$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa File: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (raw, json) Hash identifier: nO44y4dGpNuxJp2QdoTzjcIWxOsTj19ZEllt1Dvs5Ts= Subject key identifier: 8D:C5:A4:CF:B7:D5:0C:3C:14:30:13:C5:9A:DE:E9:AA:F4:64:2C:37 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 19F20AD86958B9FB6779467085D838CA8CCBFC79 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa Signing time: Sat 08 Aug 2026 13:38:32 +0000 ROA not before: Sat 08 Aug 2026 13:33:32 +0000 ROA not after: Sat 07 Aug 2027 13:38:32 +0000 asID: 207529 IP address blocks: 2a14:7581:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f2:0a:d8:69:58:b9:fb:67:79:46:70:85:d8:38:ca:8c:cb:fc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Aug 8 13:33:32 2026 GMT Not After : Aug 7 13:38:32 2027 GMT Subject: CN=8DC5A4CFB7D50C3C143013C59ADEE9AAF4642C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:a2:2f:fd:6c:a3:77:e7:53:17:37:91:02: 8f:e0:90:dd:35:08:a8:db:a8:06:78:32:0f:bc:83: ce:8a:9d:3c:82:27:f1:0e:c1:8a:5e:2e:01:fd:39: 3a:7b:70:a8:3d:7b:d3:d7:d2:99:d3:54:fe:5b:8b: a9:ee:8a:42:a8:04:88:1c:6d:08:b5:ae:76:85:1c: 2d:e0:f9:a4:20:74:58:66:aa:2d:52:64:3c:71:5a: d5:84:48:e8:86:ac:44:b9:6b:6a:34:f5:e7:0c:00: ce:15:ce:9a:29:7e:30:29:08:27:84:6e:eb:8e:88: 00:f1:f0:89:70:ad:36:63:39:be:39:f2:2b:f3:e3: be:b0:00:64:df:16:65:7f:09:b3:4f:78:b1:5b:04: 6f:b1:24:a4:ed:f2:e7:a9:88:e0:92:b5:7b:21:db: 91:08:c2:a1:e7:8e:d3:f5:bb:75:79:4c:60:ce:4d: a8:e1:fb:e7:da:5c:d3:dc:cd:11:94:2a:56:86:86: 53:e5:35:75:83:b0:71:d0:9c:1f:ff:59:b4:67:8b: 43:7f:68:1a:a1:98:5d:d3:d3:f6:e7:fb:67:3a:ce: bb:56:72:8d:cd:5a:59:0a:5d:87:4a:12:f2:20:ab: 23:f8:80:e4:80:bb:7f:af:47:88:fb:42:f8:e9:a5: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C5:A4:CF:B7:D5:0C:3C:14:30:13:C5:9A:DE:E9:AA:F4:64:2C:37 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3000::/40 Signature Algorithm: sha256WithRSAEncryption 94:07:1c:93:5b:b8:6a:3c:54:90:0e:58:19:c6:4b:09:d7:4c: e5:2c:27:02:2c:74:d1:ff:2a:87:d7:7e:dc:9d:2c:ad:54:46: 9f:18:65:a3:0d:36:04:36:3c:fc:c6:49:b0:16:c0:73:51:ae: 1e:35:dd:cb:10:ff:ab:12:99:da:11:e6:4a:1e:e2:1f:ab:a8: 41:27:91:77:a6:d5:dc:06:53:81:cb:13:11:7f:97:f0:53:80: ae:90:10:48:7e:69:9b:de:e6:fb:c1:30:18:92:aa:19:1b:32: bf:c4:b1:c9:41:bc:c9:50:76:6b:77:5a:02:48:ad:22:6f:70: 8b:40:26:93:77:0c:a5:57:f6:fe:26:cb:53:55:69:69:c6:23: 74:21:e5:f1:98:df:1b:b4:1f:34:fb:a4:e4:a3:a4:45:a1:b5: c0:ff:49:16:38:cc:ac:22:9b:f4:0b:b4:90:0c:4c:f2:18:5e: 26:5e:9f:ec:6e:ab:2a:53:be:70:53:e5:4c:f9:6a:a9:0d:86: e2:65:99:a6:16:49:a9:0d:77:0d:db:6f:5f:0b:77:c3:02:1f: ff:9c:f1:62:40:ec:0c:8f:60:10:a6:62:90:33:72:1f:1e:30: 6d:f7:77:ce:52:d3:ce:06:4e:3a:bb:11:48:98:c2:32:7a:d2: eb:64:45:7c -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUGfIK2GlYuftneUZwhdg4yozL/HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjA4MDgxMzMzMzJaFw0yNzA4MDcxMzM4MzJaMDMxMTAvBgNV BAMTKDhEQzVBNENGQjdENTBDM0MxNDMwMTNDNTlBREVFOUFBRjQ2NDJDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XqIv/Wyjd+dTFzeRAo/gkN01 CKjbqAZ4Mg+8g86KnTyCJ/EOwYpeLgH9OTp7cKg9e9PX0pnTVP5bi6nuikKoBIgc bQi1rnaFHC3g+aQgdFhmqi1SZDxxWtWESOiGrES5a2o09ecMAM4VzpopfjApCCeE buuOiADx8IlwrTZjOb458ivz476wAGTfFmV/CbNPeLFbBG+xJKTt8uepiOCStXsh 25EIwqHnjtP1u3V5TGDOTajh++faXNPczRGUKlaGhlPlNXWDsHHQnB//WbRni0N/ aBqhmF3T0/bn+2c6zrtWco3NWlkKXYdKEvIgqyP4gOSAu3+vR4j7Qvjppay3AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUjcWkz7fVDDwUMBPFmt7pqvRkLDcwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDM3MzUzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gTAwDQYJKoZIhvcNAQELBQADggEBAJQH HJNbuGo8VJAOWBnGSwnXTOUsJwIsdNH/KofXftydLK1URp8YZaMNNgQ2PPzGSbAW wHNRrh413csQ/6sSmdoR5koe4h+rqEEnkXem1dwGU4HLExF/l/BTgK6QEEh+aZve 5vvBMBiSqhkbMr/EsclBvMlQdmt3WgJIrSJvcItAJpN3DKVX9v4my1NVaWnGI3Qh 5fGY3xu0HzT7pOSjpEWhtcD/SRY4zKwim/QLtJAMTPIYXiZen+xuqypTvnBT5Uz5 aqkNhuJlmaYWSakNdw3bb18Ld8MCH/+c8WJA7AyPYBCmYpAzch8eMG33d85S084G Tjq7EUiYwjJ60utkRXw= -----END CERTIFICATE-----Generated at Thu Sep 10 11:41:16 2026 by rpki-client