$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa File: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (raw, json) Hash identifier: nwV0ho4jSdiW0hS3zo8MCliWSh3VANzn+ez/PP878pM= Subject key identifier: A3:31:7B:2D:D9:23:2C:A0:76:91:78:B2:69:56:B7:8F:73:B3:60:93 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 3190DF12A98AA373336E00EA22BAE496C2D9605D Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa Signing time: Fri 02 Oct 2026 16:36:28 +0000 ROA not before: Fri 02 Oct 2026 16:31:28 +0000 ROA not after: Fri 01 Oct 2027 16:36:28 +0000 asID: 31898 IP address blocks: 2a14:7581:30b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:90:df:12:a9:8a:a3:73:33:6e:00:ea:22:ba:e4:96:c2:d9:60:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Oct 2 16:31:28 2026 GMT Not After : Oct 1 16:36:28 2027 GMT Subject: CN=A3317B2DD9232CA0769178B26956B78F73B36093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:ea:77:af:2e:24:2d:cd:58:83:d4:e0:3d: f8:41:9f:05:e9:16:4f:26:5e:86:ee:6a:b5:29:2f: 1a:21:45:dc:50:09:88:7f:f2:75:77:c9:a5:d2:72: 37:31:96:86:00:57:14:0a:49:69:4f:8f:c8:f6:e0: f8:79:c6:24:6c:68:51:df:f1:36:43:9f:31:8f:19: 34:70:d1:a8:70:14:1e:79:53:a8:08:34:dd:3b:38: 45:05:19:77:d4:d3:b0:1e:97:56:b0:b1:2e:3c:4d: 1d:fb:12:cd:8d:ee:6f:8e:6d:3d:66:f5:de:df:cd: bb:85:23:af:fd:f3:6f:61:5a:cb:7a:1e:7d:98:7f: c2:ca:65:d0:6c:42:43:42:62:45:84:ee:2f:35:77: 2c:b0:16:e2:13:62:2b:f4:85:ba:21:08:3b:0e:c2: d2:d2:01:10:e7:1c:84:79:ed:7b:e6:67:09:6b:6f: 99:28:71:54:58:91:49:bf:35:f3:1d:3f:c0:70:ab: bb:70:e4:5c:76:65:d8:04:91:b6:f3:90:58:2f:59: 1d:76:09:e4:40:50:19:66:a5:fb:79:56:7b:98:7d: ac:0f:fa:81:bf:45:ec:98:a9:88:fc:b2:6d:53:82: e7:e4:19:bf:22:22:34:1b:91:f4:c0:9a:a0:e0:1e: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:31:7B:2D:D9:23:2C:A0:76:91:78:B2:69:56:B7:8F:73:B3:60:93 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:30b6::/48 Signature Algorithm: sha256WithRSAEncryption 34:75:0b:4c:fa:3f:ff:e1:f4:e1:cd:d4:77:e7:e3:7b:fa:23: 66:e8:d3:ec:85:32:bd:1d:7e:66:3e:3d:9b:3f:10:a9:d3:85: bc:61:07:01:ee:69:9c:e1:81:5b:56:cb:44:c3:6d:76:56:97: fd:45:92:4a:34:24:f2:4a:07:a3:4a:c1:da:d3:56:10:31:8d: 19:12:ae:7e:51:55:99:fc:0c:0c:85:8f:71:f3:50:b6:63:17: 91:98:0d:52:35:9f:cf:c9:ac:cc:d0:25:a7:94:70:c0:a3:d5: 46:e8:73:b6:98:0e:24:82:1d:8d:44:a5:8f:b4:f5:c4:1e:7f: bd:c0:d9:64:55:a4:99:22:c2:ab:4d:a6:46:62:11:0e:a8:56: 14:76:69:6e:3c:6a:e6:7b:66:1e:c4:c6:b8:dd:6a:26:2f:69: d4:eb:01:19:c1:ef:45:28:b0:6c:6a:7d:e9:4a:de:68:29:71: ce:78:3b:e2:2f:19:26:37:97:59:58:fc:8d:7d:69:62:fd:28: 6b:08:0d:21:a3:16:6e:48:00:2d:20:da:1b:12:6b:f9:97:af: c2:41:23:c2:13:7b:c3:03:3d:7a:78:f1:21:af:25:1c:54:2a: 75:23:15:3c:b9:8c:2b:df:19:cd:ff:39:e6:fe:7c:d2:9e:b6: a5:79:fc:b5 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUMZDfEqmKo3MzbgDqIrrklsLZYF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjEwMDIxNjMxMjhaFw0yNzEwMDExNjM2MjhaMDMxMTAvBgNV BAMTKEEzMzE3QjJERDkyMzJDQTA3NjkxNzhCMjY5NTZCNzhGNzNCMzYwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVM+p3ry4kLc1Yg9TgPfhBnwXp Fk8mXobuarUpLxohRdxQCYh/8nV3yaXScjcxloYAVxQKSWlPj8j24Ph5xiRsaFHf 8TZDnzGPGTRw0ahwFB55U6gINN07OEUFGXfU07Ael1awsS48TR37Es2N7m+ObT1m 9d7fzbuFI6/9829hWst6Hn2Yf8LKZdBsQkNCYkWE7i81dyywFuITYiv0hbohCDsO wtLSARDnHIR57XvmZwlrb5kocVRYkUm/NfMdP8Bwq7tw5Fx2ZdgEkbbzkFgvWR12 CeRAUBlmpft5VnuYfawP+oG/ReyYqYj8sm1TgufkGb8iIjQbkfTAmqDgHroPAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUozF7LdkjLKB2kXiyaVa3j3OzYJMwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzA2MjM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMz MTM4MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEwtjANBgkqhkiG9w0BAQsFAAOCAQEANHUL TPo//+H04c3Ud+fje/ojZujT7IUyvR1+Zj49mz8QqdOFvGEHAe5pnOGBW1bLRMNt dlaX/UWSSjQk8koHo0rB2tNWEDGNGRKuflFVmfwMDIWPcfNQtmMXkZgNUjWfz8ms zNAlp5RwwKPVRuhztpgOJIIdjUSlj7T1xB5/vcDZZFWkmSLCq02mRmIRDqhWFHZp bjxq5ntmHsTGuN1qJi9p1OsBGcHvRSiwbGp96UreaClxzng74i8ZJjeXWVj8jX1p Yv0oawgNIaMWbkgALSDaGxJr+ZevwkEjwhN7wwM9enjxIa8lHFQqdSMVPLmMK98Z zf855v580p62pXn8tQ== -----END CERTIFICATE-----Generated at Wed Oct 28 02:20:06 2026 by rpki-client