$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: IposJX1/dkIc9KCM9TFTNcoPJOct8JFXE8VYQyXCQGI= Subject key identifier: 5F:1E:FD:18:71:D2:CF:8B:46:47:1C:39:56:58:2E:EC:19:52:91:2D Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 30B5A1C6BEE9B097DD48549A5CBC5F278E5D9179 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 204211 IP address blocks: 2a14:7586:6102::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b5:a1:c6:be:e9:b0:97:dd:48:54:9a:5c:bc:5f:27:8e:5d:91:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=5F1EFD1871D2CF8B46471C3956582EEC1952912D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:45:ab:a9:97:ef:49:29:bb:92:92:c3:31: 5f:ea:22:0d:e7:f2:d2:0e:3d:65:0c:c2:78:bb:da: a7:93:d0:83:e5:b5:f5:7f:48:3b:4c:ab:ef:b0:e9: b0:f5:55:f2:40:7b:97:04:db:0e:7b:96:8a:8b:8b: b6:ad:1c:49:ec:1f:98:b2:9d:af:55:87:94:41:ca: 97:8e:76:2c:12:c9:72:fc:01:fc:16:a9:6d:29:11: a0:56:0e:34:23:b9:54:02:f7:f3:3b:5a:6c:60:24: 5a:71:24:29:5e:53:79:71:06:a5:15:c7:99:43:e9: fa:d5:8a:2e:a2:2a:17:37:9a:b5:77:94:96:b1:9f: f4:55:b8:11:07:ad:18:be:d2:d1:6d:73:78:4f:27: 60:3b:be:97:70:91:b4:cb:4a:74:8f:9d:25:92:95: ea:4f:f4:92:92:ca:7d:e1:e4:9f:02:22:2a:9a:eb: a3:66:0b:35:4e:c6:6e:1c:f0:86:8a:3d:bb:a6:1d: 1f:c5:92:c9:b3:50:ef:20:8d:aa:f8:3a:3c:0c:a4: 49:6f:b4:5f:1e:ed:78:6e:81:c7:9f:4d:df:de:ef: bc:d1:c6:34:cc:0c:6e:50:40:5e:3d:ff:05:79:81: b2:c9:2c:88:24:21:7b:8b:8d:53:9b:d0:fc:56:c5: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1E:FD:18:71:D2:CF:8B:46:47:1C:39:56:58:2E:EC:19:52:91:2D X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6102::/48 Signature Algorithm: sha256WithRSAEncryption 9c:a4:ba:f4:7a:2d:f4:68:85:51:0e:16:08:74:fe:2c:fb:81: a3:28:d7:9b:56:6d:1d:82:23:a4:9f:26:84:b8:4b:c3:e6:52: 8c:43:b2:85:80:6a:93:ac:26:7c:3a:30:36:a9:da:c7:dc:af: 2e:60:51:10:52:0c:57:44:ce:4a:af:ab:78:d3:8d:81:16:75: ca:55:4e:53:e0:0b:13:24:f9:ec:38:3b:9a:17:82:bd:93:a7: 89:0f:4d:1f:92:ea:b8:f4:fc:75:59:60:42:c9:98:5b:d6:aa: b0:60:87:84:f1:39:ae:ae:63:6d:94:e9:21:e7:f2:ca:d9:00: 37:68:8b:80:44:7d:71:e6:73:5a:64:ad:8c:eb:c6:55:3c:fd: 0f:a6:84:c9:00:34:02:25:2d:07:bb:d9:47:1e:08:22:dc:18: bf:ed:73:9d:f2:c1:09:40:f2:56:2f:53:82:a6:83:16:64:8d: 8c:05:ae:80:b6:94:e2:97:08:8f:5d:0b:a7:b2:8c:28:8a:58: 4c:57:2b:14:26:6f:e5:41:1f:2e:e7:fc:5b:5a:8c:43:34:d6: 34:c3:8c:f7:3c:c3:15:14:b0:61:74:be:d2:6e:d1:cb:8d:9f: 08:20:7b:0a:79:99:57:49:12:d5:9b:e0:ea:37:37:30:2e:a8: 5d:05:8c:bd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMLWhxr7psJfdSFSaXLxfJ45dkXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDVGMUVGRDE4NzFEMkNGOEI0NjQ3MUMzOTU2NTgyRUVDMTk1MjkxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzn0WrqZfvSSm7kpLDMV/qIg3n 8tIOPWUMwni72qeT0IPltfV/SDtMq++w6bD1VfJAe5cE2w57loqLi7atHEnsH5iy na9Vh5RBypeOdiwSyXL8AfwWqW0pEaBWDjQjuVQC9/M7WmxgJFpxJCleU3lxBqUV x5lD6frVii6iKhc3mrV3lJaxn/RVuBEHrRi+0tFtc3hPJ2A7vpdwkbTLSnSPnSWS lepP9JKSyn3h5J8CIiqa66NmCzVOxm4c8IaKPbumHR/FksmzUO8gjar4OjwMpElv tF8e7XhugcefTd/e77zRxjTMDG5QQF49/wV5gbLJLIgkIXuLjVOb0PxWxd1dAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUXx79GHHSz4tGRxw5Vlgu7BlSkS0wHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmECMA0GCSqGSIb3DQEBCwUAA4IBAQCc pLr0ei30aIVRDhYIdP4s+4GjKNebVm0dgiOknyaEuEvD5lKMQ7KFgGqTrCZ8OjA2 qdrH3K8uYFEQUgxXRM5Kr6t4042BFnXKVU5T4AsTJPnsODuaF4K9k6eJD00fkuq4 9Px1WWBCyZhb1qqwYIeE8TmurmNtlOkh5/LK2QA3aIuARH1x5nNaZK2M68ZVPP0P poTJADQCJS0Hu9lHHggi3Bi/7XOd8sEJQPJWL1OCpoMWZI2MBa6AtpTilwiPXQun sowoilhMVysUJm/lQR8u5/xbWoxDNNY0w4z3PMMVFLBhdL7SbtHLjZ8IIHsKeZlX SRLVm+DqNzcwLqhdBYy9 -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:50 2026 by rpki-client