$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a396631303a3a2f34342d3438203d3e20323134323233.roa File: 326131343a373538313a396631303a3a2f34342d3438203d3e20323134323233.roa (raw, json) Hash identifier: /757R/290q7lxAjREfkIn9O/IfjmifWYIYI5Pedt0xY= Subject key identifier: 05:BD:D3:30:14:D3:40:5B:98:71:6E:27:A5:1A:8D:44:BC:67:2F:3C Certificate issuer: /CN=34DEF610B33BA719BA344A660C4BDA8333112372 Certificate serial: 256FE33E938A6A291A420A94FF01FEAFBFCADFA4 Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a396631303a3a2f34342d3438203d3e20323134323233.roa Signing time: Mon 26 Jan 2026 21:13:59 +0000 ROA not before: Mon 26 Jan 2026 21:08:59 +0000 ROA not after: Mon 25 Jan 2027 21:13:59 +0000 asID: 214223 IP address blocks: 2a14:7581:9f10::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6f:e3:3e:93:8a:6a:29:1a:42:0a:94:ff:01:fe:af:bf:ca:df:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372 Validity Not Before: Jan 26 21:08:59 2026 GMT Not After : Jan 25 21:13:59 2027 GMT Subject: CN=05BDD33014D3405B98716E27A51A8D44BC672F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7e:4a:71:68:1a:75:f6:85:df:bc:e6:78:1d: d6:26:7d:67:bd:d6:ee:f4:c9:cf:b4:ea:63:c1:19: 13:c1:82:10:bb:56:f6:21:17:c1:f0:a7:52:b7:d4: db:6b:f6:40:f5:72:79:2d:d9:e7:60:39:56:00:c9: 90:c4:fe:63:07:6f:2f:d1:5a:44:c0:76:89:92:e4: 8e:1d:62:12:1d:07:13:b0:18:a0:c6:8d:c4:3e:3e: 25:e4:6f:81:06:15:3e:94:64:a7:7e:68:90:a6:8d: ed:15:92:1a:a8:da:4e:85:be:93:e4:52:0b:3b:33: 17:b7:35:b6:06:a9:c1:c3:88:85:36:d9:eb:ec:27: 07:31:c7:99:b2:3d:e8:bf:8f:b2:ba:a4:b0:17:92: 6a:31:b6:5b:2c:7a:22:49:91:94:02:b3:7c:99:78: 8a:be:3a:0e:6d:57:a2:1e:f3:91:f5:2c:8d:9c:de: 7d:08:69:bb:46:85:ca:c2:c0:7a:9c:10:dd:db:f6: 3e:4e:91:1d:09:6d:cf:16:92:36:55:82:6a:5b:85: b7:84:ab:c0:ad:04:18:17:6c:41:e2:c9:12:dd:c6: 72:60:6c:0f:5a:a5:42:df:44:6c:3c:99:d7:86:47: 34:f7:ef:cc:3f:d8:e2:1c:de:ed:5f:f7:a9:dc:72: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:D3:30:14:D3:40:5B:98:71:6E:27:A5:1A:8D:44:BC:67:2F:3C X509v3 Authority Key Identifier: keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/326131343a373538313a396631303a3a2f34342d3438203d3e20323134323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9f10::/44 Signature Algorithm: sha256WithRSAEncryption 55:49:75:12:41:9d:c2:76:3a:cf:26:49:83:ff:22:da:74:e8: ee:a8:24:cc:9f:c0:da:87:47:a2:73:a1:aa:44:86:f2:6c:20: dd:19:0f:4b:2f:e4:f7:95:e6:d1:2d:9c:44:8b:fd:4f:00:56: ca:97:50:87:53:4f:2c:0f:d3:73:3e:ef:3f:93:d5:58:ce:7f: 41:02:24:fb:38:6b:7f:90:5d:d3:bf:5c:3c:d5:3d:dc:d7:49: d2:f4:18:1a:fa:27:17:a8:45:dc:4f:c6:4c:a3:31:ac:56:10: c1:33:64:15:e0:66:e3:59:71:88:ad:94:7d:76:99:b6:d2:ff: c5:e8:bb:2e:53:05:b7:ed:42:dd:f5:a4:a2:c1:61:9a:dd:03: 2b:3f:6d:d7:8b:47:8c:87:5b:15:64:9b:0c:46:21:86:55:e5: d2:e0:b0:87:c8:a0:a0:81:9c:f8:00:0e:b0:09:92:a1:95:d7: cf:20:a2:1f:74:1e:e9:ef:51:23:50:b0:c9:87:ce:0d:80:34: dd:a6:64:0e:03:17:ce:9b:05:99:c3:83:f8:52:36:11:68:3a: c2:89:b3:29:88:1f:ea:d6:ea:ea:1a:6d:a6:fa:3d:bc:1e:19: c2:40:48:a1:7e:ce:1b:4d:e1:33:46:d7:af:5e:18:9e:b1:52: 32:80:4e:19 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJW/jPpOKaikaQgqU/wH+r7/K36QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz MzExMjM3MjAeFw0yNjAxMjYyMTA4NTlaFw0yNzAxMjUyMTEzNTlaMDMxMTAvBgNV BAMTKDA1QkREMzMwMTREMzQwNUI5ODcxNkUyN0E1MUE4RDQ0QkM2NzJGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOfkpxaBp19oXfvOZ4HdYmfWe9 1u70yc+06mPBGRPBghC7VvYhF8Hwp1K31Ntr9kD1cnkt2edgOVYAyZDE/mMHby/R WkTAdomS5I4dYhIdBxOwGKDGjcQ+PiXkb4EGFT6UZKd+aJCmje0Vkhqo2k6FvpPk Ugs7Mxe3NbYGqcHDiIU22evsJwcxx5myPei/j7K6pLAXkmoxtlsseiJJkZQCs3yZ eIq+Og5tV6Ie85H1LI2c3n0IabtGhcrCwHqcEN3b9j5OkR0Jbc8WkjZVgmpbhbeE q8CtBBgXbEHiyRLdxnJgbA9apULfRGw8mdeGRzT378w/2OIc3u1f96nccq8pAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUBb3TMBTTQFuYcW4npRqNRLxnLzwwHwYDVR0j BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw QzRCREE4MzMzMTEyMzcyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yZWQ0YjdlYi0xN2E3LTQ0ZTEtOWNhMi0wOThhMzIzODNjOTAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5NjYzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZ8QMA0GCSqGSIb3DQEBCwUAA4IBAQBV SXUSQZ3CdjrPJkmD/yLadOjuqCTMn8Dah0eic6GqRIbybCDdGQ9LL+T3lebRLZxE i/1PAFbKl1CHU08sD9NzPu8/k9VYzn9BAiT7OGt/kF3Tv1w81T3c10nS9Bga+icX qEXcT8ZMozGsVhDBM2QV4GbjWXGIrZR9dpm20v/F6LsuUwW37ULd9aSiwWGa3QMr P23Xi0eMh1sVZJsMRiGGVeXS4LCHyKCggZz4AA6wCZKhldfPIKIfdB7p71EjULDJ h84NgDTdpmQOAxfOmwWZw4P4UjYRaDrCibMpiB/q1urqGm2m+j28HhnCQEihfs4b TeEzRtevXhiesVIygE4Z -----END CERTIFICATE-----Generated at Sun Mar 1 20:08:50 2026 by rpki-client