$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa File: 326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa (raw, json) Hash identifier: FrDNupKDARVlRRNCBCc/O4jmFlJqhvZjjWnPHeQbISc= Subject key identifier: BA:65:BF:02:79:0F:1E:C3:FD:61:63:B9:01:4E:00:15:07:35:4E:02 Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 1E7D07E10D155985574F631FA07135FCDAC79C90 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa Signing time: Fri 01 May 2026 17:20:31 +0000 ROA not before: Fri 01 May 2026 17:15:31 +0000 ROA not after: Fri 30 Apr 2027 17:20:31 +0000 asID: 203843 IP address blocks: 2a14:7580:900::/47 maxlen: 47 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7d:07:e1:0d:15:59:85:57:4f:63:1f:a0:71:35:fc:da:c7:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: May 1 17:15:31 2026 GMT Not After : Apr 30 17:20:31 2027 GMT Subject: CN=BA65BF02790F1EC3FD6163B9014E001507354E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:db:5b:04:81:59:50:c6:f7:32:de:00:34: c6:d9:d2:93:08:d5:7c:e9:b1:6e:77:1c:d2:4f:49: ef:99:f7:78:5e:1b:a5:5a:9a:52:d3:62:ae:3c:03: 68:2b:df:e9:b1:66:2f:f0:e5:e8:bf:f5:05:11:3e: 5c:77:02:4e:36:85:db:17:59:a7:32:26:6a:b6:ab: 5e:bb:fd:2c:66:a0:6e:95:a2:3f:08:4f:0c:ac:44: 33:e8:fc:43:cb:b6:ca:5d:c5:46:a8:eb:74:eb:ff: cd:fe:16:5e:dd:f1:95:22:a9:81:c1:c8:68:2d:a7: 99:e1:e2:b8:6f:dd:f1:ca:23:02:3e:cd:02:e7:ca: 75:26:de:f2:50:34:af:6b:22:32:56:7f:17:86:db: 84:26:6b:83:de:5c:d0:61:f8:e1:b2:f3:b1:8f:96: 66:c9:67:f7:1a:23:be:cf:d5:75:81:e1:2b:f0:b8: da:c4:36:5e:f7:e3:55:66:b4:69:ea:f6:53:0d:ea: bd:25:67:9d:52:be:fe:18:e5:d7:80:71:77:2d:2c: 84:b7:e6:ed:80:2c:08:b3:84:d5:eb:b0:dd:7d:4c: b3:0d:23:29:bb:4f:39:d3:37:36:fa:af:39:26:47: 4d:14:98:d4:84:41:a9:fe:69:6e:37:60:bd:e8:4a: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:65:BF:02:79:0F:1E:C3:FD:61:63:B9:01:4E:00:15:07:35:4E:02 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930303a3a2f34372d3437203d3e20323033383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:900::/47 Signature Algorithm: sha256WithRSAEncryption 47:e9:13:cf:4e:f4:e1:c9:f7:d5:e4:9e:43:96:b8:0d:5a:e7: 32:c9:e7:54:46:d7:df:6c:8a:31:f4:89:9f:79:fa:bf:82:e3: 48:65:20:31:ce:0a:0b:a9:e7:75:41:92:98:51:66:40:6e:a8: 28:aa:e4:24:f3:bf:de:48:c9:73:35:6d:d4:dc:12:a3:90:42: 8f:ba:1f:6d:34:2b:a3:9a:ee:fb:64:b8:92:63:d5:fc:e8:fd: bf:d9:6e:e9:7e:ee:a5:37:68:04:d5:d6:a7:be:13:fd:bc:1e: 95:0e:fd:ef:8b:92:f3:6a:3a:ab:eb:e1:a1:c5:8e:77:88:54: e1:7f:9c:46:ac:1c:a2:db:66:b5:3c:e9:ca:86:5f:29:8c:65: a0:69:fe:41:28:0a:54:38:7a:be:4c:00:64:85:6a:11:1e:d3: 91:fb:de:a3:da:a4:7f:fc:48:87:55:b0:71:67:52:61:df:f0: ed:4e:aa:97:80:30:aa:66:bd:92:35:80:34:76:eb:9b:ee:8c: d5:d1:e8:ff:07:d7:89:7d:48:9a:99:93:fb:7d:7a:aa:66:ea: ae:c9:b5:1a:1e:3c:ea:be:52:04:bb:21:cc:f0:9b:bf:d7:72: e1:13:74:88:8e:74:f4:99:14:82:65:c2:3c:72:ff:e9:e2:22: 08:fa:b1:45 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUHn0H4Q0VWYVXT2MfoHE1/NrHnJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjA1MDExNzE1MzFaFw0yNzA0MzAxNzIwMzFaMDMxMTAvBgNV BAMTKEJBNjVCRjAyNzkwRjFFQzNGRDYxNjNCOTAxNEUwMDE1MDczNTRFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8ttbBIFZUMb3Mt4ANMbZ0pMI 1XzpsW53HNJPSe+Z93heG6VamlLTYq48A2gr3+mxZi/w5ei/9QURPlx3Ak42hdsX WacyJmq2q167/SxmoG6Voj8ITwysRDPo/EPLtspdxUao63Tr/83+Fl7d8ZUiqYHB yGgtp5nh4rhv3fHKIwI+zQLnynUm3vJQNK9rIjJWfxeG24Qma4PeXNBh+OGy87GP lmbJZ/caI77P1XWB4SvwuNrENl7341VmtGnq9lMN6r0lZ51Svv4Y5deAcXctLIS3 5u2ALAizhNXrsN19TLMNIym7TznTNzb6rzkmR00UmNSEQan+aW43YL3oSsINAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUumW/AnkPHsP9YWO5AU4AFQc1TgIwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xM2Y2ODU2MS0wYTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTM5MzAzMDNhM2EyZjM0MzcyZDM0MzcyMDNkM2UyMDMyMzAz MzM4MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHASoUdYAJADANBgkqhkiG9w0BAQsFAAOCAQEAR+kT z0704cn31eSeQ5a4DVrnMsnnVEbX32yKMfSJn3n6v4LjSGUgMc4KC6nndUGSmFFm QG6oKKrkJPO/3kjJczVt1NwSo5BCj7ofbTQro5ru+2S4kmPV/Oj9v9lu6X7upTdo BNXWp74T/bwelQ7974uS82o6q+vhocWOd4hU4X+cRqwcottmtTzpyoZfKYxloGn+ QSgKVDh6vkwAZIVqER7Tkfveo9qkf/xIh1WwcWdSYd/w7U6ql4Awqma9kjWANHbr m+6M1dHo/wfXiX1ImpmT+316qmbqrsm1Gh486r5SBLshzPCbv9dy4RN0iI509JkU gmXCPHL/6eIiCPqxRQ== -----END CERTIFICATE-----Generated at Wed May 13 05:57:18 2026 by rpki-client