$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa File: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (raw, json) Hash identifier: N8XzyTZUvph6r/e12CjdTH60sBk3Wl4kicz6qoC6S0s= Subject key identifier: 24:74:A8:8D:A4:AD:17:A9:1A:5A:54:81:32:A9:42:7E:7B:8D:68:75 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 6201E5AE531323133A30CCC60A3B821058202B1E Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa Signing time: Sun 05 Jul 2026 03:52:53 +0000 ROA not before: Sun 05 Jul 2026 03:47:53 +0000 ROA not after: Sun 04 Jul 2027 03:52:53 +0000 asID: 11421 IP address blocks: 2a14:7586:6114::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:01:e5:ae:53:13:23:13:3a:30:cc:c6:0a:3b:82:10:58:20:2b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jul 5 03:47:53 2026 GMT Not After : Jul 4 03:52:53 2027 GMT Subject: CN=2474A88DA4AD17A91A5A548132A9427E7B8D6875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:a4:f9:e5:ee:58:23:53:92:95:d6:68:e9: ab:d5:1d:9c:f5:a7:ae:13:cc:6f:df:12:cb:79:2b: 6d:5a:45:b5:98:ad:bd:df:21:a2:fe:fc:b7:71:ea: bd:fc:31:0a:f8:02:94:10:ae:61:a0:08:65:c5:24: 0b:b0:26:76:8a:bc:83:41:7a:a9:7a:e1:4f:f0:0f: ff:2c:23:3a:e7:15:9f:7f:3d:55:50:3a:07:72:b1: 57:b8:eb:75:c8:76:4c:79:7e:05:d6:45:9a:9a:af: e5:c0:be:f2:16:e4:8d:27:9b:e7:13:52:fe:45:b8: 18:26:d0:98:92:9b:22:fa:5f:f5:71:fb:97:9f:bd: db:21:ab:80:03:bb:13:92:be:b1:7f:27:73:91:09: 39:7c:62:9e:ea:98:40:31:d1:9e:24:92:f1:74:4a: 0e:a7:b3:b4:3a:23:ac:d8:51:bf:09:57:5a:39:80: 36:61:07:29:f6:dd:68:bc:72:e7:77:45:37:b8:aa: 65:61:55:04:fa:4b:33:a8:94:f6:6a:17:ab:7d:b8: b9:37:f2:dd:e7:8f:fa:d0:73:52:59:a2:65:06:02: eb:03:64:65:7e:d2:41:71:d1:a5:cf:0a:f3:d3:26: 61:53:31:87:70:31:40:f6:65:4d:af:7e:fd:2f:b3: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:74:A8:8D:A4:AD:17:A9:1A:5A:54:81:32:A9:42:7E:7B:8D:68:75 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6114::/48 Signature Algorithm: sha256WithRSAEncryption 38:77:45:5c:01:c3:1f:7f:75:fc:e9:22:73:81:36:9f:71:92: bf:ec:bc:b8:15:f3:8b:82:3b:83:8a:93:fa:72:ce:7a:3a:b1: 82:3a:3e:05:5f:0e:b8:b5:0f:3f:4a:bc:3e:c5:58:33:ab:7c: 06:57:fe:bc:d2:ae:c5:dd:4e:fe:1a:70:cb:5c:81:2a:9f:5c: 6a:6b:9a:a6:b4:c8:25:5a:58:a7:24:e5:35:46:40:ee:6a:d0: 25:d5:db:57:52:ef:2b:3e:f7:0e:c2:f9:ed:a1:36:4a:de:71: ec:fb:5e:86:f5:41:9a:e3:a5:ca:39:28:91:b8:a5:bd:4c:34: 0d:2c:af:55:b9:d8:46:1a:9c:fa:23:7f:fb:af:a3:6b:34:3f: 88:35:03:6b:a5:bc:67:49:aa:a9:65:39:25:87:8f:1b:d8:8a: a6:e0:fb:42:e8:65:de:ed:44:2b:47:f0:62:06:fb:ee:c3:95: 55:b9:44:73:83:29:ec:2a:01:f5:45:d3:8d:d2:0a:ef:ed:a1: ea:7e:25:94:45:55:1e:7c:7f:02:2b:b8:8a:4d:54:d6:85:a5: 7f:40:dd:ac:e7:83:d0:b8:16:15:0e:c8:03:0c:70:09:4d:6b: 48:43:2f:e0:1e:f6:7b:7b:49:97:af:3d:d0:b0:68:26:a7:f1: 27:5b:ff:d0 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUYgHlrlMTIxM6MMzGCjuCEFggKx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA3MDUwMzQ3NTNaFw0yNzA3MDQwMzUyNTNaMDMxMTAvBgNV BAMTKDI0NzRBODhEQTRBRDE3QTkxQTVBNTQ4MTMyQTk0MjdFN0I4RDY4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcaT55e5YI1OSldZo6avVHZz1 p64TzG/fEst5K21aRbWYrb3fIaL+/Ldx6r38MQr4ApQQrmGgCGXFJAuwJnaKvINB eql64U/wD/8sIzrnFZ9/PVVQOgdysVe463XIdkx5fgXWRZqar+XAvvIW5I0nm+cT Uv5FuBgm0JiSmyL6X/Vx+5efvdshq4ADuxOSvrF/J3ORCTl8Yp7qmEAx0Z4kkvF0 Sg6ns7Q6I6zYUb8JV1o5gDZhByn23Wi8cud3RTe4qmVhVQT6SzOolPZqF6t9uLk3 8t3nj/rQc1JZomUGAusDZGV+0kFx0aXPCvPTJmFTMYdwMUD2ZU2vfv0vs9TBAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUJHSojaStF6kaWlSBMqlCfnuNaHUwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz MTM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYZhFDANBgkqhkiG9w0BAQsFAAOCAQEAOHdF XAHDH391/Okic4E2n3GSv+y8uBXzi4I7g4qT+nLOejqxgjo+BV8OuLUPP0q8PsVY M6t8Blf+vNKuxd1O/hpwy1yBKp9camuaprTIJVpYpyTlNUZA7mrQJdXbV1LvKz73 DsL57aE2St5x7PtehvVBmuOlyjkokbilvUw0DSyvVbnYRhqc+iN/+6+jazQ/iDUD a6W8Z0mqqWU5JYePG9iKpuD7Quhl3u1EK0fwYgb77sOVVblEc4Mp7CoB9UXTjdIK 7+2h6n4llEVVHnx/Aiu4ik1U1oWlf0DdrOeD0LgWFQ7IAwxwCU1rSEMv4B72e3tJ l6890LBoJqfxJ1v/0A== -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:08 2026 by rpki-client