$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a3a2f33322d3332203d3e2030.roa File: 326131333a633863343a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y= Subject key identifier: 8C:0D:C1:D9:C0:02:DC:A5:D4:7F:CB:12:13:81:99:D4:E3:AE:A7:5F Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 3BA5AC828A072A0F048C597950B2B6641958EA0A Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a3a2f33322d3332203d3e2030.roa Signing time: Sun 26 Apr 2026 14:55:16 +0000 ROA not before: Sun 26 Apr 2026 14:50:16 +0000 ROA not after: Sun 25 Apr 2027 14:55:16 +0000 asID: 0 IP address blocks: 2a13:c8c4::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 07:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a5:ac:82:8a:07:2a:0f:04:8c:59:79:50:b2:b6:64:19:58:ea:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Apr 26 14:50:16 2026 GMT Not After : Apr 25 14:55:16 2027 GMT Subject: CN=8C0DC1D9C002DCA5D47FCB12138199D4E3AEA75F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:24:02:9f:74:8d:99:4c:6e:51:c5:0b:8f: c1:48:9c:d2:2b:47:c2:a3:04:34:b8:92:f2:10:38: c0:95:95:12:e0:17:66:64:4c:99:07:08:59:78:e9: ea:e2:5b:87:31:84:15:39:e1:15:d2:85:ae:6f:4d: 32:fe:f9:97:7c:1e:02:2b:74:b9:6a:6d:b7:5e:b3: 74:1e:1f:c7:83:5a:4b:92:6e:f2:f6:08:8d:6b:f6: b3:b3:df:28:ea:bc:65:bd:e4:35:4d:e9:07:de:e1: 01:f4:23:43:25:ad:6a:2a:c2:68:08:15:58:d8:21: de:76:ba:b8:55:58:1f:9c:d5:e7:32:ea:45:0b:85: 71:ac:16:fc:24:56:c5:d0:00:c5:81:e5:9e:26:0e: b4:8b:30:c4:7a:b0:21:d4:26:9b:78:00:bc:85:da: c0:6d:1a:45:de:a6:3e:5c:bd:67:b8:de:b8:e0:f9: 97:02:eb:30:5c:3f:de:b7:6a:6f:ae:d9:ea:bf:54: 88:b0:b9:c0:bf:0e:2e:64:92:7c:99:58:87:75:a4: 86:01:f0:df:42:b9:38:a9:7f:28:71:6e:dd:ef:c2: 11:7f:bc:a1:cd:7a:bd:fa:83:8a:44:77:9f:e5:10: 86:89:68:d3:3f:72:82:8b:4b:af:6d:0a:89:0b:b0: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0D:C1:D9:C0:02:DC:A5:D4:7F:CB:12:13:81:99:D4:E3:AE:A7:5F X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4::/32 Signature Algorithm: sha256WithRSAEncryption d4:02:fd:19:4c:93:2b:c1:69:f5:e1:ee:4a:c9:67:a4:8a:fc: da:bd:81:4b:89:fc:c4:2f:cd:e2:32:c2:ef:7b:05:0b:ac:ac: ed:1f:7a:2f:13:c7:b8:15:74:2b:ea:e8:16:fb:8b:f0:b2:18: d9:a8:56:11:56:e5:46:83:42:fa:58:cb:7d:ad:80:87:7b:87: 89:48:60:e9:47:af:ab:f4:c4:8d:c0:74:a7:c1:4f:a9:9c:65: 0f:20:57:ea:fb:e0:e1:a4:d6:1d:34:f7:b9:56:e1:98:97:ed: 31:0a:0e:fa:45:6d:46:c4:a1:47:9d:e4:57:87:9f:af:d1:6e: 52:8c:c7:f1:77:4f:8c:31:dd:06:4e:2b:5a:bc:8c:30:9e:db: dd:f6:47:77:ce:28:ec:8c:ec:8c:d4:c8:b2:31:81:2f:73:64: 8e:16:3c:30:2d:2a:6b:fe:ef:21:c6:b2:45:5d:d3:0d:cf:10: fd:f7:6e:58:f3:68:45:22:30:4b:ff:b9:12:f1:56:11:1f:86: 65:e7:bb:c2:3b:5a:02:a1:32:38:7b:5d:57:2a:92:a3:c4:4f: 65:b2:8f:2a:a0:ba:28:a1:ba:a6:88:d8:e9:03:dd:52:89:0e: 1e:8f:50:fa:44:67:0f:4f:bd:95:8b:80:f3:dc:4a:c7:73:77: 9d:b7:7e:ca -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUO6WsgooHKg8EjFl5ULK2ZBlY6gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA0MjYxNDUwMTZaFw0yNzA0MjUxNDU1MTZaMDMxMTAvBgNV BAMTKDhDMERDMUQ5QzAwMkRDQTVENDdGQ0IxMjEzODE5OUQ0RTNBRUE3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4CQCn3SNmUxuUcULj8FInNIr R8KjBDS4kvIQOMCVlRLgF2ZkTJkHCFl46eriW4cxhBU54RXSha5vTTL++Zd8HgIr dLlqbbdes3QeH8eDWkuSbvL2CI1r9rOz3yjqvGW95DVN6Qfe4QH0I0MlrWoqwmgI FVjYId52urhVWB+c1ecy6kULhXGsFvwkVsXQAMWB5Z4mDrSLMMR6sCHUJpt4ALyF 2sBtGkXepj5cvWe43rjg+ZcC6zBcP963am+u2eq/VIiwucC/Di5kknyZWId1pIYB 8N9CuTipfyhxbt3vwhF/vKHNer36g4pEd5/lEIaJaNM/coKLS69tCokLsOiPAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUjA3B2cAC3KXUf8sSE4GZ1OOup18wHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUF BzALhoGDcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACoTyMQwDQYJKoZIhvcNAQELBQADggEBANQC/RlMkyvBafXh7krJZ6SK/Nq9gUuJ /MQvzeIywu97BQusrO0fei8Tx7gVdCvq6Bb7i/CyGNmoVhFW5UaDQvpYy32tgId7 h4lIYOlHr6v0xI3AdKfBT6mcZQ8gV+r74OGk1h0097lW4ZiX7TEKDvpFbUbEoUed 5FeHn6/RblKMx/F3T4wx3QZOK1q8jDCe2932R3fOKOyM7IzUyLIxgS9zZI4WPDAt Kmv+7yHGskVd0w3PEP33bljzaEUiMEv/uRLxVhEfhmXnu8I7WgKhMjh7XVcqkqPE T2WyjyqguiihuqaI2OkD3VKJDh6PUPpEZw9PvZWLgPPcSsdzd523fso= -----END CERTIFICATE-----Generated at Tue May 12 21:52:52 2026 by rpki-client