$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f34382d3438203d3e20323135333634.roa File: 326131343a373538313a313030303a3a2f34382d3438203d3e20323135333634.roa (raw, json) Hash identifier: oNQjblNhztoMREvAmC0e0n2FDaeTsJJDimV+dU0dhGU= Subject key identifier: 62:15:CD:F6:77:4C:B2:83:15:C5:0F:EC:C9:A5:7F:0C:A3:99:62:B7 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 0331F2C77DA3DC8ABFE6C11FFA6BDDFC49A7E305 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f34382d3438203d3e20323135333634.roa Signing time: Wed 04 Feb 2026 16:06:35 +0000 ROA not before: Wed 04 Feb 2026 16:01:35 +0000 ROA not after: Wed 03 Feb 2027 16:06:35 +0000 asID: 215364 IP address blocks: 2a14:7581:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:31:f2:c7:7d:a3:dc:8a:bf:e6:c1:1f:fa:6b:dd:fc:49:a7:e3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Feb 4 16:01:35 2026 GMT Not After : Feb 3 16:06:35 2027 GMT Subject: CN=6215CDF6774CB28315C50FECC9A57F0CA39962B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:3c:b9:6a:03:24:d2:42:35:66:81:f8:4d: 58:48:15:b8:d8:69:e5:27:9e:2d:64:1e:5d:6c:ef: d8:b3:d0:3b:f3:6f:4b:4c:e3:bf:6d:6d:8e:bb:22: f9:e4:2d:b0:01:a0:91:09:76:1c:15:13:e6:ce:57: 5f:4a:07:60:a4:ff:7e:ff:cc:44:4d:3e:c3:a0:cf: dc:f4:e8:59:3a:11:62:73:4f:5a:75:18:9c:65:ab: 0a:0c:6c:a6:62:3c:b7:a9:a1:51:84:c5:5e:68:01: c2:c4:50:90:ab:06:39:16:c1:4f:50:d3:43:74:5d: d8:14:64:60:ee:2c:4a:0d:f3:29:df:4e:df:a1:39: 58:cf:4b:db:d7:91:21:6a:c6:3e:50:6d:ca:5b:14: b1:c8:a9:a9:a9:0c:73:5e:5c:08:56:50:51:41:9b: 99:5d:05:b5:fc:1e:58:bb:0b:33:3e:b9:e5:79:66: 05:1c:d6:98:f2:9c:9c:da:03:1b:55:df:25:5b:64: 90:46:e6:64:6e:b3:4d:89:b2:50:b7:ab:79:e0:43: aa:7b:54:57:c7:c4:7d:cc:2d:a7:86:42:49:55:d4: 33:ad:59:61:6c:c9:ab:b4:cf:04:9e:bb:c9:0a:4f: b2:c1:db:e0:4a:7d:b6:48:f2:3c:e6:ca:7b:5f:c6: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:15:CD:F6:77:4C:B2:83:15:C5:0F:EC:C9:A5:7F:0C:A3:99:62:B7 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030303a3a2f34382d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1000::/48 Signature Algorithm: sha256WithRSAEncryption 4f:5e:df:eb:43:1b:9b:c5:33:61:fb:2d:9c:d3:aa:46:ea:25: b3:29:ee:f7:11:f3:16:03:57:cc:fd:bf:aa:3e:17:8f:d3:56: 3c:b2:82:30:16:e8:ae:30:41:ca:61:77:e3:f1:24:10:87:f0: 35:66:9c:31:f3:1f:cf:98:ee:c6:0b:c2:0b:da:e8:d7:d6:7c: 0e:ef:0b:9b:70:1a:3c:c8:a0:ba:aa:46:72:a7:7c:50:08:dd: 88:0c:66:0d:3e:a6:cc:34:7a:ed:9c:0b:a4:ff:46:3e:e4:ed: 60:56:b9:66:b1:5f:01:85:66:f4:fc:e1:8f:75:de:b2:f2:54: 6c:f3:a1:fb:7d:91:45:ec:98:41:30:29:5d:00:28:99:f7:c1: d4:49:0c:ca:ac:42:00:99:cc:a3:97:da:ce:01:69:f5:40:34: 63:d3:0a:92:d8:2c:15:12:33:bb:c1:4a:f8:87:e1:6a:6c:27: 08:a2:24:c4:10:be:61:85:56:24:a0:fb:74:20:c3:ae:6b:c1: d1:24:e5:d4:11:d9:b0:3f:25:0d:aa:54:c9:6b:e7:83:b1:c6: 0f:ef:4e:2f:15:60:c8:b9:31:4e:21:62:62:4f:d9:3d:ca:8d: b1:33:04:74:41:95:c5:76:8f:ae:df:6e:0d:9e:c2:c5:3f:98: 4a:14:63:f9 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAzHyx32j3Iq/5sEf+mvd/Emn4wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjAyMDQxNjAxMzVaFw0yNzAyMDMxNjA2MzVaMDMxMTAvBgNV BAMTKDYyMTVDREY2Nzc0Q0IyODMxNUM1MEZFQ0M5QTU3RjBDQTM5OTYyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqDy5agMk0kI1ZoH4TVhIFbjY aeUnni1kHl1s79iz0Dvzb0tM479tbY67IvnkLbABoJEJdhwVE+bOV19KB2Ck/37/ zERNPsOgz9z06Fk6EWJzT1p1GJxlqwoMbKZiPLepoVGExV5oAcLEUJCrBjkWwU9Q 00N0XdgUZGDuLEoN8ynfTt+hOVjPS9vXkSFqxj5QbcpbFLHIqampDHNeXAhWUFFB m5ldBbX8Hli7CzM+ueV5ZgUc1pjynJzaAxtV3yVbZJBG5mRus02JslC3q3ngQ6p7 VFfHxH3MLaeGQklV1DOtWWFsyau0zwSeu8kKT7LB2+BKfbZI8jzmyntfxshVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUYhXN9ndMsoMVxQ/syaV/DKOZYrcwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gRAAMA0GCSqGSIb3DQEBCwUAA4IBAQBP Xt/rQxubxTNh+y2c06pG6iWzKe73EfMWA1fM/b+qPheP01Y8soIwFuiuMEHKYXfj 8SQQh/A1Zpwx8x/PmO7GC8IL2ujX1nwO7wubcBo8yKC6qkZyp3xQCN2IDGYNPqbM NHrtnAuk/0Y+5O1gVrlmsV8BhWb0/OGPdd6y8lRs86H7fZFF7JhBMCldACiZ98HU SQzKrEIAmcyjl9rOAWn1QDRj0wqS2CwVEjO7wUr4h+FqbCcIoiTEEL5hhVYkoPt0 IMOua8HRJOXUEdmwPyUNqlTJa+eDscYP704vFWDIuTFOIWJiT9k9yo2xMwR0QZXF do+u324NnsLFP5hKFGP5 -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:36 2026 by rpki-client