$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a3a2f33362d3438203d3e20323035393431.roa File: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (raw, json) Hash identifier: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4= Subject key identifier: 59:AB:B3:E9:57:2A:E3:75:82:21:D8:7A:98:1E:72:8B:78:FF:B7:5F Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 22BB42F11C890E10D2264D7DA0D670C6571B67EC Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a3a2f33362d3438203d3e20323035393431.roa Signing time: Sun 26 Apr 2026 17:14:22 +0000 ROA not before: Sun 26 Apr 2026 17:09:22 +0000 ROA not after: Sun 25 Apr 2027 17:14:22 +0000 asID: 205941 IP address blocks: 2a13:c8c4::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 07:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bb:42:f1:1c:89:0e:10:d2:26:4d:7d:a0:d6:70:c6:57:1b:67:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Apr 26 17:09:22 2026 GMT Not After : Apr 25 17:14:22 2027 GMT Subject: CN=59ABB3E9572AE3758221D87A981E728B78FFB75F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:5c:d1:fd:81:dd:a1:74:af:ca:2e:76:68: 60:b4:bf:aa:f3:89:2f:78:35:1f:95:6d:dd:84:4b: 70:2b:dd:8d:f5:9e:bb:de:d6:37:68:bc:68:2d:70: 01:20:97:26:64:df:52:ed:6c:c8:d7:6c:b1:f7:b6: cb:bf:48:b7:42:07:62:a7:ff:27:33:ff:61:d1:d1: 19:6b:f1:bc:b4:2e:af:7e:72:43:6e:7e:10:26:5b: f0:21:c0:9f:32:10:d2:b2:6b:e6:1f:dd:9d:8d:f1: 6d:91:f4:d1:68:a8:86:73:f0:e3:43:e4:a1:6d:29: 96:93:95:59:cd:94:d5:2e:ab:13:cc:87:71:3a:91: a7:f7:6a:55:2b:42:d6:35:e2:82:ec:12:39:97:17: cf:aa:a7:c0:61:53:9e:18:32:9d:c9:1e:7e:36:af: c9:2e:84:31:ff:6f:e7:fa:59:e2:9f:0e:85:96:81: 6b:8c:05:e1:d1:0e:a7:12:95:71:96:93:bc:e3:9a: 5d:71:65:d1:fd:2b:4c:d4:b7:de:b1:fd:17:d8:98: ce:27:ee:3b:29:c7:ba:5a:a8:1b:c5:66:35:26:9e: 27:33:df:83:bd:4d:09:45:71:13:0d:9c:d2:f9:b3: fb:9d:50:34:25:8f:43:4d:0b:50:33:a9:6f:6f:c1: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AB:B3:E9:57:2A:E3:75:82:21:D8:7A:98:1E:72:8B:78:FF:B7:5F X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a3a2f33362d3438203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4::/36 Signature Algorithm: sha256WithRSAEncryption bf:6e:35:c7:c0:54:57:1c:28:21:91:07:ef:56:02:bd:72:3b: 02:4f:8c:91:40:ad:59:09:a5:c8:f3:24:41:b6:5e:c5:7a:6c: 1b:dd:6f:79:9e:01:96:bd:83:3c:a5:00:36:7d:ee:c6:78:6c: 75:46:00:ee:c2:91:80:ad:f4:e3:6e:f8:c5:73:de:55:53:94: a8:83:70:25:ef:a7:c3:fc:67:8e:05:60:1f:ae:cd:3c:7e:40: d0:32:83:80:74:ad:c7:36:3c:f9:3e:10:9b:70:5b:7c:a2:dc: 5f:b1:97:90:f0:d8:04:b4:82:a6:de:52:fc:27:25:66:be:2b: ba:d4:53:83:de:bf:a8:59:37:4a:75:5e:13:07:8c:0c:7d:3b: 06:26:0e:3d:3f:8c:47:dc:79:42:82:d6:34:75:f3:7d:f9:6e: 80:bb:d3:0c:c8:34:54:02:54:65:5b:cb:33:d7:2a:de:ac:a0: 33:62:e6:79:c7:c3:82:ae:74:7f:2f:12:a7:47:69:47:c5:d1: bd:59:12:6b:4f:ee:10:a3:a7:7d:1d:0c:10:98:46:1e:95:c1: c5:93:68:05:06:99:04:6f:b4:6c:0d:26:c7:95:33:75:d2:a3: 86:94:0d:2d:b2:1c:fd:62:e9:eb:4b:18:38:ce:02:d1:e3:14: 85:0b:b2:32 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUIrtC8RyJDhDSJk19oNZwxlcbZ+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA0MjYxNzA5MjJaFw0yNzA0MjUxNzE0MjJaMDMxMTAvBgNV BAMTKDU5QUJCM0U5NTcyQUUzNzU4MjIxRDg3QTk4MUU3MjhCNzhGRkI3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCx1zR/YHdoXSvyi52aGC0v6rz iS94NR+Vbd2ES3Ar3Y31nrve1jdovGgtcAEglyZk31LtbMjXbLH3tsu/SLdCB2Kn /ycz/2HR0Rlr8by0Lq9+ckNufhAmW/AhwJ8yENKya+Yf3Z2N8W2R9NFoqIZz8OND 5KFtKZaTlVnNlNUuqxPMh3E6kaf3alUrQtY14oLsEjmXF8+qp8BhU54YMp3JHn42 r8kuhDH/b+f6WeKfDoWWgWuMBeHRDqcSlXGWk7zjml1xZdH9K0zUt96x/RfYmM4n 7jspx7paqBvFZjUmnicz34O9TQlFcRMNnNL5s/udUDQlj0NNC1AzqW9vwQgRAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUWauz6Vcq43WCIdh6mB5yi3j/t18wHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjMwMzUzOTM0MzEu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgQqE8jEADANBgkqhkiG9w0BAQsFAAOCAQEAv241x8BUVxwoIZEH 71YCvXI7Ak+MkUCtWQmlyPMkQbZexXpsG91veZ4Blr2DPKUANn3uxnhsdUYA7sKR gK304274xXPeVVOUqINwJe+nw/xnjgVgH67NPH5A0DKDgHStxzY8+T4Qm3BbfKLc X7GXkPDYBLSCpt5S/CclZr4rutRTg96/qFk3SnVeEweMDH07BiYOPT+MR9x5QoLW NHXzfflugLvTDMg0VAJUZVvLM9cq3qygM2LmecfDgq50fy8Sp0dpR8XRvVkSa0/u EKOnfR0MEJhGHpXBxZNoBQaZBG+0bA0mx5UzddKjhpQNLbIc/WLp60sYOM4C0eMU hQuyMg== -----END CERTIFICATE-----Generated at Tue May 12 21:48:26 2026 by rpki-client