$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa File: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (raw, json) Hash identifier: N9L4nbL2Uo4P069vOshVKkJFc321LxJpH/q85ffpRGI= Subject key identifier: E8:C2:A9:EA:59:F5:58:2D:05:7A:07:BB:FD:B5:0E:4A:BA:4D:1F:F2 Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 4234CE5A52A9C16BE6AA0AC58BE5C6108DEDCCD2 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa Signing time: Sat 09 May 2026 22:36:27 +0000 ROA not before: Sat 09 May 2026 22:31:27 +0000 ROA not after: Sat 08 May 2027 22:36:27 +0000 asID: 215084 IP address blocks: 2a14:7581:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 04:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:34:ce:5a:52:a9:c1:6b:e6:aa:0a:c5:8b:e5:c6:10:8d:ed:cc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: May 9 22:31:27 2026 GMT Not After : May 8 22:36:27 2027 GMT Subject: CN=E8C2A9EA59F5582D057A07BBFDB50E4ABA4D1FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:1c:39:67:8f:6d:22:b8:4a:01:78:94:7f: 4a:58:b2:e8:35:59:e3:23:bd:0e:d7:17:a3:71:09: a6:61:3e:c2:b3:4c:2d:77:a6:3c:c2:7d:44:a9:50: 87:b1:75:90:9d:97:a5:53:3b:f8:e5:5f:25:89:56: a5:14:10:1a:c5:7e:bc:22:d9:2e:a9:ed:cc:65:5a: 79:37:49:6c:50:9e:09:51:ab:0b:f9:82:59:a8:4b: 17:9e:ba:f5:7d:5b:cf:7d:27:20:a2:f9:9e:ce:b4: 78:c4:53:d6:3c:17:ef:e7:fe:99:ab:ac:fd:1c:b5: 7b:24:18:6c:91:c5:02:d2:96:7e:b2:27:a9:5b:93: 79:d5:23:d1:30:90:ac:43:d1:60:13:13:d9:06:ca: e2:5d:d3:da:f3:ca:f8:81:53:b5:90:65:81:b4:44: 35:71:66:31:02:58:84:e0:bf:d6:84:87:59:9f:42: 5f:eb:74:2a:9b:50:2b:71:3e:a0:f0:f1:72:b6:41: e4:84:b5:7f:fc:4d:d3:9e:87:95:73:64:40:51:d0: 61:e5:d2:da:49:a1:ad:22:ea:d8:20:45:8f:5e:08: 8d:2a:21:35:15:5c:db:1e:a8:46:1d:b3:9b:fc:00: fb:74:3e:48:1e:c3:51:ba:43:e3:b2:8d:27:ae:c1: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:A9:EA:59:F5:58:2D:05:7A:07:BB:FD:B5:0E:4A:BA:4D:1F:F2 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:b000::/36 Signature Algorithm: sha256WithRSAEncryption 64:71:51:6e:53:28:be:72:b7:e7:c2:9a:c6:a3:83:bf:2b:71: 11:98:61:6b:1c:e4:1b:4c:89:01:54:68:82:23:4d:dd:81:08: c7:a7:40:ca:53:81:79:15:09:89:9b:4c:f6:d6:3e:b9:ad:ef: ca:ea:ae:e2:a0:07:d1:43:0a:85:b4:ad:d1:3f:78:fd:7d:08: 53:77:ce:b3:8b:cf:f3:23:c7:88:05:10:ec:6a:38:99:26:d6: f0:d3:02:e0:9a:9f:70:9a:0d:f6:07:82:07:cc:c5:1c:a5:a7: 45:13:69:b5:49:89:22:06:44:6f:72:73:fc:a6:14:ec:5f:b2: 9f:c2:86:14:6d:d4:a3:d4:bc:b6:1b:61:ba:a6:4d:ac:cc:9b: 3b:c3:cd:14:2f:11:e4:31:95:1c:19:6e:a5:f6:e4:15:15:b6: bc:5c:04:29:a5:18:8e:bb:17:a7:c5:87:32:5f:09:42:72:ce: f1:97:a3:c8:c3:b0:66:db:41:e4:4c:d2:7b:1c:12:b5:5b:23: 5a:bc:25:95:83:da:0c:45:46:f0:1d:21:e9:17:fe:b7:64:0a: 7e:8c:99:f7:a5:4d:57:7d:c9:8b:60:ac:e6:f7:ae:58:a0:06: 1a:72:86:37:d7:39:84:ab:38:d3:c2:6b:49:b7:7a:ef:fb:36: af:00:42:48 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUQjTOWlKpwWvmqgrFi+XGEI3tzNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA1MDkyMjMxMjdaFw0yNzA1MDgyMjM2MjdaMDMxMTAvBgNV BAMTKEU4QzJBOUVBNTlGNTU4MkQwNTdBMDdCQkZEQjUwRTRBQkE0RDFGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjaBw5Z49tIrhKAXiUf0pYsug1 WeMjvQ7XF6NxCaZhPsKzTC13pjzCfUSpUIexdZCdl6VTO/jlXyWJVqUUEBrFfrwi 2S6p7cxlWnk3SWxQnglRqwv5glmoSxeeuvV9W899JyCi+Z7OtHjEU9Y8F+/n/pmr rP0ctXskGGyRxQLSln6yJ6lbk3nVI9EwkKxD0WATE9kGyuJd09rzyviBU7WQZYG0 RDVxZjECWITgv9aEh1mfQl/rdCqbUCtxPqDw8XK2QeSEtX/8TdOeh5VzZEBR0GHl 0tpJoa0i6tggRY9eCI0qITUVXNseqEYds5v8APt0Pkgew1G6Q+OyjSeuwT1fAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU6MKp6ln1WC0Fege7/bUOSrpNH/IwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84ZDVjZDE0ZS01ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTYyMzAzMDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIz MTM1MzAzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gbAwDQYJKoZIhvcNAQELBQADggEBAGRx UW5TKL5yt+fCmsajg78rcRGYYWsc5BtMiQFUaIIjTd2BCMenQMpTgXkVCYmbTPbW Prmt78rqruKgB9FDCoW0rdE/eP19CFN3zrOLz/Mjx4gFEOxqOJkm1vDTAuCan3Ca DfYHggfMxRylp0UTabVJiSIGRG9yc/ymFOxfsp/ChhRt1KPUvLYbYbqmTazMmzvD zRQvEeQxlRwZbqX25BUVtrxcBCmlGI67F6fFhzJfCUJyzvGXo8jDsGbbQeRM0nsc ErVbI1q8JZWD2gxFRvAdIekX/rdkCn6MmfelTVd9yYtgrOb3rligBhpyhjfXOYSr ONPCa0m3eu/7Nq8AQkg= -----END CERTIFICATE-----Generated at Wed May 13 13:19:49 2026 by rpki-client