$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: hh9Rd6v92uybHSKZay0GAXY+0l2OkBQ3MefYFze7J1I= Subject key identifier: EE:AF:96:10:41:8A:2F:40:A2:98:77:AC:D5:D5:0C:C8:D6:8A:75:76 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 7FE0EA51A908F42365436EEFBD4AAC2492E68088 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:26 +0000 ROA not before: Mon 07 Sep 2026 13:12:26 +0000 ROA not after: Mon 06 Sep 2027 13:17:26 +0000 asID: 204211 IP address blocks: 2a14:7586:6104::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e0:ea:51:a9:08:f4:23:65:43:6e:ef:bd:4a:ac:24:92:e6:80:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:26 2026 GMT Not After : Sep 6 13:17:26 2027 GMT Subject: CN=EEAF9610418A2F40A29877ACD5D50CC8D68A7576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:9a:7a:4c:2b:56:ba:b2:33:e5:4c:a5:c9: 5c:60:57:74:7d:41:97:7c:d4:65:7b:15:35:7b:f8: 03:98:49:2f:78:43:10:b2:a3:9e:c7:8c:5b:39:63: 40:ba:40:6c:69:a3:42:0c:e0:d5:06:f5:17:6c:0d: b8:2b:7d:c2:d8:f3:cb:9a:b9:b8:2f:fb:59:ea:00: 8c:a5:70:ce:a9:89:82:4b:1b:46:77:a2:be:72:da: 04:bc:a9:10:f6:0e:64:b0:e6:8f:8f:77:7f:10:26: 14:64:7a:4e:1d:ee:73:ac:35:a0:7e:db:89:73:24: 3f:ea:ad:53:33:44:bd:4f:92:5f:50:3c:8b:49:85: dd:ac:b5:06:a9:7e:03:4f:11:07:9d:d0:db:51:ab: 34:e1:b9:00:96:84:e6:af:a3:f1:f8:10:b5:d4:ba: b1:60:7a:6f:7a:3c:5b:a9:a8:f4:87:3a:c5:d7:37: 74:cc:43:2d:99:cd:10:b9:06:21:ed:89:fc:22:00: fd:a8:34:3a:7c:c4:00:f0:63:1a:02:3c:65:ef:0a: 6d:a6:72:3c:00:f6:f3:a4:e1:34:95:36:9c:55:36: 3b:84:b7:a6:0d:3a:1c:e8:d0:ca:23:a9:c5:d0:91: b5:d7:97:7f:ec:02:55:ae:46:83:a5:53:b5:a4:ad: 88:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AF:96:10:41:8A:2F:40:A2:98:77:AC:D5:D5:0C:C8:D6:8A:75:76 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6104::/48 Signature Algorithm: sha256WithRSAEncryption 68:34:17:50:e6:18:84:18:74:17:4d:27:81:42:b9:d8:83:d2: 8f:92:40:be:77:43:89:a0:a4:aa:ff:63:51:d3:1c:ba:23:61: 4d:90:be:78:f6:dc:58:20:53:d6:59:c5:cd:e4:6d:46:70:6e: 47:fa:01:11:40:7a:28:a3:e6:ee:82:21:d7:af:25:f0:dd:d8: d0:32:d2:2e:d2:3e:9b:87:5b:b7:54:46:48:42:82:48:65:4d: 67:ee:b4:1e:54:e4:10:6a:c9:78:e9:f3:a0:40:7a:26:cd:68: 55:36:83:ec:0a:92:12:a8:c8:ab:8e:67:e8:57:0c:c7:dd:9e: af:31:6f:36:49:55:d9:02:bb:e8:54:36:e5:31:6f:b1:28:bd: 97:b7:1c:c2:85:7c:ca:4a:06:9c:ea:98:88:08:29:a9:46:5a: 4d:45:28:69:59:8d:5b:b6:ac:d8:6f:f1:ab:fc:4d:f9:56:1b: ed:c9:d0:b0:82:00:82:98:66:e1:4c:02:16:3a:61:a3:b9:e5: 69:96:8b:44:7d:ac:c1:c9:8f:2f:5e:5e:0c:23:0e:a2:66:6f: 15:74:ca:c7:d1:7d:c9:cd:78:10:fc:e2:3c:a1:04:1b:8b:90: da:e0:70:af:09:22:fe:67:7c:fb:76:78:3d:1e:e3:3b:a7:c0: ce:35:11:88 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUf+DqUakI9CNlQ27vvUqsJJLmgIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjZaFw0yNzA5MDYxMzE3MjZaMDMxMTAvBgNV BAMTKEVFQUY5NjEwNDE4QTJGNDBBMjk4NzdBQ0Q1RDUwQ0M4RDY4QTc1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUpp6TCtWurIz5UylyVxgV3R9 QZd81GV7FTV7+AOYSS94QxCyo57HjFs5Y0C6QGxpo0IM4NUG9RdsDbgrfcLY88ua ubgv+1nqAIylcM6piYJLG0Z3or5y2gS8qRD2DmSw5o+Pd38QJhRkek4d7nOsNaB+ 24lzJD/qrVMzRL1Pkl9QPItJhd2stQapfgNPEQed0NtRqzThuQCWhOavo/H4ELXU urFgem96PFupqPSHOsXXN3TMQy2ZzRC5BiHtifwiAP2oNDp8xADwYxoCPGXvCm2m cjwA9vOk4TSVNpxVNjuEt6YNOhzo0MojqcXQkbXXl3/sAlWuRoOlU7WkrYg7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU7q+WEEGKL0CimHes1dUMyNaKdXYwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEEMA0GCSqGSIb3DQEBCwUAA4IBAQBo NBdQ5hiEGHQXTSeBQrnYg9KPkkC+d0OJoKSq/2NR0xy6I2FNkL549txYIFPWWcXN 5G1GcG5H+gERQHooo+bugiHXryXw3djQMtIu0j6bh1u3VEZIQoJIZU1n7rQeVOQQ asl46fOgQHomzWhVNoPsCpISqMirjmfoVwzH3Z6vMW82SVXZArvoVDblMW+xKL2X txzChXzKSgac6piICCmpRlpNRShpWY1btqzYb/Gr/E35VhvtydCwggCCmGbhTAIW OmGjueVplotEfazByY8vXl4MIw6iZm8VdMrH0X3JzXgQ/OI8oQQbi5Da4HCvCSL+ Z3z7dng9HuM7p8DONRGI -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:39 2026 by rpki-client