$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: pg01dmJKb4i6N1OISbtyGBdxn2HbVOxCfGKdfLBgGBU= Subject key identifier: AB:37:12:C1:60:63:C2:A5:DE:17:CD:DC:FE:35:E4:9B:6C:6C:4D:6E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 6BCB646E5BBA48444448FCAEFCE0BC7BC62BDF89 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 204211 IP address blocks: 2a14:7586:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:cb:64:6e:5b:ba:48:44:44:48:fc:ae:fc:e0:bc:7b:c6:2b:df:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=AB3712C16063C2A5DE17CDDCFE35E49B6C6C4D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:58:3e:1e:ba:06:de:4a:21:80:0c:b8:9b: c0:b0:db:eb:aa:b7:ed:a8:ea:a1:48:be:a8:9c:d7: 10:d2:b0:96:57:ac:40:f6:e9:6c:1f:f0:9b:09:b3: f6:cf:bc:9b:dc:0f:91:11:24:a0:b2:3a:8d:e9:52: 3c:4f:25:35:6c:75:9b:2d:da:22:98:55:25:5f:d0: cd:ac:06:50:db:f9:79:46:0c:0f:a0:ed:9c:59:44: 00:33:f9:84:f1:ee:0c:ff:55:48:a0:95:83:98:f8: d3:ea:ed:16:fd:e3:af:85:6f:de:ea:86:8e:85:66: 69:8e:66:58:03:7f:ed:e0:f7:a3:a8:a9:93:3f:89: be:2f:a6:ac:be:21:11:a6:6c:c0:b2:c4:f5:3b:29: e8:78:c3:7f:2e:25:de:6e:bd:b6:c5:cf:2c:76:c4: a6:f2:ea:35:a5:fb:57:70:59:67:09:1d:b0:35:fe: 54:bf:f8:59:d7:e7:a3:ca:94:e5:60:62:66:37:3c: fc:a6:bc:44:9c:92:97:13:78:65:40:5c:10:13:eb: 2e:75:24:5d:f9:86:e0:59:64:5d:e9:a9:b4:35:52: f7:67:57:4e:1f:7a:8c:4f:d8:e1:81:26:5d:19:c5: e8:78:f1:5b:3a:7f:bd:61:68:d8:fe:76:2d:78:86: 33:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:37:12:C1:60:63:C2:A5:DE:17:CD:DC:FE:35:E4:9B:6C:6C:4D:6E X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6100::/48 Signature Algorithm: sha256WithRSAEncryption 59:1c:fd:41:ff:29:31:99:f2:e8:08:5c:fd:a8:df:56:4f:01: b7:35:f8:fd:d1:fe:d3:1e:b8:e9:77:41:19:eb:db:6f:fa:02: 84:63:28:6b:fa:1f:c1:87:0d:9a:0d:22:03:99:c4:ee:ae:c3: 61:20:22:4c:6f:a7:23:83:de:47:1b:5c:02:8f:1e:a6:67:02: 0e:a8:23:3c:bc:77:dd:88:0c:12:83:a9:c2:75:d1:d5:fd:98: 68:52:64:6e:ef:c1:ce:bd:9a:d2:9d:9e:12:9b:be:78:80:07: 04:2f:70:b0:8a:ea:02:9b:f2:6a:e1:cf:32:27:69:60:2b:5b: 46:5e:35:2d:1b:12:3d:e7:5a:40:4c:db:0a:68:ba:d4:b5:ca: d6:cf:28:2b:7c:8b:fd:df:49:97:d0:ac:a2:8c:43:25:dd:4d: a3:5d:35:a5:3a:8b:35:bf:5a:09:9a:56:a4:7a:a3:d5:a5:f5: b6:dc:f2:13:fc:57:64:5a:e5:6a:ed:5d:e5:f5:33:92:fd:c7: 23:2e:c5:86:d5:98:54:bd:ba:b4:03:a7:3b:57:86:f1:b8:01: 71:e4:79:87:41:28:39:07:8a:07:95:ca:3c:1d:5d:4c:15:e4: 98:e9:bb:a9:8f:81:c6:9b:fe:0b:94:8a:3b:03:61:f7:b0:c2: ba:58:0f:4a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUa8tkblu6SERESPyu/OC8e8Yr34kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKEFCMzcxMkMxNjA2M0MyQTVERTE3Q0REQ0ZFMzVFNDlCNkM2QzRENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmVg+HroG3kohgAy4m8Cw2+uq t+2o6qFIvqic1xDSsJZXrED26Wwf8JsJs/bPvJvcD5ERJKCyOo3pUjxPJTVsdZst 2iKYVSVf0M2sBlDb+XlGDA+g7ZxZRAAz+YTx7gz/VUiglYOY+NPq7Rb946+Fb97q ho6FZmmOZlgDf+3g96OoqZM/ib4vpqy+IRGmbMCyxPU7Keh4w38uJd5uvbbFzyx2 xKby6jWl+1dwWWcJHbA1/lS/+FnX56PKlOVgYmY3PPymvESckpcTeGVAXBAT6y51 JF35huBZZF3pqbQ1UvdnV04feoxP2OGBJl0Zxeh48Vs6f71haNj+di14hjMtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUqzcSwWBjwqXeF83c/jXkm2xsTW4wHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ HP1B/ykxmfLoCFz9qN9WTwG3Nfj90f7THrjpd0EZ69tv+gKEYyhr+h/Bhw2aDSID mcTursNhICJMb6cjg95HG1wCjx6mZwIOqCM8vHfdiAwSg6nCddHV/ZhoUmRu78HO vZrSnZ4Sm754gAcEL3CwiuoCm/Jq4c8yJ2lgK1tGXjUtGxI951pATNsKaLrUtcrW zygrfIv930mX0KyijEMl3U2jXTWlOos1v1oJmlakeqPVpfW23PIT/FdkWuVq7V3l 9TOS/ccjLsWG1ZhUvbq0A6c7V4bxuAFx5HmHQSg5B4oHlco8HV1MFeSY6bupj4HG m/4LlIo7A2H3sMK6WA9K -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:48 2026 by rpki-client