$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: lMmihb/04tHKQfah94vqyGtRBoUBSLViWROoIfWb+R0= Subject key identifier: CF:B0:10:6D:1D:30:F6:55:55:65:DB:98:C7:E6:A0:3C:B7:53:6C:AF Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 6DF7CAC25FC5B32BFA6DEF33824CE64D5C2BACC3 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 204211 IP address blocks: 2a14:7586:6113::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f7:ca:c2:5f:c5:b3:2b:fa:6d:ef:33:82:4c:e6:4d:5c:2b:ac:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=CFB0106D1D30F6555565DB98C7E6A03CB7536CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:a4:82:16:9a:5d:ba:3b:7f:8c:02:c2:76: e2:ac:fb:3b:6c:c8:43:d3:50:51:38:03:c1:29:12: b9:01:0b:13:e2:ff:a4:e5:6c:a4:f3:32:2f:46:48: ff:ad:f5:26:11:63:7b:35:1b:c3:18:32:a4:5c:54: e3:78:7b:6f:8a:87:f2:a6:13:b0:5e:a7:49:47:14: 05:8f:e3:30:21:59:59:f3:65:ba:9d:8c:b4:26:6f: 28:5f:2f:e5:b8:ae:6e:a8:ff:74:a8:f6:60:b5:d5: 88:52:06:0b:d0:37:38:f5:29:6c:a3:ce:3e:31:bb: e8:2d:50:a4:d6:1c:fa:0f:6c:bc:97:9d:ad:4a:fd: 83:6e:41:fe:fe:dd:b1:98:31:7c:05:90:70:3d:3d: 95:31:d3:22:4f:01:2e:08:5c:64:1d:3f:f7:74:08: 12:30:f8:8c:8e:43:01:60:74:1c:15:b6:89:40:9f: 12:33:d1:34:1a:32:62:10:85:de:f0:41:c7:a5:54: 95:64:a9:e0:56:96:21:4e:ae:3c:59:d7:4d:a6:05: 6f:ea:41:69:40:ee:3f:1f:bc:f1:97:45:0f:ab:90: 9d:f8:77:0e:a2:09:4e:25:8f:17:6b:9c:0a:4c:ce: fd:05:98:84:72:3c:75:7a:73:77:ea:95:ca:e5:4c: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B0:10:6D:1D:30:F6:55:55:65:DB:98:C7:E6:A0:3C:B7:53:6C:AF X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6113::/48 Signature Algorithm: sha256WithRSAEncryption d3:1d:7a:14:79:8c:52:89:fa:08:32:cb:05:3d:b5:c7:c8:de: 2f:a9:e7:f2:03:d8:e4:af:85:52:92:3d:c9:02:6a:c6:47:68: 0e:8b:69:58:a3:82:20:8f:ce:6b:69:5f:ab:ee:da:af:1c:02: 71:8b:7a:11:32:2d:ce:8d:0e:3c:27:6b:cb:39:34:c5:15:cd: a8:e4:7f:89:5f:aa:ba:6a:58:72:d1:1f:8a:77:3c:63:cd:b0: ec:2f:c3:8f:a3:a1:4e:97:65:21:03:e8:60:36:30:81:a8:f6: 8a:e8:01:6c:7b:4e:68:d8:58:51:8c:47:b3:92:b0:08:e4:f1: 78:a6:d6:99:67:66:5c:0c:6b:0e:f7:ee:0c:c7:2a:33:2d:55: 0f:14:f5:df:93:6d:05:16:d6:6b:d0:01:9e:2d:4c:13:ff:c9: 9b:1c:24:85:6b:51:37:f8:ee:e1:5f:fd:01:51:83:5e:93:57: 11:1a:48:1a:7a:53:80:12:f4:6b:0a:c9:1e:12:e8:6b:a1:1a: 6f:80:94:34:0a:3e:6b:e5:6e:2e:5e:71:bb:c8:0b:e1:81:05: c7:6e:b5:52:75:d1:0f:f9:c4:41:52:94:38:e9:bb:9a:d7:37: cc:d7:52:2e:b4:5c:f4:47:4d:26:10:85:30:08:9e:c7:ae:02: 12:e3:41:47 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbffKwl/Fsyv6be8zgkzmTVwrrMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKENGQjAxMDZEMUQzMEY2NTU1NTY1REI5OEM3RTZBMDNDQjc1MzZDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0qSCFppdujt/jALCduKs+zts yEPTUFE4A8EpErkBCxPi/6TlbKTzMi9GSP+t9SYRY3s1G8MYMqRcVON4e2+Kh/Km E7Bep0lHFAWP4zAhWVnzZbqdjLQmbyhfL+W4rm6o/3So9mC11YhSBgvQNzj1KWyj zj4xu+gtUKTWHPoPbLyXna1K/YNuQf7+3bGYMXwFkHA9PZUx0yJPAS4IXGQdP/d0 CBIw+IyOQwFgdBwVtolAnxIz0TQaMmIQhd7wQcelVJVkqeBWliFOrjxZ102mBW/q QWlA7j8fvPGXRQ+rkJ34dw6iCU4ljxdrnApMzv0FmIRyPHV6c3fqlcrlTNVfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUz7AQbR0w9lVVZduYx+agPLdTbK8wHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmETMA0GCSqGSIb3DQEBCwUAA4IBAQDT HXoUeYxSifoIMssFPbXHyN4vqefyA9jkr4VSkj3JAmrGR2gOi2lYo4Igj85raV+r 7tqvHAJxi3oRMi3OjQ48J2vLOTTFFc2o5H+JX6q6alhy0R+KdzxjzbDsL8OPo6FO l2UhA+hgNjCBqPaK6AFse05o2FhRjEezkrAI5PF4ptaZZ2ZcDGsO9+4MxyozLVUP FPXfk20FFtZr0AGeLUwT/8mbHCSFa1E3+O7hX/0BUYNek1cRGkgaelOAEvRrCske EuhroRpvgJQ0Cj5r5W4uXnG7yAvhgQXHbrVSddEP+cRBUpQ46bua1zfM11IutFz0 R00mEIUwCJ7HrgIS40FH -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:40 2026 by rpki-client