$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa File: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (raw, json) Hash identifier: kdcm2E2yjrBce2LkLk9pfeJaQAKXQlbcSuNncUIilzU= Subject key identifier: 04:9E:3C:47:AE:83:E6:88:13:E4:0E:75:61:A9:60:36:05:AF:53:30 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 76E37138C09FA26DBED031ACF473E5BF4DB7DC9A Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 202396 IP address blocks: 2a14:7586:6500::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:71:38:c0:9f:a2:6d:be:d0:31:ac:f4:73:e5:bf:4d:b7:dc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=049E3C47AE83E68813E40E7561A9603605AF5330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:b0:f2:67:e6:4d:a8:17:6a:a4:b6:93:76: 3b:e9:b1:1a:91:0b:73:10:96:b5:d0:76:a1:2b:eb: aa:49:78:f5:3a:8b:16:be:23:d8:6f:14:6c:7d:a3: 86:83:b9:94:d5:e8:7f:20:e0:6a:12:b2:09:f5:71: ec:dc:31:96:be:a2:8f:34:d6:ea:bc:0a:1e:08:dd: 6c:32:8a:e4:a3:f8:86:22:a3:4e:90:05:ab:42:3d: 31:a3:be:de:38:ab:93:9c:b3:74:6c:40:49:da:6e: 0d:7d:de:89:01:2e:ff:cd:e2:b1:a6:a8:35:ca:23: 6b:48:97:34:9f:80:1e:cc:b0:83:44:b3:1b:02:90: 94:01:71:6e:cc:1f:99:11:aa:5f:91:ca:92:e5:2a: e6:01:99:d9:ca:23:c7:07:af:d3:15:ed:ed:b0:90: 05:c6:e6:ea:ea:f3:8f:4e:e1:e7:cf:f1:e1:f5:05: ee:a8:fd:5e:4f:37:d0:eb:65:f1:a0:68:69:16:c7: 59:5c:29:0f:d2:da:fc:00:a6:e6:6c:33:a0:8c:f9: 18:0e:46:f2:56:24:29:e8:35:c8:f3:a6:c5:9d:23: c1:c2:d0:45:c3:51:06:72:63:20:c6:b7:ea:65:5a: a5:56:9d:bc:41:53:c5:a5:9e:9c:ca:dd:3a:9f:7b: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:3C:47:AE:83:E6:88:13:E4:0E:75:61:A9:60:36:05:AF:53:30 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6500::/40 Signature Algorithm: sha256WithRSAEncryption 46:cc:47:8c:4c:d8:56:d9:0c:3a:9c:d1:db:1d:c4:70:c4:a1: fc:c6:de:1a:e0:e3:30:43:48:a3:40:d9:a0:0e:3d:fb:a8:73: 32:03:74:d4:95:62:56:61:98:d2:e7:d3:81:6a:dc:df:93:a0: 01:8c:d2:be:30:db:8c:08:b5:1c:45:da:ed:5d:c5:5b:e0:29: cc:8c:8e:59:60:9f:c9:ce:3c:0a:77:5d:2d:0e:6d:bf:88:b7: 63:3c:a9:1f:21:d8:80:e7:c9:16:f1:78:21:d8:2d:f7:09:c8: 72:20:0d:d5:7e:b9:4d:ec:4f:86:4a:49:13:8d:8f:f9:ee:61: 84:d3:cb:8e:8a:0d:ca:ae:02:1b:17:33:81:22:72:d1:d2:50: df:ef:d2:3f:b1:85:fd:ba:af:df:04:16:83:c1:11:82:8e:8e: 5a:cc:64:df:9f:b9:21:d1:96:21:39:10:72:c9:45:36:b0:fb: c5:49:81:64:f6:25:fb:55:46:79:a2:5a:0d:d7:3a:4a:8a:9b: 1d:dc:12:97:f0:48:56:e0:08:29:95:37:6d:cf:34:5b:69:f4: c0:b9:b8:78:05:89:3b:1a:33:26:c4:16:c6:72:a4:61:76:92: f4:90:35:6c:e9:01:e1:fb:84:87:f5:7e:ec:0f:9d:12:03:85: 79:f7:13:30 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUduNxOMCfom2+0DGs9HPlv0233JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDA0OUUzQzQ3QUU4M0U2ODgxM0U0MEU3NTYxQTk2MDM2MDVBRjUzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+bDyZ+ZNqBdqpLaTdjvpsRqR C3MQlrXQdqEr66pJePU6ixa+I9hvFGx9o4aDuZTV6H8g4GoSsgn1cezcMZa+oo80 1uq8Ch4I3WwyiuSj+IYio06QBatCPTGjvt44q5Ocs3RsQEnabg193okBLv/N4rGm qDXKI2tIlzSfgB7MsINEsxsCkJQBcW7MH5kRql+RypLlKuYBmdnKI8cHr9MV7e2w kAXG5urq849O4efP8eH1Be6o/V5PN9DrZfGgaGkWx1lcKQ/S2vwApuZsM6CM+RgO RvJWJCnoNcjzpsWdI8HC0EXDUQZyYyDGt+plWqVWnbxBU8WlnpzK3Tqfe9B9AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUBJ48R66D5ogT5A51YalgNgWvUzAwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzUzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDMyMzMzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1hmUwDQYJKoZIhvcNAQELBQADggEBAEbM R4xM2FbZDDqc0dsdxHDEofzG3hrg4zBDSKNA2aAOPfuoczIDdNSVYlZhmNLn04Fq 3N+ToAGM0r4w24wItRxF2u1dxVvgKcyMjllgn8nOPAp3XS0Obb+It2M8qR8h2IDn yRbxeCHYLfcJyHIgDdV+uU3sT4ZKSRONj/nuYYTTy46KDcquAhsXM4EictHSUN/v 0j+xhf26r98EFoPBEYKOjlrMZN+fuSHRliE5EHLJRTaw+8VJgWT2JftVRnmiWg3X OkqKmx3cEpfwSFbgCCmVN23PNFtp9MC5uHgFiTsaMybEFsZypGF2kvSQNWzpAeH7 hIf1fuwPnRIDhXn3EzA= -----END CERTIFICATE-----Generated at Thu Sep 10 10:11:42 2026 by rpki-client