$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa File: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (raw, json) Hash identifier: McsutBYilHSf+D+zQp4WS0ZrKs44K8YIfKiqGRIwOWI= Subject key identifier: 69:38:1E:0A:74:02:B3:DE:3C:6E:60:1F:0F:22:0A:D6:75:4B:1B:A5 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 505C248B452DA33CA9A83F08F7EDD6D9FE339E6A Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 206069 IP address blocks: 2a14:7586:6109::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5c:24:8b:45:2d:a3:3c:a9:a8:3f:08:f7:ed:d6:d9:fe:33:9e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=69381E0A7402B3DE3C6E601F0F220AD6754B1BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:96:e3:19:85:6f:f0:39:6e:74:50:2e:be: d9:ed:83:9a:d0:94:d9:65:fa:a4:57:5f:45:63:bf: 85:25:82:08:14:78:bf:94:a0:a5:70:a7:2a:2c:9f: 6b:26:78:cc:3f:8d:6f:b5:28:31:86:3e:48:9b:36: 6b:d8:2f:f2:28:e6:5e:63:7a:2e:00:5f:c1:61:82: b1:3e:a2:5e:be:bc:c0:5f:1c:96:66:ed:d9:73:95: f7:26:dc:dd:c3:b8:e5:a2:ce:dc:91:72:ec:3c:83: bf:d7:1f:a3:86:6e:52:7c:04:fc:a3:e1:1a:64:6d: 51:0c:72:b3:83:7f:99:9b:17:d8:bb:cd:ef:ba:18: 74:6f:d0:55:4d:56:de:38:26:ca:c0:36:1f:e6:0f: 71:88:7a:a9:68:0d:b7:e6:fb:1f:6a:9e:3a:b8:11: e1:be:e1:6d:60:74:bd:fa:fe:bb:da:5f:54:22:38: 55:da:b2:0e:58:e9:49:06:cd:58:ed:66:40:00:61: ba:b9:92:64:61:e6:47:3e:67:c6:ee:27:f3:bf:68: 7c:42:62:90:f9:0f:20:ee:94:93:52:62:d2:e9:ad: 6a:bb:c0:5d:de:37:9c:07:97:7c:6b:52:8a:61:35: 8a:f0:b7:c6:cc:04:e3:2d:29:8e:38:e4:d4:3a:ae: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:38:1E:0A:74:02:B3:DE:3C:6E:60:1F:0F:22:0A:D6:75:4B:1B:A5 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6109::/48 Signature Algorithm: sha256WithRSAEncryption 24:e4:73:1f:21:ab:06:df:57:e8:cc:63:73:e7:31:5a:95:b3: ed:7f:16:6c:d6:90:a7:d9:06:15:aa:97:92:11:ca:1e:eb:76: bf:fc:56:dd:e9:b3:f1:39:97:87:24:41:24:d6:6d:34:14:c7: 20:bc:a9:75:5b:2e:7b:46:7b:bf:85:64:96:7c:db:1e:a7:ec: bb:d7:db:45:e3:47:5d:94:2f:ba:b3:04:30:f2:61:b8:57:51: 7b:81:d3:99:1a:70:9b:09:67:2b:fb:69:08:0b:45:03:30:9e: ee:e4:4b:a1:23:87:0f:8d:92:d6:65:61:50:96:c9:2a:58:62: aa:6e:6f:ed:b5:19:96:a7:1c:fe:a6:38:3e:9d:96:9b:1f:b4: f8:83:95:69:c2:94:2e:3e:ec:59:26:bb:20:52:7c:fd:9a:88: 0f:e3:9a:b3:7a:1d:bd:e3:ef:06:87:4a:7e:a1:79:ab:ea:2e: 05:aa:23:03:d4:85:e5:fe:4d:dd:2b:cf:eb:b0:16:77:88:31: dc:d1:5b:3d:fa:7d:9d:f3:39:8c:ad:04:db:ad:68:38:df:bf: 4c:43:d6:38:fe:9b:43:61:23:77:0a:32:ea:b4:0f:76:ef:e9: 47:70:d8:9c:fb:ce:a2:bd:ab:1c:ef:2b:04:07:67:37:85:c5: 10:08:c0:41 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUUFwki0UtozypqD8I9+3W2f4znmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDY5MzgxRTBBNzQwMkIzREUzQzZFNjAxRjBGMjIwQUQ2NzU0QjFCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX5bjGYVv8DludFAuvtntg5rQ lNll+qRXX0Vjv4UlgggUeL+UoKVwpyosn2smeMw/jW+1KDGGPkibNmvYL/Io5l5j ei4AX8FhgrE+ol6+vMBfHJZm7dlzlfcm3N3DuOWiztyRcuw8g7/XH6OGblJ8BPyj 4RpkbVEMcrODf5mbF9i7ze+6GHRv0FVNVt44JsrANh/mD3GIeqloDbfm+x9qnjq4 EeG+4W1gdL36/rvaX1QiOFXasg5Y6UkGzVjtZkAAYbq5kmRh5kc+Z8buJ/O/aHxC YpD5DyDulJNSYtLprWq7wF3eN5wHl3xrUophNYrwt8bMBOMtKY445NQ6ri6JAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUaTgeCnQCs948bmAfDyIK1nVLG6UwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM2MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEJMA0GCSqGSIb3DQEBCwUAA4IBAQAk 5HMfIasG31fozGNz5zFalbPtfxZs1pCn2QYVqpeSEcoe63a//Fbd6bPxOZeHJEEk 1m00FMcgvKl1Wy57Rnu/hWSWfNsep+y719tF40ddlC+6swQw8mG4V1F7gdOZGnCb CWcr+2kIC0UDMJ7u5EuhI4cPjZLWZWFQlskqWGKqbm/ttRmWpxz+pjg+nZabH7T4 g5VpwpQuPuxZJrsgUnz9mogP45qzeh294+8Gh0p+oXmr6i4FqiMD1IXl/k3dK8/r sBZ3iDHc0Vs9+n2d8zmMrQTbrWg4379MQ9Y4/ptDYSN3CjLqtA927+lHcNic+86i vasc7ysEB2c3hcUQCMBB -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:49 2026 by rpki-client