$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa File: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (raw, json) Hash identifier: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc= Subject key identifier: 8F:67:DC:FB:FC:F2:C7:90:13:70:EB:D7:5B:A3:C7:CC:D2:4D:01:00 Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 60273E4EB11A75333BB5D799AA2324EAA35175D4 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa Signing time: Mon 22 Dec 2025 17:17:48 +0000 ROA not before: Mon 22 Dec 2025 17:12:48 +0000 ROA not after: Mon 21 Dec 2026 17:17:48 +0000 asID: 211431 IP address blocks: 2a13:9644:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:27:3e:4e:b1:1a:75:33:3b:b5:d7:99:aa:23:24:ea:a3:51:75:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Dec 22 17:12:48 2025 GMT Not After : Dec 21 17:17:48 2026 GMT Subject: CN=8F67DCFBFCF2C7901370EBD75BA3C7CCD24D0100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:24:8b:d6:f3:b1:d7:2d:98:04:50:2c:7e: 3f:97:93:44:2e:23:88:13:5e:36:55:27:68:4a:bb: 7e:df:51:34:e3:e0:66:de:b0:dc:e5:96:1a:96:98: 13:1d:ab:c7:bf:b3:11:0e:99:a1:7b:2b:18:71:66: a3:1d:cf:40:fd:c3:28:39:23:b0:03:20:8d:f2:17: 62:a8:ea:97:fe:6c:51:db:7d:d7:a4:d6:5d:7d:8b: e7:25:43:d9:72:74:2d:c8:86:8d:2d:51:5d:ae:bf: cf:9c:2b:9d:4c:22:4d:44:88:24:7c:58:3b:35:d8: fe:00:1e:20:4d:a5:31:a4:b4:1c:9d:a3:63:cb:57: 6b:9d:f3:bb:48:e9:4b:54:0a:65:f7:0b:fd:65:d7: f5:05:87:66:1e:b7:4d:20:e1:90:e9:3f:a5:2f:a8: 88:32:48:15:8e:0b:a2:42:ee:23:62:21:b7:d0:9c: 50:78:86:d3:35:06:c4:ef:ed:21:2d:23:69:30:98: 28:56:85:3b:2c:dc:7b:6f:c1:ba:50:d1:65:fa:10: 07:29:bc:3a:29:9d:27:0f:fd:eb:32:c7:54:5a:53: c8:53:ee:4a:e6:ac:49:69:b4:1d:ed:9d:f0:4e:2f: af:12:7f:ad:fb:5f:af:84:72:9a:ce:e1:84:f0:52: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:67:DC:FB:FC:F2:C7:90:13:70:EB:D7:5B:A3:C7:CC:D2:4D:01:00 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9644:3000::/40 Signature Algorithm: sha256WithRSAEncryption 10:8f:5e:cc:4c:8b:ac:25:95:eb:10:b8:4f:e9:78:dd:57:0f: 9f:07:50:77:19:f6:82:7d:11:6b:95:70:ca:06:84:14:ce:2e: c6:51:03:90:7b:cd:6e:a6:61:3d:3f:fb:80:f7:92:1f:50:24: 2e:66:ce:94:84:c8:8a:d6:d6:42:5b:d0:c7:42:9e:4e:9e:aa: 73:00:6f:03:66:5f:73:b7:c6:3b:29:d1:66:f6:0d:ce:96:e1: 0d:c8:dd:f3:a1:30:89:38:a2:cc:3b:87:18:dd:bd:ad:f5:d2: 35:2b:ac:89:d5:0b:f7:72:b7:6a:d3:e7:0b:95:14:90:d2:28: 5f:fe:4c:e0:79:ac:5a:90:88:23:6c:6a:1e:aa:f1:c3:66:e5: b4:27:ac:4d:33:c1:76:3e:8c:d4:06:ea:59:74:1c:7c:f2:57: cf:b6:38:6f:c3:19:f6:b9:4b:0c:f5:a9:51:d9:fa:60:46:6c: 31:59:5e:41:a8:e5:24:4c:66:d2:b0:74:9d:15:bd:7f:3a:67: 2e:b6:27:82:1d:fe:3b:c1:29:4a:f5:3f:f2:1f:a6:23:72:7b: b4:ca:c0:2c:68:47:af:dc:f3:59:fc:f1:9d:ed:66:ff:6e:c5: 79:7f:1a:05:2a:01:59:2f:6b:9a:07:39:0e:40:36:fa:0a:02: e6:58:47:66 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUYCc+TrEadTM7tdeZqiMk6qNRddQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNTEyMjIxNzEyNDhaFw0yNjEyMjExNzE3NDhaMDMxMTAvBgNV BAMTKDhGNjdEQ0ZCRkNGMkM3OTAxMzcwRUJENzVCQTNDN0NDRDI0RDAxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uSSL1vOx1y2YBFAsfj+Xk0Qu I4gTXjZVJ2hKu37fUTTj4GbesNzllhqWmBMdq8e/sxEOmaF7KxhxZqMdz0D9wyg5 I7ADII3yF2Ko6pf+bFHbfdek1l19i+clQ9lydC3Iho0tUV2uv8+cK51MIk1EiCR8 WDs12P4AHiBNpTGktBydo2PLV2ud87tI6UtUCmX3C/1l1/UFh2Yet00g4ZDpP6Uv qIgySBWOC6JC7iNiIbfQnFB4htM1BsTv7SEtI2kwmChWhTss3HtvwbpQ0WX6EAcp vDopnScP/esyx1RaU8hT7krmrElptB3tnfBOL68Sf637X6+EcprO4YTwUtgnAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUj2fc+/zyx5ATcOvXW6PHzNJNAQAwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jOTkyNjVlZi0yMmE5LTQxMDAtYTIzZC01MWE5ZDlmZWViN2QvNC8zMjYxMzEz MzNhMzkzNjM0MzQzYTMzMzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTMxMzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOWRDAwDQYJKoZIhvcNAQELBQADggEBABCP XsxMi6wllesQuE/peN1XD58HUHcZ9oJ9EWuVcMoGhBTOLsZRA5B7zW6mYT0/+4D3 kh9QJC5mzpSEyIrW1kJb0MdCnk6eqnMAbwNmX3O3xjsp0Wb2Dc6W4Q3I3fOhMIk4 osw7hxjdva310jUrrInVC/dyt2rT5wuVFJDSKF/+TOB5rFqQiCNsah6q8cNm5bQn rE0zwXY+jNQG6ll0HHzyV8+2OG/DGfa5Swz1qVHZ+mBGbDFZXkGo5SRMZtKwdJ0V vX86Zy62J4Id/jvBKUr1P/IfpiNye7TKwCxoR6/c81n88Z3tZv9uxXl/GgUqAVkv a5oHOQ5ANvoKAuZYR2Y= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:31 2026 by rpki-client