$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa File: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (raw, json) Hash identifier: fNKVMMPiiUgfbMZ2Oos538UVQ2g0QakPLvgkCLIakls= Subject key identifier: 6D:68:7B:01:88:91:15:80:D8:D2:06:0F:6D:4F:D7:24:35:BB:9E:4D Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: FC48585E6E28586BE85E8A1EF5D9EA5188BA89 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa Signing time: Sat 04 Jul 2026 16:01:31 +0000 ROA not before: Sat 04 Jul 2026 15:56:31 +0000 ROA not after: Sat 03 Jul 2027 16:01:31 +0000 asID: 149690 IP address blocks: 2a14:7581:4710::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fc:48:58:5e:6e:28:58:6b:e8:5e:8a:1e:f5:d9:ea:51:88:ba:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Jul 4 15:56:31 2026 GMT Not After : Jul 3 16:01:31 2027 GMT Subject: CN=6D687B0188911580D8D2060F6D4FD72435BB9E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:16:fd:79:38:70:02:d1:89:ec:ba:38:2a: 71:ad:a7:4a:9f:9f:65:f1:d1:92:da:4e:84:f0:46: 2d:2c:47:cc:1f:2c:25:1c:a1:de:a2:24:e1:b7:b0: da:b7:86:57:21:d0:cf:7d:65:bc:e0:9a:8b:20:42: 41:c3:c1:a4:ee:f7:f2:b8:36:7a:6f:9e:d4:4e:2b: b2:7f:76:f9:9d:38:50:04:eb:cf:38:a1:a8:a7:d1: ff:15:b0:de:e5:46:de:69:ec:66:7c:6f:75:77:2b: 00:03:b4:9a:bf:39:d8:37:12:78:01:83:77:b1:b2: c1:ac:57:ca:49:a8:b9:bc:17:08:ec:c4:66:78:07: 12:95:70:e3:b0:8a:e8:79:dc:33:b2:a6:29:8a:fb: 2b:9a:7f:fa:b1:52:b7:3b:2c:36:98:24:06:5f:71: a6:b0:a9:d2:3e:75:49:6b:5b:46:1c:7f:51:9a:27: 99:2e:60:6d:73:8c:f5:c0:a4:61:33:44:10:d0:54: 79:1b:f8:71:12:d4:85:b5:6e:0f:df:cb:95:fe:cd: 2f:9d:eb:f0:ec:8d:ba:b6:09:fc:0c:5c:a2:20:70: 54:02:6a:e6:10:ef:19:e1:eb:86:ce:f5:be:a4:aa: ca:21:f1:c8:b6:3c:aa:d0:11:b2:d3:49:58:6c:19: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:68:7B:01:88:91:15:80:D8:D2:06:0F:6D:4F:D7:24:35:BB:9E:4D X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4710::/44 Signature Algorithm: sha256WithRSAEncryption 0d:25:eb:d3:fd:66:8a:f0:c3:47:89:1b:6e:e9:91:ec:ae:5a: 29:82:2e:df:07:a0:7a:cd:d4:51:ff:7c:a4:be:12:6e:03:12: 48:ba:33:8b:51:af:13:e4:4b:45:d7:c6:b9:98:aa:72:2c:ac: be:3b:bc:11:50:31:6f:ef:cb:b0:ef:58:34:2e:79:b4:75:2f: 9e:1c:90:cb:9b:99:d0:43:bd:fe:75:01:bc:e2:1e:ba:3f:4a: 14:9a:06:45:e8:8e:3f:f6:7b:96:08:cc:84:85:3d:88:ab:ea: e6:90:22:f9:3f:54:29:ed:fb:0e:ab:1d:95:3c:eb:8b:f6:14: 59:f7:fa:b3:c4:76:5d:5b:fa:91:6e:a9:7e:c2:42:1f:58:d4: ee:cb:53:98:2f:f4:7f:cc:b1:bc:ce:c4:81:0f:ae:2f:4c:32: 86:a6:17:78:3b:1b:e8:31:f0:5b:7f:3f:bf:b7:35:30:ce:15: e8:d3:7d:87:ad:73:6c:b4:4a:6c:99:e7:4a:36:69:99:de:b2: 2a:3a:2c:fb:d0:37:97:a1:96:f8:45:c3:ca:88:e0:52:ee:db: dd:43:83:62:12:0c:05:45:e7:c2:17:ba:5c:0a:5e:6e:f2:17: 8e:25:b7:2f:0f:a9:39:81:5b:73:f0:e4:39:0f:34:c8:c9:fa: 01:f1:b0:f6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAPxIWF5uKFhr6F6KHvXZ6lGIuokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjA3MDQxNTU2MzFaFw0yNzA3MDMxNjAxMzFaMDMxMTAvBgNV BAMTKDZENjg3QjAxODg5MTE1ODBEOEQyMDYwRjZENEZENzI0MzVCQjlFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvRb9eThwAtGJ7Lo4KnGtp0qf n2Xx0ZLaToTwRi0sR8wfLCUcod6iJOG3sNq3hlch0M99ZbzgmosgQkHDwaTu9/K4 NnpvntROK7J/dvmdOFAE6884oain0f8VsN7lRt5p7GZ8b3V3KwADtJq/Odg3EngB g3exssGsV8pJqLm8FwjsxGZ4BxKVcOOwiuh53DOypimK+yuaf/qxUrc7LDaYJAZf caawqdI+dUlrW0Ycf1GaJ5kuYG1zjPXApGEzRBDQVHkb+HES1IW1bg/fy5X+zS+d 6/Dsjbq2CfwMXKIgcFQCauYQ7xnh64bO9b6kqsoh8ci2PKrQEbLTSVhsGdD3AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUbWh7AYiRFYDY0gYPbU/XJDW7nk0wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzczMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz NDM5MzYzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUcQMA0GCSqGSIb3DQEBCwUAA4IBAQAN JevT/WaK8MNHiRtu6ZHsrlopgi7fB6B6zdRR/3ykvhJuAxJIujOLUa8T5EtF18a5 mKpyLKy+O7wRUDFv78uw71g0Lnm0dS+eHJDLm5nQQ73+dQG84h66P0oUmgZF6I4/ 9nuWCMyEhT2Iq+rmkCL5P1Qp7fsOqx2VPOuL9hRZ9/qzxHZdW/qRbql+wkIfWNTu y1OYL/R/zLG8zsSBD64vTDKGphd4OxvoMfBbfz+/tzUwzhXo032HrXNstEpsmedK NmmZ3rIqOiz70DeXoZb4RcPKiOBS7tvdQ4NiEgwFRefCF7pcCl5u8heOJbcvD6k5 gVtz8OQ5DzTIyfoB8bD2 -----END CERTIFICATE-----Generated at Thu Jul 23 22:00:40 2026 by rpki-client