$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666166333a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538303a666166333a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: 3+sQOzUmUWDHvt6E9xSpw5rDjmYlCC3fgLz6AZHb7yA= Subject key identifier: 69:A4:67:0F:32:90:2B:60:85:D0:72:0B:F9:64:9A:AF:A6:9F:97:28 Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Certificate serial: 4A436370295593C531D8DB2F5CA1DF41A90AEFAD Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666166333a3a2f34382d3438203d3e20323134333434.roa Signing time: Wed 05 Aug 2026 11:57:57 +0000 ROA not before: Wed 05 Aug 2026 11:52:57 +0000 ROA not after: Wed 04 Aug 2027 11:57:57 +0000 asID: 214344 IP address blocks: 2a14:7580:faf3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 12:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:43:63:70:29:55:93:c5:31:d8:db:2f:5c:a1:df:41:a9:0a:ef:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Validity Not Before: Aug 5 11:52:57 2026 GMT Not After : Aug 4 11:57:57 2027 GMT Subject: CN=69A4670F32902B6085D0720BF9649AAFA69F9728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:96:f7:b4:47:45:ac:5c:4b:a1:85:5e:19: 52:76:1f:f9:ca:b3:db:89:9d:78:a1:c1:80:d4:f7: df:9e:ea:82:a4:f8:4d:7f:da:66:53:21:36:5b:c7: 56:97:f4:9a:2b:09:a8:4b:d2:0f:55:16:6e:f9:72: df:8f:d7:47:87:bf:2b:76:76:a8:b1:95:d7:cf:83: a2:9c:2c:da:d6:1a:5a:4b:57:60:60:f1:f8:c7:45: 97:69:19:85:bc:af:d4:ad:a4:0e:ec:9a:6c:a6:cb: 7b:5d:b8:32:da:42:bd:f1:3f:77:48:d1:49:73:d5: 62:93:ce:20:24:c4:28:3c:b6:82:05:22:be:4f:5b: 2a:3e:c0:00:cb:82:ad:6d:ec:a2:8b:27:20:88:ce: fd:4f:dd:fc:d7:8c:bd:33:41:f0:14:60:cb:f2:0b: d9:24:50:98:90:fa:3f:23:1f:4e:3e:18:dd:e7:dd: ff:bd:2f:67:05:f2:64:43:be:f2:48:0b:6d:ff:89: 27:f1:f7:2a:2c:86:a7:a9:6a:ce:26:3d:5e:8e:e7: 3d:66:1b:c9:ef:22:1e:84:3a:72:e3:e4:b5:8d:70: 30:63:f6:a0:90:52:16:36:46:d3:d3:22:af:62:1d: ce:eb:2a:6c:64:49:79:33:c2:36:dd:1f:fd:b3:41: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:67:0F:32:90:2B:60:85:D0:72:0B:F9:64:9A:AF:A6:9F:97:28 X509v3 Authority Key Identifier: keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666166333a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:faf3::/48 Signature Algorithm: sha256WithRSAEncryption 67:f2:14:94:bd:82:c4:36:54:57:93:f8:dc:3b:fa:0f:66:b2: 1e:b5:a7:82:dd:f9:9a:14:c9:00:0b:d4:53:6c:11:71:93:68: 1f:f5:34:7c:32:15:80:ee:fd:9f:8c:ec:07:36:14:b1:e1:12: e8:6a:52:9b:fc:57:d3:15:28:33:cc:07:2a:e2:ea:7d:f4:25: 96:ad:1f:60:fd:ad:f2:2b:a0:80:96:15:35:d7:6d:04:9f:8f: 76:57:24:08:89:9a:a0:ad:14:7a:90:31:60:44:59:d1:81:75: 6f:42:8c:03:21:6b:cd:e7:0f:e9:0a:57:d6:0f:65:6a:d5:b3: f6:9e:f6:d5:4d:58:5d:82:9c:72:3b:42:b4:92:ef:3e:ec:e0: 53:78:9a:66:95:48:79:d2:c3:8a:a3:35:2b:18:be:a8:5f:08: 3f:32:6d:73:4e:1f:a7:ed:17:40:a3:d3:24:27:53:45:a4:e7: 4a:10:d5:4d:05:cc:a4:fd:a5:1b:2e:0d:16:b6:f9:12:fc:f4: 22:b4:a9:c9:ad:c2:fd:a5:28:e5:5d:9f:4b:ef:2c:db:a5:00: 59:44:80:5c:b7:a0:cd:78:b9:9c:18:11:ac:d0:24:12:0f:0e: a8:13:2e:8b:f9:dd:00:37:19:2a:20:09:a2:99:d0:e5:d4:57: ce:58:39:76 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSkNjcClVk8Ux2NsvXKHfQakK760wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF RkMzRURBNTAeFw0yNjA4MDUxMTUyNTdaFw0yNzA4MDQxMTU3NTdaMDMxMTAvBgNV BAMTKDY5QTQ2NzBGMzI5MDJCNjA4NUQwNzIwQkY5NjQ5QUFGQTY5Rjk3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrq5b3tEdFrFxLoYVeGVJ2H/nK s9uJnXihwYDU99+e6oKk+E1/2mZTITZbx1aX9JorCahL0g9VFm75ct+P10eHvyt2 dqixldfPg6KcLNrWGlpLV2Bg8fjHRZdpGYW8r9StpA7smmymy3tduDLaQr3xP3dI 0Ulz1WKTziAkxCg8toIFIr5PWyo+wADLgq1t7KKLJyCIzv1P3fzXjL0zQfAUYMvy C9kkUJiQ+j8jH04+GN3n3f+9L2cF8mRDvvJIC23/iSfx9yoshqepas4mPV6O5z1m G8nvIh6EOnLj5LWNcDBj9qCQUhY2RtPTIq9iHc7rKmxkSXkzwjbdH/2zQYK5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUaaRnDzKQK2CF0HIL+WSar6aflygwHwYDVR0j BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz MDMzQ0RGNUVGQzNFREE1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iOTZiNjExMy04NWVhLTRmYzItYWVkNC0xZjg2NWQwYWQ0NDQvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjE2NjMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gPrzMA0GCSqGSIb3DQEBCwUAA4IBAQBn 8hSUvYLENlRXk/jcO/oPZrIetaeC3fmaFMkAC9RTbBFxk2gf9TR8MhWA7v2fjOwH NhSx4RLoalKb/FfTFSgzzAcq4up99CWWrR9g/a3yK6CAlhU1120En492VyQIiZqg rRR6kDFgRFnRgXVvQowDIWvN5w/pClfWD2Vq1bP2nvbVTVhdgpxyO0K0ku8+7OBT eJpmlUh50sOKozUrGL6oXwg/Mm1zTh+n7RdAo9MkJ1NFpOdKENVNBcyk/aUbLg0W tvkS/PQitKnJrcL9pSjlXZ9L7yzbpQBZRIBct6DNeLmcGBGs0CQSDw6oEy6L+d0A NxkqIAmimdDl1FfOWDl2 -----END CERTIFICATE-----Generated at Wed Aug 26 07:52:29 2026 by rpki-client