$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: AXSbGIUNn4IvcJ8FCvZh2aj1rjw4XLS45akYolms3s0= Subject key identifier: E0:CE:94:24:28:64:C2:8C:82:AF:6F:7C:97:5A:BA:C2:00:25:A1:C9 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 212EDC847491C83E869B4E6C053EFF4ADF122F8C Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 204211 IP address blocks: 2a14:7586:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2e:dc:84:74:91:c8:3e:86:9b:4e:6c:05:3e:ff:4a:df:12:2f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=E0CE94242864C28C82AF6F7C975ABAC20025A1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:34:8a:13:a8:54:c9:ca:1f:66:9d:97:30:2f: 4d:27:5f:c3:60:fd:54:1b:79:a6:ee:76:40:dd:d8: 0b:c0:37:6a:16:7a:c9:1c:27:62:75:d7:49:e4:a4: cc:8b:e4:ce:b6:b7:4a:52:d2:d9:74:c3:25:14:5d: 04:66:97:7f:76:56:18:c4:72:a1:dd:a7:9e:61:24: b0:4e:72:a1:bf:c2:98:15:6c:b4:da:0a:4f:69:c2: fb:ee:44:ee:e7:bb:8d:c3:b5:c5:ac:7e:4a:bf:8c: 35:48:71:b2:00:92:21:ab:72:46:6e:4b:15:4a:ed: 29:6d:32:c1:b5:ad:f8:79:67:e0:53:2d:a9:95:ce: e5:ec:0e:1d:dc:2d:a1:d4:0a:48:5c:d2:43:35:85: f5:1c:ed:81:67:f2:44:64:13:cb:d8:b7:8a:98:f7: 51:98:12:9c:9c:ee:99:05:9c:4f:d8:f0:ac:37:01: 9e:b2:48:47:8b:9d:62:ab:9c:8c:ab:f1:7d:a1:df: 69:3a:ad:df:01:79:1a:31:4f:84:54:45:f5:fe:0e: b6:73:4d:e3:f7:07:6d:bc:af:b9:ce:86:9f:ab:5d: cf:24:ec:1d:c6:a0:f6:9a:5c:31:31:80:b4:6c:96: 23:f1:e7:6a:72:20:e0:ad:d7:b0:dd:c0:42:fb:cc: ae:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CE:94:24:28:64:C2:8C:82:AF:6F:7C:97:5A:BA:C2:00:25:A1:C9 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6105::/48 Signature Algorithm: sha256WithRSAEncryption 85:fa:52:35:81:7c:75:8f:57:a1:42:61:7e:5c:f8:3e:e9:d7: 01:07:52:d8:56:c6:c8:ec:17:90:a7:0d:d0:84:01:1a:08:5b: 13:a0:5c:49:89:31:ba:ee:d9:ff:a3:59:72:20:20:2f:d7:fa: 17:5a:85:fd:a8:0f:e1:05:d1:d6:94:96:81:14:d6:7d:34:bc: a2:d3:05:a3:d5:28:dd:0e:91:d4:27:12:26:8e:25:5c:ca:5a: 7d:70:d7:6b:8d:e0:bc:32:17:17:1f:39:dc:d2:65:7a:d7:8f: 2b:3d:98:f3:8c:f4:f3:50:d7:05:44:cb:53:bd:ec:2b:f7:05: 0e:a7:55:12:4e:2a:4b:b6:4e:b8:18:f9:89:4f:e7:f9:60:e9: 3e:17:fd:58:c8:e9:ca:48:5f:c3:28:e4:e1:10:91:42:c4:9e: 91:e4:f6:62:88:02:f3:7a:88:ac:41:26:5e:2b:ca:48:54:d0: bf:c1:77:8c:23:15:ce:bd:1f:17:2f:22:49:f5:fe:87:d9:26: 66:13:ff:2d:5a:94:43:fd:57:ca:a9:0c:32:dc:88:61:dc:5c: fd:c8:94:77:4e:23:f9:42:99:84:1c:66:f5:9d:70:5f:e5:3b: 49:3a:a5:1a:ce:9d:9d:79:e8:f3:57:36:07:f6:4b:e6:fa:95: c9:93:46:b8 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIS7chHSRyD6Gm05sBT7/St8SL4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKEUwQ0U5NDI0Mjg2NEMyOEM4MkFGNkY3Qzk3NUFCQUMyMDAyNUExQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNIoTqFTJyh9mnZcwL00nX8Ng /VQbeabudkDd2AvAN2oWeskcJ2J110nkpMyL5M62t0pS0tl0wyUUXQRml392VhjE cqHdp55hJLBOcqG/wpgVbLTaCk9pwvvuRO7nu43DtcWsfkq/jDVIcbIAkiGrckZu SxVK7SltMsG1rfh5Z+BTLamVzuXsDh3cLaHUCkhc0kM1hfUc7YFn8kRkE8vYt4qY 91GYEpyc7pkFnE/Y8Kw3AZ6ySEeLnWKrnIyr8X2h32k6rd8BeRoxT4RURfX+DrZz TeP3B228r7nOhp+rXc8k7B3GoPaaXDExgLRsliPx52pyIOCt17DdwEL7zK4fAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU4M6UJChkwoyCr298l1q6wgAlockwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEFMA0GCSqGSIb3DQEBCwUAA4IBAQCF +lI1gXx1j1ehQmF+XPg+6dcBB1LYVsbI7BeQpw3QhAEaCFsToFxJiTG67tn/o1ly ICAv1/oXWoX9qA/hBdHWlJaBFNZ9NLyi0wWj1SjdDpHUJxImjiVcylp9cNdrjeC8 MhcXHznc0mV6148rPZjzjPTzUNcFRMtTvewr9wUOp1USTipLtk64GPmJT+f5YOk+ F/1YyOnKSF/DKOThEJFCxJ6R5PZiiALzeoisQSZeK8pIVNC/wXeMIxXOvR8XLyJJ 9f6H2SZmE/8tWpRD/VfKqQwy3Ihh3Fz9yJR3TiP5QpmEHGb1nXBf5TtJOqUazp2d eejzVzYH9kvm+pXJk0a4 -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:50 2026 by rpki-client