$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131373a3a2f34382d3438203d3e20323138373333.roa File: 326131343a373538363a363131373a3a2f34382d3438203d3e20323138373333.roa (raw, json) Hash identifier: nHvsLzwaRNR/OXVuEDeDiUgod7ha2jToueX2diLPdZY= Subject key identifier: EB:0A:B8:EF:D7:9E:1C:55:12:12:36:0B:93:45:88:64:5E:41:61:EB Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 43F329E71911DB7C2CB2416543BAA4AC716CE0D7 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131373a3a2f34382d3438203d3e20323138373333.roa Signing time: Sat 24 Oct 2026 09:35:20 +0000 ROA not before: Sat 24 Oct 2026 09:30:20 +0000 ROA not after: Sat 23 Oct 2027 09:35:20 +0000 asID: 218733 IP address blocks: 2a14:7586:6117::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 05:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f3:29:e7:19:11:db:7c:2c:b2:41:65:43:ba:a4:ac:71:6c:e0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Oct 24 09:30:20 2026 GMT Not After : Oct 23 09:35:20 2027 GMT Subject: CN=EB0AB8EFD79E1C551212360B934588645E4161EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:d3:77:9e:05:23:b6:58:90:09:01:38:31: e7:8d:d8:0e:cf:7e:d0:7d:53:c0:eb:d5:fe:a4:6b: d2:43:63:9c:c2:71:06:7f:f7:bc:e3:f0:d7:ba:9b: f5:a2:60:da:b9:41:a7:ab:3d:26:ce:b4:a9:e4:38: 07:d6:94:aa:60:9b:27:b8:52:60:71:79:61:52:b4: 65:3d:4f:ae:60:43:1f:b7:ed:58:b5:52:f4:f4:d1: 2a:61:30:81:15:16:e5:80:86:33:8f:7c:88:b5:43: e2:26:ab:c5:6f:cb:f4:b7:69:4d:7d:65:71:5b:5f: 24:4b:09:60:34:7e:7c:e6:e2:d6:8f:41:1a:68:46: 71:37:e4:7c:8f:24:03:a3:83:3d:09:fb:c0:33:a9: 9b:9e:6e:b4:b2:a9:01:00:c3:29:ad:16:03:cb:9a: 3f:0f:ff:6d:06:c0:62:15:0b:ca:af:de:30:ee:30: 2f:cf:b7:b8:05:a5:1d:8f:7b:20:ec:d5:7b:bf:18: 3f:6e:2d:b1:6f:6c:27:d0:d3:27:02:67:1a:c8:ee: b0:c9:67:59:97:c5:52:09:05:5f:ce:aa:fb:8e:8e: cb:3f:52:57:6b:43:31:5e:ad:46:d8:0c:43:b3:d2: e5:55:3e:b6:aa:fa:b8:9c:c9:9b:a6:82:54:70:75: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:B8:EF:D7:9E:1C:55:12:12:36:0B:93:45:88:64:5E:41:61:EB X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131373a3a2f34382d3438203d3e20323138373333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6117::/48 Signature Algorithm: sha256WithRSAEncryption aa:89:c3:2d:75:14:f1:41:d1:55:62:f6:ad:9a:49:c2:3a:00: 0e:82:58:c3:1b:5f:54:43:7d:ea:f3:27:86:95:24:d2:79:70: 1f:0a:ff:6c:21:dd:de:43:78:40:df:cc:75:81:2d:c6:51:ca: 94:11:27:7e:76:94:e6:3a:8a:6b:5e:ff:1c:40:e7:bc:8d:25: 69:22:a0:7a:4a:ab:25:3c:77:97:6f:37:d8:48:86:82:fc:fd: 74:b6:d9:d1:14:df:d0:2b:e2:5b:32:ab:12:9d:f7:09:2f:67: 6c:7a:d7:a8:79:c9:af:18:b5:f9:2e:a3:4e:ac:47:b4:54:7b: ba:e9:e8:f6:30:0a:63:b9:92:a9:25:95:28:a7:2a:85:0a:b2: 18:d9:cb:af:ba:09:68:62:0b:73:bc:d6:d4:f7:d7:9f:5a:2d: 37:c3:8a:0b:7e:66:d0:b1:85:00:ac:b0:bc:26:c2:04:70:14: e9:93:76:01:81:ff:0f:2d:f8:58:e0:36:28:1a:08:69:5a:97: 2d:06:74:8e:90:b8:56:43:a9:3a:15:f2:07:1c:bf:bb:eb:d8: 2e:c7:34:ce:3e:e0:5b:54:cf:6f:68:52:4a:a7:5e:47:90:c3: dd:4f:db:7a:20:55:fb:df:71:5b:57:7c:da:21:c8:2f:d5:95: 54:b3:2f:72 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQ/Mp5xkR23wsskFlQ7qkrHFs4NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjEwMjQwOTMwMjBaFw0yNzEwMjMwOTM1MjBaMDMxMTAvBgNV BAMTKEVCMEFCOEVGRDc5RTFDNTUxMjEyMzYwQjkzNDU4ODY0NUU0MTYxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBttN3ngUjtliQCQE4MeeN2A7P ftB9U8Dr1f6ka9JDY5zCcQZ/97zj8Ne6m/WiYNq5QaerPSbOtKnkOAfWlKpgmye4 UmBxeWFStGU9T65gQx+37Vi1UvT00SphMIEVFuWAhjOPfIi1Q+Imq8Vvy/S3aU19 ZXFbXyRLCWA0fnzm4taPQRpoRnE35HyPJAOjgz0J+8AzqZuebrSyqQEAwymtFgPL mj8P/20GwGIVC8qv3jDuMC/Pt7gFpR2PeyDs1Xu/GD9uLbFvbCfQ0ycCZxrI7rDJ Z1mXxVIJBV/OqvuOjss/UldrQzFerUbYDEOz0uVVPraq+ricyZumglRwdR1dAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6wq479eeHFUSEjYLk0WIZF5BYeswHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM4MzczMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEXMA0GCSqGSIb3DQEBCwUAA4IBAQCq icMtdRTxQdFVYvatmknCOgAOgljDG19UQ33q8yeGlSTSeXAfCv9sId3eQ3hA38x1 gS3GUcqUESd+dpTmOoprXv8cQOe8jSVpIqB6SqslPHeXbzfYSIaC/P10ttnRFN/Q K+JbMqsSnfcJL2dseteoecmvGLX5LqNOrEe0VHu66ej2MApjuZKpJZUopyqFCrIY 2cuvugloYgtzvNbU99efWi03w4oLfmbQsYUArLC8JsIEcBTpk3YBgf8PLfhY4DYo GghpWpctBnSOkLhWQ6k6FfIHHL+769guxzTOPuBbVM9vaFJKp15HkMPdT9t6IFX7 33FbV3zaIcgv1ZVUsy9y -----END CERTIFICATE-----Generated at Sat Oct 31 15:18:23 2026 by rpki-client