$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa File: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (raw, json) Hash identifier: I/2PHJxZeyEqiNbxH92CNv0UFHW8YzcvKl6PJAgo1vY= Subject key identifier: 43:5C:8D:24:F8:0A:FF:90:42:AA:4D:EB:F4:5C:DA:CC:41:78:11:43 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: FA413C3A00DD343E110234DB9D3C52FFEFB2B4 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 206069 IP address blocks: 2a14:7586:6111::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fa:41:3c:3a:00:dd:34:3e:11:02:34:db:9d:3c:52:ff:ef:b2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=435C8D24F80AFF9042AA4DEBF45CDACC41781143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:b8:ff:17:65:a5:ee:b0:c8:87:52:bb:5e: 60:2a:a6:8d:63:eb:81:6c:ca:d5:aa:7f:63:57:11: 2e:23:7a:f2:41:41:48:f5:b2:69:fe:c0:ba:46:d1: 1b:27:a4:9b:57:3b:47:21:88:b8:37:6d:a3:cd:84: b3:08:ae:16:74:ed:5c:50:2e:49:70:80:84:a3:44: a6:88:55:e3:0b:4b:e4:a5:8d:5f:cd:81:9d:0c:32: bd:d9:3a:91:aa:80:12:17:97:48:f6:47:1a:2a:89: 1b:65:ca:d8:d0:1a:5e:2d:c0:03:10:61:cd:3e:e8: 68:56:be:f5:71:65:02:a5:09:7d:5b:0c:4c:bd:c7: 3f:34:aa:9f:db:09:47:89:44:f6:d0:df:30:d4:65: 7c:79:6a:b7:80:07:67:9e:0f:e4:23:60:22:e1:7f: eb:a7:dd:ed:2e:0c:a5:6f:4b:dc:d7:f7:84:10:0e: 47:b3:47:b4:5a:47:53:4d:16:6c:f3:f5:70:77:94: 61:59:7b:46:c7:29:21:af:20:13:33:4d:91:8a:bd: 18:c7:e4:84:94:24:92:1b:72:fd:3f:09:97:54:ab: ba:01:8c:47:f4:b1:32:67:a4:1c:2e:58:89:ed:a6: 39:f2:78:cc:66:ab:1b:d7:e6:4e:5a:fe:52:68:d5: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5C:8D:24:F8:0A:FF:90:42:AA:4D:EB:F4:5C:DA:CC:41:78:11:43 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6111::/48 Signature Algorithm: sha256WithRSAEncryption d6:38:d2:90:96:9a:63:3a:63:55:e9:76:0c:ba:79:c6:aa:e9: a1:d8:5b:0b:c5:e0:09:74:13:ce:92:7b:0b:49:8b:d2:4f:c2: 0a:a1:7e:5b:49:3f:4e:3e:59:fc:97:f6:aa:ad:07:3a:f1:63: aa:26:0c:c0:7a:ea:de:8d:5e:9f:80:d5:10:fa:4d:fb:3a:3f: d9:ac:0c:af:63:6c:ef:7b:c3:e4:0e:32:cf:19:b6:94:61:87: ca:5c:0d:90:72:6f:d0:b0:df:ef:d0:56:e9:84:57:ff:4d:15: 52:b6:09:76:75:02:be:75:0d:b0:db:d5:57:a5:b5:41:f9:aa: c6:0e:f0:4d:3a:ba:11:0d:79:4b:c7:db:93:57:c9:2a:91:b6: 4e:06:f5:44:24:49:51:35:14:25:17:e8:44:90:f5:5b:91:ff: c3:6d:3f:29:20:60:0b:00:ab:32:19:3e:78:20:fb:8e:f2:fa: ae:d0:75:ac:09:07:37:27:44:af:2a:ae:bf:ed:87:f5:34:9d: 24:a8:dd:ab:52:76:6f:b3:24:ee:bb:2d:09:a4:56:02:8a:28: 1b:cd:91:88:2f:f5:af:b2:58:21:0a:57:60:1d:39:9b:1d:47: 5a:76:10:0e:cd:7c:2f:21:fa:6d:b5:2a:25:12:ba:c8:96:c2: ea:a9:94:ec -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAPpBPDoA3TQ+EQI02508Uv/vsrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDQzNUM4RDI0RjgwQUZGOTA0MkFBNERFQkY0NUNEQUNDNDE3ODExNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbLj/F2Wl7rDIh1K7XmAqpo1j 64FsytWqf2NXES4jevJBQUj1smn+wLpG0RsnpJtXO0chiLg3baPNhLMIrhZ07VxQ LklwgISjRKaIVeMLS+SljV/NgZ0MMr3ZOpGqgBIXl0j2RxoqiRtlytjQGl4twAMQ Yc0+6GhWvvVxZQKlCX1bDEy9xz80qp/bCUeJRPbQ3zDUZXx5areAB2eeD+QjYCLh f+un3e0uDKVvS9zX94QQDkezR7RaR1NNFmzz9XB3lGFZe0bHKSGvIBMzTZGKvRjH 5ISUJJIbcv0/CZdUq7oBjEf0sTJnpBwuWIntpjnyeMxmqxvX5k5a/lJo1diFAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUQ1yNJPgK/5BCqk3r9FzazEF4EUMwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM2MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmERMA0GCSqGSIb3DQEBCwUAA4IBAQDW ONKQlppjOmNV6XYMunnGqumh2FsLxeAJdBPOknsLSYvST8IKoX5bST9OPln8l/aq rQc68WOqJgzAeurejV6fgNUQ+k37Oj/ZrAyvY2zve8PkDjLPGbaUYYfKXA2Qcm/Q sN/v0FbphFf/TRVStgl2dQK+dQ2w29VXpbVB+arGDvBNOroRDXlLx9uTV8kqkbZO BvVEJElRNRQlF+hEkPVbkf/DbT8pIGALAKsyGT54IPuO8vqu0HWsCQc3J0SvKq6/ 7Yf1NJ0kqN2rUnZvsyTuuy0JpFYCiigbzZGIL/WvslghCldgHTmbHUdadhAOzXwv IfpttSolErrIlsLqqZTs -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:50 2026 by rpki-client