$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/326131343a373538353a383a3a2f34382d3438203d3e20323139313130.roa File: 326131343a373538353a383a3a2f34382d3438203d3e20323139313130.roa (raw, json) Hash identifier: Gbowl8vsy50/ah5uPyffPGlJE1BZVfw0DnfMCMuMiD8= Subject key identifier: 60:88:4B:D9:D1:1C:57:2C:4B:19:51:FE:CC:30:FC:7F:D7:EA:4A:D1 Certificate issuer: /CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1 Certificate serial: 5F889B092319B9D426FA8F027E747B9DF933CF50 Authority key identifier: DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/326131343a373538353a383a3a2f34382d3438203d3e20323139313130.roa Signing time: Tue 22 Sep 2026 19:45:54 +0000 ROA not before: Tue 22 Sep 2026 19:40:54 +0000 ROA not after: Tue 21 Sep 2027 19:45:54 +0000 asID: 219110 IP address blocks: 2a14:7585:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 23:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:88:9b:09:23:19:b9:d4:26:fa:8f:02:7e:74:7b:9d:f9:33:cf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1 Validity Not Before: Sep 22 19:40:54 2026 GMT Not After : Sep 21 19:45:54 2027 GMT Subject: CN=60884BD9D11C572C4B1951FECC30FC7FD7EA4AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:46:66:ff:c0:5c:80:cf:b3:be:5c:fb:f8:00: 7a:4c:fa:a8:06:ca:b3:80:3b:e1:fd:06:4a:a9:ef: 96:4c:0e:69:78:cb:08:48:f9:f2:8c:c1:05:89:82: 8b:6e:95:ef:12:42:df:9d:ae:61:88:16:b4:6e:f8: fe:42:16:46:c5:ea:e8:9b:12:5e:36:37:f8:12:23: 7d:6f:f0:4b:ac:53:e3:c1:64:25:16:c5:08:17:46: fc:87:c0:61:3c:68:15:c0:9e:5f:9f:18:8a:f5:ec: d5:7e:28:10:48:62:c5:13:6c:e3:a4:40:da:74:89: 53:94:00:ab:6e:8a:15:8b:ff:1f:ab:c1:b2:92:7a: cc:4c:15:57:69:1e:bc:6b:4c:0e:7d:48:cc:a1:49: 49:eb:d8:7c:51:09:83:53:82:cb:01:dd:6e:9b:11: 1e:b0:ff:98:32:bd:c3:39:34:7e:ca:cf:d1:5f:a3: 8a:4d:73:f3:25:98:19:22:44:ca:ec:21:11:bc:d0: 14:e4:d3:22:70:25:f6:9d:7a:87:46:04:c9:bf:73: 49:ad:f8:3a:21:6a:5c:96:f4:d1:f9:04:d3:a4:35: cb:f7:32:bd:2d:a0:82:31:01:15:4e:e7:cf:5b:d1: ab:19:f1:ba:3e:46:17:0d:fd:af:c2:18:8d:3f:7d: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:4B:D9:D1:1C:57:2C:4B:19:51:FE:CC:30:FC:7F:D7:EA:4A:D1 X509v3 Authority Key Identifier: keyid:DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/326131343a373538353a383a3a2f34382d3438203d3e20323139313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7585:8::/48 Signature Algorithm: sha256WithRSAEncryption 52:49:4a:15:5c:dc:18:38:c8:0c:87:21:8e:0a:45:38:bc:f4: a8:c4:99:c0:07:3d:f6:34:e3:28:68:dc:d2:e2:92:00:89:93: bd:cf:06:cb:ed:12:f6:0c:83:85:9c:9a:69:c2:f2:e2:4d:2d: 97:5e:a8:7e:be:64:ec:9c:10:26:1d:d8:95:11:f7:4c:92:80: cc:b7:76:77:55:93:5a:e6:7c:04:8d:96:04:d5:48:93:b6:54: 6d:a5:81:43:6a:5b:4c:63:71:57:0c:f6:21:c1:a9:ec:84:2e: f5:0c:61:ad:aa:e2:8f:e9:c8:e6:f2:0e:bf:6c:9b:3e:96:84: da:4f:63:02:bc:6a:c2:40:32:99:69:e7:91:d7:a1:aa:b1:d9: fb:74:86:95:a6:51:d4:d0:0f:38:38:98:82:7b:0a:96:6c:38: 7f:e2:81:81:86:31:44:2a:3e:55:df:b3:62:28:72:19:24:34: 11:03:50:bc:44:68:0c:28:ef:58:00:77:e8:6e:20:18:4b:2c: 70:35:0f:5b:56:78:ed:e9:77:a2:51:16:c1:fd:ec:01:98:cb: 97:52:3f:72:8e:1b:b1:fe:aa:ad:d4:9d:60:bf:71:ef:40:dd: bc:76:ec:04:df:b2:56:22:88:11:fb:73:aa:d8:bc:92:14:34: a9:13:fa:78 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUX4ibCSMZudQm+o8CfnR7nfkzz1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEMjM1MkE2OTkzNjJEMDkwQkM5RTlDRjlEQTA4REQ1 RkRCNjdDMTAeFw0yNjA5MjIxOTQwNTRaFw0yNzA5MjExOTQ1NTRaMDMxMTAvBgNV BAMTKDYwODg0QkQ5RDExQzU3MkM0QjE5NTFGRUNDMzBGQzdGRDdFQTRBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHRmb/wFyAz7O+XPv4AHpM+qgG yrOAO+H9Bkqp75ZMDml4ywhI+fKMwQWJgotule8SQt+drmGIFrRu+P5CFkbF6uib El42N/gSI31v8EusU+PBZCUWxQgXRvyHwGE8aBXAnl+fGIr17NV+KBBIYsUTbOOk QNp0iVOUAKtuihWL/x+rwbKSesxMFVdpHrxrTA59SMyhSUnr2HxRCYNTgssB3W6b ER6w/5gyvcM5NH7Kz9Ffo4pNc/MlmBkiRMrsIRG80BTk0yJwJfadeodGBMm/c0mt +DohalyW9NH5BNOkNcv3Mr0toIIxARVO589b0asZ8bo+RhcN/a/CGI0/fX+pAgMB AAGjggJ/MIICezAdBgNVHQ4EFgQUYIhL2dEcVyxLGVH+zDD8f9fqStEwHwYDVR0j BBgwFoAU3NI1KmmTYtCQvJ6c+doI3V/bZ8EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGNkMDNiZTItNmIwMi00YzU5LWE5MzctNDFlMjY0Y2Rl NjM2LzEvRENEMjM1MkE2OTkzNjJEMDkwQkM5RTlDRjlEQTA4REQ1RkRCNjdDMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9EQ0QyMzUyQTY5OTM2MkQwOTBCQzlFOUNG OURBMDhERDVGREI2N0MxLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84Y2QwM2JlMi02YjAyLTRjNTktYTkzNy00MWUyNjRjZGU2MzYvMS8zMjYxMzEz NDNhMzczNTM4MzUzYTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM5MzEz MTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAKhR1hQAIMA0GCSqGSIb3DQEBCwUAA4IBAQBSSUoVXNwY OMgMhyGOCkU4vPSoxJnABz32NOMoaNzS4pIAiZO9zwbL7RL2DIOFnJppwvLiTS2X Xqh+vmTsnBAmHdiVEfdMkoDMt3Z3VZNa5nwEjZYE1UiTtlRtpYFDaltMY3FXDPYh wanshC71DGGtquKP6cjm8g6/bJs+loTaT2MCvGrCQDKZaeeR16Gqsdn7dIaVplHU 0A84OJiCewqWbDh/4oGBhjFEKj5V37NiKHIZJDQRA1C8RGgMKO9YAHfobiAYSyxw NQ9bVnjt6XeiURbB/ewBmMuXUj9yjhux/qqt1J1gv3HvQN28duwE37JWIogR+3Oq 2LySFDSpE/p4 -----END CERTIFICATE-----Generated at Sat Sep 26 05:44:45 2026 by rpki-client