$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa File: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (raw, json) Hash identifier: 55OIZeYx9lO5L3iwh+YJZa5YKyQFWW57WQGezPVY7YM= Subject key identifier: 31:FB:E9:D0:F4:07:79:04:8D:F8:83:4E:CA:C3:80:23:8F:A0:A4:BE Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 7D3AC426F6E87E34A4E3C414BD44BFFDE0A642A0 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa Signing time: Thu 03 Sep 2026 02:23:13 +0000 ROA not before: Thu 03 Sep 2026 02:18:13 +0000 ROA not after: Thu 02 Sep 2027 02:23:13 +0000 asID: 141067 IP address blocks: 2a14:7581:485c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 20:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:3a:c4:26:f6:e8:7e:34:a4:e3:c4:14:bd:44:bf:fd:e0:a6:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Sep 3 02:18:13 2026 GMT Not After : Sep 2 02:23:13 2027 GMT Subject: CN=31FBE9D0F40779048DF8834ECAC380238FA0A4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:b2:0e:1c:35:29:eb:7a:2c:60:78:5b:58: 3d:55:4a:b3:f2:4c:c3:5a:0f:85:df:31:9f:5c:4b: 29:4a:92:66:7f:00:48:bc:f8:94:a1:cf:46:87:87: 7b:76:87:28:f6:3d:ec:29:1d:b6:27:bf:c8:32:f8: 9f:c4:52:01:50:d2:33:00:72:12:72:d5:7a:cb:d1: bf:e2:fb:cc:d0:15:1e:4e:1d:68:50:2c:9b:20:bb: ce:77:d4:b3:ff:cc:dc:eb:a5:7d:16:43:a2:7c:9d: 5b:b2:08:84:32:6a:6b:6d:37:f9:a2:29:64:d4:7f: 02:ea:e5:cf:e2:d2:1c:c7:fc:89:2c:d6:3c:23:20: bb:e5:c6:19:f1:bc:39:72:23:a9:c1:b6:b9:f1:77: 60:e2:a3:af:1b:c4:e1:a7:c2:fd:2c:ae:73:30:f4: 21:f9:32:6a:26:50:3e:c2:6b:ab:82:4f:b8:16:cf: ed:34:a5:15:e8:4c:2e:55:1f:e6:e4:df:99:af:96: 34:9c:a8:da:09:d8:b3:ff:9a:a4:3d:35:46:f1:8f: 29:80:eb:da:52:63:a3:e6:92:49:a5:19:f7:89:44: ef:b5:6a:e6:2f:0c:75:22:ed:1c:72:c9:41:65:e2: 86:43:43:76:b1:19:01:76:a9:4b:d5:fc:73:8c:7b: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:E9:D0:F4:07:79:04:8D:F8:83:4E:CA:C3:80:23:8F:A0:A4:BE X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:485c::/48 Signature Algorithm: sha256WithRSAEncryption 9c:be:22:1c:40:f8:30:3e:fd:08:f8:60:51:1f:7e:37:dd:e4: b0:48:72:47:94:93:2c:38:67:1b:3c:6f:ee:03:99:9d:62:93: 37:c8:1b:69:e7:0b:47:1d:48:c3:5a:82:7b:56:a8:a8:89:ea: 68:0c:f1:ed:4f:c5:2d:59:05:e9:d5:79:65:e8:f9:16:69:dd: 8f:a8:da:9c:17:6a:ce:85:a0:25:03:c7:f4:c8:e8:0b:89:bf: 7c:93:61:57:9d:35:5d:3a:43:1b:14:8e:b5:f5:65:1e:f4:0f: 5e:c7:c6:23:67:63:b1:46:b8:a8:b1:c8:27:bf:df:8f:88:fe: 68:d9:da:ce:d6:5d:a6:19:00:a8:34:0e:99:ab:92:a5:9b:71: d1:a5:a1:c9:20:27:4c:11:54:c1:27:c7:28:d5:d7:ad:67:8d: 5e:50:d3:13:72:04:7f:48:33:88:2d:63:3b:40:73:bb:5d:f0: f3:9d:1c:38:d3:bc:5d:be:43:79:fa:98:c6:1f:e7:c7:4c:15: 4a:e5:bc:55:b9:5b:1a:bd:ee:35:77:6c:b5:b4:ca:e7:2b:6e: d7:48:b4:b0:72:00:21:62:6d:6c:16:57:35:e3:05:17:e7:83: c9:e5:bb:56:65:ad:99:4f:47:2e:60:df:39:d5:57:11:f9:c7: 1e:04:8a:b2 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUfTrEJvbofjSk48QUvUS//eCmQqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjA5MDMwMjE4MTNaFw0yNzA5MDIwMjIzMTNaMDMxMTAvBgNV BAMTKDMxRkJFOUQwRjQwNzc5MDQ4REY4ODM0RUNBQzM4MDIzOEZBMEE0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgu7IOHDUp63osYHhbWD1VSrPy TMNaD4XfMZ9cSylKkmZ/AEi8+JShz0aHh3t2hyj2PewpHbYnv8gy+J/EUgFQ0jMA chJy1XrL0b/i+8zQFR5OHWhQLJsgu8531LP/zNzrpX0WQ6J8nVuyCIQyamttN/mi KWTUfwLq5c/i0hzH/Iks1jwjILvlxhnxvDlyI6nBtrnxd2Dio68bxOGnwv0srnMw 9CH5MmomUD7Ca6uCT7gWz+00pRXoTC5VH+bk35mvljScqNoJ2LP/mqQ9NUbxjymA 69pSY6PmkkmlGfeJRO+1auYvDHUi7RxyyUFl4oZDQ3axGQF2qUvV/HOMe8HjAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUMfvp0PQHeQSN+INOysOAI4+gpL4wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzgzNTYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz NDMxMzAzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gUhcMA0GCSqGSIb3DQEBCwUAA4IBAQCc viIcQPgwPv0I+GBRH3433eSwSHJHlJMsOGcbPG/uA5mdYpM3yBtp5wtHHUjDWoJ7 VqioiepoDPHtT8UtWQXp1Xll6PkWad2PqNqcF2rOhaAlA8f0yOgLib98k2FXnTVd OkMbFI619WUe9A9ex8YjZ2OxRrioscgnv9+PiP5o2drO1l2mGQCoNA6Zq5Klm3HR paHJICdMEVTBJ8co1detZ41eUNMTcgR/SDOILWM7QHO7XfDznRw407xdvkN5+pjG H+fHTBVK5bxVuVsave41d2y1tMrnK27XSLSwcgAhYm1sFlc14wUX54PJ5btWZa2Z T0cuYN851VcR+cceBIqy -----END CERTIFICATE-----Generated at Tue Oct 6 05:59:53 2026 by rpki-client