$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: sJbd3x+685QBuPBnC8OOeqVgs1pJqkXNtOuVKx3me3g= Subject key identifier: E8:0C:31:2F:1B:B9:A5:F2:A4:89:26:DF:3E:A7:4D:12:9F:1B:49:CB Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Certificate serial: 64F77C8A87C3766361ABCB3CBDB5184DB235373D Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa Signing time: Thu 14 May 2026 15:59:50 +0000 ROA not before: Thu 14 May 2026 15:54:50 +0000 ROA not after: Thu 13 May 2027 15:59:50 +0000 asID: 214344 IP address blocks: 2a14:7580:faf0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f7:7c:8a:87:c3:76:63:61:ab:cb:3c:bd:b5:18:4d:b2:35:37:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Validity Not Before: May 14 15:54:50 2026 GMT Not After : May 13 15:59:50 2027 GMT Subject: CN=E80C312F1BB9A5F2A48926DF3EA74D129F1B49CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:1e:99:c7:4f:d1:37:fa:9c:58:59:bd:aa: ca:0f:e3:40:f7:da:4d:19:cb:22:c8:b2:e4:e2:8b: 4c:2d:33:5a:7f:ab:82:c8:7e:ec:25:c6:2c:d8:00: f1:c3:b4:c1:41:21:0a:ff:5c:e7:1d:12:47:6d:cc: 4f:bd:c6:24:79:32:9e:5a:76:db:27:c9:ef:34:08: 68:a6:e7:6a:27:1a:29:d0:bb:35:de:da:83:82:be: ef:1d:d0:c9:27:0a:47:b8:40:9e:a7:04:c9:08:d7: 37:be:13:73:f0:b5:fd:cb:da:c8:fd:49:13:b3:71: 59:d1:b2:c2:70:35:bb:5a:06:4c:a8:c8:cd:66:22: 91:9a:8e:45:fe:e6:e4:77:3f:b3:9c:13:07:e9:93: 3b:c6:15:dd:fe:a1:ef:97:ba:e7:b6:3e:99:19:bf: ec:00:0f:22:1c:08:dd:a8:2f:25:12:59:94:dc:41: 3b:bc:97:a2:55:6e:20:5e:c2:22:ae:36:49:76:d6: 79:0a:e4:6a:bb:2e:39:dd:38:8e:37:f0:1b:f2:02: ee:58:72:bc:cf:91:25:93:2d:92:0c:4b:0e:7d:0b: 0c:8a:b3:bb:e1:21:a4:ec:f6:50:4a:45:0c:ec:57: f7:71:42:c7:3e:70:6e:64:1d:4c:88:24:80:b9:cb: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0C:31:2F:1B:B9:A5:F2:A4:89:26:DF:3E:A7:4D:12:9F:1B:49:CB X509v3 Authority Key Identifier: keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666166303a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:faf0::/48 Signature Algorithm: sha256WithRSAEncryption 53:e5:e8:3b:39:6a:3c:68:88:a7:9d:ae:f1:68:ee:f4:81:08: e3:2c:29:50:da:6d:68:34:2d:ef:d5:2a:bb:be:98:cc:da:5e: 54:aa:53:be:8c:15:79:4c:91:24:d4:2f:07:be:03:e9:14:38: 47:fc:a3:dc:34:f6:73:81:04:71:d7:0d:02:c5:19:3a:c5:83: f1:37:ab:f4:03:53:a1:83:6c:a0:de:1d:f9:1d:2f:ed:8e:a5: 1d:9d:e5:ed:23:5b:99:49:7f:6d:ac:5f:f1:f6:38:7e:4e:3f: 14:0e:1d:ad:48:f2:61:e5:14:ce:6f:84:d2:f0:fe:e4:49:3a: 14:75:82:e7:47:4e:c2:95:8f:83:4f:00:a0:02:22:4f:11:76: d4:40:f3:de:79:63:4a:32:e8:cd:f8:08:af:bb:83:04:9f:39: 74:eb:68:5a:ad:9a:3d:27:fb:8f:2c:ef:a6:3c:57:2c:a8:82: 92:a5:6e:14:4d:dd:37:75:ce:6e:7f:95:c1:85:7f:72:bc:31: 2d:4c:ed:7e:e6:f0:d0:8e:de:60:5c:9f:fa:54:aa:f2:75:86: b6:cc:c8:1c:52:45:53:19:d4:8a:1b:2d:52:2e:97:36:11:f7: 81:f7:f1:32:30:22:a9:85:f3:d6:32:69:7c:4e:f3:12:d2:ab: 8e:18:a6:a5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZPd8iofDdmNhq8s8vbUYTbI1Nz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF RkMzRURBNTAeFw0yNjA1MTQxNTU0NTBaFw0yNzA1MTMxNTU5NTBaMDMxMTAvBgNV BAMTKEU4MEMzMTJGMUJCOUE1RjJBNDg5MjZERjNFQTc0RDEyOUYxQjQ5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquB6Zx0/RN/qcWFm9qsoP40D3 2k0ZyyLIsuTii0wtM1p/q4LIfuwlxizYAPHDtMFBIQr/XOcdEkdtzE+9xiR5Mp5a dtsnye80CGim52onGinQuzXe2oOCvu8d0MknCke4QJ6nBMkI1ze+E3Pwtf3L2sj9 SROzcVnRssJwNbtaBkyoyM1mIpGajkX+5uR3P7OcEwfpkzvGFd3+oe+Xuue2PpkZ v+wADyIcCN2oLyUSWZTcQTu8l6JVbiBewiKuNkl21nkK5Gq7LjndOI438BvyAu5Y crzPkSWTLZIMSw59CwyKs7vhIaTs9lBKRQzsV/dxQsc+cG5kHUyIJIC5y9j1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6AwxLxu5pfKkiSbfPqdNEp8bScswHwYDVR0j BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz MDMzQ0RGNUVGQzNFREE1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iOTZiNjExMy04NWVhLTRmYzItYWVkNC0xZjg2NWQwYWQ0NDQvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjE2NjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gPrwMA0GCSqGSIb3DQEBCwUAA4IBAQBT 5eg7OWo8aIinna7xaO70gQjjLClQ2m1oNC3v1Sq7vpjM2l5UqlO+jBV5TJEk1C8H vgPpFDhH/KPcNPZzgQRx1w0CxRk6xYPxN6v0A1Ohg2yg3h35HS/tjqUdneXtI1uZ SX9trF/x9jh+Tj8UDh2tSPJh5RTOb4TS8P7kSToUdYLnR07ClY+DTwCgAiJPEXbU QPPeeWNKMujN+Aivu4MEnzl062harZo9J/uPLO+mPFcsqIKSpW4UTd03dc5uf5XB hX9yvDEtTO1+5vDQjt5gXJ/6VKrydYa2zMgcUkVTGdSKGy1SLpc2EfeB9/EyMCKp hfPWMml8TvMS0quOGKal -----END CERTIFICATE-----Generated at Mon May 25 16:33:15 2026 by rpki-client