$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa File: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (raw, json) Hash identifier: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ= Subject key identifier: E7:90:5D:3E:5B:91:5E:26:07:BD:39:02:AE:FD:33:C8:17:34:2B:D3 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 4A667839811577C4491162899E6F9144AD0AA283 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa Signing time: Sun 22 Feb 2026 21:58:02 +0000 ROA not before: Sun 22 Feb 2026 21:53:02 +0000 ROA not after: Sun 21 Feb 2027 21:58:02 +0000 asID: 216113 IP address blocks: 2a14:1ec7:f00d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 02:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:66:78:39:81:15:77:c4:49:11:62:89:9e:6f:91:44:ad:0a:a2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Feb 22 21:53:02 2026 GMT Not After : Feb 21 21:58:02 2027 GMT Subject: CN=E7905D3E5B915E2607BD3902AEFD33C817342BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:89:19:13:69:15:e5:75:49:ae:c2:e8:7e: 6f:ec:06:62:82:27:60:cc:5a:b5:a6:b8:3f:10:19: e1:a3:50:0f:a2:33:31:0f:21:18:50:a5:bc:e8:2f: 1d:20:8a:49:eb:4e:30:69:ca:09:b4:fa:3a:35:91: 9d:b0:fe:55:34:cf:82:24:f3:04:d2:d1:cf:c6:ca: 3e:93:43:27:8f:1e:4f:26:82:b8:a3:75:24:35:25: 62:c8:4d:37:8f:0c:11:a0:31:65:e4:2b:1e:ac:e6: c0:5a:c0:5a:6c:71:92:f0:6a:8d:ee:91:bd:27:42: f7:80:5a:e5:b0:b2:96:54:6d:65:c9:3a:d5:8b:34: b7:3f:c5:8b:58:f7:32:cd:d2:4c:35:b7:1e:b4:2d: 01:c1:9b:95:c8:ef:78:74:40:7f:e2:8e:b6:12:f8: 39:5a:b1:fe:b8:40:6b:7c:9d:f4:84:22:34:56:0c: f3:23:42:a1:d6:7e:de:e1:c6:38:81:89:64:67:0f: 50:32:a6:e0:8f:74:66:b6:c9:f3:5e:3c:95:ba:d2: f8:bf:da:51:f4:02:da:c2:3d:87:89:ed:10:64:5b: 4d:cb:85:9c:2b:03:72:98:01:11:63:5f:50:01:e3: 6a:07:02:ba:50:79:0a:de:0a:ec:e6:4b:f6:70:55: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:90:5D:3E:5B:91:5E:26:07:BD:39:02:AE:FD:33:C8:17:34:2B:D3 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec7:f00d::/48 Signature Algorithm: sha256WithRSAEncryption 0b:6e:07:42:f7:62:f9:4a:22:92:e5:63:d2:c6:19:c2:c7:4d: 80:8c:30:15:31:4a:48:a1:91:3a:8a:2f:d7:17:f2:d9:cc:c5: b7:8a:01:eb:5a:34:09:e5:fc:64:66:a0:7b:e8:6c:a8:3f:0a: 70:01:37:29:50:81:93:58:63:25:c8:3a:0a:80:6d:22:ea:94: a1:ba:41:c7:2a:51:05:7e:00:51:d2:78:54:ab:3b:90:19:b6: 4d:9e:68:ec:47:b6:85:36:3c:d0:ed:4f:6a:eb:52:12:0e:73: 2e:50:e7:86:52:76:f6:dc:2f:fe:15:ec:95:ef:2d:c7:b7:40: 55:b7:ed:af:85:aa:ef:cb:ba:bc:37:9d:84:2e:30:70:c0:aa: 8f:61:76:1f:66:73:37:13:c7:f7:3b:c7:9b:d4:d5:ef:be:e7: c9:85:56:f4:86:c1:34:75:18:bf:9c:b2:fa:63:9a:dc:f4:7f: dd:c2:07:15:b6:05:b0:96:22:5f:33:44:72:93:77:cc:74:96: 9b:b2:a9:1c:68:46:8f:7e:cf:21:9f:d5:0c:2f:7c:d8:19:f5: 00:eb:52:0b:fd:b5:f5:66:8a:db:76:ed:b1:58:09:dc:cc:9f: 2c:d0:73:e4:8f:78:fa:9b:80:d1:06:90:d2:2a:94:4c:be:27: 29:86:ee:19 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSmZ4OYEVd8RJEWKJnm+RRK0KooMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjAyMjIyMTUzMDJaFw0yNzAyMjEyMTU4MDJaMDMxMTAvBgNV BAMTKEU3OTA1RDNFNUI5MTVFMjYwN0JEMzkwMkFFRkQzM0M4MTczNDJCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpe4kZE2kV5XVJrsLofm/sBmKC J2DMWrWmuD8QGeGjUA+iMzEPIRhQpbzoLx0giknrTjBpygm0+jo1kZ2w/lU0z4Ik 8wTS0c/Gyj6TQyePHk8mgrijdSQ1JWLITTePDBGgMWXkKx6s5sBawFpscZLwao3u kb0nQveAWuWwspZUbWXJOtWLNLc/xYtY9zLN0kw1tx60LQHBm5XI73h0QH/ijrYS +Dlasf64QGt8nfSEIjRWDPMjQqHWft7hxjiBiWRnD1AypuCPdGa2yfNePJW60vi/ 2lH0AtrCPYeJ7RBkW03LhZwrA3KYARFjX1AB42oHArpQeQreCuzmS/ZwVWR1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU55BdPluRXiYHvTkCrv0zyBc0K9MwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MTQ3NmQ2Mi05Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMi8zMjYxMzEz NDNhMzE2NTYzMzczYTY2MzAzMDY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM2MzEzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhQex/ANMA0GCSqGSIb3DQEBCwUAA4IBAQAL bgdC92L5SiKS5WPSxhnCx02AjDAVMUpIoZE6ii/XF/LZzMW3igHrWjQJ5fxkZqB7 6GyoPwpwATcpUIGTWGMlyDoKgG0i6pShukHHKlEFfgBR0nhUqzuQGbZNnmjsR7aF NjzQ7U9q61ISDnMuUOeGUnb23C/+FeyV7y3Ht0BVt+2vharvy7q8N52ELjBwwKqP YXYfZnM3E8f3O8eb1NXvvufJhVb0hsE0dRi/nLL6Y5rc9H/dwgcVtgWwliJfM0Ry k3fMdJabsqkcaEaPfs8hn9UML3zYGfUA61IL/bX1Zorbdu2xWAnczJ8s0HPkj3j6 m4DRBpDSKpRMvicphu4Z -----END CERTIFICATE-----Generated at Sun Mar 1 19:25:29 2026 by rpki-client