$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa File: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (raw, json) Hash identifier: q9BD/eBfZVAZDlvug6h3wUNWb7nk1MEeGy7a3BXTOoM= Subject key identifier: B2:D8:4D:57:B2:BF:9A:BB:99:8A:09:EB:21:F5:36:4D:B0:0B:6B:D3 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 772DE87CDB7569346F3E2F4EF47A96FAD1A53B1E Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa Signing time: Sat 16 May 2026 23:48:39 +0000 ROA not before: Sat 16 May 2026 23:43:39 +0000 ROA not after: Sat 15 May 2027 23:48:39 +0000 asID: 215760 IP address blocks: 2a14:7583:e1ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2d:e8:7c:db:75:69:34:6f:3e:2f:4e:f4:7a:96:fa:d1:a5:3b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: May 16 23:43:39 2026 GMT Not After : May 15 23:48:39 2027 GMT Subject: CN=B2D84D57B2BF9ABB998A09EB21F5364DB00B6BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:a6:ec:e7:07:2b:fd:46:5d:43:aa:47:60: 04:56:e4:e5:63:e1:a7:4a:2e:5d:e1:7c:15:f9:7f: 2e:af:82:c8:d4:36:83:e0:25:02:01:3e:bf:a5:3d: 42:94:d8:47:99:2f:14:64:bb:af:3a:5c:eb:42:81: 68:47:01:a1:94:68:3c:46:5b:ff:07:bd:52:1c:25: 6c:ec:c1:48:92:6b:4b:32:2b:bd:c5:ac:5d:b7:14: db:3c:b5:69:6e:72:ee:e6:6e:46:82:7e:6e:25:be: ed:48:14:ef:47:30:fb:a6:62:69:f6:56:f8:f8:82: cb:cf:58:bd:33:a9:c5:ca:a7:f9:38:a6:e8:ee:8c: 91:84:0c:49:cf:69:df:6b:52:39:ba:4c:5a:cd:d5: 74:1e:f5:bd:b7:23:3c:81:4e:2c:66:ea:e1:e0:c9: 8c:86:5c:2e:9f:68:5e:c1:c3:fb:bd:f2:d4:45:ac: b7:ca:a8:ae:8d:7a:66:6d:4c:46:3e:20:52:15:52: 9d:11:e8:f2:a4:3e:d3:5a:53:9f:40:30:d3:ef:71: 1e:29:b7:05:a1:59:65:c7:73:a8:ba:e9:e8:eb:7d: b7:8e:f1:0f:27:be:0f:e6:5a:fb:05:4d:b3:27:fd: 78:d3:2c:28:b2:2d:ab:fb:38:81:93:61:de:41:bd: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:4D:57:B2:BF:9A:BB:99:8A:09:EB:21:F5:36:4D:B0:0B:6B:D3 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:e1ac::/48 Signature Algorithm: sha256WithRSAEncryption a2:21:21:48:a9:bc:66:13:b6:ab:b0:a1:b1:5e:76:b8:d6:04: 00:bd:23:33:3b:24:53:05:e3:1b:6d:2d:c2:b1:8c:5b:27:c0: 46:d4:35:56:01:48:85:63:c7:1a:c2:1b:a3:e2:81:e9:0e:61: 1e:f7:21:ba:dd:b6:12:da:72:31:fb:77:a4:ba:93:d5:61:33: e9:ea:bd:73:94:d7:c8:da:d8:65:a5:7d:12:56:11:3b:0b:52: 23:89:cf:ee:86:67:04:f6:b8:fd:c0:e8:de:a8:58:dd:5c:88: 25:86:fb:ce:36:54:21:a8:92:d0:7c:4d:25:ec:c9:80:9e:d6: 30:da:4d:e4:8b:37:d4:66:47:13:5e:99:32:21:f0:2e:f4:55: 30:59:b2:5b:d8:87:02:da:71:5f:92:79:98:80:18:b1:d1:58: e0:53:9d:ad:59:e4:18:0d:ee:11:17:3f:85:cb:60:1b:9a:8f: 19:5b:41:ae:21:52:f2:2d:84:50:3a:8c:b3:44:dc:77:6e:31: e1:6c:9a:d8:5b:a4:ae:2e:e7:b6:85:1a:60:ad:77:24:cd:1d: 3e:47:8e:63:b1:cb:74:8b:c1:ef:16:ba:23:44:58:63:93:84: 83:d9:b7:b0:ee:ee:f9:81:f9:28:d5:54:36:50:bc:ec:fc:ee: 4e:74:c1:d2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUdy3ofNt1aTRvPi9O9HqW+tGlOx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA1MTYyMzQzMzlaFw0yNzA1MTUyMzQ4MzlaMDMxMTAvBgNV BAMTKEIyRDg0RDU3QjJCRjlBQkI5OThBMDlFQjIxRjUzNjREQjAwQjZCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/g6bs5wcr/UZdQ6pHYARW5OVj 4adKLl3hfBX5fy6vgsjUNoPgJQIBPr+lPUKU2EeZLxRku686XOtCgWhHAaGUaDxG W/8HvVIcJWzswUiSa0syK73FrF23FNs8tWlucu7mbkaCfm4lvu1IFO9HMPumYmn2 Vvj4gsvPWL0zqcXKp/k4pujujJGEDEnPad9rUjm6TFrN1XQe9b23IzyBTixm6uHg yYyGXC6faF7Bw/u98tRFrLfKqK6NemZtTEY+IFIVUp0R6PKkPtNaU59AMNPvcR4p twWhWWXHc6i66ejrfbeO8Q8nvg/mWvsFTbMn/XjTLCiyLav7OIGTYd5BvbY5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUsthNV7K/mruZignrIfU2TbALa9MwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mN2Q5MjU1OC0yNThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMi8zMjYxMzEz NDNhMzczNTM4MzMzYTY1MzE2MTYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzczNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g+GsMA0GCSqGSIb3DQEBCwUAA4IBAQCi ISFIqbxmE7arsKGxXna41gQAvSMzOyRTBeMbbS3CsYxbJ8BG1DVWAUiFY8cawhuj 4oHpDmEe9yG63bYS2nIx+3ekupPVYTPp6r1zlNfI2thlpX0SVhE7C1Ijic/uhmcE 9rj9wOjeqFjdXIglhvvONlQhqJLQfE0l7MmAntYw2k3kizfUZkcTXpkyIfAu9FUw WbJb2IcC2nFfknmYgBix0VjgU52tWeQYDe4RFz+Fy2Abmo8ZW0GuIVLyLYRQOoyz RNx3bjHhbJrYW6SuLue2hRpgrXckzR0+R45jsct0i8HvFrojRFhjk4SD2bew7u75 gfko1VQ2ULzs/O5OdMHS -----END CERTIFICATE-----Generated at Mon May 25 16:35:40 2026 by rpki-client