$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa File: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (raw, json) Hash identifier: JXehGAGbOBOHwTU/V09hXrcXEdlOBAJOY83kYkmYZm8= Subject key identifier: D8:D7:4A:13:9C:E1:DD:DD:65:56:AA:37:BA:4F:AD:8C:F5:E2:17:2A Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 1511A212F6ECF3F6D9001C4BE6981EBA3AF72C38 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa Signing time: Mon 21 Sep 2026 20:10:47 +0000 ROA not before: Mon 21 Sep 2026 20:05:47 +0000 ROA not after: Mon 20 Sep 2027 20:10:47 +0000 asID: 204871 IP address blocks: 2a14:7581:700::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:11:a2:12:f6:ec:f3:f6:d9:00:1c:4b:e6:98:1e:ba:3a:f7:2c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Sep 21 20:05:47 2026 GMT Not After : Sep 20 20:10:47 2027 GMT Subject: CN=D8D74A139CE1DDDD6556AA37BA4FAD8CF5E2172A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:40:91:9e:8a:92:5d:95:68:48:e9:f8:48: aa:e5:11:5f:47:d3:fa:65:46:1c:83:e4:03:93:65: 3d:eb:aa:23:4d:41:2e:77:60:70:53:62:d6:80:8c: ee:78:b4:f4:8f:70:7e:6a:bc:e1:6b:cf:c2:e4:1e: f6:73:89:f3:b1:c4:72:5a:24:d9:b1:86:9f:4e:1e: e1:ea:4b:69:a3:fb:87:73:fb:a8:ea:a9:8f:f9:ea: 61:cd:4b:86:af:9e:34:84:80:e7:a7:ef:78:bd:b2: 99:8f:41:80:b7:34:3b:c9:f0:b8:95:12:2e:76:fd: 31:a0:32:f6:4b:86:ef:a1:c1:8f:d8:bd:07:50:ca: 55:f4:0c:5f:55:af:bd:20:84:56:ee:b8:bc:cd:db: 50:6d:ca:7d:91:82:df:20:90:99:05:f1:dc:9d:0a: cf:7c:8a:27:d2:95:e8:4c:33:35:e7:b8:c4:da:7d: b8:02:93:ce:98:62:fe:02:65:95:e9:7d:e6:52:95: e0:c1:e2:5b:f7:19:ec:9c:ea:be:0e:b8:85:82:28: aa:61:27:d2:df:4e:f5:53:3e:3d:22:e3:09:15:8b: 03:3d:64:6a:74:e8:5a:fe:9f:02:bb:e1:7a:83:c1: b7:0c:a9:a3:78:22:32:b7:8f:fc:63:eb:b6:aa:1d: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:4A:13:9C:E1:DD:DD:65:56:AA:37:BA:4F:AD:8C:F5:E2:17:2A X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:700::/48 Signature Algorithm: sha256WithRSAEncryption 17:15:ff:91:a3:10:69:f1:17:e4:55:9e:1d:b5:78:1a:20:01: 7d:87:2e:8e:93:ea:db:7e:9d:4a:1a:f2:70:39:4a:70:02:b4: c7:e0:04:7a:c2:80:13:a5:0a:56:c5:cd:7b:fb:21:58:b6:3a: 84:1b:a7:9a:ee:37:7f:3d:fa:ac:4b:4f:2e:6f:da:81:94:a2: a8:37:ea:22:0b:fd:58:9d:0a:33:76:6d:3a:28:d8:b6:1e:a5: 92:e5:ec:6b:ee:3c:5d:38:80:3b:4c:c6:cb:de:57:64:62:09: b9:3a:d9:11:e6:ee:43:9f:e6:d9:84:60:04:8d:c5:26:68:86: 95:b8:3b:7f:56:f3:dc:fe:b5:07:30:9b:47:f6:01:30:40:0e: 29:e6:54:4c:5f:a0:37:9d:76:fa:1c:1d:aa:25:44:b5:20:10: b9:0f:82:2a:73:99:63:be:98:f1:be:5c:54:44:ed:d3:43:c9: 9e:48:44:bb:c9:0a:3a:23:d0:52:94:42:00:35:90:7f:b4:56: af:10:c4:28:6c:7f:49:60:bd:c2:be:8d:42:29:30:f7:c0:e8: 07:c6:d1:29:ae:eb:f9:2c:9c:56:02:07:95:63:3c:d9:ea:63: 9c:ba:d1:d1:44:af:bb:20:98:bd:e8:86:9b:1c:ec:67:e6:f2: 6c:8c:42:e3 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUFRGiEvbs8/bZABxL5pgeujr3LDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA5MjEyMDA1NDdaFw0yNzA5MjAyMDEwNDdaMDMxMTAvBgNV BAMTKEQ4RDc0QTEzOUNFMUREREQ2NTU2QUEzN0JBNEZBRDhDRjVFMjE3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZUCRnoqSXZVoSOn4SKrlEV9H 0/plRhyD5AOTZT3rqiNNQS53YHBTYtaAjO54tPSPcH5qvOFrz8LkHvZzifOxxHJa JNmxhp9OHuHqS2mj+4dz+6jqqY/56mHNS4avnjSEgOen73i9spmPQYC3NDvJ8LiV Ei52/TGgMvZLhu+hwY/YvQdQylX0DF9Vr70ghFbuuLzN21Btyn2Rgt8gkJkF8dyd Cs98iifSlehMMzXnuMTafbgCk86YYv4CZZXpfeZSleDB4lv3Geyc6r4OuIWCKKph J9LfTvVTPj0i4wkViwM9ZGp06Fr+nwK74XqDwbcMqaN4IjK3j/xj67aqHe+LAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU2NdKE5zh3d1lVqo3uk+tjPXiFyowHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmI2ODkwZC0wZDZiLTRlYTktYTJlZi05MmQzNGEzYWU2NGQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDM4MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEHADANBgkqhkiG9w0BAQsFAAOCAQEAFxX/ kaMQafEX5FWeHbV4GiABfYcujpPq236dShrycDlKcAK0x+AEesKAE6UKVsXNe/sh WLY6hBunmu43fz36rEtPLm/agZSiqDfqIgv9WJ0KM3ZtOijYth6lkuXsa+48XTiA O0zGy95XZGIJuTrZEebuQ5/m2YRgBI3FJmiGlbg7f1bz3P61BzCbR/YBMEAOKeZU TF+gN512+hwdqiVEtSAQuQ+CKnOZY76Y8b5cVETt00PJnkhEu8kKOiPQUpRCADWQ f7RWrxDEKGx/SWC9wr6NQikw98DoB8bRKa7r+SycVgIHlWM82epjnLrR0USvuyCY veiGmxzsZ+bybIxC4w== -----END CERTIFICATE-----Generated at Tue Sep 22 21:09:12 2026 by rpki-client