$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa File: 326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa (raw, json) Hash identifier: llWttPtFxzSvHdRpuA4UR+5ss5mF3yPJlws0jwD0FEM= Subject key identifier: 52:18:A1:33:35:C8:6C:14:5D:79:61:ED:3C:61:29:87:FC:03:30:45 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 1FBC200675A8639A9D7D0A4DDE3BBF5C3E1D6E81 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa Signing time: Fri 24 Jul 2026 08:47:57 +0000 ROA not before: Fri 24 Jul 2026 08:42:57 +0000 ROA not after: Fri 23 Jul 2027 08:47:57 +0000 asID: 214205 IP address blocks: 2a13:c8c4:f100::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bc:20:06:75:a8:63:9a:9d:7d:0a:4d:de:3b:bf:5c:3e:1d:6e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Jul 24 08:42:57 2026 GMT Not After : Jul 23 08:47:57 2027 GMT Subject: CN=5218A13335C86C145D7961ED3C612987FC033045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:37:e4:be:75:a2:9a:fe:97:bb:90:d3:8b: 4c:a4:77:5b:79:f8:81:41:24:1b:f2:35:20:17:90: 1b:ca:4e:2a:0f:d3:fc:20:e5:3d:71:1c:e6:e1:03: 08:98:55:de:4f:6a:ca:6c:62:7b:b6:aa:47:fb:f1: e1:75:bd:4c:bd:45:6e:4e:01:60:d4:f5:fe:6c:e4: 69:30:c3:bb:cf:ff:d4:27:0c:76:05:ec:13:de:c6: 5a:b9:83:5e:c4:68:1a:12:ed:d7:ff:79:ed:ba:3a: b3:3b:1c:f4:b7:a1:39:36:01:42:ab:89:fa:d6:ae: 68:d2:44:d9:56:1a:f0:2e:e4:50:b5:54:91:a2:d2: b6:00:44:93:f8:10:9a:41:3c:28:97:d7:7b:ee:b9: 21:a4:f1:21:5d:f2:66:bb:6f:54:c5:6e:f2:3e:97: 97:e4:6d:eb:dd:18:ff:fc:80:94:25:83:c7:d1:17: 4e:1b:8d:74:08:0d:70:54:64:4e:c8:f9:83:e7:49: e5:36:ba:b2:cb:d7:89:da:cd:a1:fb:8a:fd:bd:fc: 01:35:2e:7d:c2:47:20:c3:4c:ab:33:03:5d:e6:8d: cd:a0:4b:53:b5:6a:b6:92:c5:26:2a:0c:69:af:98: 7f:0b:81:3d:54:4a:2d:b4:ed:f7:ca:65:61:b1:45: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:A1:33:35:C8:6C:14:5D:79:61:ED:3C:61:29:87:FC:03:30:45 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663130303a3a2f34302d313238203d3e20323134323035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:f100::/40 Signature Algorithm: sha256WithRSAEncryption 0f:14:04:25:9f:f4:52:15:ca:5b:d4:60:a1:75:0a:c5:ab:ce: 7e:ea:9c:6c:52:b2:25:2d:2b:ba:92:ef:2b:56:22:cf:8b:12: 80:11:7e:90:d3:fb:a1:0c:57:fa:fe:3f:c1:eb:c5:43:cd:f2: 4e:64:62:7f:60:73:b4:ae:86:3b:2c:c6:24:ea:c9:5b:2b:78: f9:68:e0:4a:6a:db:b6:fe:7f:34:0b:26:18:7f:db:90:84:17: ba:43:80:80:34:cf:9e:7c:73:3b:5a:be:87:94:26:04:e5:98: 05:60:3f:ec:ed:f0:72:cb:e6:b0:9b:a9:a0:c5:3b:3e:4b:a6: 52:37:2a:c9:57:2e:c4:32:99:c9:c1:9d:79:c2:cb:c5:6f:f8: 2a:58:6c:41:40:02:c4:75:84:19:c5:0d:83:b4:eb:7e:ab:5e: 99:4c:91:2b:22:bf:c3:08:27:2c:92:91:5e:4f:ae:69:f0:5c: 6e:18:b9:62:76:90:db:a3:45:9f:d3:0e:65:c7:75:62:10:15: 48:0b:73:0c:f0:97:8f:59:d3:9d:fa:71:c5:c6:a8:c4:d2:51: 10:5e:42:41:4c:ea:76:be:c8:0d:50:95:80:0c:98:78:18:55: 97:24:76:96:40:62:2d:f2:39:d1:a4:61:ee:9d:c3:60:5d:44: 69:4f:49:bf -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUH7wgBnWoY5qdfQpN3ju/XD4dboEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA3MjQwODQyNTdaFw0yNzA3MjMwODQ3NTdaMDMxMTAvBgNV BAMTKDUyMThBMTMzMzVDODZDMTQ1RDc5NjFFRDNDNjEyOTg3RkMwMzMwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUDfkvnWimv6Xu5DTi0ykd1t5 +IFBJBvyNSAXkBvKTioP0/wg5T1xHObhAwiYVd5PaspsYnu2qkf78eF1vUy9RW5O AWDU9f5s5Gkww7vP/9QnDHYF7BPexlq5g17EaBoS7df/ee26OrM7HPS3oTk2AUKr ifrWrmjSRNlWGvAu5FC1VJGi0rYARJP4EJpBPCiX13vuuSGk8SFd8ma7b1TFbvI+ l5fkbevdGP/8gJQlg8fRF04bjXQIDXBUZE7I+YPnSeU2urLL14nazaH7iv29/AE1 Ln3CRyDDTKszA13mjc2gS1O1araSxSYqDGmvmH8LgT1USi207ffKZWGxRYoHAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUUhihMzXIbBRdeWHtPGEph/wDMEUwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2MzEzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNlMjAz MjMxMzQzMjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8jE8TANBgkqhkiG9w0BAQsFAAOCAQEA DxQEJZ/0UhXKW9RgoXUKxavOfuqcbFKyJS0rupLvK1Yiz4sSgBF+kNP7oQxX+v4/ wevFQ83yTmRif2BztK6GOyzGJOrJWyt4+WjgSmrbtv5/NAsmGH/bkIQXukOAgDTP nnxzO1q+h5QmBOWYBWA/7O3wcsvmsJupoMU7PkumUjcqyVcuxDKZycGdecLLxW/4 KlhsQUACxHWEGcUNg7TrfqtemUyRKyK/wwgnLJKRXk+uafBcbhi5YnaQ26NFn9MO Zcd1YhAVSAtzDPCXj1nTnfpxxcaoxNJREF5CQUzqdr7IDVCVgAyYeBhVlyR2lkBi LfI50aRh7p3DYF1EaU9Jvw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:08:06 2026 by rpki-client