$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637303a3a2f34342d3434203d3e20323039373130.roa File: 326131343a373538313a396637303a3a2f34342d3434203d3e20323039373130.roa (raw, json) Hash identifier: p385P4xF8QHkqCPa/hdjhVarHB8rsNeeYo+n7g9pTZ0= Subject key identifier: 37:02:DF:40:43:20:24:89:45:B0:66:08:94:D9:40:32:05:DA:C7:C9 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 75E31E8D36333D2D78F4A2CF2AC35BD920FF1708 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637303a3a2f34342d3434203d3e20323039373130.roa Signing time: Sat 25 Jul 2026 12:05:29 +0000 ROA not before: Sat 25 Jul 2026 12:00:29 +0000 ROA not after: Sat 24 Jul 2027 12:05:29 +0000 asID: 209710 IP address blocks: 2a14:7581:9f70::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e3:1e:8d:36:33:3d:2d:78:f4:a2:cf:2a:c3:5b:d9:20:ff:17:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Jul 25 12:00:29 2026 GMT Not After : Jul 24 12:05:29 2027 GMT Subject: CN=3702DF404320248945B0660894D9403205DAC7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:01:63:6a:d9:b9:67:05:c4:7f:49:05:11: b2:9f:4f:84:73:9d:86:79:1a:ad:79:e0:39:c9:df: fe:14:c2:ed:63:ba:66:51:de:6c:f1:77:02:02:4f: d2:65:b4:1e:4e:2a:7b:5b:ca:3d:08:24:8a:1c:c8: 4a:78:a8:0a:63:d5:80:18:ba:46:72:90:27:e8:53: f3:87:5b:51:94:a2:43:38:65:01:e5:7c:44:1d:5a: a2:fb:6b:5c:48:ff:8c:e3:d2:22:55:8a:68:81:cc: 3b:a0:01:96:74:f4:7e:79:4e:7f:b0:85:60:0c:52: 07:f4:03:58:1f:71:f8:a6:4e:c3:9b:96:36:fd:af: 22:e8:1f:6e:09:dd:08:39:a1:72:d9:8c:2c:bf:99: a6:71:54:e0:31:da:8b:94:ea:61:20:43:26:09:23: 8f:af:c0:10:c6:39:5b:f1:42:45:81:43:fb:4f:71: 4f:72:5f:27:1c:f6:09:72:8f:cc:97:ef:85:5c:92: b1:af:4b:45:16:b3:ce:08:68:d4:1f:db:04:04:e2: 6c:6b:d2:85:e0:4a:3e:a4:0b:88:bf:3b:00:73:4b: 5a:a0:c3:d9:7a:29:90:b2:78:b2:0d:2f:06:e3:cc: 13:df:1f:f1:8f:66:0b:07:b1:71:f8:ba:cc:14:2a: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:02:DF:40:43:20:24:89:45:B0:66:08:94:D9:40:32:05:DA:C7:C9 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637303a3a2f34342d3434203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9f70::/44 Signature Algorithm: sha256WithRSAEncryption 06:11:73:88:c9:fc:b4:bd:52:5f:30:bd:30:50:02:29:18:95: d7:68:96:74:39:41:24:99:77:b2:2c:0c:4b:09:37:e9:d9:86: 82:ca:11:25:46:82:12:01:2e:ee:51:57:97:71:18:4b:c6:65: 8d:7a:d3:8b:ed:0b:6e:af:af:c4:64:4d:f3:c2:42:c7:f2:63: 7e:65:59:d3:35:83:f1:43:66:68:96:d9:d6:67:8e:41:e7:2b: 5e:69:c7:52:73:5e:80:a5:51:99:b5:eb:de:5f:60:50:99:ff: fd:8b:84:50:7f:97:f4:a3:af:eb:04:13:d0:a9:25:78:03:74: 8a:92:10:0f:03:1b:83:12:31:6b:ce:fb:9c:7b:64:df:41:5a: 17:a3:5e:d5:50:25:ab:fd:94:38:34:ee:38:02:c5:58:e7:82: 1e:07:dc:eb:7f:ad:10:ce:54:8a:3c:fb:ac:4c:52:71:da:cf: b1:cc:23:86:ea:d4:49:05:b5:19:3f:be:b5:22:43:7a:14:38: 10:b4:94:7a:e2:f3:3c:e9:36:83:6c:ad:81:a0:99:c4:8b:e8: 79:44:8f:20:d7:ae:b8:e3:bb:cf:b1:7c:13:73:b6:5d:64:4d: a9:fe:fe:ef:77:ed:6b:b8:03:c7:24:2b:98:e4:e1:d9:42:19: c8:23:6c:c4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUdeMejTYzPS149KLPKsNb2SD/FwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA3MjUxMjAwMjlaFw0yNzA3MjQxMjA1MjlaMDMxMTAvBgNV BAMTKDM3MDJERjQwNDMyMDI0ODk0NUIwNjYwODk0RDk0MDMyMDVEQUM3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrwFjatm5ZwXEf0kFEbKfT4Rz nYZ5Gq154DnJ3/4Uwu1jumZR3mzxdwICT9JltB5OKntbyj0IJIocyEp4qApj1YAY ukZykCfoU/OHW1GUokM4ZQHlfEQdWqL7a1xI/4zj0iJVimiBzDugAZZ09H55Tn+w hWAMUgf0A1gfcfimTsObljb9ryLoH24J3Qg5oXLZjCy/maZxVOAx2ouU6mEgQyYJ I4+vwBDGOVvxQkWBQ/tPcU9yXycc9glyj8yX74VckrGvS0UWs84IaNQf2wQE4mxr 0oXgSj6kC4i/OwBzS1qgw9l6KZCyeLINLwbjzBPfH/GPZgsHsXH4uswUKusFAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUNwLfQEMgJIlFsGYIlNlAMgXax8kwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5NjYzNzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZ9wMA0GCSqGSIb3DQEBCwUAA4IBAQAG EXOIyfy0vVJfML0wUAIpGJXXaJZ0OUEkmXeyLAxLCTfp2YaCyhElRoISAS7uUVeX cRhLxmWNetOL7Qtur6/EZE3zwkLH8mN+ZVnTNYPxQ2ZoltnWZ45B5yteacdSc16A pVGZteveX2BQmf/9i4RQf5f0o6/rBBPQqSV4A3SKkhAPAxuDEjFrzvuce2TfQVoX o17VUCWr/ZQ4NO44AsVY54IeB9zrf60QzlSKPPusTFJx2s+xzCOG6tRJBbUZP761 IkN6FDgQtJR64vM86TaDbK2BoJnEi+h5RI8g166447vPsXwTc7ZdZE2p/v7vd+1r uAPHJCuY5OHZQhnII2zE -----END CERTIFICATE-----Generated at Tue Jul 28 15:53:42 2026 by rpki-client