$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: tM02Frjt9GqAYw9AMT9AJQYlUSur+I4aPvxlBdDO/ZE= Subject key identifier: C6:AF:41:6C:DC:AC:C2:B7:29:C9:A7:66:24:56:0B:83:8E:A9:3A:E6 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 570C6365D75C33E2432260283EC61D4C8B7F22E9 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:26 +0000 ROA not before: Mon 07 Sep 2026 13:12:26 +0000 ROA not after: Mon 06 Sep 2027 13:17:26 +0000 asID: 204211 IP address blocks: 2a14:7586:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0c:63:65:d7:5c:33:e2:43:22:60:28:3e:c6:1d:4c:8b:7f:22:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:26 2026 GMT Not After : Sep 6 13:17:26 2027 GMT Subject: CN=C6AF416CDCACC2B729C9A76624560B838EA93AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:1a:da:e5:41:b1:59:53:4e:f2:60:81:11: b2:1e:c4:ca:8a:3a:67:ec:a2:bb:7c:ce:a7:77:eb: d6:9c:9d:12:82:96:55:ad:1a:07:c3:4e:e4:03:34: 98:d3:2c:7e:d9:19:98:98:b6:80:47:76:52:20:c7: 82:ef:71:af:09:df:e8:88:9b:1b:e3:37:4e:b5:2a: cf:3d:64:e3:f4:19:63:b6:45:c2:8e:e5:f0:b3:c0: 17:07:21:e9:2f:20:a1:77:7d:fb:54:d5:d8:a0:f3: dd:79:0d:c6:06:b7:90:76:b2:17:0f:e8:7f:ae:3b: b0:0e:35:fd:fd:92:f6:a0:95:ae:c5:7e:ff:91:06: cd:ae:31:40:40:36:35:c1:c0:ed:f0:4f:40:de:5c: 09:76:bb:e6:ba:f0:0f:6e:1d:60:8c:b4:73:51:69: b9:2d:9f:9a:3e:8d:8a:d0:48:24:3c:c6:7a:c0:b1: be:e9:47:7f:07:da:f2:ea:18:cb:39:13:34:00:59: 66:0b:44:03:1d:79:03:9f:ff:b0:52:67:a0:01:63: 28:4f:13:3d:20:73:c8:26:b2:93:ed:88:0d:a1:d2: b0:73:3e:36:34:1c:c2:d2:4c:ce:9d:bf:e2:1e:19: c6:42:68:3b:23:1e:90:fd:12:c9:12:68:a4:66:8d: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AF:41:6C:DC:AC:C2:B7:29:C9:A7:66:24:56:0B:83:8E:A9:3A:E6 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6107::/48 Signature Algorithm: sha256WithRSAEncryption 8f:a0:21:32:b2:52:c6:70:78:05:ee:59:2d:2c:87:5d:e2:4c: cc:05:f7:b6:5d:39:e1:2f:20:8b:b0:a1:c5:78:24:a9:31:a2: fc:48:18:4b:5f:31:39:ac:65:74:22:c8:fd:fe:70:39:24:07: 0e:22:4d:86:da:d6:89:7d:c7:a5:6f:b9:96:59:7e:a4:25:ef: 1e:d5:b4:92:61:ef:56:9d:40:c2:da:a8:4c:07:00:8f:ee:60: 80:08:db:f0:84:79:0e:07:26:f6:e5:dc:16:c6:a1:b1:1b:23: 3d:8a:2f:2b:3a:fa:6d:0f:82:a5:69:8f:47:1e:d1:16:8f:60: d0:f0:2f:77:36:96:c7:15:c4:4d:19:6d:33:01:9e:dc:e0:cf: d3:0c:91:49:a2:4f:d5:6b:f6:e3:b7:4c:6c:05:91:7d:78:4c: a7:66:1e:ef:ae:e4:87:e3:e1:fe:3f:46:d0:4b:06:79:71:59: ef:80:2f:a5:80:c9:ec:51:09:11:c6:2d:b1:b6:bb:7d:17:1d: 87:98:53:f4:3a:82:0a:9f:82:0a:c2:62:24:b0:f1:46:50:16: 61:56:99:e2:f1:80:d6:a3:97:06:b6:db:51:3e:f0:f9:78:cc: c8:03:19:12:b5:07:27:8b:a3:f8:e8:3a:fa:b5:97:a5:d3:3f: 61:6d:02:b0 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVwxjZddcM+JDImAoPsYdTIt/IukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjZaFw0yNzA5MDYxMzE3MjZaMDMxMTAvBgNV BAMTKEM2QUY0MTZDRENBQ0MyQjcyOUM5QTc2NjI0NTYwQjgzOEVBOTNBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmxra5UGxWVNO8mCBEbIexMqK Omfsort8zqd369acnRKCllWtGgfDTuQDNJjTLH7ZGZiYtoBHdlIgx4Lvca8J3+iI mxvjN061Ks89ZOP0GWO2RcKO5fCzwBcHIekvIKF3fftU1dig8915DcYGt5B2shcP 6H+uO7AONf39kvagla7Ffv+RBs2uMUBANjXBwO3wT0DeXAl2u+a68A9uHWCMtHNR abktn5o+jYrQSCQ8xnrAsb7pR38H2vLqGMs5EzQAWWYLRAMdeQOf/7BSZ6ABYyhP Ez0gc8gmspPtiA2h0rBzPjY0HMLSTM6dv+IeGcZCaDsjHpD9EskSaKRmjaWhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUxq9BbNyswrcpyadmJFYLg46pOuYwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEHMA0GCSqGSIb3DQEBCwUAA4IBAQCP oCEyslLGcHgF7lktLIdd4kzMBfe2XTnhLyCLsKHFeCSpMaL8SBhLXzE5rGV0Isj9 /nA5JAcOIk2G2taJfcelb7mWWX6kJe8e1bSSYe9WnUDC2qhMBwCP7mCACNvwhHkO Byb25dwWxqGxGyM9ii8rOvptD4KlaY9HHtEWj2DQ8C93NpbHFcRNGW0zAZ7c4M/T DJFJok/Va/bjt0xsBZF9eEynZh7vruSH4+H+P0bQSwZ5cVnvgC+lgMnsUQkRxi2x trt9Fx2HmFP0OoIKn4IKwmIksPFGUBZhVpni8YDWo5cGtttRPvD5eMzIAxkStQcn i6P46Dr6tZel0z9hbQKw -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:47 2026 by rpki-client