$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa File: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (raw, json) Hash identifier: nQYOSOAU88ZOUN4XRe2kH036UdabGxGwJVqLchFMc84= Subject key identifier: 93:EE:AC:DB:0E:5B:5E:2D:22:F7:74:5A:55:7F:0D:6B:64:D5:97:F9 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 3B340B0C33B16D6104E2A8A199760E6972DC61C4 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa Signing time: Mon 07 Sep 2026 13:17:26 +0000 ROA not before: Mon 07 Sep 2026 13:12:26 +0000 ROA not after: Mon 06 Sep 2027 13:17:26 +0000 asID: 206069 IP address blocks: 2a14:7586:6112::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:34:0b:0c:33:b1:6d:61:04:e2:a8:a1:99:76:0e:69:72:dc:61:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:26 2026 GMT Not After : Sep 6 13:17:26 2027 GMT Subject: CN=93EEACDB0E5B5E2D22F7745A557F0D6B64D597F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:2b:41:96:62:37:1e:ab:7f:dc:cf:b1:9a: f1:4f:8f:46:20:c2:89:88:60:a3:41:fa:69:ae:de: 48:21:03:a6:49:52:a1:eb:dc:ba:22:b0:7f:29:77: 4f:65:49:0d:f9:ba:cf:af:61:f2:6b:ce:79:f4:0e: 1b:90:10:3f:76:70:aa:2c:f6:de:d1:ff:64:9b:50: 2a:94:c2:fd:b7:f6:9b:57:be:80:cc:15:b1:ac:71: 3b:b4:d4:df:9f:d7:10:ea:3b:f2:2e:22:74:4f:45: 40:9d:02:29:b9:53:88:ab:54:de:31:2a:28:7a:a1: aa:d2:4f:18:50:a1:f8:7e:e5:d6:fe:37:82:48:ba: 61:2a:23:36:d1:1f:56:4d:4e:6d:44:6c:3b:c7:65: c0:f0:b7:53:8c:55:72:ed:4c:2f:44:ca:00:7e:1c: 50:a7:64:f6:69:41:a3:72:a0:f1:f2:2d:4b:c3:b0: d6:fc:12:d3:a8:de:d3:5a:43:2f:f2:7a:1b:41:74: 36:c0:0b:9f:a4:c8:fa:f1:91:f7:96:cb:de:84:d8: 04:a7:a1:f7:50:92:b0:ee:d2:93:2a:03:56:8e:a2: fc:c3:72:7d:7f:08:bd:d9:96:a8:5d:7a:f9:8f:8d: c2:38:2f:0f:8c:aa:9f:40:90:72:e5:3b:56:93:7a: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EE:AC:DB:0E:5B:5E:2D:22:F7:74:5A:55:7F:0D:6B:64:D5:97:F9 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6112::/48 Signature Algorithm: sha256WithRSAEncryption 3e:86:19:e7:8a:88:bf:1a:7a:13:b3:a3:4c:07:9b:fb:e4:8e: b1:fa:d1:f6:0d:af:35:02:10:b5:6f:94:67:e6:a4:fa:60:13: f1:a3:f5:8e:ab:28:ee:74:3a:0f:da:48:5c:83:6b:1a:4a:5c: cc:d5:e1:90:0b:71:b7:24:6e:99:65:f1:c6:a8:eb:ab:36:62: 10:2c:eb:2a:2f:02:98:6c:f2:8d:29:a8:1a:04:59:63:dc:31: 9d:22:1f:bc:96:3a:2e:ef:1f:a7:e8:35:58:83:77:93:18:0f: 7e:93:b7:4a:c8:4a:39:f2:da:f2:89:4f:a1:c7:46:3a:c0:d9: 8a:bd:8a:e0:27:bf:66:13:f7:3f:28:42:b6:84:f4:df:41:fe: 4f:67:49:e1:ee:58:50:d0:b0:f7:e5:30:19:9f:9e:e9:24:f1: 34:d1:c5:f2:c5:48:b5:1e:9c:57:b0:a8:b1:9b:53:03:b5:f4: 2b:a5:c5:53:28:f7:b7:43:2a:67:14:d4:33:9b:7c:c0:b5:06: 7e:32:c4:64:4a:64:e0:7c:8e:8d:60:b1:8b:a7:b9:52:2b:bb: 62:bd:9c:0d:f9:fa:be:7a:2c:ad:c5:57:10:ec:c9:66:76:6e: a0:24:0a:9e:9c:d9:59:ee:ab:53:2d:ee:bc:a5:49:1d:e6:d1: 86:60:87:cd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOzQLDDOxbWEE4qihmXYOaXLcYcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjZaFw0yNzA5MDYxMzE3MjZaMDMxMTAvBgNV BAMTKDkzRUVBQ0RCMEU1QjVFMkQyMkY3NzQ1QTU1N0YwRDZCNjRENTk3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMfitBlmI3Hqt/3M+xmvFPj0Yg womIYKNB+mmu3kghA6ZJUqHr3LoisH8pd09lSQ35us+vYfJrznn0DhuQED92cKos 9t7R/2SbUCqUwv239ptXvoDMFbGscTu01N+f1xDqO/IuInRPRUCdAim5U4irVN4x Kih6oarSTxhQofh+5db+N4JIumEqIzbRH1ZNTm1EbDvHZcDwt1OMVXLtTC9EygB+ HFCnZPZpQaNyoPHyLUvDsNb8EtOo3tNaQy/yehtBdDbAC5+kyPrxkfeWy96E2ASn ofdQkrDu0pMqA1aOovzDcn1/CL3ZlqhdevmPjcI4Lw+Mqp9AkHLlO1aTehiJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUk+6s2w5bXi0i93RaVX8Na2TVl/kwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM2MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmESMA0GCSqGSIb3DQEBCwUAA4IBAQA+ hhnnioi/GnoTs6NMB5v75I6x+tH2Da81AhC1b5Rn5qT6YBPxo/WOqyjudDoP2khc g2saSlzM1eGQC3G3JG6ZZfHGqOurNmIQLOsqLwKYbPKNKagaBFlj3DGdIh+8ljou 7x+n6DVYg3eTGA9+k7dKyEo58tryiU+hx0Y6wNmKvYrgJ79mE/c/KEK2hPTfQf5P Z0nh7lhQ0LD35TAZn57pJPE00cXyxUi1HpxXsKixm1MDtfQrpcVTKPe3QypnFNQz m3zAtQZ+MsRkSmTgfI6NYLGLp7lSK7tivZwN+fq+eiytxVcQ7Mlmdm6gJAqenNlZ 7qtTLe68pUkd5tGGYIfN -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:50 2026 by rpki-client