$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: V2Vm92YYMyExADS3i94TFi72XsprSieZvIiYJxwsskY= Subject key identifier: E9:82:06:B3:51:46:0F:36:A1:0F:99:2F:FD:92:06:DE:2F:C8:4A:57 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 7173B7A4F643A543B8296F390C70275110BD5614 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa Signing time: Wed 04 Feb 2026 14:35:15 +0000 ROA not before: Wed 04 Feb 2026 14:30:15 +0000 ROA not after: Wed 03 Feb 2027 14:35:15 +0000 asID: 204211 IP address blocks: 2a14:7586:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 10:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:73:b7:a4:f6:43:a5:43:b8:29:6f:39:0c:70:27:51:10:bd:56:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Feb 4 14:30:15 2026 GMT Not After : Feb 3 14:35:15 2027 GMT Subject: CN=E98206B351460F36A10F992FFD9206DE2FC84A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:79:ce:48:6a:76:3c:33:1d:ca:ff:a3:3b: 8c:71:19:cf:ea:05:06:26:08:11:a8:41:d4:15:b4: b8:2c:4c:5d:d2:c7:b8:17:e0:51:48:d2:02:c0:05: 3d:36:eb:f6:59:fe:b8:77:7c:3e:55:fd:c1:65:cc: f1:ea:6c:aa:a8:af:8f:d3:ba:b5:60:15:54:93:20: 99:d3:43:4e:2a:26:e2:15:e1:0f:57:18:77:36:7c: cd:3b:43:ff:af:27:0c:f2:07:e5:9d:ec:94:33:c6: 2b:fd:d1:a3:a3:ac:04:0a:15:7c:02:18:f2:2b:2e: 99:fb:2a:bb:c3:0a:73:c7:cf:86:7c:9e:a2:01:94: 28:f6:cb:a8:ea:b4:b5:f3:fd:ff:83:34:a6:b4:72: d6:34:2c:ec:44:aa:db:b2:94:1a:d4:23:82:3c:e6: 54:6f:65:4d:9f:74:23:2d:00:03:d8:3d:7b:1b:0c: c6:55:47:e0:8f:44:23:7c:a2:09:fd:66:2a:fb:0a: d6:2a:73:4e:3b:d4:5a:ad:d2:b7:d4:d2:77:71:81: de:5a:ea:56:17:e8:0c:ad:d4:c9:d3:af:f2:16:71: de:68:ec:bd:0d:cd:c9:25:32:c2:11:4f:06:3a:83: 54:4e:86:e4:f0:a1:90:03:80:50:6a:6e:bb:39:0a: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:82:06:B3:51:46:0F:36:A1:0F:99:2F:FD:92:06:DE:2F:C8:4A:57 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6107::/48 Signature Algorithm: sha256WithRSAEncryption 64:6e:14:e5:29:24:e9:42:b6:2e:85:e0:29:b0:84:9b:01:e3: a2:73:c8:83:55:f1:53:6e:96:1e:6b:81:be:1d:05:a5:b6:1e: f8:85:34:ec:73:9c:34:50:fa:4b:1e:a1:29:7a:e9:c8:cc:ed: 9e:ac:3a:30:ab:b4:6c:a5:ef:d1:21:82:05:0d:46:c5:7b:e6: 50:f1:f0:1d:4b:e5:29:10:3a:82:4b:32:4d:00:1f:d7:c5:9d: 37:d2:d9:d0:41:8e:e4:5a:d6:7b:e5:3f:53:92:4d:72:a4:98: 1d:e9:61:35:74:c3:5d:e5:a9:ac:75:c2:52:8a:2b:68:d3:82: e1:6c:c5:72:89:40:db:1c:9d:44:db:5c:c1:97:a8:be:e0:7c: ce:f1:ed:74:b9:55:e0:72:5b:85:8f:8c:eb:24:c1:b7:7f:1d: 76:83:bb:55:fe:2a:6e:3c:21:80:23:14:a0:f2:a3:01:13:55: cd:30:de:78:9c:6b:c7:b0:70:c3:40:a1:60:33:41:de:69:c2: dd:3f:2e:ae:b7:d7:3f:e0:7f:d3:22:a5:2f:57:2e:52:2a:c6: 87:d4:0b:d8:2f:e2:b9:d5:6e:3d:4f:6a:02:cb:8f:1b:d4:1d: b0:0b:59:53:3e:07:98:7a:e7:d2:14:c7:95:b6:15:95:76:8e: 5c:05:17:47 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcXO3pPZDpUO4KW85DHAnURC9VhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAyMDQxNDMwMTVaFw0yNzAyMDMxNDM1MTVaMDMxMTAvBgNV BAMTKEU5ODIwNkIzNTE0NjBGMzZBMTBGOTkyRkZEOTIwNkRFMkZDODRBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOUXnOSGp2PDMdyv+jO4xxGc/q BQYmCBGoQdQVtLgsTF3Sx7gX4FFI0gLABT026/ZZ/rh3fD5V/cFlzPHqbKqor4/T urVgFVSTIJnTQ04qJuIV4Q9XGHc2fM07Q/+vJwzyB+Wd7JQzxiv90aOjrAQKFXwC GPIrLpn7KrvDCnPHz4Z8nqIBlCj2y6jqtLXz/f+DNKa0ctY0LOxEqtuylBrUI4I8 5lRvZU2fdCMtAAPYPXsbDMZVR+CPRCN8ogn9Zir7CtYqc0471Fqt0rfU0ndxgd5a 6lYX6Ayt1MnTr/IWcd5o7L0NzcklMsIRTwY6g1ROhuTwoZADgFBqbrs5CiYNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6YIGs1FGDzahD5kv/ZIG3i/ISlcwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEHMA0GCSqGSIb3DQEBCwUAA4IBAQBk bhTlKSTpQrYuheApsISbAeOic8iDVfFTbpYea4G+HQWlth74hTTsc5w0UPpLHqEp eunIzO2erDowq7Rspe/RIYIFDUbFe+ZQ8fAdS+UpEDqCSzJNAB/XxZ030tnQQY7k WtZ75T9Tkk1ypJgd6WE1dMNd5amsdcJSiito04LhbMVyiUDbHJ1E21zBl6i+4HzO 8e10uVXgcluFj4zrJMG3fx12g7tV/ipuPCGAIxSg8qMBE1XNMN54nGvHsHDDQKFg M0HeacLdPy6ut9c/4H/TIqUvVy5SKsaH1AvYL+K51W49T2oCy48b1B2wC1lTPgeY eufSFMeVthWVdo5cBRdH -----END CERTIFICATE-----Generated at Sun Mar 1 22:53:28 2026 by rpki-client