$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa File: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (raw, json) Hash identifier: zRqmXZ/37p2LdqSJGmf4BH3VUsc9h2aRvqG+CkjHT1M= Subject key identifier: EB:13:55:CA:D4:F4:81:70:54:36:5B:6E:40:4F:0D:89:16:35:AD:F1 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 0EEAAC72A8CC6F215CD52B02274904070F82C89C Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa Signing time: Sun 27 Sep 2026 10:23:13 +0000 ROA not before: Sun 27 Sep 2026 10:18:13 +0000 ROA not after: Sun 26 Sep 2027 10:23:13 +0000 asID: 214677 IP address blocks: 2a14:7581:485e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 03:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ea:ac:72:a8:cc:6f:21:5c:d5:2b:02:27:49:04:07:0f:82:c8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Sep 27 10:18:13 2026 GMT Not After : Sep 26 10:23:13 2027 GMT Subject: CN=EB1355CAD4F4817054365B6E404F0D891635ADF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:fa:ff:6e:4d:d2:8a:7b:8c:e6:c2:57:ba: d4:ec:6b:86:d5:59:3b:a3:7d:01:78:56:da:3f:45: 46:c7:e9:45:4d:5f:ae:8c:0f:58:45:5f:05:e3:94: f3:4c:99:72:d3:80:fe:c3:89:0a:de:0d:7f:71:81: 0c:00:c4:7f:f1:f0:99:f8:78:14:6e:28:ba:4c:7d: df:05:3e:7a:34:6e:aa:98:68:9e:1b:32:33:95:e8: 26:cc:35:2d:a9:24:f8:30:9c:3b:32:21:a5:38:d9: 6f:24:d2:b2:e8:32:15:12:89:cb:60:75:3f:ca:1f: 17:f6:55:d7:81:da:24:bf:26:2b:dc:ac:63:9e:50: 0f:6a:92:fa:5b:c6:9f:a3:5f:2e:0f:ee:47:f2:4d: 5e:04:19:87:cb:55:96:4a:3d:1c:e5:63:2f:a0:49: cb:35:6e:81:3d:c5:13:f8:de:f3:1a:24:b8:e4:f4: dc:35:04:2d:d8:d9:86:e0:6a:d2:86:8e:86:27:bc: 5c:e4:6e:0b:34:51:96:cf:9a:8f:71:17:2c:55:c7: d2:1d:35:2d:db:f5:9e:c3:a0:4a:82:08:42:a0:e7: e0:b0:73:00:c1:f1:aa:68:f7:5d:6c:c1:e3:29:e1: 0c:5a:a6:9e:26:d0:c4:3a:66:ca:a1:ba:b1:b6:b1: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:13:55:CA:D4:F4:81:70:54:36:5B:6E:40:4F:0D:89:16:35:AD:F1 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:485e::/48 Signature Algorithm: sha256WithRSAEncryption 7a:e7:58:28:ba:92:c1:b0:9c:3e:64:65:29:c6:aa:29:b4:6f: ff:84:66:97:19:82:1f:bf:b4:41:49:80:73:b0:ad:61:97:29: 45:2f:33:93:53:0a:a5:f1:33:23:d2:1f:0d:4e:49:b0:7d:f0: af:9c:83:1f:05:2d:e4:77:fe:1b:d1:3f:d1:ea:07:f2:e1:f2: d6:fe:bd:59:df:2a:9c:81:1b:77:6c:cd:23:b3:ec:02:93:7c: 24:6d:f3:37:de:3d:96:bd:0c:1c:ea:be:73:43:ef:bb:c6:85: a6:e9:e7:79:9f:3b:fe:d8:20:a6:85:ff:3b:69:ca:01:11:64: 82:2d:ae:fc:83:07:ea:11:e4:21:5c:f4:83:71:4c:95:4d:c3: 59:d8:b5:5e:c3:e5:15:11:0e:a5:c6:5a:19:bd:8a:bc:1c:51: 90:ae:2e:5b:b0:0a:5b:25:89:8a:d0:df:a4:8d:a9:aa:1b:42: cb:37:d5:72:9e:ef:41:13:a6:c3:25:b8:a4:de:6c:9e:f7:d7: 07:80:05:05:48:c4:f3:57:c1:38:db:0e:8d:11:62:8b:7a:f1: 5b:79:39:76:d1:3e:09:82:28:2b:23:2b:66:31:83:e1:95:5b: a9:6f:96:50:21:bd:12:20:8d:27:d0:bf:06:0b:cd:85:db:e6: e8:ba:88:56 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDuqscqjMbyFc1SsCJ0kEBw+CyJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNjA5MjcxMDE4MTNaFw0yNzA5MjYxMDIzMTNaMDMxMTAvBgNV BAMTKEVCMTM1NUNBRDRGNDgxNzA1NDM2NUI2RTQwNEYwRDg5MTYzNUFERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTPr/bk3SinuM5sJXutTsa4bV WTujfQF4Vto/RUbH6UVNX66MD1hFXwXjlPNMmXLTgP7DiQreDX9xgQwAxH/x8Jn4 eBRuKLpMfd8FPno0bqqYaJ4bMjOV6CbMNS2pJPgwnDsyIaU42W8k0rLoMhUSictg dT/KHxf2VdeB2iS/JivcrGOeUA9qkvpbxp+jXy4P7kfyTV4EGYfLVZZKPRzlYy+g Scs1boE9xRP43vMaJLjk9Nw1BC3Y2YbgatKGjoYnvFzkbgs0UZbPmo9xFyxVx9Id NS3b9Z7DoEqCCEKg5+CwcwDB8apo911sweMp4Qxapp4m0MQ6ZsqhurG2sePfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6xNVytT0gXBUNltuQE8NiRY1rfEwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzgzNTY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzYzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gUheMA0GCSqGSIb3DQEBCwUAA4IBAQB6 51goupLBsJw+ZGUpxqoptG//hGaXGYIfv7RBSYBzsK1hlylFLzOTUwql8TMj0h8N TkmwffCvnIMfBS3kd/4b0T/R6gfy4fLW/r1Z3yqcgRt3bM0js+wCk3wkbfM33j2W vQwc6r5zQ++7xoWm6ed5nzv+2CCmhf87acoBEWSCLa78gwfqEeQhXPSDcUyVTcNZ 2LVew+UVEQ6lxloZvYq8HFGQri5bsApbJYmK0N+kjamqG0LLN9Vynu9BE6bDJbik 3mye99cHgAUFSMTzV8E42w6NEWKLevFbeTl20T4JgigrIytmMYPhlVupb5ZQIb0S II0n0L8GC82F2+bouohW -----END CERTIFICATE-----Generated at Tue Sep 29 13:47:08 2026 by rpki-client