$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: hxY4fGjdBFlVOI6exjx2RivYEFB7+0OSTFbNA/ZjJq8= Subject key identifier: 65:F4:34:55:57:C8:F6:A6:64:D4:BF:2C:3D:B0:2A:D6:3C:60:01:4B Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 3011AE94FBA09B0CF80888A23052994AC3C56520 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa Signing time: Sat 03 Oct 2026 15:34:31 +0000 ROA not before: Sat 03 Oct 2026 15:29:31 +0000 ROA not after: Sat 02 Oct 2027 15:34:31 +0000 asID: 209710 IP address blocks: 2a14:7580:ff56::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 15:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:11:ae:94:fb:a0:9b:0c:f8:08:88:a2:30:52:99:4a:c3:c5:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Oct 3 15:29:31 2026 GMT Not After : Oct 2 15:34:31 2027 GMT Subject: CN=65F4345557C8F6A664D4BF2C3DB02AD63C60014B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b5:ad:ec:66:29:32:ef:1d:de:91:44:56:31: cd:d8:f2:d4:c0:56:1e:3a:07:de:04:5a:f8:1d:2d: 00:a3:c7:47:0e:71:e9:ce:2d:1d:30:88:91:95:ef: 0f:3f:ad:06:2a:18:f5:33:c4:d5:7c:7a:e6:af:fc: 9b:4b:75:a2:b7:3b:3c:60:db:af:35:39:87:76:5b: 38:9b:dd:f4:b9:ac:1b:79:ae:8e:f1:89:a2:c7:91: 17:7c:9b:d4:7c:04:57:47:73:5c:ed:a1:df:7b:0d: 12:de:04:b2:49:70:19:7e:b2:82:2b:eb:85:e0:4d: 6f:db:a7:da:80:26:2f:7c:57:db:29:64:56:d9:c5: 93:3c:b7:cc:02:30:34:06:ea:78:e8:98:7f:37:6c: 2e:8a:56:69:3b:fc:61:62:d3:0d:76:9d:f5:29:cc: 97:a8:01:e3:03:a6:30:24:dd:64:62:33:62:31:a0: 1e:5f:66:7c:5f:ec:80:2a:f6:57:f5:e1:04:f5:3d: 28:8f:b1:71:2e:7d:99:d8:6a:8a:6e:45:ee:53:68: f1:8f:04:63:a7:b0:37:4e:08:43:6c:3f:12:ed:4a: b1:cd:f0:09:f5:de:b8:ed:c0:e9:2e:fc:2f:61:3e: 9e:e6:9a:41:56:45:63:07:c9:62:79:a2:5f:a1:3a: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F4:34:55:57:C8:F6:A6:64:D4:BF:2C:3D:B0:2A:D6:3C:60:01:4B X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff56::/48 Signature Algorithm: sha256WithRSAEncryption 81:d7:b6:0d:4d:83:ad:ca:6f:e6:c0:f6:07:34:3b:cc:e8:0c: 76:b4:73:c0:f9:67:d7:e3:61:57:44:ee:f4:f5:80:03:e0:76: 97:1f:4b:e7:3c:c1:92:ec:6c:15:f3:53:a0:65:bf:a4:b0:f0: 30:d5:3a:eb:8d:59:a8:1f:f3:d2:87:3f:e5:bf:2c:5c:dc:76: 8e:0b:9e:18:14:77:79:c8:f8:8e:b7:2b:53:b4:3c:8d:5a:1b: 30:7d:a7:1f:b0:5a:fa:a4:2f:3b:0f:1c:ad:dc:51:58:7b:2b: f8:71:39:09:49:6c:54:84:42:0e:17:44:82:71:45:76:ab:82: 49:41:d5:20:c0:88:ef:61:59:e0:20:e2:9b:f9:28:9f:c1:07: ad:3b:f2:e8:6e:22:b8:c9:b8:70:9c:ed:9d:01:bb:1c:b1:93: 56:e8:ab:a6:24:6e:06:48:0d:54:b3:89:44:5d:38:bf:61:3c: f1:fb:91:3c:20:4d:e0:42:38:83:dd:89:b5:01:19:cd:d5:03: 6b:9a:c7:c3:77:5b:ad:a4:04:17:77:d6:76:81:a2:4c:0f:90: 1a:3b:12:57:54:ce:67:be:aa:fa:f7:19:7d:3d:59:af:ad:ad: dc:c7:93:1b:e6:af:f8:27:e5:f8:58:a5:3a:bc:68:7e:47:7c: 28:3b:95:fa -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMBGulPugmwz4CIiiMFKZSsPFZSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjEwMDMxNTI5MzFaFw0yNzEwMDIxNTM0MzFaMDMxMTAvBgNV BAMTKDY1RjQzNDU1NTdDOEY2QTY2NEQ0QkYyQzNEQjAyQUQ2M0M2MDAxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjta3sZiky7x3ekURWMc3Y8tTA Vh46B94EWvgdLQCjx0cOcenOLR0wiJGV7w8/rQYqGPUzxNV8euav/JtLdaK3Ozxg 2681OYd2Wzib3fS5rBt5ro7xiaLHkRd8m9R8BFdHc1ztod97DRLeBLJJcBl+soIr 64XgTW/bp9qAJi98V9spZFbZxZM8t8wCMDQG6njomH83bC6KVmk7/GFi0w12nfUp zJeoAeMDpjAk3WRiM2IxoB5fZnxf7IAq9lf14QT1PSiPsXEufZnYaopuRe5TaPGP BGOnsDdOCENsPxLtSrHN8An13rjtwOku/C9hPp7mmkFWRWMHyWJ5ol+hOoDRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUZfQ0VVfI9qZk1L8sPbAq1jxgAUswHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9WMA0GCSqGSIb3DQEBCwUAA4IBAQCB 17YNTYOtym/mwPYHNDvM6Ax2tHPA+WfX42FXRO709YAD4HaXH0vnPMGS7GwV81Og Zb+ksPAw1TrrjVmoH/PShz/lvyxc3HaOC54YFHd5yPiOtytTtDyNWhswfacfsFr6 pC87Dxyt3FFYeyv4cTkJSWxUhEIOF0SCcUV2q4JJQdUgwIjvYVngIOKb+SifwQet O/LobiK4ybhwnO2dAbscsZNW6KumJG4GSA1Us4lEXTi/YTzx+5E8IE3gQjiD3Ym1 ARnN1QNrmsfDd1utpAQXd9Z2gaJMD5AaOxJXVM5nvqr69xl9PVmvra3cx5Mb5q/4 J+X4WKU6vGh+R3woO5X6 -----END CERTIFICATE-----Generated at Mon Oct 12 04:58:05 2026 by rpki-client