$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa File: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (raw, json) Hash identifier: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48= Subject key identifier: 6A:95:20:57:97:73:8C:CB:C7:F8:C4:F1:A5:64:E9:37:E1:FE:9D:CF Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 12FFA02D4B0656A127BC718BF790A0C0F28604D7 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa Signing time: Tue 03 Feb 2026 18:58:02 +0000 ROA not before: Tue 03 Feb 2026 18:53:02 +0000 ROA not after: Tue 02 Feb 2027 18:58:02 +0000 asID: 208453 IP address blocks: 2a14:1ec7:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 02:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ff:a0:2d:4b:06:56:a1:27:bc:71:8b:f7:90:a0:c0:f2:86:04:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Feb 3 18:53:02 2026 GMT Not After : Feb 2 18:58:02 2027 GMT Subject: CN=6A95205797738CCBC7F8C4F1A564E937E1FE9DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:a4:fd:69:0b:b4:08:fa:a9:34:3a:27:13: 66:1f:f7:8b:08:77:fb:f0:07:60:64:9d:7e:bb:30: 43:d9:a6:b7:7c:ba:e8:18:f5:22:c9:c4:82:f8:3c: 81:ee:a0:10:e8:88:ac:6a:9d:63:5b:78:b8:6a:4f: 9e:8b:32:cc:7b:07:64:ca:ec:df:46:a7:56:05:8d: 4a:c8:79:32:ab:a4:4f:b8:04:d8:7f:3f:ec:0b:6f: 0c:a4:70:a9:4a:f2:2e:69:aa:bc:8a:70:a1:09:38: 8c:1a:a8:81:30:97:9c:ec:5a:c3:df:e4:38:6b:d7: 39:cd:f7:34:50:c3:88:0f:c0:3d:ab:8a:1c:84:b3: 05:07:94:f6:46:35:1d:34:2e:4d:bc:37:6c:1f:28: 20:74:e9:fd:5a:57:2e:b5:3c:f5:01:11:e9:84:70: 19:14:f7:be:fc:2c:09:bb:2c:bd:0b:b7:8b:99:3d: 9f:d0:54:e9:92:85:e4:1d:eb:48:18:fb:86:e3:71: 65:cb:47:af:5e:0f:b9:ae:8b:1c:4c:de:1f:8a:67: 97:34:d5:f3:6b:c7:0e:36:b3:c2:51:5d:db:5b:c4: 0c:82:12:a4:36:07:71:9b:1d:62:5f:09:6b:67:80: 8d:32:11:3e:45:27:90:eb:72:c2:52:bf:a0:b8:2d: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:20:57:97:73:8C:CB:C7:F8:C4:F1:A5:64:E9:37:E1:FE:9D:CF X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f000::/40 Signature Algorithm: sha256WithRSAEncryption 94:62:c9:05:52:ab:84:f9:ee:f9:4f:c2:03:61:63:a0:c8:74: 41:ba:51:8f:c8:5f:7e:9e:a0:58:ce:b4:d7:c1:3c:ef:82:6d: 6c:d2:26:d2:e4:0e:5e:15:bf:20:5f:88:74:88:5f:94:f2:54: c1:48:09:ac:02:9b:a2:52:11:a2:31:b3:db:de:22:39:ab:7d: 47:6a:43:00:4d:37:d4:18:c9:2e:d7:ab:91:08:3c:fa:6d:00: 23:0f:3f:04:eb:32:f2:75:19:96:41:33:9e:b9:1e:2e:4d:9a: 40:2f:43:a9:da:03:7a:2c:09:f0:f8:84:2d:c7:d0:33:8b:23: 66:32:e5:38:9e:47:31:a2:1c:c4:07:d5:36:e8:5e:c3:b2:8f: 3c:78:21:c1:d5:c1:27:b4:3e:83:84:af:be:b2:e7:ce:68:3c: 85:b5:72:ca:62:ce:08:09:cc:38:4c:8b:88:7c:25:dd:b1:e1: ea:71:a0:60:2f:2e:82:7b:4f:73:1d:9c:2e:e6:2c:19:82:78: ba:cb:0e:cb:3e:d8:66:7f:a5:e6:48:ce:b5:4e:d5:77:51:54: 08:dd:4d:32:c9:79:12:47:95:81:d5:ed:3d:65:90:e5:21:b4: 9e:3e:20:73:0e:de:e6:db:67:53:7c:ff:56:bc:67:87:de:df: f8:6e:9f:43 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUEv+gLUsGVqEnvHGL95CgwPKGBNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjAyMDMxODUzMDJaFw0yNzAyMDIxODU4MDJaMDMxMTAvBgNV BAMTKDZBOTUyMDU3OTc3MzhDQ0JDN0Y4QzRGMUE1NjRFOTM3RTFGRTlEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6KT9aQu0CPqpNDonE2Yf94sI d/vwB2BknX67MEPZprd8uugY9SLJxIL4PIHuoBDoiKxqnWNbeLhqT56LMsx7B2TK 7N9Gp1YFjUrIeTKrpE+4BNh/P+wLbwykcKlK8i5pqryKcKEJOIwaqIEwl5zsWsPf 5Dhr1znN9zRQw4gPwD2rihyEswUHlPZGNR00Lk28N2wfKCB06f1aVy61PPUBEemE cBkU9778LAm7LL0Lt4uZPZ/QVOmSheQd60gY+4bjcWXLR69eD7muixxM3h+KZ5c0 1fNrxw42s8JRXdtbxAyCEqQ2B3GbHWJfCWtngI0yET5FJ5DrcsJSv6C4LRLDAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUapUgV5dzjMvH+MTxpWTpN+H+nc8wHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MTQ3NmQ2Mi05Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMi8zMjYxMzEz NDNhMzE2NTYzMzczYTY2MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MDM4MzQzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhQex/AwDQYJKoZIhvcNAQELBQADggEBAJRi yQVSq4T57vlPwgNhY6DIdEG6UY/IX36eoFjOtNfBPO+CbWzSJtLkDl4VvyBfiHSI X5TyVMFICawCm6JSEaIxs9veIjmrfUdqQwBNN9QYyS7Xq5EIPPptACMPPwTrMvJ1 GZZBM565Hi5NmkAvQ6naA3osCfD4hC3H0DOLI2Yy5TieRzGiHMQH1TboXsOyjzx4 IcHVwSe0PoOEr76y585oPIW1cspizggJzDhMi4h8Jd2x4epxoGAvLoJ7T3MdnC7m LBmCeLrLDss+2GZ/peZIzrVO1XdRVAjdTTLJeRJHlYHV7T1lkOUhtJ4+IHMO3ubb Z1N8/1a8Z4fe3/hun0M= -----END CERTIFICATE-----Generated at Sun Mar 1 14:49:19 2026 by rpki-client