$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa File: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (raw, json) Hash identifier: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4= Subject key identifier: 88:88:A6:00:73:87:B3:4A:79:66:21:DE:62:40:93:12:18:C6:F8:72 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 2FDD791B963C1F7EEAD367B1E5A20C561FD4433B Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa Signing time: Thu 29 Jan 2026 08:01:31 +0000 ROA not before: Thu 29 Jan 2026 07:56:31 +0000 ROA not after: Thu 28 Jan 2027 08:01:31 +0000 asID: 215289 IP address blocks: 2a14:7581:4840::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 07:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:dd:79:1b:96:3c:1f:7e:ea:d3:67:b1:e5:a2:0c:56:1f:d4:43:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Jan 29 07:56:31 2026 GMT Not After : Jan 28 08:01:31 2027 GMT Subject: CN=8888A6007387B34A796621DE6240931218C6F872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:19:0b:58:80:5d:c2:a4:12:90:fe:fe:60: 4e:16:4f:49:f9:bc:00:21:1c:dc:5d:34:d1:37:e0: a1:46:44:0c:fe:77:93:5f:c2:21:20:df:78:4d:ac: 12:10:de:81:4d:1a:c3:92:4a:d1:d8:df:1b:5e:b7: 9c:2f:dc:d9:2e:00:44:5f:84:c4:56:1d:2e:b6:e1: 41:cf:99:5d:1c:1e:c8:95:de:56:a0:2b:94:00:13: 66:0c:6f:63:7b:58:23:8e:d8:34:16:64:99:82:d8: aa:60:e6:51:d1:27:9d:85:79:1a:49:5c:0f:9f:92: 85:66:32:a1:f0:80:60:87:98:af:97:27:20:8c:b6: 43:59:3d:93:1d:db:57:f4:52:c4:31:e3:9a:54:16: f7:42:0a:b0:d6:cc:bc:d8:1d:c6:d9:62:63:98:ad: ca:f1:d7:78:2a:07:38:da:b8:73:a1:18:6a:c4:7f: 0f:00:bb:37:7a:69:5a:f3:a4:35:de:67:8e:96:5e: 6c:54:a8:d9:41:a3:53:cf:f1:64:65:bc:05:38:89: c3:df:ef:b3:ad:f3:1b:07:2b:cb:64:19:9d:92:d8: d7:25:1f:6a:11:bb:d3:55:19:52:e9:fc:0a:cb:5b: af:b0:48:35:54:41:76:5d:7a:2f:8a:16:b1:2c:2f: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:88:A6:00:73:87:B3:4A:79:66:21:DE:62:40:93:12:18:C6:F8:72 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4840::/44 Signature Algorithm: sha256WithRSAEncryption 52:40:67:e2:27:a4:f8:ea:27:ed:34:04:6a:0c:97:be:a2:27: ee:c4:f5:de:a1:58:99:6b:d9:6f:66:bb:74:f5:d4:1f:89:f0: 62:9c:78:00:58:e0:e0:af:e1:6d:30:d6:af:b5:af:85:5f:0b: 22:94:6c:c0:3f:f9:45:4b:d8:4b:1d:8f:44:6e:d1:a7:8d:55: 61:96:e6:9a:3e:d9:51:6c:84:d7:37:17:0c:48:85:49:79:34: 39:3f:9c:4d:a1:d9:67:0f:8a:73:cf:65:59:d1:db:98:5c:5e: 3f:bd:aa:2b:ae:74:d0:95:21:20:56:1d:d9:51:a3:38:41:50: f2:ad:a7:87:b4:65:c2:1f:91:a7:b8:98:bf:bc:4c:73:d0:90: af:99:0c:4b:f1:4d:f1:73:42:b5:d1:a5:46:77:92:66:0e:49: da:db:ec:97:a1:8e:7b:69:f6:12:fc:85:2e:57:eb:c8:13:df: a1:51:65:da:a5:06:04:68:76:f1:c9:cb:1e:9a:98:55:d6:1b: 40:35:ff:be:ef:3a:55:3b:07:9f:d3:b9:6e:fd:37:9b:c5:f7: 21:0a:46:df:ee:c8:00:f4:c9:57:fb:3d:b5:07:69:ab:c8:5b: 4c:1f:51:11:ec:1b:07:d3:fa:bf:1e:a2:cb:d1:ad:b7:4e:92: 07:9a:b5:d1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUL915G5Y8H37q02ex5aIMVh/UQzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjAxMjkwNzU2MzFaFw0yNzAxMjgwODAxMzFaMDMxMTAvBgNV BAMTKDg4ODhBNjAwNzM4N0IzNEE3OTY2MjFERTYyNDA5MzEyMThDNkY4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2xkLWIBdwqQSkP7+YE4WT0n5 vAAhHNxdNNE34KFGRAz+d5NfwiEg33hNrBIQ3oFNGsOSStHY3xtet5wv3NkuAERf hMRWHS624UHPmV0cHsiV3lagK5QAE2YMb2N7WCOO2DQWZJmC2Kpg5lHRJ52FeRpJ XA+fkoVmMqHwgGCHmK+XJyCMtkNZPZMd21f0UsQx45pUFvdCCrDWzLzYHcbZYmOY rcrx13gqBzjauHOhGGrEfw8Auzd6aVrzpDXeZ46WXmxUqNlBo1PP8WRlvAU4icPf 77Ot8xsHK8tkGZ2S2NclH2oRu9NVGVLp/ArLW6+wSDVUQXZdei+KFrEsL6rZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUiIimAHOHs0p5ZiHeYkCTEhjG+HIwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzgzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzIzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUhAMA0GCSqGSIb3DQEBCwUAA4IBAQBS QGfiJ6T46iftNARqDJe+oifuxPXeoViZa9lvZrt09dQfifBinHgAWODgr+FtMNav ta+FXwsilGzAP/lFS9hLHY9EbtGnjVVhluaaPtlRbITXNxcMSIVJeTQ5P5xNodln D4pzz2VZ0duYXF4/vaorrnTQlSEgVh3ZUaM4QVDyraeHtGXCH5GnuJi/vExz0JCv mQxL8U3xc0K10aVGd5JmDkna2+yXoY57afYS/IUuV+vIE9+hUWXapQYEaHbxycse mphV1htANf++7zpVOwef07lu/TebxfchCkbf7sgA9MlX+z21B2mryFtMH1ER7BsH 0/q/HqLL0a23TpIHmrXR -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:38 2026 by rpki-client