$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a3a2f33322d3438203d3e203438373030.roa File: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (raw, json) Hash identifier: 6P+R6wuEEP+euC2TgU6pJdRCRgvMs4VP4k8K/rgjYxU= Subject key identifier: D1:E1:47:BD:77:D4:B7:0B:87:1B:D5:DD:AC:21:A4:A9:92:8D:D1:84 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 444E0595C58ACEE13A57DD5919A04D8877733537 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a3a2f33322d3438203d3e203438373030.roa Signing time: Sat 22 Aug 2026 08:35:07 +0000 ROA not before: Sat 22 Aug 2026 08:30:07 +0000 ROA not after: Sat 21 Aug 2027 08:35:07 +0000 asID: 48700 IP address blocks: 2a14:1ec1::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4e:05:95:c5:8a:ce:e1:3a:57:dd:59:19:a0:4d:88:77:73:35:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Aug 22 08:30:07 2026 GMT Not After : Aug 21 08:35:07 2027 GMT Subject: CN=D1E147BD77D4B70B871BD5DDAC21A4A9928DD184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:fb:27:86:99:ba:21:dc:a3:3c:cc:30:49: 1c:b3:45:b1:96:fe:8a:b4:8f:03:db:29:ce:bb:06: d8:2e:92:f0:21:c8:41:d4:4d:15:08:74:24:b9:a6: 4f:29:2e:16:11:36:f7:a3:64:3b:a0:3a:69:7d:1b: 29:f6:30:c1:ff:eb:56:f9:8b:a5:db:b0:9b:c8:7d: 8a:20:8b:d2:5a:a5:ef:60:cf:1d:8f:51:d9:87:88: 9f:26:20:f8:55:cc:22:50:e1:a2:94:e6:79:28:39: 37:c3:0d:b7:83:5d:e0:50:95:50:e5:79:0e:2b:a5: cc:f4:87:76:cf:39:24:01:34:cc:6b:75:c9:98:8e: 69:f8:24:55:7f:55:b7:4c:55:6d:39:5b:4e:a0:58: 57:ad:83:be:be:93:9d:05:21:29:b8:1d:78:d1:af: 61:19:4e:82:90:ca:ee:ec:51:e7:7f:35:d4:c6:ef: fc:18:76:74:3f:1d:6b:ff:b1:65:cd:dc:b6:e4:c1: 43:f7:84:ff:b5:ee:ac:44:6d:3a:f6:ca:f6:87:20: 13:40:4a:72:bc:3b:9c:3f:65:b7:44:d5:37:25:c0: 25:f6:74:ac:90:22:ef:68:96:52:8b:57:63:eb:1b: d3:31:61:6a:f4:d5:16:42:af:16:64:0d:b4:fc:18: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E1:47:BD:77:D4:B7:0B:87:1B:D5:DD:AC:21:A4:A9:92:8D:D1:84 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a3a2f33322d3438203d3e203438373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec1::/32 Signature Algorithm: sha256WithRSAEncryption 14:9a:d7:28:23:3f:ce:49:de:23:0c:03:75:35:41:fe:de:d9: 39:53:8f:9c:e7:34:c4:96:e1:29:0c:c0:98:95:50:b9:55:21: 73:68:6d:aa:3d:fc:93:81:dc:35:7f:ee:9c:89:be:bc:ca:a1: 6d:b8:47:64:dc:55:42:16:36:da:f6:c4:d8:e0:0d:63:5d:a2: 64:2e:ce:5d:19:8d:69:34:57:4a:7c:7b:3c:ae:4e:9b:69:17: e5:1c:12:73:f0:2b:c2:c6:0e:a2:10:42:71:d7:16:63:8f:bf: 9b:ed:54:28:8c:32:96:fb:28:20:f2:ef:c8:ce:45:13:b6:f1: 69:60:f4:ec:fe:ec:c7:ea:f7:cf:e5:21:48:c3:ae:1f:62:7a: 49:cd:7a:2e:e7:33:bd:3f:c0:87:da:c0:5a:ac:6e:b8:ce:b2: 05:9e:3c:93:e5:dc:14:e4:58:54:21:87:48:47:c7:d5:52:fb: 8c:de:ec:30:0c:07:53:52:a0:ec:38:38:96:60:39:7b:c5:bd: 8e:d5:9f:d8:9a:31:c2:b8:7f:b2:15:f6:46:2a:24:b8:87:c2: 81:19:6b:3f:8e:f6:01:f2:7c:be:90:1e:1d:7c:db:7a:52:4b: 0d:27:6e:03:72:de:b4:1f:f0:73:e5:6d:99:4b:2a:3d:65:10: 22:30:f9:af -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURE4FlcWKzuE6V91ZGaBNiHdzNTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA4MjIwODMwMDdaFw0yNzA4MjEwODM1MDdaMDMxMTAvBgNV BAMTKEQxRTE0N0JENzdENEI3MEI4NzFCRDVEREFDMjFBNEE5OTI4REQxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cPsnhpm6IdyjPMwwSRyzRbGW /oq0jwPbKc67BtgukvAhyEHUTRUIdCS5pk8pLhYRNvejZDugOml9Gyn2MMH/61b5 i6XbsJvIfYogi9Jape9gzx2PUdmHiJ8mIPhVzCJQ4aKU5nkoOTfDDbeDXeBQlVDl eQ4rpcz0h3bPOSQBNMxrdcmYjmn4JFV/VbdMVW05W06gWFetg76+k50FISm4HXjR r2EZToKQyu7sUed/NdTG7/wYdnQ/HWv/sWXN3LbkwUP3hP+17qxEbTr2yvaHIBNA SnK8O5w/ZbdE1TclwCX2dKyQIu9ollKLV2PrG9MxYWr01RZCrxZkDbT8GGNTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU0eFHvXfUtwuHG9XdrCGkqZKN0YQwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzEzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzNDM4MzczMDMwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAKhQewTANBgkqhkiG9w0BAQsFAAOCAQEAFJrXKCM/zkneIwwDdTVB /t7ZOVOPnOc0xJbhKQzAmJVQuVUhc2htqj38k4HcNX/unIm+vMqhbbhHZNxVQhY2 2vbE2OANY12iZC7OXRmNaTRXSnx7PK5Om2kX5RwSc/ArwsYOohBCcdcWY4+/m+1U KIwylvsoIPLvyM5FE7bxaWD07P7sx+r3z+UhSMOuH2J6Sc16LuczvT/Ah9rAWqxu uM6yBZ48k+XcFORYVCGHSEfH1VL7jN7sMAwHU1Kg7Dg4lmA5e8W9jtWf2Joxwrh/ shX2RiokuIfCgRlrP472AfJ8vpAeHXzbelJLDSduA3LetB/wc+VtmUsqPWUQIjD5 rw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:17:31 2026 by rpki-client