$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: IlRx4OBitw3wFaQW1PrD42/DA4szNKP16B3GuMogB1E= Subject key identifier: 58:40:3F:C3:D2:D2:8F:B7:6E:EA:BF:9D:77:7A:D9:DE:E7:CB:09:AC Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 6E73EE7E49EEA0345C296327C127EFD18048D7F9 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 204211 IP address blocks: 2a14:7586:6106::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:73:ee:7e:49:ee:a0:34:5c:29:63:27:c1:27:ef:d1:80:48:d7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=58403FC3D2D28FB76EEABF9D777AD9DEE7CB09AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:b2:8c:86:24:84:eb:39:c5:fb:4c:90:43: 76:11:f5:91:5f:94:c8:9f:06:08:9b:ed:27:6e:fc: 71:3a:87:3b:8b:fc:23:a0:8a:e8:72:a6:5a:4e:b6: 91:bf:eb:9a:bb:f7:7b:a8:35:be:2a:52:8a:08:28: 67:1f:d5:d8:e9:af:71:6f:28:2d:14:34:7a:0e:b1: b9:2c:3a:19:82:ad:fc:e4:b1:6b:b5:7d:c5:c7:31: a7:dc:78:a9:65:29:61:5b:33:84:13:6d:91:98:0d: 65:27:5d:0b:be:a1:a1:4e:5f:90:6b:a0:a9:42:6f: ac:22:61:82:fe:5c:b5:28:32:da:42:72:59:e3:a9: 7c:37:d0:c8:4c:90:2a:82:84:62:9a:97:02:8b:60: d6:8f:bf:bc:89:5d:9a:0d:86:c5:7b:40:f3:41:74: e9:29:14:08:d2:62:97:98:6a:21:6b:30:a4:30:01: 4b:50:06:b4:ce:cf:e3:6f:86:38:bd:0e:9c:fe:1c: e4:77:e4:a5:8a:af:de:83:a2:38:62:51:fa:ee:5f: dc:51:cd:2e:8d:d4:22:c3:ff:ce:ff:d2:b8:1f:cd: ef:29:5d:29:4e:33:01:20:44:dc:8b:e5:84:ae:b8: f8:46:4c:dc:e1:e2:c1:28:0a:59:46:b6:9c:85:fb: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:40:3F:C3:D2:D2:8F:B7:6E:EA:BF:9D:77:7A:D9:DE:E7:CB:09:AC X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6106::/48 Signature Algorithm: sha256WithRSAEncryption 99:9f:42:cb:9a:bd:02:8d:49:89:bc:25:ce:2b:fa:00:20:bc: ca:33:f6:47:1b:46:62:c0:e9:26:c5:49:1e:11:b1:17:60:06: ba:8a:b3:43:11:1a:cd:49:f2:f2:db:31:8c:1b:19:82:95:1f: 56:5a:0d:7f:20:2d:bd:d4:f6:61:00:ad:c7:58:ef:26:25:de: 4d:64:40:6a:a2:c2:3e:f5:a0:2b:67:ff:65:01:ea:10:63:44: f8:a6:1e:ce:a5:7b:b5:d6:35:1b:25:7c:6f:8d:6f:08:86:f9: ed:28:fe:d1:9c:7d:c7:aa:32:c8:29:16:a1:f0:b5:53:ef:1b: 34:22:c4:8c:a2:d9:cf:9e:85:57:0c:ff:5c:d3:ad:1a:a8:f2: e4:5b:72:c6:c9:f1:31:5a:d8:8c:09:f5:29:50:c0:87:19:f0: 88:89:0b:92:11:77:02:d3:87:10:74:25:be:d6:ca:28:a0:80: 14:8a:89:82:a3:a0:03:92:71:a9:e0:8d:37:d0:ed:a8:5d:27: 58:10:a6:bb:5d:3b:b4:bf:06:22:32:d1:eb:54:4f:67:0a:8f: 29:d7:c1:9d:d1:c8:9a:4e:4d:93:e4:09:fb:38:95:b5:7d:80: 39:db:7a:70:35:49:30:35:ee:f1:ca:9a:71:6b:8f:63:d0:6f: 15:07:d3:f3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbnPufknuoDRcKWMnwSfv0YBI1/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDU4NDAzRkMzRDJEMjhGQjc2RUVBQkY5RDc3N0FEOURFRTdDQjA5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnLKMhiSE6znF+0yQQ3YR9ZFf lMifBgib7Sdu/HE6hzuL/COgiuhyplpOtpG/65q793uoNb4qUooIKGcf1djpr3Fv KC0UNHoOsbksOhmCrfzksWu1fcXHMafceKllKWFbM4QTbZGYDWUnXQu+oaFOX5Br oKlCb6wiYYL+XLUoMtpCclnjqXw30MhMkCqChGKalwKLYNaPv7yJXZoNhsV7QPNB dOkpFAjSYpeYaiFrMKQwAUtQBrTOz+Nvhji9Dpz+HOR35KWKr96DojhiUfruX9xR zS6N1CLD/87/0rgfze8pXSlOMwEgRNyL5YSuuPhGTNzh4sEoCllGtpyF+wHdAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUWEA/w9LSj7du6r+dd3rZ3ufLCawwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEGMA0GCSqGSIb3DQEBCwUAA4IBAQCZ n0LLmr0CjUmJvCXOK/oAILzKM/ZHG0ZiwOkmxUkeEbEXYAa6irNDERrNSfLy2zGM GxmClR9WWg1/IC291PZhAK3HWO8mJd5NZEBqosI+9aArZ/9lAeoQY0T4ph7OpXu1 1jUbJXxvjW8IhvntKP7RnH3HqjLIKRah8LVT7xs0IsSMotnPnoVXDP9c060aqPLk W3LGyfExWtiMCfUpUMCHGfCIiQuSEXcC04cQdCW+1soooIAUiomCo6ADknGp4I03 0O2oXSdYEKa7XTu0vwYiMtHrVE9nCo8p18Gd0ciaTk2T5An7OJW1fYA523pwNUkw Ne7xyppxa49j0G8VB9Pz -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:42 2026 by rpki-client