$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a333030303a3a2f33362d313238203d3e20323035393431.roa File: 326131333a633863343a333030303a3a2f33362d313238203d3e20323035393431.roa (raw, json) Hash identifier: 97shXnpfJislpBbqVEqju6Q/sYqLAovLtvyjPdhr0V4= Subject key identifier: 1B:9F:45:4B:1A:57:9F:95:11:41:4E:D1:9D:1B:A5:E2:C1:44:BD:E8 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 1E37C209186A3A1CC1E89931583087651D14D2B2 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a333030303a3a2f33362d313238203d3e20323035393431.roa Signing time: Wed 09 Sep 2026 13:58:21 +0000 ROA not before: Wed 09 Sep 2026 13:53:21 +0000 ROA not after: Wed 08 Sep 2027 13:58:21 +0000 asID: 205941 IP address blocks: 2a13:c8c4:3000::/36 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 07:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:37:c2:09:18:6a:3a:1c:c1:e8:99:31:58:30:87:65:1d:14:d2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Sep 9 13:53:21 2026 GMT Not After : Sep 8 13:58:21 2027 GMT Subject: CN=1B9F454B1A579F9511414ED19D1BA5E2C144BDE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:6b:5a:ff:08:68:5b:96:df:20:47:f4:68: 41:e5:4b:0d:e1:3a:22:6c:b7:d0:5f:89:04:3e:36: 62:71:b1:7d:00:7e:b3:b5:ec:5d:8e:44:c9:30:f3: 79:4a:7f:32:13:0c:30:8a:a1:4f:23:1e:a0:43:78: 94:dd:aa:8a:b7:a6:c1:2a:48:d2:00:5f:51:b6:da: 0a:57:eb:15:0c:09:03:34:97:38:3c:91:ce:0c:61: ed:eb:09:bc:49:f3:d0:e6:4b:1e:3a:d0:4f:05:b4: 5a:73:59:7f:23:99:29:82:1a:c7:44:54:59:e9:a0: 2e:ae:aa:2c:df:b1:72:41:e6:a6:26:7a:c7:d3:f6: 0e:19:9b:49:43:a2:4e:c5:e9:c7:aa:00:0e:54:5d: 25:27:e8:84:17:25:76:37:ad:b2:b6:71:f2:00:e3: e6:e4:96:61:0b:72:71:35:71:59:c9:0d:f2:cf:4c: c1:37:c4:44:e0:fe:6a:97:b6:59:cd:44:5d:70:39: d6:21:81:7d:77:34:e5:3a:e8:9b:f2:8b:6b:0f:04: ca:09:8d:e7:72:ef:62:b2:c4:69:b1:d4:c0:a5:da: a3:83:b5:b4:db:8b:78:a5:9a:a6:a7:74:ce:ba:4a: a7:bf:68:d5:59:d8:b1:b8:66:e1:6d:19:f3:b7:c0: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9F:45:4B:1A:57:9F:95:11:41:4E:D1:9D:1B:A5:E2:C1:44:BD:E8 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a333030303a3a2f33362d313238203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:3000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:58:8e:89:d3:0e:c9:4a:35:ed:47:2b:f6:a5:8a:a3:d6:90: 71:6b:ca:cd:6c:94:f4:12:bf:ba:b9:7d:b3:5f:c5:f0:52:31: ff:20:21:0f:09:34:26:3a:7e:17:3d:32:1e:51:6d:f7:be:d0: fb:72:b0:23:ea:ba:bf:8d:ce:5b:82:24:a7:d5:60:78:72:c3: 27:20:cf:fe:0f:af:62:59:32:1a:7c:f1:1c:63:af:5c:ce:16: 4c:51:0d:0b:f7:ac:e1:71:bc:cb:3d:e3:f2:ce:57:27:b7:2a: 4e:75:c2:55:17:5f:34:b2:d8:12:66:b6:cc:1c:e9:3b:42:e3: c3:83:7b:6c:56:e5:d5:d0:3f:c0:05:f4:4b:85:ec:c6:09:f4: 50:8d:73:4f:b9:4f:b4:ce:21:f5:fe:bc:5a:45:c6:6f:b3:2b: 22:71:66:7f:ca:d8:97:70:37:96:16:7d:11:c1:e0:1b:c7:c1: ac:4d:e4:a8:9d:34:78:a4:30:98:ef:37:95:af:c9:cf:7a:7a: f1:ad:5c:fa:d1:d1:b7:c6:3f:93:95:45:c6:5a:75:e4:8f:34: c9:dd:89:61:08:d4:db:9e:c3:60:5d:52:05:42:63:a5:2a:58: c2:fd:7f:dc:e1:b9:e0:e2:1e:af:53:cf:b0:e3:c4:ed:d5:8f: ec:4d:b7:38 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUHjfCCRhqOhzB6JkxWDCHZR0U0rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA5MDkxMzUzMjFaFw0yNzA5MDgxMzU4MjFaMDMxMTAvBgNV BAMTKDFCOUY0NTRCMUE1NzlGOTUxMTQxNEVEMTlEMUJBNUUyQzE0NEJERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo2ta/whoW5bfIEf0aEHlSw3h OiJst9BfiQQ+NmJxsX0AfrO17F2ORMkw83lKfzITDDCKoU8jHqBDeJTdqoq3psEq SNIAX1G22gpX6xUMCQM0lzg8kc4MYe3rCbxJ89DmSx460E8FtFpzWX8jmSmCGsdE VFnpoC6uqizfsXJB5qYmesfT9g4Zm0lDok7F6ceqAA5UXSUn6IQXJXY3rbK2cfIA 4+bklmELcnE1cVnJDfLPTME3xETg/mqXtlnNRF1wOdYhgX13NOU66Jvyi2sPBMoJ jedy72KyxGmx1MCl2qODtbTbi3ilmqandM66Sqe/aNVZ2LG4ZuFtGfO3wFSRAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUG59FSxpXn5URQU7RnRul4sFEvegwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTMzMzAzMDMwM2EzYTJmMzMzNjJkMzEzMjM4MjAzZDNlMjAz MjMwMzUzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqE8jEMDANBgkqhkiG9w0BAQsFAAOCAQEA XViOidMOyUo17Ucr9qWKo9aQcWvKzWyU9BK/url9s1/F8FIx/yAhDwk0Jjp+Fz0y HlFt977Q+3KwI+q6v43OW4Ikp9VgeHLDJyDP/g+vYlkyGnzxHGOvXM4WTFENC/es 4XG8yz3j8s5XJ7cqTnXCVRdfNLLYEma2zBzpO0Ljw4N7bFbl1dA/wAX0S4Xsxgn0 UI1zT7lPtM4h9f68WkXGb7MrInFmf8rYl3A3lhZ9EcHgG8fBrE3kqJ00eKQwmO83 la/Jz3p68a1c+tHRt8Y/k5VFxlp15I80yd2JYQjU257DYF1SBUJjpSpYwv1/3OG5 4OIer1PPsOPE7dWP7E23OA== -----END CERTIFICATE-----Generated at Tue Sep 22 20:37:22 2026 by rpki-client