$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: OYC7HLv+BuvqzRe89yDGqiEIKOoLGwOVCrrcTvt7S0I= Subject key identifier: EC:B3:69:6D:45:3C:96:E0:FF:2A:8A:AA:14:A8:F2:62:83:AC:22:0C Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 78F154829A317CB8A6AF907653F7F92D70321486 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:26 +0000 ROA not before: Mon 07 Sep 2026 13:12:26 +0000 ROA not after: Mon 06 Sep 2027 13:17:26 +0000 asID: 204211 IP address blocks: 2a14:7586:6101::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f1:54:82:9a:31:7c:b8:a6:af:90:76:53:f7:f9:2d:70:32:14:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:26 2026 GMT Not After : Sep 6 13:17:26 2027 GMT Subject: CN=ECB3696D453C96E0FF2A8AAA14A8F26283AC220C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:bf:c6:43:83:09:69:87:c2:f2:02:b6:79: d2:7b:eb:3d:eb:62:a9:e3:ca:1f:ca:4e:1f:e1:6d: 10:0a:fe:7c:4e:4d:cf:09:1f:7f:f8:b8:f4:6d:0a: 44:8b:a6:b1:06:9e:9a:af:27:49:8a:65:99:c6:ac: ba:a9:25:80:95:05:56:e8:ae:3f:d0:51:f6:a7:a7: 5a:8b:0d:46:28:9b:4a:66:bd:5a:d5:ee:d5:5d:af: 9b:99:de:ca:7a:ef:f8:09:38:1c:79:c0:bb:70:eb: 4a:0e:4e:38:b0:5e:4e:fd:b5:08:d5:ef:8f:8f:65: 6d:7f:52:3f:56:8c:70:37:2f:f1:8e:50:c1:d9:c4: d0:a0:cd:4c:1c:29:47:91:af:0f:2a:c2:a3:6c:ab: c9:32:e8:7e:35:cf:60:90:46:05:06:5b:44:c5:08: bf:ad:c2:68:a7:b6:49:3b:6b:a0:96:19:57:a9:88: 65:f4:a9:e2:05:17:38:52:f3:66:bf:ae:48:4b:b1: d8:e2:91:47:75:7c:44:65:8c:db:59:a4:bc:74:9e: cb:94:47:7a:45:59:ca:d1:66:a6:56:e4:a7:43:49: 58:cf:a3:64:83:46:2e:c3:d8:56:b0:aa:42:0f:96: 7f:30:fc:62:51:47:c1:da:40:37:c9:d7:34:22:c9: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B3:69:6D:45:3C:96:E0:FF:2A:8A:AA:14:A8:F2:62:83:AC:22:0C X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6101::/48 Signature Algorithm: sha256WithRSAEncryption 7d:0d:3e:17:53:c8:2c:fb:37:5c:17:7e:bc:03:94:b5:d7:41: ea:0b:3d:e4:7a:bf:65:f0:a9:9f:ef:1d:de:66:8a:f9:4b:42: 0d:1f:a7:23:ce:75:3a:80:f4:35:a5:81:fd:5f:48:bc:11:4b: 45:0d:95:d8:28:18:97:99:3c:d6:02:82:aa:09:62:6c:7d:8a: d9:f0:4e:c3:a6:29:d4:5e:d4:2f:91:e4:40:3d:e9:6a:0c:f0: 77:3f:da:a9:b3:7a:56:20:54:2c:4b:8d:d8:4e:14:08:a3:24: 61:24:4f:90:7b:b9:8e:78:1d:39:7c:62:26:5a:81:79:aa:06: 4c:a4:01:71:8f:6c:95:f6:3e:ee:26:16:5d:40:24:89:d7:ad: e4:de:fd:e1:aa:af:6c:1f:2f:af:79:73:71:e0:ee:9a:c5:d1: 25:f5:4d:4b:43:50:7a:a9:03:18:e7:f7:a5:e7:9a:0b:78:d4: 01:65:3b:f8:a9:c6:5b:e7:7a:c3:38:c0:6b:98:5f:fc:20:7f: 72:17:55:d5:26:f8:aa:0b:1a:3e:66:62:41:4d:cd:e6:bf:f9: 5a:38:3d:74:65:73:1b:f4:74:70:87:8d:ec:b8:ef:16:8e:4e: 2e:d7:81:52:8d:f9:1a:7f:20:0d:8e:b8:c5:6a:51:00:fd:0a: 8b:8b:e2:3a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUePFUgpoxfLimr5B2U/f5LXAyFIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjZaFw0yNzA5MDYxMzE3MjZaMDMxMTAvBgNV BAMTKEVDQjM2OTZENDUzQzk2RTBGRjJBOEFBQTE0QThGMjYyODNBQzIyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vL/GQ4MJaYfC8gK2edJ76z3r Yqnjyh/KTh/hbRAK/nxOTc8JH3/4uPRtCkSLprEGnpqvJ0mKZZnGrLqpJYCVBVbo rj/QUfanp1qLDUYom0pmvVrV7tVdr5uZ3sp67/gJOBx5wLtw60oOTjiwXk79tQjV 74+PZW1/Uj9WjHA3L/GOUMHZxNCgzUwcKUeRrw8qwqNsq8ky6H41z2CQRgUGW0TF CL+twmintkk7a6CWGVepiGX0qeIFFzhS82a/rkhLsdjikUd1fERljNtZpLx0nsuU R3pFWcrRZqZW5KdDSVjPo2SDRi7D2FawqkIPln8w/GJRR8HaQDfJ1zQiyW0pAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU7LNpbUU8luD/KoqqFKjyYoOsIgwwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEBMA0GCSqGSIb3DQEBCwUAA4IBAQB9 DT4XU8gs+zdcF368A5S110HqCz3ker9l8Kmf7x3eZor5S0INH6cjznU6gPQ1pYH9 X0i8EUtFDZXYKBiXmTzWAoKqCWJsfYrZ8E7DpinUXtQvkeRAPelqDPB3P9qps3pW IFQsS43YThQIoyRhJE+Qe7mOeB05fGImWoF5qgZMpAFxj2yV9j7uJhZdQCSJ163k 3v3hqq9sHy+veXNx4O6axdEl9U1LQ1B6qQMY5/el55oLeNQBZTv4qcZb53rDOMBr mF/8IH9yF1XVJviqCxo+ZmJBTc3mv/laOD10ZXMb9HRwh43suO8Wjk4u14FSjfka fyANjrjFalEA/QqLi+I6 -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:51 2026 by rpki-client