$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/3231362e38362e36392e302f32342d3234203d3e20323031333932.roa File: 3231362e38362e36392e302f32342d3234203d3e20323031333932.roa (raw, json) Hash identifier: i15hfC4YFDQG4Z9rpiP+uVuh8FN1IQV11dqaS+xgTNQ= Subject key identifier: C0:B6:49:93:8E:60:DD:96:DF:6D:28:C0:74:27:BD:C2:C6:18:B8:4D Certificate issuer: /CN=D7770473EB8533D901B96CE41EC2543FE56C7B1B Certificate serial: 137CC15224F2A9B12BF6F3C60148939FAFD02EA6 Authority key identifier: D7:77:04:73:EB:85:33:D9:01:B9:6C:E4:1E:C2:54:3F:E5:6C:7B:1B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/3231362e38362e36392e302f32342d3234203d3e20323031333932.roa Signing time: Fri 02 Oct 2026 17:32:11 +0000 ROA not before: Fri 02 Oct 2026 17:27:11 +0000 ROA not after: Fri 01 Oct 2027 17:32:11 +0000 asID: 201392 IP address blocks: 216.86.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.crl rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 20:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7c:c1:52:24:f2:a9:b1:2b:f6:f3:c6:01:48:93:9f:af:d0:2e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7770473EB8533D901B96CE41EC2543FE56C7B1B Validity Not Before: Oct 2 17:27:11 2026 GMT Not After : Oct 1 17:32:11 2027 GMT Subject: CN=C0B649938E60DD96DF6D28C07427BDC2C618B84D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:49:79:19:51:c6:8a:fe:5f:0a:27:25:f0: 8e:90:cf:81:a2:eb:cf:e9:a3:2d:4e:c5:ee:5b:c2: 1d:a8:93:c0:40:95:16:5a:03:e8:36:6b:87:8d:d6: 95:cb:9c:2a:a6:e1:9b:7b:d7:4b:d5:27:24:6f:8d: 66:39:2a:fe:50:83:95:d4:0e:1f:8f:97:20:81:0f: a2:94:32:af:8c:73:fc:4a:b2:7e:ca:8a:84:58:ea: 07:83:de:ec:8e:17:c9:5b:cc:55:f1:a0:6e:c5:30: e2:d9:f3:38:fa:4c:97:cf:bb:c2:81:27:19:9c:d2: a7:68:11:ef:9f:ff:68:10:e5:a2:2b:2f:79:46:81: 9e:94:d4:24:00:e0:3c:53:8e:d9:ba:75:e8:f9:62: 42:22:7f:ed:29:40:93:db:8f:0e:ee:5b:78:85:17: 06:3f:9a:40:68:e5:ae:e8:31:56:2b:4c:21:10:35: 8a:78:27:53:07:b3:a5:b5:5c:b0:d3:c7:a0:09:d0: 65:eb:b4:ce:9b:f8:38:c7:77:92:de:72:ee:2b:8b: e9:9d:1b:8d:7c:6e:b7:bd:0e:18:f0:50:5c:83:c8: ba:22:ff:a1:91:bd:cd:50:ee:19:d3:91:9d:4f:99: ae:e9:73:c2:33:6f:45:be:74:4f:1d:b3:99:30:57: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:49:93:8E:60:DD:96:DF:6D:28:C0:74:27:BD:C2:C6:18:B8:4D X509v3 Authority Key Identifier: keyid:D7:77:04:73:EB:85:33:D9:01:B9:6C:E4:1E:C2:54:3F:E5:6C:7B:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/3231362e38362e36392e302f32342d3234203d3e20323031333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.86.69.0/24 Signature Algorithm: sha256WithRSAEncryption 47:1d:46:d4:ad:89:76:d1:60:05:6f:55:50:33:ed:3e:c7:ad: 88:48:ea:b0:0d:e7:75:17:b3:4f:a0:11:14:3e:90:9a:11:1f: 8b:a0:eb:b2:23:f7:4d:20:d6:6a:00:40:9b:17:66:28:5d:41: 21:f0:d5:02:03:3f:ea:82:fd:33:6c:cf:19:cf:4b:3d:1b:b4: 72:2c:d7:9a:8a:11:98:64:5c:6c:5f:fc:a6:e7:4f:5f:4c:4f: 7b:01:36:19:9d:3d:49:da:5c:ff:52:2b:42:f1:c7:16:4d:b3: 0b:76:f1:65:57:f0:d0:02:aa:db:a2:55:f6:ed:36:d5:31:48: e3:0e:ab:af:aa:f2:fb:b6:68:55:c6:84:da:84:48:5b:8c:51: d9:17:73:a4:86:5c:a5:9f:c2:94:7f:2e:ee:69:1d:d5:c6:14: 0e:2f:3e:9b:78:a2:ba:6e:1a:fe:bd:59:5c:7d:3f:00:f6:ef: a2:2e:87:27:75:79:03:e0:fb:19:00:de:d2:96:5f:e3:78:89: 2f:31:ef:2c:11:31:42:84:81:27:a0:d0:fb:da:d6:dd:4a:d4: 6f:5f:4c:21:02:50:c7:27:0f:14:66:c6:a1:19:40:01:de:af: 17:14:09:73:a0:50:27:4d:b1:2e:82:8d:cb:84:93:47:bb:af: c1:07:db:7f -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUE3zBUiTyqbEr9vPGAUiTn6/QLqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3NzA0NzNFQjg1MzNEOTAxQjk2Q0U0MUVDMjU0M0ZF NTZDN0IxQjAeFw0yNjEwMDIxNzI3MTFaFw0yNzEwMDExNzMyMTFaMDMxMTAvBgNV BAMTKEMwQjY0OTkzOEU2MEREOTZERjZEMjhDMDc0MjdCREMyQzYxOEI4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1Ul5GVHGiv5fCicl8I6Qz4Gi 68/poy1Oxe5bwh2ok8BAlRZaA+g2a4eN1pXLnCqm4Zt710vVJyRvjWY5Kv5Qg5XU Dh+PlyCBD6KUMq+Mc/xKsn7KioRY6geD3uyOF8lbzFXxoG7FMOLZ8zj6TJfPu8KB Jxmc0qdoEe+f/2gQ5aIrL3lGgZ6U1CQA4DxTjtm6dej5YkIif+0pQJPbjw7uW3iF FwY/mkBo5a7oMVYrTCEQNYp4J1MHs6W1XLDTx6AJ0GXrtM6b+DjHd5Lecu4ri+md G418bre9DhjwUFyDyLoi/6GRvc1Q7hnTkZ1Pma7pc8Izb0W+dE8ds5kwV6h1AgMB AAGjggJtMIICaTAdBgNVHQ4EFgQUwLZJk45g3ZbfbSjAdCe9wsYYuE0wHwYDVR0j BBgwFoAU13cEc+uFM9kBuWzkHsJUP+VsexswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzJiMTEwNzItZDk0MS00YzAyLTgzMmItZDU0NmFmZjNj NWQ4LzEvRDc3NzA0NzNFQjg1MzNEOTAxQjk2Q0U0MUVDMjU0M0ZFNTZDN0IxQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvRDc3NzA0NzNFQjg1MzNEOTAxQjk2Q0U0MUVDMjU0M0ZFNTZD N0IxQi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzJiMTEwNzIt ZDk0MS00YzAyLTgzMmItZDU0NmFmZjNjNWQ4LzEvMzIzMTM2MmUzODM2MmUzNjM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMxMzMzOTMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 2FZFMA0GCSqGSIb3DQEBCwUAA4IBAQBHHUbUrYl20WAFb1VQM+0+x62ISOqwDed1 F7NPoBEUPpCaER+LoOuyI/dNINZqAECbF2YoXUEh8NUCAz/qgv0zbM8Zz0s9G7Ry LNeaihGYZFxsX/ym509fTE97ATYZnT1J2lz/UitC8ccWTbMLdvFlV/DQAqrbolX2 7TbVMUjjDquvqvL7tmhVxoTahEhbjFHZF3Okhlyln8KUfy7uaR3VxhQOLz6beKK6 bhr+vVlcfT8A9u+iLocndXkD4PsZAN7Sll/jeIkvMe8sETFChIEnoND72tbdStRv X0whAlDHJw8UZsahGUAB3q8XFAlzoFAnTbEugo3LhJNHu6/BB9t/ -----END CERTIFICATE-----Generated at Tue Oct 6 01:22:22 2026 by rpki-client