$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666135303a3a2f34342d3438203d3e20323134333434.roa File: 326131343a373538303a666135303a3a2f34342d3438203d3e20323134333434.roa (raw, json) Hash identifier: KQmpW+UL/NNi8eTj4Ye5vTeBzI2eZUOSEdHc2KCosKk= Subject key identifier: FD:B0:F4:D2:17:D5:BE:2A:4E:0A:5B:DC:F8:06:1C:BB:05:FC:C8:BA Certificate issuer: /CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Certificate serial: 31138B7449426C91F983E96CA7CBE15ED413332B Authority key identifier: FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666135303a3a2f34342d3438203d3e20323134333434.roa Signing time: Tue 14 Apr 2026 08:08:06 +0000 ROA not before: Tue 14 Apr 2026 08:03:06 +0000 ROA not after: Tue 13 Apr 2027 08:08:06 +0000 asID: 214344 IP address blocks: 2a14:7580:fa50::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 11:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:13:8b:74:49:42:6c:91:f9:83:e9:6c:a7:cb:e1:5e:d4:13:33:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEF34FB01875095EDA56E1554746D2A5EC1ECE54 Validity Not Before: Apr 14 08:03:06 2026 GMT Not After : Apr 13 08:08:06 2027 GMT Subject: CN=FDB0F4D217D5BE2A4E0A5BDCF8061CBB05FCC8BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:3c:d9:7e:ef:5a:97:93:12:c1:f9:3d:40: 62:e5:97:67:38:7a:d6:53:55:5a:95:d8:0a:6c:66: 1b:8a:4b:99:ea:70:08:60:ed:e0:82:11:bd:8b:b1: b3:02:25:9e:d6:1e:84:f8:dd:eb:f4:bb:ea:eb:ca: 1a:86:cf:ec:22:c1:5d:7a:7f:41:2b:fa:81:aa:b9: f8:f2:14:a3:2a:b6:e8:80:e1:8b:ff:6b:69:1a:60: 3f:f2:b4:72:e7:15:ac:5e:94:9a:32:5f:b3:59:0f: 6a:d2:42:ca:14:fa:fe:c2:40:a5:0d:7b:bf:cb:9e: b4:cb:eb:33:3e:42:45:b5:9c:a7:b0:4a:26:7c:e1: db:00:1a:b5:c7:48:99:86:b5:5e:42:9c:e6:f3:20: 96:98:00:ba:4e:99:f7:51:d6:6a:19:11:83:08:b5: e2:e0:08:7d:cf:c7:34:7e:6e:ba:af:7d:15:5a:70: a2:a9:28:63:d6:fa:a0:69:4a:bb:f2:86:dc:df:7b: 64:a4:1b:eb:15:af:34:ff:fb:4d:a6:bb:7c:fc:29: 43:01:ad:55:b9:dc:e8:a7:05:51:34:45:e1:0f:6a: e6:e9:39:c8:1f:c4:10:e7:f3:b0:98:b8:04:04:44: be:0d:0e:81:f2:33:18:37:f7:8c:8a:31:4f:af:d7: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B0:F4:D2:17:D5:BE:2A:4E:0A:5B:DC:F8:06:1C:BB:05:FC:C8:BA X509v3 Authority Key Identifier: keyid:FE:F3:4F:B0:18:75:09:5E:DA:56:E1:55:47:46:D2:A5:EC:1E:CE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FEF34FB01875095EDA56E1554746D2A5EC1ECE54.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/4/326131343a373538303a666135303a3a2f34342d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fa50::/44 Signature Algorithm: sha256WithRSAEncryption a0:0a:76:9f:f4:51:93:b8:99:96:3c:2a:e4:fd:e7:4d:72:ce: 65:09:b1:7d:5a:44:92:69:ee:4a:ee:6a:07:8e:00:2e:1e:9e: ad:21:e8:91:29:1c:d4:49:08:20:10:71:8f:1e:98:52:e6:f0: 10:22:ac:e7:9a:ae:bc:c5:5c:2e:89:ae:da:f3:77:f7:16:95: 62:3b:7e:98:9f:64:1c:cc:c6:38:67:11:0b:03:3b:e6:bb:a1: be:99:18:15:af:67:e0:7c:08:9d:75:02:3f:00:45:6c:0a:23: 98:95:65:37:0c:b6:11:c4:53:c9:af:7a:f6:ea:bf:d3:09:19: 15:2b:9f:64:d3:0d:17:52:ef:68:af:af:fd:da:fd:4c:fd:97: 60:e9:48:25:ac:ca:9e:83:5d:15:5d:f2:8c:1e:0b:f8:56:8a: 6a:d8:cb:b0:a6:c6:67:0d:8e:4a:f5:28:f9:88:c5:ec:8b:bf: 04:cb:04:9a:f9:e6:01:13:fe:6e:24:3d:c3:8c:82:0a:99:29: 0c:28:d2:bd:95:e1:8b:2b:67:89:90:81:19:6e:a3:9f:31:95: 69:06:df:6d:a3:a9:ff:e8:78:67:94:58:9f:1d:76:fa:cf:6a: 0a:f4:60:f0:9c:fe:68:2e:bf:0c:51:d8:ae:95:a9:37:e3:28: 9e:68:9b:b6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMROLdElCbJH5g+lsp8vhXtQTMyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVF QzFFQ0U1NDAeFw0yNjA0MTQwODAzMDZaFw0yNzA0MTMwODA4MDZaMDMxMTAvBgNV BAMTKEZEQjBGNEQyMTdENUJFMkE0RTBBNUJEQ0Y4MDYxQ0JCMDVGQ0M4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDjzZfu9al5MSwfk9QGLll2c4 etZTVVqV2ApsZhuKS5nqcAhg7eCCEb2LsbMCJZ7WHoT43ev0u+rryhqGz+wiwV16 f0Er+oGqufjyFKMqtuiA4Yv/a2kaYD/ytHLnFaxelJoyX7NZD2rSQsoU+v7CQKUN e7/LnrTL6zM+QkW1nKewSiZ84dsAGrXHSJmGtV5CnObzIJaYALpOmfdR1moZEYMI teLgCH3PxzR+brqvfRVacKKpKGPW+qBpSrvyhtzfe2SkG+sVrzT/+02mu3z8KUMB rVW53OinBVE0ReEPaubpOcgfxBDn87CYuAQERL4NDoHyMxg394yKMU+v10TrAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU/bD00hfVvipOClvc+AYcuwX8yLowHwYDVR0j BBgwFoAU/vNPsBh1CV7aVuFVR0bSpewezlQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzQvRkVGMzRGQjAxODc1MDk1RURBNTZFMTU1NDc0NkQyQTVFQzFFQ0U1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRUYzNEZCMDE4NzUwOTVFREE1NkUxNTU0 NzQ2RDJBNUVDMUVDRTU0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTcxOGYwOC1iYjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvNC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjEzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPpQMA0GCSqGSIb3DQEBCwUAA4IBAQCg Cnaf9FGTuJmWPCrk/edNcs5lCbF9WkSSae5K7moHjgAuHp6tIeiRKRzUSQggEHGP HphS5vAQIqznmq68xVwuia7a83f3FpViO36Yn2QczMY4ZxELAzvmu6G+mRgVr2fg fAiddQI/AEVsCiOYlWU3DLYRxFPJr3r26r/TCRkVK59k0w0XUu9or6/92v1M/Zdg 6UglrMqeg10VXfKMHgv4Vopq2MuwpsZnDY5K9Sj5iMXsi78EywSa+eYBE/5uJD3D jIIKmSkMKNK9leGLK2eJkIEZbqOfMZVpBt9to6n/6HhnlFifHXb6z2oK9GDwnP5o Lr8MUdiulak34yieaJu2 -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:54 2026 by rpki-client