6:b6:f7:fa:de:de:51:ce:79:be:53:88:9e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Validity Not Before: Aug 5 11:49:59 2026 GMT Not After : Aug 4 11:54:59 2027 GMT Subject: CN=18F7CCFA87F1427F0925398508ACD8436FB687E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:91:ca:50:90:fc:c3:1e:a0:8b:2e:c8:75:20: 50:c3:4a:ae:bb:17:18:f9:0e:bc:ed:f2:1b:cc:e0: ab:07:64:3a:f6:f8:2c:80:30:c5:44:fa:8d:45:eb: d1:36:46:ae:2c:90:dc:70:19:dd:94:22:f4:4a:bc: 30:d5:81:7a:57:c3:22:0d:26:09:8e:7e:1c:ce:55: 1c:ce:5f:7d:a0:b0:a1:ab:71:92:f6:03:86:c6:fe: 5c:6a:99:f0:7a:a8:72:e5:d7:44:f5:f8:d4:40:a5: 36:0e:3a:5a:a6:ff:fd:b6:3b:c4:8a:eb:38:1b:88: cc:a8:ca:2f:71:28:56:6f:08:18:c4:57:df:d4:f1: 02:d8:a3:7f:61:4e:c9:ac:34:22:23:7f:be:47:98: 5c:f3:2a:75:8c:d4:f8:7e:24:e4:a8:9b:9a:31:a3: 0f:1c:58:ee:4c:3c:6a:9f:61:80:ef:1a:9e:d6:73: 57:fe:17:c4:e0:11:59:67:0c:14:dd:d6:ad:f0:26: 33:18:7b:73:6a:d9:fb:64:6a:ef:5e:9a:71:22:5e: c8:ed:7d:d4:6a:37:83:a2:5a:99:52:71:ed:f6:0a: 4d:da:64:42:96:3d:f4:95:a4:a7:bf:0b:4a:fb:a2: e0:bd:ba:14:ce:c7:25:19:77:c5:3e:d4:61:38:98: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F7:CC:FA:87:F1:42:7F:09:25:39:85:08:AC:D8:43:6F:B6:87:E5 X509v3 Authority Key Identifier: keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666135303a3a2f34342d3434203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fa50::/44 Signature Algorithm: sha256WithRSAEncryption 55:48:41:a1:2a:5f:62:3d:b6:9f:87:41:cf:86:2f:2a:cc:5d: 70:04:a2:44:05:a4:24:8d:4a:8d:06:b9:05:89:09:83:e2:4e: 76:3f:b0:48:4f:c0:10:21:bb:52:44:1d:44:f8:9f:f2:4c:c5: 34:60:7c:99:f5:33:63:dd:ff:ca:7e:8f:ea:b5:2b:e9:b2:01: 25:60:b6:8f:c7:74:44:d3:cd:aa:12:46:a6:87:9c:37:1b:98: 25:06:da:86:d6:9a:7e:26:ac:00:70:b0:5d:b3:57:99:9b:b4: c4:7b:bd:94:f5:1c:b9:5f:20:d1:2a:94:85:e1:eb:10:98:a4: cb:68:18:1b:75:b8:e7:6e:32:01:4d:ee:66:a6:9c:28:97:4b: 2c:00:43:8d:fa:fd:d0:d2:bd:15:32:77:80:3e:ff:e6:f0:f4: 8b:bc:12:de:2a:2a:11:a9:f4:80:22:31:94:39:fb:d2:fd:7d: be:23:dc:71:c5:01:6f:4e:01:b8:1a:ac:e8:7a:5a:de:3e:d8: 33:c3:ee:b8:7d:4e:c7:ae:79:1e:db:88:cd:cf:44:f0:84:75: 13:f8:78:c2:8e:20:c1:38:01:d0:49:f2:16:92:3b:18:69:ad: 1d:72:98:ad:80:bc:6e:50:3a:03:0a:72:f9:19:57:a2:77:40: 96:f4:91:16 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUKfpv0WmMtrb3+t7eUc55vlOInpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF RkMzRURBNTAeFw0yNjA4MDUxMTQ5NTlaFw0yNzA4MDQxMTU0NTlaMDMxMTAvBgNV BAMTKDE4RjdDQ0ZBODdGMTQyN0YwOTI1Mzk4NTA4QUNEODQzNkZCNjg3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQkcpQkPzDHqCLLsh1IFDDSq67 Fxj5Drzt8hvM4KsHZDr2+CyAMMVE+o1F69E2Rq4skNxwGd2UIvRKvDDVgXpXwyIN JgmOfhzOVRzOX32gsKGrcZL2A4bG/lxqmfB6qHLl10T1+NRApTYOOlqm//22O8SK 6zgbiMyoyi9xKFZvCBjEV9/U8QLYo39hTsmsNCIjf75HmFzzKnWM1Ph+JOSom5ox ow8cWO5MPGqfYYDvGp7Wc1f+F8TgEVlnDBTd1q3wJjMYe3Nq2ftkau9emnEiXsjt fdRqN4OiWplSce32Ck3aZEKWPfSVpKe/C0r7ouC9uhTOxyUZd8U+1GE4mLGXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGPfM+ofxQn8JJTmFCKzYQ2+2h+UwHwYDVR0j BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz MDMzQ0RGNUVGQzNFREE1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iOTZiNjExMy04NWVhLTRmYzItYWVkNC0xZjg2NWQwYWQ0NDQvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjEzNTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPpQMA0GCSqGSIb3DQEBCwUAA4IBAQBV SEGhKl9iPbafh0HPhi8qzF1wBKJEBaQkjUqNBrkFiQmD4k52P7BIT8AQIbtSRB1E +J/yTMU0YHyZ9TNj3f/Kfo/qtSvpsgElYLaPx3RE082qEkamh5w3G5glBtqG1pp+ JqwAcLBds1eZm7TEe72U9Ry5XyDRKpSF4esQmKTLaBgbdbjnbjIBTe5mppwol0ss AEON+v3Q0r0VMneAPv/m8PSLvBLeKioRqfSAIjGUOfvS/X2+I9xxxQFvTgG4Gqzo elrePtgzw+64fU7Hrnke24jNz0TwhHUT+HjCjiDBOAHQSfIWkjsYaa0dcpitgLxu UDoDCnL5GVeid0CW9JEW -----END CERTIFICATE-----Generated at Wed Aug 26 07:52:18 2026 by rpki-client