$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: kvgThrWNimya9GZ+Hb1hmWRsjnt4ZTY4cOtVrvum5N4= Subject key identifier: 1E:5F:95:2E:D3:25:1E:3E:EA:2A:61:9B:22:CA:B7:67:DC:2F:96:33 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 4D0EAE230CCB60CDEE55DA2CDF8DC916BB80BD8D Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 204211 IP address blocks: 2a14:7586:6108::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0e:ae:23:0c:cb:60:cd:ee:55:da:2c:df:8d:c9:16:bb:80:bd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=1E5F952ED3251E3EEA2A619B22CAB767DC2F9633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:c8:57:af:79:b3:18:3b:59:c7:a7:54:bb: ce:02:25:3b:b0:6c:a1:79:34:ff:11:f9:2d:62:85: b5:dc:97:07:9f:e6:61:49:dd:40:82:11:74:2b:4e: 6e:f5:4c:f4:da:11:88:45:45:82:7f:87:79:59:dc: ee:00:76:bd:58:29:66:fb:12:84:dc:7f:a0:20:f0: a2:3b:10:d2:45:e1:2b:2c:d7:9a:83:0c:7d:94:a4: 35:5a:dc:72:60:8b:29:72:35:11:a1:3b:22:d5:74: 2e:a6:c9:ec:96:34:11:6c:ed:5f:37:af:94:aa:dc: cf:a0:f1:74:6e:d5:33:16:f5:17:2b:2f:35:8d:7e: 80:24:2c:6d:22:9b:4a:ea:e1:2a:2a:0e:41:2e:6e: 7e:59:2e:f0:bd:4e:d8:f9:99:52:94:67:3b:57:ee: dd:d3:ad:a1:79:6a:3f:bd:37:9d:71:30:4c:b1:4a: c7:ef:c2:d9:7e:a6:1f:67:73:16:37:bb:71:83:c2: a3:f5:2f:76:f1:9d:2e:a1:5c:64:b5:4e:09:58:40: ed:a2:37:10:fb:2d:db:87:4a:60:e7:79:67:a2:9c: 45:67:08:44:73:ef:91:f8:09:d5:29:f9:b4:a3:09: f6:52:ed:0b:a1:c4:cf:18:e6:08:28:cf:0d:6b:19: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:95:2E:D3:25:1E:3E:EA:2A:61:9B:22:CA:B7:67:DC:2F:96:33 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6108::/48 Signature Algorithm: sha256WithRSAEncryption c3:36:f5:24:98:b2:22:62:b8:a8:ab:ca:cc:eb:d6:89:19:39: 9e:42:5f:0e:d8:e4:30:ab:33:c6:3c:b6:5e:01:6b:c8:cc:5d: 92:d0:59:de:dc:30:56:80:dc:e9:14:bc:48:8c:8c:5c:c6:b0: d3:eb:5c:47:fb:89:7b:4e:19:bc:a9:97:f6:65:27:ab:c3:8a: 47:14:07:0c:63:c0:cf:1d:d5:a2:d6:b5:a3:60:75:59:39:4c: b6:12:dc:e3:97:3f:f0:cd:8e:0e:47:a9:38:d9:59:98:b6:e0: a8:39:05:5b:24:f0:63:08:d5:d3:5d:3d:98:dc:dc:cb:34:66: e6:32:fa:55:8d:e9:2a:24:9b:bf:ec:85:da:00:3f:bf:85:ce: 29:46:25:30:96:4c:fa:06:7e:4c:7e:91:eb:e0:18:9e:73:c5: 83:b9:4c:3e:59:14:2e:de:a1:d2:4e:74:cb:40:62:4a:b5:36: 1f:d0:fc:72:5e:4e:21:b6:87:7e:2b:2b:a3:b5:a9:77:1a:d6: 16:ba:3a:88:e5:0d:fb:36:c5:98:a1:3e:ca:20:f1:d2:08:c2: 59:1c:7c:53:b1:a7:4f:4c:75:1b:de:32:75:08:5d:a9:96:3f: 9d:23:f8:c5:6f:03:b5:ff:97:63:5a:f1:e0:04:b4:5b:7c:d8: 80:9b:a3:72 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTQ6uIwzLYM3uVdos343JFruAvY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDFFNUY5NTJFRDMyNTFFM0VFQTJBNjE5QjIyQ0FCNzY3REMyRjk2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeq8hXr3mzGDtZx6dUu84CJTuw bKF5NP8R+S1ihbXclwef5mFJ3UCCEXQrTm71TPTaEYhFRYJ/h3lZ3O4Adr1YKWb7 EoTcf6Ag8KI7ENJF4Sss15qDDH2UpDVa3HJgiylyNRGhOyLVdC6myeyWNBFs7V83 r5Sq3M+g8XRu1TMW9RcrLzWNfoAkLG0im0rq4SoqDkEubn5ZLvC9Ttj5mVKUZztX 7t3TraF5aj+9N51xMEyxSsfvwtl+ph9ncxY3u3GDwqP1L3bxnS6hXGS1TglYQO2i NxD7LduHSmDneWeinEVnCERz75H4CdUp+bSjCfZS7QuhxM8Y5ggozw1rGWhDAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUHl+VLtMlHj7qKmGbIsq3Z9wvljMwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEIMA0GCSqGSIb3DQEBCwUAA4IBAQDD NvUkmLIiYrioq8rM69aJGTmeQl8O2OQwqzPGPLZeAWvIzF2S0Fne3DBWgNzpFLxI jIxcxrDT61xH+4l7Thm8qZf2ZSerw4pHFAcMY8DPHdWi1rWjYHVZOUy2Etzjlz/w zY4OR6k42VmYtuCoOQVbJPBjCNXTXT2Y3NzLNGbmMvpVjekqJJu/7IXaAD+/hc4p RiUwlkz6Bn5MfpHr4Biec8WDuUw+WRQu3qHSTnTLQGJKtTYf0PxyXk4htod+Kyuj tal3GtYWujqI5Q37NsWYoT7KIPHSCMJZHHxTsadPTHUb3jJ1CF2plj+dI/jFbwO1 /5djWvHgBLRbfNiAm6Ny -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:50 2026 by rpki-client