$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: WbkLmPY7vquDS69dIt63nnAZsib0q7kTLNkqlvd3rPA= Subject key identifier: B1:24:18:65:36:43:FA:1B:E2:89:E7:2D:D6:F1:C0:A6:0F:EB:E9:20 Certificate issuer: /CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Certificate serial: 4F7F09E9144A23B4BF8EFC63936BA8BD04ABB2CB Authority key identifier: 38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:26 +0000 ROA not before: Mon 07 Sep 2026 13:12:26 +0000 ROA not after: Mon 06 Sep 2027 13:17:26 +0000 asID: 204211 IP address blocks: 2a14:7581:3090::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.mft rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7f:09:e9:14:4a:23:b4:bf:8e:fc:63:93:6b:a8:bd:04:ab:b2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9 Validity Not Before: Sep 7 13:12:26 2026 GMT Not After : Sep 6 13:17:26 2027 GMT Subject: CN=B12418653643FA1BE289E72DD6F1C0A60FEBE920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:97:63:00:3c:ae:65:59:e9:8e:6d:bf:77: 51:e9:f9:4b:08:9e:0e:40:22:59:fb:bb:b6:87:4b: 39:16:f9:c1:ea:27:d2:7d:2e:63:e1:73:0f:0e:3f: 38:15:7b:31:2c:f2:91:22:49:66:ae:6a:8c:51:d4: c9:0f:78:35:4f:13:02:bd:ce:bf:f2:6b:12:48:22: d7:a2:17:6c:41:c0:4d:b2:b6:98:2d:da:e3:33:38: cd:3e:4a:b9:aa:3d:59:4b:14:4e:85:76:9c:7e:d6: fd:db:c2:d9:ee:1c:12:8d:2d:3d:3e:fe:8a:6e:c0: 99:48:99:6a:75:f9:76:22:db:6f:73:87:65:f2:fc: 56:d8:ce:1f:a2:ca:8d:78:b1:e9:4a:c1:a6:1e:0c: d6:f1:ad:14:ab:0a:7a:26:81:95:a2:1c:7d:f0:a9: b3:88:a3:53:c3:f6:57:64:cb:c7:ae:1e:12:e2:7b: 73:08:6b:35:e0:4f:56:a7:d5:a2:57:e8:f8:bf:a3: b5:26:8d:d7:ad:5a:e0:7e:e7:6f:b9:2c:f7:98:cb: 46:50:2d:89:db:e0:1c:38:0c:39:8a:d3:17:9e:74: ae:8c:e5:59:5e:aa:47:4c:55:60:77:d0:07:1c:b3: 3f:31:b7:66:dd:41:e2:07:4e:e3:fe:db:86:32:3b: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:18:65:36:43:FA:1B:E2:89:E7:2D:D6:F1:C0:A6:0F:EB:E9:20 X509v3 Authority Key Identifier: keyid:38:94:D9:3D:87:BA:B9:D0:AD:98:F2:A6:FF:43:F1:46:5B:B3:60:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/3894D93D87BAB9D0AD98F2A6FF43F1465BB360E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/2/326131343a373538313a333039303a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:3090::/48 Signature Algorithm: sha256WithRSAEncryption 44:5e:80:5d:9c:eb:fa:06:7b:c8:9d:6d:f2:47:ad:f5:04:9d: 5a:1d:89:75:09:bb:65:e5:e3:f4:9c:df:da:93:39:2b:db:81: 43:e6:25:6a:83:94:46:e4:40:9c:05:74:33:30:5a:82:9d:b8: b9:d5:c7:ac:06:36:5d:21:d8:b8:bc:96:46:75:23:a5:22:f4: 62:9a:06:8f:f8:c9:e8:69:ad:cd:a7:36:48:e4:cc:2a:a6:40: 52:3e:e3:df:e9:5d:42:e0:95:0d:5b:9b:68:42:4c:03:b2:8f: 33:8b:c8:b7:18:5c:d2:2f:85:76:1a:43:4b:0a:70:43:59:d9: e7:63:84:23:7e:9b:8e:b5:33:46:1c:32:fd:d9:72:e6:96:b0: e5:15:41:26:f4:c9:09:7c:49:81:b5:5a:3c:67:5f:24:c9:89: ea:4a:a0:ae:e7:06:c4:ac:49:e5:8b:85:43:d6:01:1b:cd:86: df:bf:4b:a4:ec:fe:1a:73:7b:0b:c1:f1:86:cd:9d:e6:5e:bc: 92:f5:5a:5c:ff:a9:47:06:b7:2f:5f:0f:29:de:5f:e6:f4:a6: 5e:03:68:91:b7:89:96:7b:6d:6d:ef:50:87:c7:0b:58:4d:06: 9b:5a:c0:89:d4:69:b0:83:e7:40:0a:1e:51:bc:22:85:a8:82: 4d:6d:30:96 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUT38J6RRKI7S/jvxjk2uovQSrssswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1 QkIzNjBFOTAeFw0yNjA5MDcxMzEyMjZaFw0yNzA5MDYxMzE3MjZaMDMxMTAvBgNV BAMTKEIxMjQxODY1MzY0M0ZBMUJFMjg5RTcyREQ2RjFDMEE2MEZFQkU5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2FJdjADyuZVnpjm2/d1Hp+UsI ng5AIln7u7aHSzkW+cHqJ9J9LmPhcw8OPzgVezEs8pEiSWauaoxR1MkPeDVPEwK9 zr/yaxJIIteiF2xBwE2ytpgt2uMzOM0+SrmqPVlLFE6Fdpx+1v3bwtnuHBKNLT0+ /opuwJlImWp1+XYi229zh2Xy/FbYzh+iyo14selKwaYeDNbxrRSrCnomgZWiHH3w qbOIo1PD9ldky8euHhLie3MIazXgT1an1aJX6Pi/o7UmjdetWuB+52+5LPeYy0ZQ LYnb4Bw4DDmK0xeedK6M5VleqkdMVWB30Accsz8xt2bdQeIHTuP+24YyO4wTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUsSQYZTZD+hviiect1vHApg/r6SAwHwYDVR0j BBgwFoAUOJTZPYe6udCtmPKm/0PxRluzYOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzIvMzg5NEQ5M0Q4N0JBQjlEMEFEOThGMkE2RkY0M0YxNDY1QkIzNjBFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRi NmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zODk0RDkzRDg3QkFCOUQwQUQ5OEYyQTZG RjQzRjE0NjVCQjM2MEU5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMi8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzAzOTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTCQMA0GCSqGSIb3DQEBCwUAA4IBAQBE XoBdnOv6BnvInW3yR631BJ1aHYl1Cbtl5eP0nN/akzkr24FD5iVqg5RG5ECcBXQz MFqCnbi51cesBjZdIdi4vJZGdSOlIvRimgaP+Mnoaa3NpzZI5MwqpkBSPuPf6V1C 4JUNW5toQkwDso8zi8i3GFzSL4V2GkNLCnBDWdnnY4QjfpuOtTNGHDL92XLmlrDl FUEm9MkJfEmBtVo8Z18kyYnqSqCu5wbErEnli4VD1gEbzYbfv0uk7P4ac3sLwfGG zZ3mXryS9Vpc/6lHBrcvXw8p3l/m9KZeA2iRt4mWe21t71CHxwtYTQabWsCJ1Gmw g+dACh5RvCKFqIJNbTCW -----END CERTIFICATE-----Generated at Thu Sep 10 14:33:02 2026 by rpki-client