$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431383a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656431383a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: HWSml5adfoStrxxOdj5GQs3+xn5CiI0UVeKUBHvTxLs= Subject key identifier: 8C:EC:C3:B1:FD:2C:F2:D3:4F:53:7A:2E:68:52:A1:1F:28:39:DA:92 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 6990C99F2616C5820B583A9067BACFFB90BE9992 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431383a3a2f34362d3438203d3e20323135393536.roa Signing time: Fri 11 Sep 2026 20:10:14 +0000 ROA not before: Fri 11 Sep 2026 20:05:14 +0000 ROA not after: Fri 10 Sep 2027 20:10:14 +0000 asID: 215956 IP address blocks: 2a14:7580:ed18::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 22:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:90:c9:9f:26:16:c5:82:0b:58:3a:90:67:ba:cf:fb:90:be:99:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Sep 11 20:05:14 2026 GMT Not After : Sep 10 20:10:14 2027 GMT Subject: CN=8CECC3B1FD2CF2D34F537A2E6852A11F2839DA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:5b:7b:da:a0:83:0f:8a:80:30:59:28:a5: 19:ee:fa:96:eb:36:82:08:44:35:63:aa:8b:ac:2e: 82:be:54:0c:8f:ac:7e:48:9f:7c:5b:c0:f4:0d:2b: 68:1b:48:c9:75:02:43:f9:e7:07:87:eb:88:73:dc: 0f:ed:c6:08:86:01:79:53:dc:8b:d2:18:b1:ad:ef: f7:9b:4c:6f:02:8b:c3:5c:6f:55:4a:cd:3f:56:dc: 27:08:8e:6f:6a:b9:fb:24:31:18:59:59:a7:93:64: 28:de:5e:5a:1d:3d:41:25:a5:40:16:3f:f9:04:a9: 8f:b6:c1:f7:3f:f4:b0:78:bb:c7:23:a1:c1:95:c3: 23:93:89:df:f2:df:97:86:45:b4:3c:8f:f6:9f:5c: 37:bd:2a:79:a4:aa:d3:9f:94:7f:5d:90:10:95:b6: 13:09:08:5f:5d:50:1a:7b:fe:78:8d:8b:dc:a1:47: ae:db:6b:18:18:96:85:3f:a3:3f:a1:a7:37:83:a4: 26:19:4a:11:a0:c8:16:2b:1f:3e:02:30:df:05:60: 1d:a4:8f:e7:8a:2c:46:21:76:ff:05:c2:b5:fd:4a: 1d:ac:85:c8:86:09:82:33:3c:ee:fc:93:32:82:c5: f0:56:42:e3:97:b3:41:d4:aa:5f:87:56:97:37:f9: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:C3:B1:FD:2C:F2:D3:4F:53:7A:2E:68:52:A1:1F:28:39:DA:92 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431383a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed18::/46 Signature Algorithm: sha256WithRSAEncryption 78:57:b0:70:fe:a0:7b:9d:03:86:8a:ef:f7:6c:d1:61:17:6a: 59:34:45:a3:65:00:a4:50:2a:fe:cc:96:53:fa:23:92:ef:e3: a7:22:e1:ae:ef:35:91:e5:73:36:2d:45:28:35:a7:49:64:12: c9:f7:58:63:8d:fd:28:b1:8a:b0:55:52:94:47:31:c0:4c:3f: 39:00:39:ac:bf:c5:4c:6c:76:53:21:ab:2d:93:c2:7c:66:dc: f5:1b:3d:82:b1:22:14:11:3c:fe:9b:99:09:d3:9e:ae:c3:94: 02:e7:dc:4e:4f:d3:bd:75:5b:da:b1:7c:f1:ce:8b:05:1c:c9: 09:90:4d:c9:95:a1:96:86:45:37:38:5d:1f:29:f8:2a:6d:87: a4:1f:2a:d9:f0:e2:50:a9:96:61:85:56:64:ce:89:01:1a:12: c2:1c:54:17:f3:f4:bd:26:70:91:c4:83:b3:5a:56:82:a9:a5: db:dd:0e:0e:c6:57:ab:92:45:b3:d8:ec:f1:91:a6:a5:aa:d7: 5c:12:94:ee:e6:e8:54:13:2b:2f:ec:0c:50:55:f3:82:c5:5b: 48:6c:bb:c3:6f:65:1b:ca:f2:b9:21:8a:ec:93:f8:1e:04:6e: 36:1e:3a:4e:3e:92:a1:12:8e:9f:e9:8f:92:77:3e:4f:08:c8: 4c:12:e5:91 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUaZDJnyYWxYILWDqQZ7rP+5C+mZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNjA5MTEyMDA1MTRaFw0yNzA5MTAyMDEwMTRaMDMxMTAvBgNV BAMTKDhDRUNDM0IxRkQyQ0YyRDM0RjUzN0EyRTY4NTJBMTFGMjgzOURBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Glt72qCDD4qAMFkopRnu+pbr NoIIRDVjqousLoK+VAyPrH5In3xbwPQNK2gbSMl1AkP55weH64hz3A/txgiGAXlT 3IvSGLGt7/ebTG8Ci8Ncb1VKzT9W3CcIjm9qufskMRhZWaeTZCjeXlodPUElpUAW P/kEqY+2wfc/9LB4u8cjocGVwyOTid/y35eGRbQ8j/afXDe9KnmkqtOflH9dkBCV thMJCF9dUBp7/niNi9yhR67baxgYloU/oz+hpzeDpCYZShGgyBYrHz4CMN8FYB2k j+eKLEYhdv8FwrX9Sh2shciGCYIzPO78kzKCxfBWQuOXs0HUql+HVpc3+YsVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUjOzDsf0s8tNPU3ouaFKhHyg52pIwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzMTM4M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO0YMA0GCSqGSIb3DQEBCwUAA4IBAQB4 V7Bw/qB7nQOGiu/3bNFhF2pZNEWjZQCkUCr+zJZT+iOS7+OnIuGu7zWR5XM2LUUo NadJZBLJ91hjjf0osYqwVVKURzHATD85ADmsv8VMbHZTIastk8J8Ztz1Gz2CsSIU ETz+m5kJ056uw5QC59xOT9O9dVvasXzxzosFHMkJkE3JlaGWhkU3OF0fKfgqbYek HyrZ8OJQqZZhhVZkzokBGhLCHFQX8/S9JnCRxIOzWlaCqaXb3Q4OxlerkkWz2Ozx kaalqtdcEpTu5uhUEysv7AxQVfOCxVtIbLvDb2UbyvK5IYrsk/geBG42HjpOPpKh Eo6f6Y+Sdz5PCMhMEuWR -----END CERTIFICATE-----Generated at Sat Oct 10 13:48:05 2026 by rpki-client