$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa File: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (raw, json) Hash identifier: lQWn07LZ61PKDvFm81GAk4FQUHnr4dbxoK0zKQG8Z2k= Subject key identifier: 6E:0F:EA:BD:A8:44:B2:93:A0:5E:F5:C2:BF:63:FC:F3:62:FF:7C:8D Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 5E79A1D950317B3C26DF65F6718709D8211C5D99 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa Signing time: Fri 25 Sep 2026 07:49:40 +0000 ROA not before: Fri 25 Sep 2026 07:44:40 +0000 ROA not after: Fri 24 Sep 2027 07:49:40 +0000 asID: 215288 IP address blocks: 2a14:7581:9f20::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 08:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:79:a1:d9:50:31:7b:3c:26:df:65:f6:71:87:09:d8:21:1c:5d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Sep 25 07:44:40 2026 GMT Not After : Sep 24 07:49:40 2027 GMT Subject: CN=6E0FEABDA844B293A05EF5C2BF63FCF362FF7C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:01:ee:85:be:b8:6d:5b:be:26:70:a0:26: d6:d1:06:64:89:4d:9c:22:29:ad:33:36:78:fb:89: ac:9b:77:d0:d4:15:62:8c:ce:83:0a:63:a5:7f:e5: 9a:f4:43:65:3a:89:87:64:9d:d1:06:92:bf:42:8d: 4c:48:a0:fb:5a:33:29:59:d0:28:18:04:6a:65:98: ef:6f:c8:e2:66:f5:9e:f5:6e:99:9a:d2:d3:13:e7: 3a:69:d2:cf:69:bd:ba:a9:03:7a:82:07:39:84:ef: 22:67:fd:23:a5:e1:cf:ca:cc:6d:64:31:97:d5:e0: bc:26:89:c8:1d:29:00:44:9b:52:1e:96:28:e6:60: 1c:2d:03:24:c9:78:50:40:aa:91:5c:c2:a5:82:a3: f9:69:c4:89:69:a2:b8:6e:e5:36:e9:4b:29:b5:2b: 2a:ae:95:d2:b0:6e:a3:6a:48:4d:42:bf:ed:50:fc: cf:d3:ac:08:36:47:19:3f:06:ea:b1:c0:c6:96:65: 20:e7:1b:d6:97:cb:d5:5f:19:08:e9:71:5c:b5:74: d4:f8:ea:09:d8:3b:f4:07:88:1d:a9:80:0d:69:e7: 7b:6c:7b:01:81:f1:1e:a8:48:bd:45:2d:8d:56:fa: 90:a1:07:58:78:fd:eb:7c:3c:c8:85:04:6c:38:8d: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0F:EA:BD:A8:44:B2:93:A0:5E:F5:C2:BF:63:FC:F3:62:FF:7C:8D X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9f20::/44 Signature Algorithm: sha256WithRSAEncryption 75:00:d7:e5:5d:a2:7a:54:d1:36:aa:7f:b8:73:e8:b8:ba:cc: ac:bc:14:01:ad:3f:4f:30:8f:35:9a:41:39:58:ac:72:d9:46: 20:97:00:e1:e4:b3:e7:2b:af:21:21:43:d8:8f:a4:5c:c3:1b: ae:e0:d3:1a:b4:86:29:59:8c:03:21:5b:02:93:11:a8:64:6f: 2b:42:ea:32:f2:77:82:6c:f1:9c:d8:c8:6e:37:ed:22:40:df: ce:28:d1:cc:ef:c9:29:22:17:b8:50:f6:b6:b9:95:ae:3f:0b: 13:7c:19:f3:93:06:02:f5:04:4d:75:e3:f4:db:b1:af:7f:c1: 9e:be:b4:a0:25:ea:6d:1c:9c:5b:72:86:90:bc:bf:f7:8d:4d: ea:70:22:14:e4:65:e1:95:78:e8:b8:0f:36:85:25:8b:a5:75: c4:90:65:ff:58:16:01:f7:de:ab:01:37:b7:a2:42:ad:9e:20: 6c:16:b7:e5:70:28:31:a6:95:83:fd:a0:d3:01:86:ad:8b:15: 1a:a9:f8:a5:05:68:d0:ce:55:63:40:ba:3c:0b:21:a0:89:d1: 2c:51:94:42:34:39:d9:d5:3d:00:d4:e8:9d:c9:ef:04:38:ea: 61:48:88:2c:d2:c7:df:18:a5:8a:9e:1b:c4:c7:63:c0:de:9c: 4f:d6:06:6d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUXnmh2VAxezwm32X2cYcJ2CEcXZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNjA5MjUwNzQ0NDBaFw0yNzA5MjQwNzQ5NDBaMDMxMTAvBgNV BAMTKDZFMEZFQUJEQTg0NEIyOTNBMDVFRjVDMkJGNjNGQ0YzNjJGRjdDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAAHuhb64bVu+JnCgJtbRBmSJ TZwiKa0zNnj7iaybd9DUFWKMzoMKY6V/5Zr0Q2U6iYdkndEGkr9CjUxIoPtaMylZ 0CgYBGplmO9vyOJm9Z71bpma0tMT5zpp0s9pvbqpA3qCBzmE7yJn/SOl4c/KzG1k MZfV4LwmicgdKQBEm1IelijmYBwtAyTJeFBAqpFcwqWCo/lpxIlporhu5TbpSym1 KyquldKwbqNqSE1Cv+1Q/M/TrAg2Rxk/BuqxwMaWZSDnG9aXy9VfGQjpcVy1dNT4 6gnYO/QHiB2pgA1p53tsewGB8R6oSL1FLY1W+pChB1h4/et8PMiFBGw4jcG1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUbg/qvahEspOgXvXCv2P882L/fI0wHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jODZiNjViMS00NWU5LTRmYjItYWRjNS04N2JhNzExZTIxYjcvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5NjYzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM1MzIzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZ8gMA0GCSqGSIb3DQEBCwUAA4IBAQB1 ANflXaJ6VNE2qn+4c+i4usysvBQBrT9PMI81mkE5WKxy2UYglwDh5LPnK68hIUPY j6Rcwxuu4NMatIYpWYwDIVsCkxGoZG8rQuoy8neCbPGc2MhuN+0iQN/OKNHM78kp Ihe4UPa2uZWuPwsTfBnzkwYC9QRNdeP027Gvf8GevrSgJeptHJxbcoaQvL/3jU3q cCIU5GXhlXjouA82hSWLpXXEkGX/WBYB996rATe3okKtniBsFrflcCgxppWD/aDT AYatixUaqfilBWjQzlVjQLo8CyGgidEsUZRCNDnZ1T0A1Oidye8EOOphSIgs0sff GKWKnhvEx2PA3pxP1gZt -----END CERTIFICATE-----Generated at Mon Sep 28 20:48:32 2026 by rpki-client