$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131363a3a2f34382d3438203d3e203131343231.roa File: 326131343a373538363a363131363a3a2f34382d3438203d3e203131343231.roa (raw, json) Hash identifier: MrwHj6gR6bkUOd/04peI6c/Ue0oDIdpPIQRV4p5/RNQ= Subject key identifier: 74:C4:58:8B:DF:D2:2A:9F:2E:DE:E0:C8:21:2F:EC:4D:6F:AA:3F:F9 Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 1C9D4620634F6C5E722D99E3E1B8ED2DF9EA4BE2 Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131363a3a2f34382d3438203d3e203131343231.roa Signing time: Thu 17 Sep 2026 04:57:40 +0000 ROA not before: Thu 17 Sep 2026 04:52:40 +0000 ROA not after: Thu 16 Sep 2027 04:57:40 +0000 asID: 11421 IP address blocks: 2a14:7586:6116::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 04:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9d:46:20:63:4f:6c:5e:72:2d:99:e3:e1:b8:ed:2d:f9:ea:4b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 17 04:52:40 2026 GMT Not After : Sep 16 04:57:40 2027 GMT Subject: CN=74C4588BDFD22A9F2EDEE0C8212FEC4D6FAA3FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:7c:43:ba:1d:ef:58:6d:ca:4d:4f:d6:5f: c7:fa:08:c9:38:95:cf:a3:d9:36:d2:c6:76:dd:fe: 41:29:40:a5:2c:25:ad:d6:f8:2b:91:7d:6c:38:8c: 30:28:39:1e:fa:17:d8:f3:bb:32:2e:1a:58:86:3c: 84:c1:e4:19:e9:d1:f9:a0:e7:7a:5f:e7:e4:3b:50: 3f:8f:b0:33:a3:dd:97:ef:c8:e4:7c:eb:9b:e6:e9: 76:0a:0b:a4:4d:70:6c:15:27:f8:0c:48:50:f5:2f: 29:01:5f:f4:e6:ef:5f:f2:1e:a8:17:b7:90:5d:a6: cf:17:c6:66:e8:e5:b6:d7:bc:0f:81:4b:b1:29:d1: 0d:a5:28:dd:2b:4e:5d:b1:1c:3c:4a:2a:0b:66:77: a0:1e:3c:76:32:75:92:20:dd:89:74:cb:f1:0e:34: fb:f9:b3:c7:7c:cb:05:d9:d9:ef:bf:bc:b3:f0:cc: e7:28:dc:40:56:5c:a0:c2:19:9f:2d:6d:6f:08:df: 35:33:4c:b5:a0:ab:64:c8:07:20:b7:34:66:66:63: b8:04:c9:8c:5e:5b:e3:b5:e1:f9:b9:00:ee:e8:30: 76:87:50:a3:98:12:21:3b:f0:7f:ab:d7:ea:0d:83: 76:f6:5f:0b:97:76:80:d0:74:55:73:f6:34:02:13: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:58:8B:DF:D2:2A:9F:2E:DE:E0:C8:21:2F:EC:4D:6F:AA:3F:F9 X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/326131343a373538363a363131363a3a2f34382d3438203d3e203131343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6116::/48 Signature Algorithm: sha256WithRSAEncryption d0:80:24:d9:2f:51:ba:67:fa:a8:17:13:2a:16:b5:b5:ed:42: a4:77:e3:d2:13:dc:43:3c:d6:22:4f:eb:c9:7f:41:48:e2:0e: 04:2e:7c:56:56:8b:35:22:ea:f0:21:e2:e2:31:01:4c:8d:bd: 6f:01:a6:d7:22:6c:16:d2:82:84:69:60:b9:09:de:96:bd:67: 58:9c:37:63:2a:65:c7:51:e2:42:3f:63:f1:93:b3:15:46:b8: 82:6c:d7:bf:9c:da:84:c4:c5:7c:3b:eb:ee:24:00:dd:e1:27: 32:4b:14:41:ec:3a:76:d5:24:64:62:60:4e:25:f6:ab:ad:0f: 3b:3e:6e:ad:ea:f8:42:e6:ff:d6:3b:7d:a1:20:c0:d0:41:ba: f4:8d:ab:42:e4:0a:c5:4d:cc:ea:86:4c:f0:81:2b:04:bd:5e: 98:79:85:f9:7c:b7:4a:b8:2e:52:a9:3c:3b:18:24:35:20:c5: f7:27:31:3c:f0:00:9d:98:f0:48:ba:ba:e2:9b:d1:91:c1:88: f8:26:72:d0:26:4b:5b:d1:bc:17:6a:d0:28:8e:b6:4a:3f:63: 80:60:bf:b7:9d:4a:7c:5c:fe:d0:85:5a:5c:93:be:f9:da:1e: b1:40:69:6e:98:c6:da:00:d4:79:e8:a4:ae:0f:ed:1a:74:4b: 63:2f:a9:12 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUHJ1GIGNPbF5yLZnj4bjtLfnqS+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MTcwNDUyNDBaFw0yNzA5MTYwNDU3NDBaMDMxMTAvBgNV BAMTKDc0QzQ1ODhCREZEMjJBOUYyRURFRTBDODIxMkZFQzRENkZBQTNGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSXxDuh3vWG3KTU/WX8f6CMk4 lc+j2TbSxnbd/kEpQKUsJa3W+CuRfWw4jDAoOR76F9jzuzIuGliGPITB5Bnp0fmg 53pf5+Q7UD+PsDOj3ZfvyOR865vm6XYKC6RNcGwVJ/gMSFD1LykBX/Tm71/yHqgX t5Bdps8Xxmbo5bbXvA+BS7Ep0Q2lKN0rTl2xHDxKKgtmd6AePHYydZIg3Yl0y/EO NPv5s8d8ywXZ2e+/vLPwzOco3EBWXKDCGZ8tbW8I3zUzTLWgq2TIByC3NGZmY7gE yYxeW+O14fm5AO7oMHaHUKOYEiE78H+r1+oNg3b2XwuXdoDQdFVz9jQCE2iVAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUdMRYi9/SKp8u3uDIIS/sTW+qP/kwHwYDVR0j BBgwFoAUg95wN7jiBWbS/om6iReIO2uWTj4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzMvODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2Qjk2NEUzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz MTM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYZhFjANBgkqhkiG9w0BAQsFAAOCAQEA0IAk 2S9Rumf6qBcTKha1te1CpHfj0hPcQzzWIk/ryX9BSOIOBC58VlaLNSLq8CHi4jEB TI29bwGm1yJsFtKChGlguQnelr1nWJw3Yyplx1HiQj9j8ZOzFUa4gmzXv5zahMTF fDvr7iQA3eEnMksUQew6dtUkZGJgTiX2q60POz5urer4Qub/1jt9oSDA0EG69I2r QuQKxU3M6oZM8IErBL1emHmF+Xy3SrguUqk8OxgkNSDF9ycxPPAAnZjwSLq64pvR kcGI+CZy0CZLW9G8F2rQKI62Sj9jgGC/t51KfFz+0IVaXJO++doesUBpbpjG2gDU eeikrg/tGnRLYy+pEg== -----END CERTIFICATE-----Generated at Sun Sep 20 14:10:04 2026 by rpki-client