$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa File: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (raw, json) Hash identifier: ROsrwkR7nWLwQbpaSZWVWx6M1N5sHIdeiD5wZMPm00g= Subject key identifier: F1:E6:A1:2F:CD:5A:33:C8:C5:93:CC:9C:F7:9F:C9:FB:18:12:E4:53 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 06C6327C0E2E38E757E892877DE36799A9B89A88 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa Signing time: Sun 09 Aug 2026 19:24:12 +0000 ROA not before: Sun 09 Aug 2026 19:19:12 +0000 ROA not after: Sun 08 Aug 2027 19:24:12 +0000 asID: 214643 IP address blocks: 2a14:7581:f40::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c6:32:7c:0e:2e:38:e7:57:e8:92:87:7d:e3:67:99:a9:b8:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Aug 9 19:19:12 2026 GMT Not After : Aug 8 19:24:12 2027 GMT Subject: CN=F1E6A12FCD5A33C8C593CC9CF79FC9FB1812E453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:19:b8:fb:57:96:e3:14:08:8c:10:6b:9d:0e: 0a:9f:e3:39:83:4a:0e:2e:b9:8b:4c:9c:2b:6f:7c: 48:1d:a3:6f:78:9c:08:ab:0f:45:9d:08:54:02:93: bf:f1:66:15:fc:c9:97:5a:58:7e:d6:3c:a3:34:d5: c2:04:81:cb:4f:56:6d:55:97:24:04:e1:fb:14:24: 6c:e2:1f:56:c6:98:24:6d:6a:47:ed:e1:15:87:e9: 67:51:8d:cb:b0:d3:83:d6:3a:30:59:dd:ff:36:ed: 0e:34:c0:a1:2c:0e:90:52:d4:af:e5:1b:8d:b4:92: 7c:20:ac:bd:e5:04:d6:e8:f0:20:21:d9:bd:20:73: ab:a1:a6:ce:b2:69:f1:bf:f3:b8:40:e1:97:83:70: df:39:5f:93:00:42:c7:9c:3a:cb:92:00:14:7d:6d: f6:e3:ef:a4:06:a1:b9:76:5c:5a:a2:32:d9:33:dd: 51:24:fb:54:b6:8c:01:66:4b:12:64:e2:48:b8:52: 4d:6a:53:70:64:aa:bf:b1:f2:96:48:bb:4f:2e:39: e0:07:eb:ec:4a:cf:69:5c:39:3f:f3:11:b4:d4:08: f8:60:40:26:95:8e:62:16:24:b3:53:28:aa:41:37: 5a:83:5b:fe:7a:6a:c2:e7:10:76:cf:b4:5c:9c:1c: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:A1:2F:CD:5A:33:C8:C5:93:CC:9C:F7:9F:C9:FB:18:12:E4:53 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f40::/44 Signature Algorithm: sha256WithRSAEncryption 5e:8e:ff:b2:5b:25:54:93:40:63:3d:c9:12:70:85:f3:19:d3: b8:f5:cb:ce:00:5d:76:83:f9:3f:03:c4:86:62:32:bc:76:ab: 93:09:42:e9:87:f8:c9:f7:e0:2a:b2:6b:79:78:26:19:13:18: 9b:77:6a:a6:eb:21:e5:5c:fc:5b:c1:23:90:17:64:ae:2d:41: 2f:4b:1b:c3:26:ab:db:18:49:e1:0e:ea:5c:c3:8b:4e:e5:eb: 78:67:10:2c:04:56:b2:a7:05:22:74:84:c5:72:fb:5f:de:da: 95:e2:06:9d:2d:46:e6:bd:09:31:97:64:37:dd:b2:b3:a3:cc: 6a:f1:28:13:f2:9d:c5:28:61:68:6d:d3:96:e1:40:12:e1:8f: 73:57:6a:7a:4d:2a:e1:c0:9e:e7:26:a9:19:d5:a9:ba:14:f4: 0f:e3:7e:ce:13:55:00:cc:85:96:ca:81:78:9f:08:99:7b:e3: 8c:db:19:51:3f:5b:f0:d2:c2:e3:07:f3:78:99:27:8b:b7:7e: 41:7f:b5:b1:d2:c7:3a:4d:af:38:05:d6:96:af:a5:d6:c3:e4: b6:3b:e4:22:f5:50:84:51:37:a8:1e:f9:ff:d0:ae:77:57:19: 7c:4a:30:f6:dc:80:a0:75:09:4e:f3:40:48:67:85:a3:81:93: ce:26:06:50 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUBsYyfA4uOOdX6JKHfeNnmam4mogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjA4MDkxOTE5MTJaFw0yNzA4MDgxOTI0MTJaMDMxMTAvBgNV BAMTKEYxRTZBMTJGQ0Q1QTMzQzhDNTkzQ0M5Q0Y3OUZDOUZCMTgxMkU0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuGbj7V5bjFAiMEGudDgqf4zmD Sg4uuYtMnCtvfEgdo294nAirD0WdCFQCk7/xZhX8yZdaWH7WPKM01cIEgctPVm1V lyQE4fsUJGziH1bGmCRtakft4RWH6WdRjcuw04PWOjBZ3f827Q40wKEsDpBS1K/l G420knwgrL3lBNbo8CAh2b0gc6uhps6yafG/87hA4ZeDcN85X5MAQsecOsuSABR9 bfbj76QGobl2XFqiMtkz3VEk+1S2jAFmSxJk4ki4Uk1qU3Bkqr+x8pZIu08uOeAH 6+xKz2lcOT/zEbTUCPhgQCaVjmIWJLNTKKpBN1qDW/56asLnEHbPtFycHFyTAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU8eahL81aM8jFk8yc95/J+xgS5FMwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY2MzQzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEz NDM2MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYEPQDANBgkqhkiG9w0BAQsFAAOCAQEAXo7/ slslVJNAYz3JEnCF8xnTuPXLzgBddoP5PwPEhmIyvHarkwlC6Yf4yffgKrJreXgm GRMYm3dqpush5Vz8W8EjkBdkri1BL0sbwyar2xhJ4Q7qXMOLTuXreGcQLARWsqcF InSExXL7X97aleIGnS1G5r0JMZdkN92ys6PMavEoE/KdxShhaG3TluFAEuGPc1dq ek0q4cCe5yapGdWpuhT0D+N+zhNVAMyFlsqBeJ8ImXvjjNsZUT9b8NLC4wfzeJkn i7d+QX+1sdLHOk2vOAXWlq+l1sPktjvkIvVQhFE3qB75/9Cud1cZfEow9tyAoHUJ TvNASGeFo4GTziYGUA== -----END CERTIFICATE-----Generated at Sat Sep 5 01:11:21 2026 by rpki-client