$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: RqUe0gZydPYyKZQfKR8vKq452OBo5sS0uzmQSo0RksM= Subject key identifier: B8:F9:64:C8:4E:A4:47:9C:83:31:41:ED:E0:C1:A7:18:AF:D9:48:E4 Certificate issuer: /CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Certificate serial: 3849B14B899CCF55568498AEDF3BF2450A781D26 Authority key identifier: 62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 22 May 2026 14:21:57 +0000 ROA not before: Fri 22 May 2026 14:16:57 +0000 ROA not after: Fri 21 May 2027 14:21:57 +0000 asID: 214344 IP address blocks: 2a14:7581:9905::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:49:b1:4b:89:9c:cf:55:56:84:98:ae:df:3b:f2:45:0a:78:1d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Validity Not Before: May 22 14:16:57 2026 GMT Not After : May 21 14:21:57 2027 GMT Subject: CN=B8F964C84EA4479C833141EDE0C1A718AFD948E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:6e:c2:b5:95:7d:17:64:ea:fb:11:02:36: 13:df:8f:5a:21:e8:6f:4b:66:83:c1:a0:c3:d3:f0: 44:51:d5:6f:28:af:93:77:9c:e0:74:04:b3:49:f7: 26:29:dc:6a:bc:0d:41:ae:8b:7d:15:9d:0c:2d:3d: 95:8f:16:b2:0f:24:25:77:70:2f:dd:6f:fa:b5:22: 9e:e6:ec:85:d6:83:2e:bf:b9:b2:34:44:bc:2a:ac: a6:0c:6a:4d:6f:83:97:6c:3e:7f:ff:6c:ed:69:cf: 07:4d:6e:f2:9f:7c:3c:da:7e:04:72:57:23:44:7a: 6f:04:bf:ee:e7:8f:a9:2b:3b:5d:9a:37:43:e9:97: 64:26:1f:8b:24:01:01:ba:3f:d1:2e:4c:58:03:fd: 22:fa:62:a2:af:3e:26:95:1f:21:0d:3c:2e:22:eb: 6e:ac:0e:ae:18:7b:f6:ee:21:e7:20:8d:23:86:36: d9:24:10:bb:14:60:5a:4d:37:79:ae:69:d5:05:b2: 15:e6:7a:11:08:38:47:7f:ae:75:92:cb:a6:15:fc: 3e:78:78:cd:55:e6:52:21:3d:71:f1:aa:99:cb:49: 5c:b0:74:93:be:86:95:cd:b0:ae:5e:85:27:56:f4: d3:6a:bf:db:b9:55:eb:09:87:10:a4:4d:b7:dc:44: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F9:64:C8:4E:A4:47:9C:83:31:41:ED:E0:C1:A7:18:AF:D9:48:E4 X509v3 Authority Key Identifier: keyid:62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9905::/48 Signature Algorithm: sha256WithRSAEncryption 48:1d:07:15:71:2a:71:33:e1:b1:3c:33:b4:c9:29:0e:66:53: d1:ad:4e:3d:7b:ca:eb:05:f5:13:48:cf:5e:49:86:38:9f:c4: 10:b0:45:9e:1c:df:39:53:01:38:d1:2d:ca:f7:19:9b:b3:a7: df:3a:5e:25:15:50:0a:a3:e8:47:db:b3:c0:24:4b:fc:db:3f: 79:af:2b:b3:a2:a0:e7:2b:a9:6f:8f:3d:f6:f1:f2:f0:f5:32: bf:1a:84:74:c4:fc:63:b0:0d:bb:00:f6:27:b9:ae:3d:79:4f: cf:3f:f7:b7:31:f6:1c:47:49:de:f3:99:4d:1d:6e:53:9a:29: 56:92:82:f5:4f:1d:65:02:dc:47:79:6a:02:a8:1d:db:a1:42: 60:47:68:45:7e:81:26:17:06:cd:f4:26:11:e7:74:26:f6:bb: 01:ff:ea:e2:27:48:c1:ea:08:3a:76:c9:07:a6:f7:04:3c:ae: a6:00:b6:50:c3:25:0e:3f:c2:a9:81:15:26:4f:cb:4c:3e:0b: 0f:26:08:43:e1:54:f0:9b:73:ee:86:22:34:bd:71:63:54:9f: da:3b:55:1c:1a:a2:f2:6c:6e:af:f7:5a:4c:77:7a:75:c6:8e: 1c:04:f4:67:a5:eb:a5:b6:38:1f:f2:da:4a:43:e8:03:c5:04: 07:a7:de:9f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOEmxS4mcz1VWhJiu3zvyRQp4HSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5 MkIyMjUzNjAeFw0yNjA1MjIxNDE2NTdaFw0yNzA1MjExNDIxNTdaMDMxMTAvBgNV BAMTKEI4Rjk2NEM4NEVBNDQ3OUM4MzMxNDFFREUwQzFBNzE4QUZEOTQ4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXW7CtZV9F2Tq+xECNhPfj1oh 6G9LZoPBoMPT8ERR1W8or5N3nOB0BLNJ9yYp3Gq8DUGui30VnQwtPZWPFrIPJCV3 cC/db/q1Ip7m7IXWgy6/ubI0RLwqrKYMak1vg5dsPn//bO1pzwdNbvKffDzafgRy VyNEem8Ev+7nj6krO12aN0Ppl2QmH4skAQG6P9EuTFgD/SL6YqKvPiaVHyENPC4i 626sDq4Ye/buIecgjSOGNtkkELsUYFpNN3muadUFshXmehEIOEd/rnWSy6YV/D54 eM1V5lIhPXHxqpnLSVywdJO+hpXNsK5ehSdW9NNqv9u5VesJhxCkTbfcRDcLAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUuPlkyE6kR5yDMUHt4MGnGK/ZSOQwHwYDVR0j BBgwFoAUYtKaBkjubYnZ6aaprBW0ppKyJTYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzIvNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5MkIyMjUzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82MkQyOUEwNjQ4RUU2RDg5RDlFOUE2QTlB QzE1QjRBNjkyQjIyNTM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iOTZiNjExMy04NWVhLTRmYzItYWVkNC0xZjg2NWQwYWQ0NDQvMi8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZkFMA0GCSqGSIb3DQEBCwUAA4IBAQBI HQcVcSpxM+GxPDO0ySkOZlPRrU49e8rrBfUTSM9eSYY4n8QQsEWeHN85UwE40S3K 9xmbs6ffOl4lFVAKo+hH27PAJEv82z95ryuzoqDnK6lvjz328fLw9TK/GoR0xPxj sA27APYnua49eU/PP/e3MfYcR0ne85lNHW5TmilWkoL1Tx1lAtxHeWoCqB3boUJg R2hFfoEmFwbN9CYR53Qm9rsB/+riJ0jB6gg6dskHpvcEPK6mALZQwyUOP8KpgRUm T8tMPgsPJghD4VTwm3PuhiI0vXFjVJ/aO1UcGqLybG6v91pMd3p1xo4cBPRnpeul tjgf8tpKQ+gDxQQHp96f -----END CERTIFICATE-----Generated at Mon May 25 16:32:52 2026 by rpki-client