$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: fHz6pVWuLGQjD7QetfSux0qWn0AHLJxz5DWKRtDne50= Subject key identifier: 7E:F1:71:48:2E:08:84:1D:BB:99:A2:85:D3:DB:20:39:1C:3F:0A:26 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 2173E4FF97F0925161C0E5441363CAEF88C4A941 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa Signing time: Fri 04 Sep 2026 09:55:36 +0000 ROA not before: Fri 04 Sep 2026 09:50:36 +0000 ROA not after: Fri 03 Sep 2027 09:55:36 +0000 asID: 204211 IP address blocks: 2a14:7586:6115::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:73:e4:ff:97:f0:92:51:61:c0:e5:44:13:63:ca:ef:88:c4:a9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Sep 4 09:50:36 2026 GMT Not After : Sep 3 09:55:36 2027 GMT Subject: CN=7EF171482E08841DBB99A285D3DB20391C3F0A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:a7:98:a4:f9:af:a0:0d:af:43:f3:56:26: b0:28:f8:34:71:d5:3b:31:cb:55:ed:93:a6:6f:1f: 16:83:52:85:dc:db:28:6f:65:a2:57:69:f1:0d:63: d5:19:9d:69:10:0b:a0:93:5c:46:49:ac:6c:a7:d5: 12:ec:f4:72:77:e7:56:8f:ee:3e:1c:bb:ba:af:ba: f4:bc:8e:e7:c8:3f:1c:cc:1f:27:43:37:6d:5e:23: 54:12:0b:18:a2:bb:1d:7c:61:14:a8:f9:ad:5b:8a: 39:66:bb:3e:f0:f0:53:4f:d8:40:65:b2:5c:df:50: 03:99:a0:b6:3a:af:2a:28:e2:72:33:c1:20:67:d8: 22:31:f0:d0:2e:22:63:32:0c:56:df:bc:76:46:6f: a6:fc:e7:2b:d5:e9:5c:a3:65:8d:3c:22:1e:13:43: 2e:6b:ce:a5:e3:3a:42:08:5e:c6:da:fb:06:69:50: c8:ce:db:3d:66:56:1f:37:ec:03:ed:77:cd:88:59: 40:10:c3:57:8b:89:d0:71:c6:95:c2:64:d0:b5:fa: 79:4f:6c:03:af:e5:04:e1:26:59:6c:ed:c5:bc:87: e6:f4:5e:b0:cd:21:2f:25:a3:58:d6:49:3a:52:64: f7:10:56:ee:4f:2a:1d:87:fa:9b:2d:99:b0:38:73: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:71:48:2E:08:84:1D:BB:99:A2:85:D3:DB:20:39:1C:3F:0A:26 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6115::/48 Signature Algorithm: sha256WithRSAEncryption 7f:5a:17:e8:83:4c:6d:f6:53:28:11:f1:31:00:e7:82:8c:19: f3:47:3c:72:cc:19:d1:39:ba:1a:bd:32:ec:5a:2c:6f:58:26: b4:da:bf:30:8b:c0:74:1b:0b:5f:4a:17:ed:35:b5:b2:34:76: 91:77:ed:cf:51:8b:bc:de:5a:c4:97:e0:45:23:68:d4:ef:74: 29:f8:9d:3f:00:8e:d9:a5:ee:a2:ef:93:e8:a8:58:29:db:ac: ed:84:e0:5e:cf:9c:83:cf:a3:1b:07:69:06:7f:6d:0b:b9:2c: e5:06:58:bc:4f:36:99:b1:4d:0f:02:dc:c2:e6:4e:7c:56:9e: f4:24:bd:02:bf:02:96:6f:85:53:4c:81:b9:29:72:05:ac:3d: 51:b1:e7:c6:a4:6b:1c:5a:7d:3f:f9:e2:39:79:ac:81:79:23: ab:72:06:4b:2e:d5:76:94:31:76:08:8f:25:03:0e:d7:74:28: df:dc:dc:39:6f:8c:c3:19:c0:1e:ba:0b:93:3e:d9:0f:b0:62: e6:5c:20:d3:35:6f:1a:ba:90:f5:85:8c:b4:3a:89:b8:bf:4d: 78:7f:d8:bb:ee:bd:a4:5c:99:92:93:d7:40:7f:67:61:65:53: 1d:cb:de:18:53:53:ea:33:81:f3:dc:f6:4f:bc:38:44:f3:bb: ca:b7:c4:cc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIXPk/5fwklFhwOVEE2PK74jEqUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA5MDQwOTUwMzZaFw0yNzA5MDMwOTU1MzZaMDMxMTAvBgNV BAMTKDdFRjE3MTQ4MkUwODg0MURCQjk5QTI4NUQzREIyMDM5MUMzRjBBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkL6eYpPmvoA2vQ/NWJrAo+DRx 1Tsxy1Xtk6ZvHxaDUoXc2yhvZaJXafENY9UZnWkQC6CTXEZJrGyn1RLs9HJ351aP 7j4cu7qvuvS8jufIPxzMHydDN21eI1QSCxiiux18YRSo+a1bijlmuz7w8FNP2EBl slzfUAOZoLY6ryoo4nIzwSBn2CIx8NAuImMyDFbfvHZGb6b85yvV6VyjZY08Ih4T Qy5rzqXjOkIIXsba+wZpUMjO2z1mVh837APtd82IWUAQw1eLidBxxpXCZNC1+nlP bAOv5QThJlls7cW8h+b0XrDNIS8lo1jWSTpSZPcQVu5PKh2H+pstmbA4c1wtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUfvFxSC4IhB27maKF09sgORw/CiYwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEVMA0GCSqGSIb3DQEBCwUAA4IBAQB/ Whfog0xt9lMoEfExAOeCjBnzRzxyzBnROboavTLsWixvWCa02r8wi8B0GwtfShft NbWyNHaRd+3PUYu83lrEl+BFI2jU73Qp+J0/AI7Zpe6i75PoqFgp26zthOBez5yD z6MbB2kGf20LuSzlBli8TzaZsU0PAtzC5k58Vp70JL0CvwKWb4VTTIG5KXIFrD1R sefGpGscWn0/+eI5eayBeSOrcgZLLtV2lDF2CI8lAw7XdCjf3Nw5b4zDGcAeuguT PtkPsGLmXCDTNW8aupD1hYy0Oom4v014f9i77r2kXJmSk9dAf2dhZVMdy94YU1Pq M4Hz3PZPvDhE87vKt8TM -----END CERTIFICATE-----Generated at Fri Sep 4 22:48:47 2026 by rpki-client