$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa File: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (raw, json) Hash identifier: PeUjQ8YxZi1uSLrzrq48fodAqGN1I1xc9EjlTG8bmI8= Subject key identifier: 06:C8:3A:67:57:93:BA:C4:A9:32:1A:56:92:45:AF:2E:1B:CF:50:B9 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 459FBFE18248AF920C8E275451C145B87CBA37EF Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa Signing time: Fri 02 Oct 2026 12:36:29 +0000 ROA not before: Fri 02 Oct 2026 12:31:29 +0000 ROA not after: Fri 01 Oct 2027 12:36:29 +0000 asID: 204211 IP address blocks: 2a14:7581:3090::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9f:bf:e1:82:48:af:92:0c:8e:27:54:51:c1:45:b8:7c:ba:37:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Oct 2 12:31:29 2026 GMT Not After : Oct 1 12:36:29 2027 GMT Subject: CN=06C83A675793BAC4A9321A569245AF2E1BCF50B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:17:e3:7e:c1:f1:cf:17:49:7d:ee:f3:6e: fd:07:2e:ef:a8:76:18:e6:bc:34:11:54:a5:37:a2: d0:43:41:7f:08:33:5f:7a:b4:50:6f:bd:46:15:16: 5a:a5:c5:9c:f8:03:52:7c:8f:a0:98:b0:f3:aa:e2: 12:65:af:56:01:93:f9:37:2f:17:3d:84:70:45:80: e4:e9:a4:c8:38:62:51:ab:bc:0e:dd:f7:3c:1e:75: d8:fc:89:25:66:fe:33:3c:9c:00:98:0c:7f:29:3d: fc:51:47:23:34:e1:65:a9:80:1d:34:da:fe:3c:d6: e3:da:c7:5b:ae:e4:05:8e:a5:51:ca:f5:02:d6:a8: 4c:e2:01:8a:25:df:74:f9:35:42:b2:d8:f8:fd:dd: d4:26:49:e5:fc:54:fa:a3:17:25:26:ff:c7:23:eb: 25:23:58:f1:18:57:a7:8b:15:2a:df:d5:98:69:c2: 34:b3:ff:88:21:4a:c8:45:ca:75:e7:fd:6e:54:23: c8:3b:f5:bd:bc:aa:03:05:82:9c:92:96:e4:d5:d3: fc:fd:29:29:e1:0c:b2:59:0c:b2:33:67:32:f4:ba: b3:99:7f:58:83:25:a8:3e:fd:fc:4b:5c:9c:e3:40: df:ae:4e:04:51:d0:48:b8:f3:d1:59:13:e6:a8:1c: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:3A:67:57:93:BA:C4:A9:32:1A:56:92:45:AF:2E:1B:CF:50:B9 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3090::/44 Signature Algorithm: sha256WithRSAEncryption 96:3d:08:ea:02:b3:bc:d4:a3:b4:60:cc:6a:0f:eb:5a:1f:fa: fa:04:21:d8:68:98:c5:98:45:95:82:d4:13:ae:93:9e:ae:c9: a9:3e:83:2f:47:02:d9:46:9f:f0:8c:0b:2f:89:d4:a5:9d:ac: 67:b2:ed:8b:8a:cf:fc:6c:99:b2:bf:05:bb:cd:cc:6b:51:5f: f5:a3:77:ac:40:0e:b0:15:57:fc:ef:e7:2e:fd:e3:22:55:42: 7d:47:7f:c6:3f:4f:96:c2:be:d2:5a:1f:6c:65:fd:98:57:9e: cc:1a:2e:e9:76:d8:65:28:23:67:69:a8:cf:73:79:29:83:fb: 18:1b:8d:fb:17:98:e1:d2:88:c0:91:92:cc:fa:35:02:37:97: 9c:07:9b:82:f8:d0:12:9a:7b:94:c1:f2:c1:05:af:7a:3f:39: 18:17:61:34:18:2b:ac:ed:44:dd:30:7d:cf:cb:1d:94:82:5d: 03:4a:1a:4b:d5:40:d1:20:7d:ac:39:9d:9e:c7:8a:f9:85:a9: bc:0f:a5:bc:4b:3d:df:c1:54:35:43:73:e7:35:65:ff:38:e3: 1f:d4:4a:f4:1b:dd:b4:0c:6f:22:5c:e2:9b:2b:0a:3e:e2:16: ff:cc:43:73:41:d3:c5:15:f5:22:c1:f0:d5:77:b0:2b:d9:c1: 55:72:d8:c6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURZ+/4YJIr5IMjidUUcFFuHy6N+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjEwMDIxMjMxMjlaFw0yNzEwMDExMjM2MjlaMDMxMTAvBgNV BAMTKDA2QzgzQTY3NTc5M0JBQzRBOTMyMUE1NjkyNDVBRjJFMUJDRjUwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONBfjfsHxzxdJfe7zbv0HLu+o dhjmvDQRVKU3otBDQX8IM196tFBvvUYVFlqlxZz4A1J8j6CYsPOq4hJlr1YBk/k3 Lxc9hHBFgOTppMg4YlGrvA7d9zweddj8iSVm/jM8nACYDH8pPfxRRyM04WWpgB00 2v481uPax1uu5AWOpVHK9QLWqEziAYol33T5NUKy2Pj93dQmSeX8VPqjFyUm/8cj 6yUjWPEYV6eLFSrf1ZhpwjSz/4ghSshFynXn/W5UI8g79b28qgMFgpySluTV0/z9 KSnhDLJZDLIzZzL0urOZf1iDJag+/fxLXJzjQN+uTgRR0Ei489FZE+aoHE8LAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUBsg6Z1eTusSpMhpWkkWvLhvPULkwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzAzOTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gTCQMA0GCSqGSIb3DQEBCwUAA4IBAQCW PQjqArO81KO0YMxqD+taH/r6BCHYaJjFmEWVgtQTrpOersmpPoMvRwLZRp/wjAsv idSlnaxnsu2Lis/8bJmyvwW7zcxrUV/1o3esQA6wFVf87+cu/eMiVUJ9R3/GP0+W wr7SWh9sZf2YV57MGi7pdthlKCNnaajPc3kpg/sYG437F5jh0ojAkZLM+jUCN5ec B5uC+NASmnuUwfLBBa96PzkYF2E0GCus7UTdMH3Pyx2Ugl0DShpL1UDRIH2sOZ2e x4r5ham8D6W8Sz3fwVQ1Q3PnNWX/OOMf1Er0G920DG8iXOKbKwo+4hb/zENzQdPF FfUiwfDVd7Ar2cFVctjG -----END CERTIFICATE-----Generated at Tue Oct 27 20:29:56 2026 by rpki-client