$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa File: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (raw, json) Hash identifier: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM= Subject key identifier: 2C:87:D4:AD:F1:41:95:2A:18:DE:5C:3E:89:4E:49:46:C6:2E:80:49 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 7C2BE7EED12F4BD63C0DA73D39E2B5AEB994D395 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa Signing time: Tue 31 Mar 2026 13:40:52 +0000 ROA not before: Tue 31 Mar 2026 13:35:52 +0000 ROA not after: Tue 30 Mar 2027 13:40:52 +0000 asID: 150249 IP address blocks: 2a14:7581:4856::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2b:e7:ee:d1:2f:4b:d6:3c:0d:a7:3d:39:e2:b5:ae:b9:94:d3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Mar 31 13:35:52 2026 GMT Not After : Mar 30 13:40:52 2027 GMT Subject: CN=2C87D4ADF141952A18DE5C3E894E4946C62E8049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:7e:8b:5d:7e:07:9c:8b:8e:a5:27:7b:9e: c1:47:54:16:ec:33:a6:f4:5e:05:66:bb:09:e0:ac: 5d:e2:ce:33:1c:86:3a:fa:7b:70:ef:0e:cb:65:f9: 02:b0:96:07:dc:c9:7b:b9:3b:26:6d:39:81:91:a6: 47:6e:80:df:fa:0f:2e:04:d7:6c:6a:af:67:b9:7a: b1:0a:01:af:6d:b3:60:4a:f5:67:c0:e7:ce:71:a2: b2:3b:7f:9e:1a:9b:53:4d:24:9b:ee:2c:b0:ed:41: 6f:ce:b3:d5:32:91:04:e5:d8:be:38:ce:1f:a1:72: 19:87:2e:aa:f7:1f:7f:57:3f:7f:86:70:f2:07:a4: ea:60:10:fd:39:8e:36:92:54:8a:77:cb:c7:0b:18: bd:98:91:77:e6:b4:f4:ac:55:1a:a3:b4:9f:1e:4e: 0d:7b:66:75:9f:a1:51:10:f9:38:17:2c:e3:a9:4f: 41:b7:f0:c2:2a:9e:87:2b:3e:22:36:04:5a:ef:40: c9:58:3a:9c:79:2a:0d:1d:03:2c:de:c5:14:a1:d3: a6:5a:98:be:6e:4a:9e:4a:dc:c0:37:28:d7:67:06: 88:ca:ba:3d:e6:5a:f0:97:db:32:c3:f0:89:45:09: 99:c8:ce:67:4e:64:fa:8c:38:d8:93:8b:37:54:33: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:D4:AD:F1:41:95:2A:18:DE:5C:3E:89:4E:49:46:C6:2E:80:49 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4856::/48 Signature Algorithm: sha256WithRSAEncryption 7e:80:be:77:91:7a:6d:c7:8b:ac:da:02:9a:c8:da:5c:15:3f: e0:fc:ef:4f:90:00:b1:65:72:75:7c:a5:e1:0d:20:61:4b:74: ae:eb:c5:62:7b:e9:71:62:3f:a2:ec:a6:39:4f:52:90:7e:58: ef:39:cd:a4:65:2a:f5:97:a9:65:1a:cb:97:98:4c:46:40:20: 7f:7f:12:51:d8:3d:48:f7:b9:31:0b:ff:a2:1c:29:bf:c0:c4: 4d:ad:ba:48:32:97:14:e2:10:a3:40:73:bf:2c:69:0c:8f:67: e7:84:2f:9b:bb:03:ab:de:07:45:93:40:0f:06:57:8f:26:bf: 9d:3a:db:e0:7a:e5:3f:af:93:b0:da:a2:aa:f7:e9:6a:0e:73: 14:6e:c3:0f:4d:41:38:ee:04:d7:5e:bf:b0:a3:4f:19:48:c7: 6b:3b:eb:01:e7:c9:a5:af:0e:9a:31:62:52:be:1e:6a:f9:da: 3e:8d:14:8e:d2:69:f3:e1:73:37:2e:08:1c:8e:db:77:27:67: 15:5a:93:11:40:64:7e:9d:6e:71:dc:41:67:42:77:2a:1e:39: 20:c9:89:10:92:d0:02:1c:68:e6:26:8e:1a:20:1b:47:cd:3c: 1d:71:6a:16:95:6e:15:f0:86:17:c7:d1:9d:e1:01:29:5c:bd: 15:c1:26:55 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUfCvn7tEvS9Y8Dac9OeK1rrmU05UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjAzMzExMzM1NTJaFw0yNzAzMzAxMzQwNTJaMDMxMTAvBgNV BAMTKDJDODdENEFERjE0MTk1MkExOERFNUMzRTg5NEU0OTQ2QzYyRTgwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEn6LXX4HnIuOpSd7nsFHVBbs M6b0XgVmuwngrF3izjMchjr6e3DvDstl+QKwlgfcyXu5OyZtOYGRpkdugN/6Dy4E 12xqr2e5erEKAa9ts2BK9WfA585xorI7f54am1NNJJvuLLDtQW/Os9UykQTl2L44 zh+hchmHLqr3H39XP3+GcPIHpOpgEP05jjaSVIp3y8cLGL2YkXfmtPSsVRqjtJ8e Tg17ZnWfoVEQ+TgXLOOpT0G38MIqnocrPiI2BFrvQMlYOpx5Kg0dAyzexRSh06Za mL5uSp5K3MA3KNdnBojKuj3mWvCX2zLD8IlFCZnIzmdOZPqMONiTizdUMwFPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQULIfUrfFBlSoY3lw+iU5JRsYugEkwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzgzNTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz NTMwMzIzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gUhWMA0GCSqGSIb3DQEBCwUAA4IBAQB+ gL53kXptx4us2gKayNpcFT/g/O9PkACxZXJ1fKXhDSBhS3Su68Vie+lxYj+i7KY5 T1KQfljvOc2kZSr1l6llGsuXmExGQCB/fxJR2D1I97kxC/+iHCm/wMRNrbpIMpcU 4hCjQHO/LGkMj2fnhC+buwOr3gdFk0APBlePJr+dOtvgeuU/r5Ow2qKq9+lqDnMU bsMPTUE47gTXXr+wo08ZSMdrO+sB58mlrw6aMWJSvh5q+do+jRSO0mnz4XM3Lggc jtt3J2cVWpMRQGR+nW5x3EFnQncqHjkgyYkQktACHGjmJo4aIBtHzTwdcWoWlW4V 8IYXx9Gd4QEpXL0VwSZV -----END CERTIFICATE-----Generated at Fri Apr 17 19:10:12 2026 by rpki-client