$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637633a3a2f34362d3436203d3e20323138363831.roa File: 326131343a373538313a396637633a3a2f34362d3436203d3e20323138363831.roa (raw, json) Hash identifier: 1hZDvl0qMpuDYfCMXPsCzSbYrHRxie7+lNBIWvvROBs= Subject key identifier: AB:10:6B:4D:4D:B0:67:36:F0:2F:4B:D4:6C:09:E7:44:E4:15:93:49 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 5797E559951096291D95E395C021B1693831B61E Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637633a3a2f34362d3436203d3e20323138363831.roa Signing time: Sun 20 Sep 2026 22:08:53 +0000 ROA not before: Sun 20 Sep 2026 22:03:53 +0000 ROA not after: Sun 19 Sep 2027 22:08:53 +0000 asID: 218681 IP address blocks: 2a14:7581:9f7c::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 10:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:97:e5:59:95:10:96:29:1d:95:e3:95:c0:21:b1:69:38:31:b6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Sep 20 22:03:53 2026 GMT Not After : Sep 19 22:08:53 2027 GMT Subject: CN=AB106B4D4DB06736F02F4BD46C09E744E4159349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:13:d6:57:cd:c7:42:b4:4a:7e:fe:28:fb: 0c:c5:14:5f:16:8c:20:eb:84:bb:ef:dd:3c:79:03: d7:25:79:1c:03:41:3a:39:01:80:b6:1c:6c:af:70: 6d:ff:88:ac:ee:68:ab:7a:0b:a0:1f:12:3e:35:5b: 95:bd:c9:e5:7f:c1:53:bb:36:24:f3:38:20:c8:1d: ac:83:64:ca:06:0c:bf:08:40:b9:39:af:a2:d3:71: da:58:89:87:fa:53:a6:b0:bd:31:7a:8d:a8:e5:44: ce:bc:57:da:d1:73:69:ac:89:c9:dd:1f:9a:a6:4c: fc:5f:5f:14:73:78:4f:d9:0c:47:fd:d1:d5:60:ee: 6b:90:68:05:fe:2d:fd:5d:47:b1:8f:71:07:09:b4: 8a:ec:14:88:1f:7b:85:93:f7:2e:cc:4e:f8:d8:52: 70:83:3b:e3:ba:e6:97:a2:cb:37:8a:d9:d4:80:c0: 30:f9:af:2e:cf:5c:d3:e0:40:c4:69:44:e3:30:ea: 3d:76:20:6b:ce:4f:87:4a:9e:b1:7a:14:d3:e8:12: 34:c5:94:30:8b:01:9c:17:a6:d7:f4:83:d3:9a:12: b5:bb:09:92:63:11:61:01:d8:95:42:8d:0f:0e:f8: 1a:3a:ea:66:d6:1e:94:c4:5a:d7:47:c4:7d:9e:58: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:10:6B:4D:4D:B0:67:36:F0:2F:4B:D4:6C:09:E7:44:E4:15:93:49 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538313a396637633a3a2f34362d3436203d3e20323138363831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9f7c::/46 Signature Algorithm: sha256WithRSAEncryption 0b:34:6d:0a:a0:46:b8:a2:f5:92:28:55:5d:eb:c0:62:19:e6: c8:4f:c8:34:6d:4d:48:be:a8:da:6d:b8:ef:62:09:f6:db:44: 07:6e:0a:7b:69:89:8a:8b:4d:e6:3c:8c:30:79:85:df:43:54: 54:eb:17:a6:78:d4:a8:67:18:7e:70:be:0d:80:f1:4a:52:ad: 21:e3:0e:5f:11:a7:d1:bd:37:50:3b:8c:f1:4d:5d:96:dd:b1: 99:db:87:c1:04:c3:c3:39:46:69:68:81:38:2d:e7:66:83:96: 84:e2:f4:b6:d5:ab:b2:5a:9c:e3:a6:a9:60:24:3f:26:cf:9a: 38:50:ba:c1:56:f6:26:d0:de:61:4a:b5:d3:02:c6:67:5d:63: 6b:c8:fc:2a:48:68:86:19:9b:9c:fd:b4:08:ad:9b:88:63:48: e1:fa:57:e0:ae:5e:fa:42:08:fa:4d:1f:ce:66:29:ce:bf:c4: 29:c3:db:75:db:a7:71:c2:24:33:99:c4:cd:e4:a8:b5:2d:5d: 49:2a:81:d3:32:a6:33:46:bb:5b:f3:37:aa:42:86:bf:3c:bb: 9b:20:33:0b:01:50:ff:67:04:88:7f:b3:23:ad:62:d9:20:d7: ae:8d:6f:df:ed:93:29:67:40:08:fd:41:49:97:8a:91:1f:30: 73:52:a8:64 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUV5flWZUQlikdleOVwCGxaTgxth4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA5MjAyMjAzNTNaFw0yNzA5MTkyMjA4NTNaMDMxMTAvBgNV BAMTKEFCMTA2QjRENERCMDY3MzZGMDJGNEJENDZDMDlFNzQ0RTQxNTkzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYBPWV83HQrRKfv4o+wzFFF8W jCDrhLvv3Tx5A9cleRwDQTo5AYC2HGyvcG3/iKzuaKt6C6AfEj41W5W9yeV/wVO7 NiTzOCDIHayDZMoGDL8IQLk5r6LTcdpYiYf6U6awvTF6jajlRM68V9rRc2msicnd H5qmTPxfXxRzeE/ZDEf90dVg7muQaAX+Lf1dR7GPcQcJtIrsFIgfe4WT9y7MTvjY UnCDO+O65peiyzeK2dSAwDD5ry7PXNPgQMRpROMw6j12IGvOT4dKnrF6FNPoEjTF lDCLAZwXptf0g9OaErW7CZJjEWEB2JVCjQ8O+Bo66mbWHpTEWtdHxH2eWK8xAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUqxBrTU2wZzbwL0vUbAnnROQVk0kwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5NjYzNzYzM2EzYTJmMzQzNjJkMzQzNjIwM2QzZTIwMzIz MTM4MzYzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gZ98MA0GCSqGSIb3DQEBCwUAA4IBAQAL NG0KoEa4ovWSKFVd68BiGebIT8g0bU1IvqjabbjvYgn220QHbgp7aYmKi03mPIww eYXfQ1RU6xemeNSoZxh+cL4NgPFKUq0h4w5fEafRvTdQO4zxTV2W3bGZ24fBBMPD OUZpaIE4Ledmg5aE4vS21auyWpzjpqlgJD8mz5o4ULrBVvYm0N5hSrXTAsZnXWNr yPwqSGiGGZuc/bQIrZuIY0jh+lfgrl76Qgj6TR/OZinOv8Qpw9t126dxwiQzmcTN 5Ki1LV1JKoHTMqYzRrtb8zeqQoa/PLubIDMLAVD/ZwSIf7MjrWLZINeujW/f7ZMp Z0AI/UFJl4qRHzBzUqhk -----END CERTIFICATE-----Generated at Tue Sep 22 21:25:05 2026 by rpki-client