$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa File: 326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa (raw, json) Hash identifier: DCRzh/+o5rf4TeU7EAqLSelJkyKiofWcnaurItVLmfU= Subject key identifier: 03:21:39:1C:25:D9:A6:85:78:33:F0:EA:D7:68:24:2C:7C:1E:C9:F2 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 249775DD7D704ECA785CF68F2A70211B006A780F Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa Signing time: Sat 18 Jul 2026 08:06:05 +0000 ROA not before: Sat 18 Jul 2026 08:01:05 +0000 ROA not after: Sat 17 Jul 2027 08:06:05 +0000 asID: 215925 IP address blocks: 2a13:c8c4:ff00::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:97:75:dd:7d:70:4e:ca:78:5c:f6:8f:2a:70:21:1b:00:6a:78:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Jul 18 08:01:05 2026 GMT Not After : Jul 17 08:06:05 2027 GMT Subject: CN=0321391C25D9A6857833F0EAD768242C7C1EC9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:47:90:33:89:74:0c:c0:95:52:9f:67:cb: 46:12:66:05:bd:8a:a6:72:11:e2:d0:bc:d0:31:91: ee:f6:bc:06:c7:cc:47:8f:6b:54:57:62:04:2e:be: a1:dc:9b:d0:4f:ec:80:8d:23:39:f5:d7:8a:6d:d1: 2c:20:4c:b9:a8:38:0d:7e:8e:40:18:42:e1:08:1b: c6:72:f3:fc:95:03:ed:ed:b5:db:7c:e2:40:05:aa: 24:9e:97:9a:3b:b8:52:3a:9a:5e:53:f1:b7:5c:e9: b2:7d:53:8e:b7:f8:78:11:ba:3a:ed:e0:26:6c:fa: 6e:34:26:c2:f7:f1:c9:76:76:f9:e9:79:71:96:e4: c5:58:e5:3a:97:31:01:93:79:db:77:d6:89:83:39: 1a:d6:8d:04:bd:73:83:91:2f:4e:9f:f0:7c:b2:3c: fe:1f:f3:c0:5e:f1:a1:01:cc:23:51:24:1d:67:13: 71:93:a4:1a:42:0e:c1:e7:6b:63:6f:05:65:9c:14: 5b:63:f9:d2:b4:b8:da:12:1b:79:b4:6f:e5:78:06: 4c:06:0a:fa:fb:8e:9f:82:98:a8:23:6b:bd:a2:61: 59:76:2c:e8:04:2c:9b:d3:69:f3:61:84:2c:8b:64: 2d:6a:48:dd:47:91:92:7b:d1:14:a9:28:14:85:7a: bf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:21:39:1C:25:D9:A6:85:78:33:F0:EA:D7:68:24:2C:7C:1E:C9:F2 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666630303a3a2f34302d313238203d3e20323135393235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 3e:c5:bc:5e:82:5f:ed:21:47:dd:82:aa:3c:37:72:18:7a:bf: a8:35:12:a7:0b:fd:30:f7:bd:16:d3:16:41:0c:85:1c:5a:7d: d7:f5:c9:c5:c3:c3:e7:68:6f:a4:cc:a0:20:c5:1d:b5:2d:9a: 53:d2:d2:fa:f6:0a:57:7b:90:f2:be:40:08:94:be:f7:c3:87: 81:75:44:e6:31:04:5b:72:92:a6:78:89:cd:4a:49:66:9d:bf: f9:f2:d1:91:cf:37:f2:32:07:5e:af:d7:13:df:49:95:b9:87: fd:db:fc:1b:86:82:61:99:d7:ed:39:c7:db:8e:80:41:cb:35: a5:c6:23:c8:18:bb:2e:1e:70:01:85:51:1c:d2:aa:bc:a7:90: 17:1b:16:42:b5:89:f9:90:12:bb:9e:6e:81:c2:50:3c:c1:9a: 2a:7f:c4:8b:ae:ca:77:71:02:7e:79:64:1a:a8:8c:c0:c3:0a: dc:05:36:9c:a2:df:29:91:bb:0c:0b:97:01:45:a9:f9:92:33: 77:57:fc:e0:31:d6:cb:cf:b2:8f:4d:66:32:33:a9:08:71:b6: 7f:4c:6a:68:03:be:18:eb:24:c6:6d:6e:f7:74:04:90:a3:d2: ef:18:51:71:03:72:da:06:c6:a7:8c:a9:c6:9b:6a:cc:f9:ec: bf:a5:61:32 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUJJd13X1wTsp4XPaPKnAhGwBqeA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA3MTgwODAxMDVaFw0yNzA3MTcwODA2MDVaMDMxMTAvBgNV BAMTKDAzMjEzOTFDMjVEOUE2ODU3ODMzRjBFQUQ3NjgyNDJDN0MxRUM5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjkeQM4l0DMCVUp9ny0YSZgW9 iqZyEeLQvNAxke72vAbHzEePa1RXYgQuvqHcm9BP7ICNIzn114pt0SwgTLmoOA1+ jkAYQuEIG8Zy8/yVA+3ttdt84kAFqiSel5o7uFI6ml5T8bdc6bJ9U463+HgRujrt 4CZs+m40JsL38cl2dvnpeXGW5MVY5TqXMQGTedt31omDORrWjQS9c4ORL06f8Hyy PP4f88Be8aEBzCNRJB1nE3GTpBpCDsHna2NvBWWcFFtj+dK0uNoSG3m0b+V4BkwG Cvr7jp+CmKgja72iYVl2LOgELJvTafNhhCyLZC1qSN1HkZJ70RSpKBSFer85AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUAyE5HCXZpoV4M/Dq12gkLHweyfIwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2NjYzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNlMjAz MjMxMzUzOTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8jE/zANBgkqhkiG9w0BAQsFAAOCAQEA PsW8XoJf7SFH3YKqPDdyGHq/qDUSpwv9MPe9FtMWQQyFHFp91/XJxcPD52hvpMyg IMUdtS2aU9LS+vYKV3uQ8r5ACJS+98OHgXVE5jEEW3KSpniJzUpJZp2/+fLRkc83 8jIHXq/XE99JlbmH/dv8G4aCYZnX7TnH246AQcs1pcYjyBi7Lh5wAYVRHNKqvKeQ FxsWQrWJ+ZASu55ugcJQPMGaKn/Ei67Kd3ECfnlkGqiMwMMK3AU2nKLfKZG7DAuX AUWp+ZIzd1f84DHWy8+yj01mMjOpCHG2f0xqaAO+GOskxm1u93QEkKPS7xhRcQNy 2gbGp4ypxptqzPnsv6VhMg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:15:41 2026 by rpki-client