$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa File: 326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa (raw, json) Hash identifier: dcoRck7LWZ+s3AnLux3w6i69H91cy2y1ItvIJro8d4c= Subject key identifier: 54:22:9C:23:C9:0E:9A:CF:E8:94:A9:54:3F:95:A9:36:24:52:A6:B3 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 60EEA0CD2EB5BA6EDEAB2BBA1D85BC7DCA58D471 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa Signing time: Thu 17 Sep 2026 18:52:36 +0000 ROA not before: Thu 17 Sep 2026 18:47:36 +0000 ROA not after: Thu 16 Sep 2027 18:52:36 +0000 asID: 40419 IP address blocks: 2a13:c8c4:4000::/36 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 04:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ee:a0:cd:2e:b5:ba:6e:de:ab:2b:ba:1d:85:bc:7d:ca:58:d4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Sep 17 18:47:36 2026 GMT Not After : Sep 16 18:52:36 2027 GMT Subject: CN=54229C23C90E9ACFE894A9543F95A9362452A6B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:51:5f:27:ad:f4:41:fc:34:4e:c5:89:6a: 92:ea:f9:d4:3a:86:7a:3c:89:a7:aa:0c:32:aa:9d: a0:7a:88:8b:7d:34:97:18:8b:10:31:58:fc:ec:1f: 9b:b9:52:df:51:b9:2a:3b:7d:39:78:6e:24:c0:0e: 9d:53:75:da:6f:5d:9b:4e:b2:56:ec:29:0e:28:2b: b9:8f:3d:77:f3:af:ac:5d:ba:89:04:ae:b3:42:5c: fe:d5:09:fb:21:93:20:cb:d7:59:ba:29:4a:4c:bd: 13:52:d8:3d:b9:c5:8e:0a:c5:b6:3a:fa:91:42:b9: c2:a5:32:18:70:b1:5b:4f:0d:e0:23:74:f7:01:8c: af:11:dd:cf:2d:30:ee:97:42:d4:6c:bd:81:a9:aa: 3a:4c:cc:86:48:32:8c:02:28:b2:2f:54:1e:42:6b: f7:c9:ad:9b:46:aa:61:2a:f8:4e:28:0a:2d:d1:01: 6e:b5:26:f9:9a:fd:22:4d:7d:82:c2:39:5c:98:f0: 57:2e:01:9c:69:80:d4:d9:4b:2c:c9:e5:c6:68:f6: 79:da:35:b3:ef:10:a7:80:ca:4c:c4:15:6b:56:21: 18:d0:ac:5e:9a:39:b4:03:12:1c:a2:c9:d8:e2:cf: 4b:a3:9f:58:e7:18:f7:8e:c1:aa:3d:80:1d:f2:92: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:22:9C:23:C9:0E:9A:CF:E8:94:A9:54:3F:95:A9:36:24:52:A6:B3 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:4000::/36 Signature Algorithm: sha256WithRSAEncryption da:0a:eb:82:bb:47:1f:7f:45:a0:71:5e:a1:4e:6f:30:a7:ff: 67:41:9e:76:13:e5:21:06:0b:d9:80:40:54:60:c6:22:30:81: b9:47:73:47:65:91:74:fc:e6:a1:b6:3b:9c:62:b3:95:bb:3d: 87:d4:6e:e9:04:be:b6:53:3c:42:2a:24:f0:cd:b8:50:20:ef: 56:c2:93:cc:7e:ba:c4:99:5c:c9:b8:0a:35:58:2d:9a:94:1a: ef:91:8e:36:16:e4:17:d8:f5:78:8c:18:d0:49:f0:7b:d2:32: 5c:d7:5b:04:90:70:93:6e:ec:dc:93:97:9c:46:aa:74:8b:3f: 88:8e:89:66:e2:a9:c8:cc:18:9e:eb:aa:74:36:59:4d:7f:36: ce:4a:bb:1d:28:54:65:ae:7f:83:ac:f7:de:8b:18:bd:1b:31: 40:6f:15:c5:25:8b:04:fd:2c:57:69:db:49:4a:ac:02:01:cd: 80:1d:1e:9a:3f:af:44:a9:e3:ea:39:05:35:f6:51:eb:85:e3: 57:de:95:9b:d1:a3:4c:bc:f8:65:bb:78:1d:3d:db:4b:e4:31: 4b:03:ee:6e:77:83:60:3c:49:6b:57:12:37:f9:65:1f:99:8f: 23:3f:53:e5:21:50:32:36:72:01:a1:6f:63:a6:a7:57:d4:4b: bd:e2:25:46 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUYO6gzS61um7eqyu6HYW8fcpY1HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA5MTcxODQ3MzZaFw0yNzA5MTYxODUyMzZaMDMxMTAvBgNV BAMTKDU0MjI5QzIzQzkwRTlBQ0ZFODk0QTk1NDNGOTVBOTM2MjQ1MkE2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rVFfJ630Qfw0TsWJapLq+dQ6 hno8iaeqDDKqnaB6iIt9NJcYixAxWPzsH5u5Ut9RuSo7fTl4biTADp1TddpvXZtO slbsKQ4oK7mPPXfzr6xduokErrNCXP7VCfshkyDL11m6KUpMvRNS2D25xY4KxbY6 +pFCucKlMhhwsVtPDeAjdPcBjK8R3c8tMO6XQtRsvYGpqjpMzIZIMowCKLIvVB5C a/fJrZtGqmEq+E4oCi3RAW61Jvma/SJNfYLCOVyY8FcuAZxpgNTZSyzJ5cZo9nna NbPvEKeAykzEFWtWIRjQrF6aObQDEhyiydjiz0ujn1jnGPeOwao9gB3yktoPAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUVCKcI8kOms/olKlUP5WpNiRSprMwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTM0MzAzMDMwM2EzYTJmMzMzNjJkMzEzMjM4MjAzZDNlMjAz NDMwMzQzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhPIxEAwDQYJKoZIhvcNAQELBQADggEBANoK 64K7Rx9/RaBxXqFObzCn/2dBnnYT5SEGC9mAQFRgxiIwgblHc0dlkXT85qG2O5xi s5W7PYfUbukEvrZTPEIqJPDNuFAg71bCk8x+usSZXMm4CjVYLZqUGu+RjjYW5BfY 9XiMGNBJ8HvSMlzXWwSQcJNu7NyTl5xGqnSLP4iOiWbiqcjMGJ7rqnQ2WU1/Ns5K ux0oVGWuf4Os996LGL0bMUBvFcUliwT9LFdp20lKrAIBzYAdHpo/r0Sp4+o5BTX2 UeuF41felZvRo0y8+GW7eB0920vkMUsD7m53g2A8SWtXEjf5ZR+ZjyM/U+UhUDI2 cgGhb2Omp1fUS73iJUY= -----END CERTIFICATE-----Generated at Mon Sep 28 13:13:23 2026 by rpki-client