$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa File: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (raw, json) Hash identifier: C+V4kSeLDw3sO8d40Phfc7PlZ5G8vdBgrmtSr5gkXYw= Subject key identifier: 91:8A:35:7A:71:FE:D2:40:05:DB:69:DB:DA:1F:91:3A:B9:81:36:03 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 43FCE901676A4B4B3A6169A276AA3E6C79313FAF Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa Signing time: Tue 02 Jun 2026 18:01:31 +0000 ROA not before: Tue 02 Jun 2026 17:56:31 +0000 ROA not after: Tue 01 Jun 2027 18:01:31 +0000 asID: 216375 IP address blocks: 2a14:7581:4555::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 12:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fc:e9:01:67:6a:4b:4b:3a:61:69:a2:76:aa:3e:6c:79:31:3f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Jun 2 17:56:31 2026 GMT Not After : Jun 1 18:01:31 2027 GMT Subject: CN=918A357A71FED24005DB69DBDA1F913AB9813603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:59:28:c9:92:88:87:e7:74:bc:ff:db:73:ab: 45:26:bd:46:8c:d9:b7:08:b8:f7:26:70:dc:f6:66: 9a:e2:d1:4e:61:1d:63:eb:0a:c8:0e:32:c2:50:a3: 7c:0c:90:c3:c1:a6:e2:d4:15:38:08:51:10:dd:82: 45:9a:b7:82:39:55:f0:13:cd:b4:fd:22:99:03:dc: 33:71:95:34:27:08:06:af:96:15:a7:1f:db:bf:89: 16:d3:2d:fc:3f:b5:c3:fd:83:e6:60:54:60:e4:82: d7:8b:82:e9:a9:a3:d1:45:93:11:fb:97:cc:cd:72: 0c:e9:63:2b:da:9a:a3:98:db:8c:ad:dd:12:44:6a: ec:0f:63:bd:db:b2:84:9b:8c:84:53:a8:d2:f9:1d: c6:1d:33:14:54:c7:79:b9:82:41:5a:51:3d:a7:07: 79:d4:30:0c:a6:3b:4d:eb:ea:85:04:b3:e3:28:fc: a9:76:03:7a:86:7f:ac:4d:bc:45:21:62:21:53:5e: 8f:77:a5:cd:ee:cd:3f:4e:73:2a:3d:62:9a:eb:f6: 3d:7d:f2:eb:c5:87:93:1f:0d:0a:e5:74:4d:f2:9a: 67:4b:a4:4b:db:01:0c:4f:91:b0:58:ad:de:fe:2f: 35:d4:85:01:5b:c6:5d:d7:b7:7f:fc:f3:c4:13:80: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:35:7A:71:FE:D2:40:05:DB:69:DB:DA:1F:91:3A:B9:81:36:03 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4555::/48 Signature Algorithm: sha256WithRSAEncryption 29:5e:cc:c2:a6:5c:87:56:92:45:54:09:1c:46:84:27:ad:0f: 35:5e:2f:e7:e2:cb:3c:5e:90:47:bc:7e:72:4f:f7:7d:cb:ed: 7e:46:fa:04:b5:76:db:92:b8:1a:10:35:e3:5f:ea:f5:75:62: 9b:3a:a0:cb:4f:a2:45:ba:8a:f2:67:6a:6b:13:e4:15:50:e2: 06:22:1c:22:a6:fe:2e:82:24:b5:5e:46:5f:08:92:d3:81:bd: c7:59:9b:aa:48:c2:d1:f5:8c:c6:af:14:41:f9:be:c5:c3:ae: 1c:09:6b:64:08:2c:52:32:80:96:6c:d7:32:e5:19:b0:ce:ef: 42:7f:f1:b9:70:1c:5d:9e:c9:c4:43:5d:42:cf:6c:25:8f:b3: 13:ff:dc:65:38:25:30:64:c6:06:cf:ff:ce:49:4b:8c:4a:63: 15:1e:16:8e:f8:96:20:92:03:1c:15:43:1d:68:0b:ca:20:b6: 67:fb:18:cc:2d:38:ae:d2:56:2d:ca:87:9c:6c:45:d4:e2:94: 7d:b0:f3:f0:52:b7:43:60:45:26:65:01:58:65:3e:e6:77:9d: 96:c1:83:0f:9b:d6:93:b0:0a:06:ff:25:e4:6c:16:4c:c9:ed: a1:2d:b1:d1:89:b4:d7:c9:db:32:a6:f7:47:a6:2d:a3:61:76: d4:ed:83:4f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQ/zpAWdqS0s6YWmidqo+bHkxP68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjA2MDIxNzU2MzFaFw0yNzA2MDExODAxMzFaMDMxMTAvBgNV BAMTKDkxOEEzNTdBNzFGRUQyNDAwNURCNjlEQkRBMUY5MTNBQjk4MTM2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2WSjJkoiH53S8/9tzq0UmvUaM 2bcIuPcmcNz2Zpri0U5hHWPrCsgOMsJQo3wMkMPBpuLUFTgIURDdgkWat4I5VfAT zbT9IpkD3DNxlTQnCAavlhWnH9u/iRbTLfw/tcP9g+ZgVGDkgteLgumpo9FFkxH7 l8zNcgzpYyvamqOY24yt3RJEauwPY73bsoSbjIRTqNL5HcYdMxRUx3m5gkFaUT2n B3nUMAymO03r6oUEs+Mo/Kl2A3qGf6xNvEUhYiFTXo93pc3uzT9Ocyo9Yprr9j19 8uvFh5MfDQrldE3ymmdLpEvbAQxPkbBYrd7+LzXUhQFbxl3Xt3/888QTgOG9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUkYo1enH+0kAF22nb2h+ROrmBNgMwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzUzNTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM2MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gUVVMA0GCSqGSIb3DQEBCwUAA4IBAQAp XszCplyHVpJFVAkcRoQnrQ81Xi/n4ss8XpBHvH5yT/d9y+1+RvoEtXbbkrgaEDXj X+r1dWKbOqDLT6JFuoryZ2prE+QVUOIGIhwipv4ugiS1XkZfCJLTgb3HWZuqSMLR 9YzGrxRB+b7Fw64cCWtkCCxSMoCWbNcy5Rmwzu9Cf/G5cBxdnsnEQ11Cz2wlj7MT /9xlOCUwZMYGz//OSUuMSmMVHhaO+JYgkgMcFUMdaAvKILZn+xjMLTiu0lYtyoec bEXU4pR9sPPwUrdDYEUmZQFYZT7md52WwYMPm9aTsAoG/yXkbBZMye2hLbHRibTX ydsypvdHpi2jYXbU7YNP -----END CERTIFICATE-----Generated at Sun Jun 14 00:10:10 2026 by rpki-client