$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030323a3a2f34382d3438203d3e20323135333634.roa File: 326131343a373538313a313030323a3a2f34382d3438203d3e20323135333634.roa (raw, json) Hash identifier: T73PFeHweVmihq6tnxJh3eVG11PalABFAgsLzQcSXuo= Subject key identifier: E4:2D:1C:93:A9:BE:85:DA:B6:A8:06:DF:7D:8A:96:07:B5:A3:3A:49 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 1D505E593D9B50A14C92FE195FE179B04B5587B5 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030323a3a2f34382d3438203d3e20323135333634.roa Signing time: Wed 04 Feb 2026 18:06:38 +0000 ROA not before: Wed 04 Feb 2026 18:01:38 +0000 ROA not after: Wed 03 Feb 2027 18:06:38 +0000 asID: 215364 IP address blocks: 2a14:7581:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:50:5e:59:3d:9b:50:a1:4c:92:fe:19:5f:e1:79:b0:4b:55:87:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Feb 4 18:01:38 2026 GMT Not After : Feb 3 18:06:38 2027 GMT Subject: CN=E42D1C93A9BE85DAB6A806DF7D8A9607B5A33A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:e7:1f:02:c7:eb:95:2d:54:2e:74:cd:ee: 59:fb:f7:67:7b:0b:7e:c9:0d:ae:54:24:22:3f:aa: 53:48:ec:ba:b5:4d:15:ca:a3:0f:35:00:a4:ff:5d: 82:d4:d0:5a:84:07:f5:be:d9:6a:50:63:f2:5f:85: 4a:d9:8b:78:c9:0c:85:88:57:63:03:00:47:d7:19: d7:81:17:55:dc:6f:45:85:dd:82:7a:d1:ce:36:7a: 3d:8a:46:c6:cb:ad:f6:e9:13:c8:9e:2e:7c:ec:cc: 76:11:8b:47:44:14:25:42:46:0d:b1:30:e2:52:1e: f8:6d:eb:5e:f1:73:21:21:7c:25:86:a0:2a:82:09: 3a:ef:2c:44:4e:88:41:f1:72:90:a0:61:33:45:80: 89:dd:04:ce:5a:48:85:e6:42:24:7d:71:a1:30:41: 70:61:4e:50:a5:41:80:4f:83:1f:c8:71:ea:49:7e: 25:02:ec:ca:68:03:d5:28:69:0a:da:59:54:53:ae: ef:8b:43:c6:05:03:da:88:83:30:89:65:6a:48:a8: 22:44:1f:7e:0b:a0:16:40:96:74:a6:bd:9d:da:2d: 28:8d:fe:80:d2:10:c2:a2:ef:9e:d6:22:2a:60:2c: 3a:07:5d:3a:7e:35:bb:0e:fd:b4:c6:2f:9a:6e:d6: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2D:1C:93:A9:BE:85:DA:B6:A8:06:DF:7D:8A:96:07:B5:A3:3A:49 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313030323a3a2f34382d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:1002::/48 Signature Algorithm: sha256WithRSAEncryption 1a:50:2f:38:d4:f2:66:49:66:04:c8:94:19:f1:35:e7:b2:2a: 15:50:01:44:eb:68:26:b0:30:ae:4b:15:8b:93:c8:e1:0a:e7: a7:cb:97:c0:18:93:c3:b4:24:17:dc:bc:d5:9e:05:e1:4a:ca: 32:af:7e:4d:65:7b:58:5c:ce:11:b1:e5:a4:75:27:a2:20:3e: 6e:20:a1:cf:c8:18:35:08:61:90:5a:e8:be:61:2e:f2:cd:a2: 96:d6:ca:96:a8:4e:da:ef:fd:94:dd:e2:bd:f7:8d:5f:26:1a: e4:f5:44:7d:ca:0f:a1:94:8b:46:b1:15:f0:3f:bd:4a:b9:d7: ec:02:4c:19:d8:6b:af:cb:f7:cb:1f:0a:3e:3c:f8:dc:d5:ab: 8b:f0:6e:6d:58:90:8c:be:44:dd:04:7b:5c:6e:13:4f:1a:6b: 80:10:75:56:96:c7:0d:59:e7:d5:f7:98:db:93:8d:87:74:13: 6a:2b:0a:6c:89:f4:61:fc:55:09:cb:7d:78:ad:d9:6c:78:99: 6f:81:0f:82:b1:f5:97:65:19:15:83:b5:38:a5:20:88:02:84: 4b:ba:00:a7:d0:75:39:07:41:24:7c:9d:0f:84:27:45:5b:e1: dd:0a:65:d7:2b:94:f1:84:bc:02:b4:06:7f:8d:c4:59:76:c5: e9:2b:0f:2a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHVBeWT2bUKFMkv4ZX+F5sEtVh7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNjAyMDQxODAxMzhaFw0yNzAyMDMxODA2MzhaMDMxMTAvBgNV BAMTKEU0MkQxQzkzQTlCRTg1REFCNkE4MDZERjdEOEE5NjA3QjVBMzNBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX1+cfAsfrlS1ULnTN7ln792d7 C37JDa5UJCI/qlNI7Lq1TRXKow81AKT/XYLU0FqEB/W+2WpQY/JfhUrZi3jJDIWI V2MDAEfXGdeBF1Xcb0WF3YJ60c42ej2KRsbLrfbpE8ieLnzszHYRi0dEFCVCRg2x MOJSHvht617xcyEhfCWGoCqCCTrvLEROiEHxcpCgYTNFgIndBM5aSIXmQiR9caEw QXBhTlClQYBPgx/IcepJfiUC7MpoA9UoaQraWVRTru+LQ8YFA9qIgzCJZWpIqCJE H34LoBZAlnSmvZ3aLSiN/oDSEMKi757WIipgLDoHXTp+NbsO/bTGL5pu1swXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU5C0ck6m+hdq2qAbffYqWB7WjOkkwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMxMzAzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gRACMA0GCSqGSIb3DQEBCwUAA4IBAQAa UC841PJmSWYEyJQZ8TXnsioVUAFE62gmsDCuSxWLk8jhCueny5fAGJPDtCQX3LzV ngXhSsoyr35NZXtYXM4RseWkdSeiID5uIKHPyBg1CGGQWui+YS7yzaKW1sqWqE7a 7/2U3eK9941fJhrk9UR9yg+hlItGsRXwP71KudfsAkwZ2Guvy/fLHwo+PPjc1auL 8G5tWJCMvkTdBHtcbhNPGmuAEHVWlscNWefV95jbk42HdBNqKwpsifRh/FUJy314 rdlseJlvgQ+CsfWXZRkVg7U4pSCIAoRLugCn0HU5B0EkfJ0PhCdFW+HdCmXXK5Tx hLwCtAZ/jcRZdsXpKw8q -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:30 2026 by rpki-client