$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa File: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (raw, json) Hash identifier: PRwacz5vYeETLuuqiKn4eg+u9MO1E7cOtPxt6n2Kwa4= Subject key identifier: EF:C0:C1:76:8A:97:7A:45:5C:A2:B5:8D:08:85:C1:DD:7E:5A:25:AA Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 1391DD2F878E4F8C1B47612B315CA022E0B12619 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 11421 IP address blocks: 2a14:7586:6114::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:91:dd:2f:87:8e:4f:8c:1b:47:61:2b:31:5c:a0:22:e0:b1:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=EFC0C1768A977A455CA2B58D0885C1DD7E5A25AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:4e:2e:41:1c:d4:37:a8:e7:26:61:81:35: 70:e5:77:ea:41:11:dc:20:79:5f:20:49:fb:1c:53: d6:b7:31:f2:80:2b:1b:c4:4f:69:ed:e8:46:d6:f7: c4:ed:bb:0f:ce:bf:c2:91:5a:33:2d:3f:80:d5:98: fa:e0:5a:31:21:fc:2e:ff:3d:e0:dd:43:a2:ce:c7: eb:86:d3:92:96:80:09:57:d5:68:04:a8:2c:33:db: a7:3b:67:55:53:0d:d4:f2:d6:39:b5:ea:96:e0:05: 9b:a8:de:4d:91:b7:0c:cb:ed:46:f1:aa:1a:04:6d: 31:ab:c9:9f:c6:8f:81:a6:b8:51:7a:0f:7f:98:fd: 44:b4:5b:05:f9:e5:1e:54:dd:8e:ce:41:8b:6b:8c: 96:36:f8:b3:cc:4b:1a:ad:6c:26:43:51:b5:e6:1b: 04:07:8b:f2:2c:11:16:9d:63:95:5b:27:af:26:0b: c6:f5:4d:33:3c:75:cf:dd:a2:69:fe:39:07:a3:27: 31:59:7e:7f:fc:20:4b:a5:c2:7c:9d:c6:10:c9:4f: 0c:d0:90:59:85:7b:78:de:e8:d4:b2:3d:b7:ec:5a: 52:29:e8:fd:8a:68:f7:dc:ff:8e:83:cd:5f:93:19: a1:fd:eb:86:44:e3:0d:41:46:78:b3:30:3d:52:c7: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C0:C1:76:8A:97:7A:45:5C:A2:B5:8D:08:85:C1:DD:7E:5A:25:AA X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6114::/48 Signature Algorithm: sha256WithRSAEncryption 58:45:d0:b3:f1:cb:ff:2b:75:79:9a:48:93:99:2e:94:d6:cf: 59:e0:36:25:7e:e7:f6:8e:e6:7c:57:68:58:a2:8e:e3:05:5e: bb:7d:ba:88:aa:cf:02:79:4f:dd:69:1b:7d:a9:fc:5c:db:09: 61:b6:43:3d:90:d6:12:db:20:be:04:2f:d1:b7:2f:27:c1:08: b7:8e:fb:5e:e9:a1:6b:95:c0:fa:00:ff:16:68:18:8b:f9:fa: 03:00:ea:95:b6:e0:b5:a6:51:f3:36:aa:50:fa:2a:c4:f9:49: 9e:83:85:11:62:ba:45:81:7f:2c:be:e5:d1:0b:06:10:8e:ef: 89:d5:77:d7:2e:58:cd:f1:50:28:5e:ce:1b:35:dc:6b:8b:f5: 4c:bf:bd:c3:7e:ec:b0:09:be:99:25:89:38:2e:45:ca:7d:b7: 7a:0c:7a:eb:97:ef:98:81:0f:cf:04:31:02:a9:8f:a8:d8:bc: 12:18:ce:50:12:aa:04:07:42:75:0e:70:8a:3d:eb:92:e2:1c: e2:f3:a3:50:4b:c3:6e:82:16:f3:da:a0:0d:56:97:59:7e:2e: 3b:80:e2:5d:19:e0:9a:56:5a:a5:4f:ee:f6:0a:e6:d3:d1:d8: dd:2e:0c:20:ff:26:5d:b3:14:3b:c2:54:9a:75:5b:31:2f:ee: cb:0a:9a:8c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUE5HdL4eOT4wbR2ErMVygIuCxJhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKEVGQzBDMTc2OEE5NzdBNDU1Q0EyQjU4RDA4ODVDMUREN0U1QTI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqR04uQRzUN6jnJmGBNXDld+pB EdwgeV8gSfscU9a3MfKAKxvET2nt6EbW98Ttuw/Ov8KRWjMtP4DVmPrgWjEh/C7/ PeDdQ6LOx+uG05KWgAlX1WgEqCwz26c7Z1VTDdTy1jm16pbgBZuo3k2RtwzL7Ubx qhoEbTGryZ/Gj4GmuFF6D3+Y/US0WwX55R5U3Y7OQYtrjJY2+LPMSxqtbCZDUbXm GwQHi/IsERadY5VbJ68mC8b1TTM8dc/domn+OQejJzFZfn/8IEulwnydxhDJTwzQ kFmFe3je6NSyPbfsWlIp6P2KaPfc/46DzV+TGaH964ZE4w1BRnizMD1SxxXHAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU78DBdoqXekVcorWNCIXB3X5aJaowHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz MTM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYZhFDANBgkqhkiG9w0BAQsFAAOCAQEAWEXQ s/HL/yt1eZpIk5kulNbPWeA2JX7n9o7mfFdoWKKO4wVeu326iKrPAnlP3Wkbfan8 XNsJYbZDPZDWEtsgvgQv0bcvJ8EIt477Xumha5XA+gD/FmgYi/n6AwDqlbbgtaZR 8zaqUPoqxPlJnoOFEWK6RYF/LL7l0QsGEI7vidV31y5YzfFQKF7OGzXca4v1TL+9 w37ssAm+mSWJOC5Fyn23egx665fvmIEPzwQxAqmPqNi8EhjOUBKqBAdCdQ5wij3r kuIc4vOjUEvDboIW89qgDVaXWX4uO4DiXRngmlZapU/u9grm09HY3S4MIP8mXbMU O8JUmnVbMS/uywqajA== -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:42 2026 by rpki-client