$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: +RG7e4Mpaw7aAtFGJRkNP32SqsoyKJ3HXkxQmF48EME= Subject key identifier: 10:D2:D5:20:DA:E8:E8:BE:C7:EB:C4:CA:66:CB:D7:97:CC:05:6A:F5 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 13C81AB7A87EFDDE10311C67F6FF687381FD62D6 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:26 +0000 ROA not before: Mon 07 Sep 2026 13:12:26 +0000 ROA not after: Mon 06 Sep 2027 13:17:26 +0000 asID: 204211 IP address blocks: 2a14:7586:6115::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c8:1a:b7:a8:7e:fd:de:10:31:1c:67:f6:ff:68:73:81:fd:62:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:26 2026 GMT Not After : Sep 6 13:17:26 2027 GMT Subject: CN=10D2D520DAE8E8BEC7EBC4CA66CBD797CC056AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:b8:4d:2c:1b:1c:06:cc:99:2c:d1:d8:fe: 0c:97:fc:74:8f:58:8d:40:00:bd:39:f7:b9:72:4c: e0:db:13:14:7f:16:0b:ab:ea:31:1c:6e:c2:5f:bc: c0:a6:f3:13:08:7f:e2:45:74:7e:84:23:1a:ae:a4: 63:f9:94:94:50:30:8a:49:b6:18:dc:c5:6d:94:58: 6e:d1:c5:a2:38:eb:b6:a4:61:18:92:0c:9b:68:5e: 92:aa:d5:85:df:31:17:26:83:70:92:29:e3:4b:73: db:41:e6:3a:fd:8b:03:99:7a:b6:dc:54:1a:aa:ff: f5:ba:42:6d:39:07:53:b5:19:39:58:86:50:45:ee: bc:06:8b:33:dc:a6:09:5f:d3:66:d5:43:87:fc:27: f8:3d:52:65:da:60:24:54:c1:8d:0b:5b:96:b2:63: 92:1e:f2:12:10:5c:1f:56:cf:8e:25:b0:d0:34:c5: 87:97:64:35:62:54:17:71:c1:cb:0b:fc:2d:a8:a7: 1e:10:c9:3a:b9:1e:21:bb:3d:c2:24:cc:f8:8e:bc: 4c:39:65:d9:eb:ec:aa:ef:4e:6a:5c:df:c8:8f:4c: bf:c0:30:44:02:28:60:cf:61:f4:13:03:5f:68:b6: e2:01:8a:24:6b:78:d8:40:de:91:cd:c1:ee:7f:12: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D2:D5:20:DA:E8:E8:BE:C7:EB:C4:CA:66:CB:D7:97:CC:05:6A:F5 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6115::/48 Signature Algorithm: sha256WithRSAEncryption 2d:4c:5a:33:13:b6:f1:6a:f3:dc:bc:17:e3:a4:a8:07:2d:cb: 6e:28:cc:58:0a:0d:85:4b:7e:62:8e:18:23:ee:9f:9a:96:02: e5:87:5d:86:a4:88:fa:25:60:c1:27:4e:f2:1b:4d:d5:b7:03: 8e:63:2a:b8:a6:56:cf:6d:be:1f:d7:94:ba:e2:41:9f:bb:fe: f9:b7:c1:c8:e2:f2:c1:bc:07:c9:b3:e4:70:d1:b9:15:99:91: f4:17:90:f6:c9:8d:dc:3e:fb:74:77:aa:10:53:10:bd:b0:e6: a3:a8:aa:a2:fd:a8:42:b0:ec:a6:d3:f9:64:32:20:08:8e:da: 54:89:05:6a:db:64:04:78:a4:86:c8:22:0c:8e:c0:6a:41:74: 0e:c2:e1:78:6a:e3:dd:4c:3c:9e:d2:2d:f9:c4:e4:a8:90:46: bd:28:ad:14:24:ce:f2:e1:c5:20:9b:85:17:98:25:ec:b8:8e: d6:8b:f9:57:2b:32:0d:14:56:a1:21:f4:dd:c9:8b:87:45:2f: ab:de:0a:2d:11:ed:65:ad:97:da:0a:41:aa:84:be:fa:4f:d3: f0:03:f3:95:57:9c:e5:29:0c:a4:ab:4e:17:ab:d4:b4:32:b4: 5d:67:81:cc:0c:20:7d:d3:1e:e9:2e:28:33:9c:7b:b7:16:d4: 7d:7e:b7:53 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUE8gat6h+/d4QMRxn9v9oc4H9YtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjZaFw0yNzA5MDYxMzE3MjZaMDMxMTAvBgNV BAMTKDEwRDJENTIwREFFOEU4QkVDN0VCQzRDQTY2Q0JENzk3Q0MwNTZBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JbhNLBscBsyZLNHY/gyX/HSP WI1AAL0597lyTODbExR/Fgur6jEcbsJfvMCm8xMIf+JFdH6EIxqupGP5lJRQMIpJ thjcxW2UWG7RxaI467akYRiSDJtoXpKq1YXfMRcmg3CSKeNLc9tB5jr9iwOZerbc VBqq//W6Qm05B1O1GTlYhlBF7rwGizPcpglf02bVQ4f8J/g9UmXaYCRUwY0LW5ay Y5Ie8hIQXB9Wz44lsNA0xYeXZDViVBdxwcsL/C2opx4QyTq5HiG7PcIkzPiOvEw5 Zdnr7KrvTmpc38iPTL/AMEQCKGDPYfQTA19otuIBiiRreNhA3pHNwe5/EqcDAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUENLVINro6L7H68TKZsvXl8wFavUwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEVMA0GCSqGSIb3DQEBCwUAA4IBAQAt TFozE7bxavPcvBfjpKgHLctuKMxYCg2FS35ijhgj7p+algLlh12GpIj6JWDBJ07y G03VtwOOYyq4plbPbb4f15S64kGfu/75t8HI4vLBvAfJs+Rw0bkVmZH0F5D2yY3c Pvt0d6oQUxC9sOajqKqi/ahCsOym0/lkMiAIjtpUiQVq22QEeKSGyCIMjsBqQXQO wuF4auPdTDye0i35xOSokEa9KK0UJM7y4cUgm4UXmCXsuI7Wi/lXKzINFFahIfTd yYuHRS+r3gotEe1lrZfaCkGqhL76T9PwA/OVV5zlKQykq04Xq9S0MrRdZ4HMDCB9 0x7pLigznHu3FtR9frdT -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:50 2026 by rpki-client