$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa File: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (raw, json) Hash identifier: /AaiYsKWuqRgDvvUADUKcufSQBbG5oanOxBGHWa2vLA= Subject key identifier: EC:AC:A3:79:37:F3:49:BF:7C:1D:BD:87:98:40:1F:77:17:EF:92:69 Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 5EFD07978DE3FCBF372B2EF82D7418D7E7F4FACF Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa Signing time: Sat 09 May 2026 22:36:27 +0000 ROA not before: Sat 09 May 2026 22:31:27 +0000 ROA not after: Sat 08 May 2027 22:36:27 +0000 asID: 215084 IP address blocks: 2a14:7581:f20::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 04:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fd:07:97:8d:e3:fc:bf:37:2b:2e:f8:2d:74:18:d7:e7:f4:fa:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: May 9 22:31:27 2026 GMT Not After : May 8 22:36:27 2027 GMT Subject: CN=ECACA37937F349BF7C1DBD8798401F7717EF9269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:92:77:fb:74:d7:77:7a:ef:fb:df:d8:a4: 15:8d:39:be:1f:53:26:d0:3a:8a:17:3e:9b:43:9e: 6a:b2:e6:a3:2e:f0:62:6f:62:06:3f:b1:51:b6:e4: 38:9c:74:5a:d5:e9:22:0c:7f:fb:76:a7:56:5c:30: 83:ec:46:f3:5c:70:96:30:a9:eb:1b:30:7c:18:24: b6:29:bf:90:36:e2:ee:13:ea:d9:7f:20:45:64:30: c1:4b:cc:30:d9:07:56:d6:49:29:f8:01:ba:9f:b3: cb:64:f3:71:31:78:e4:66:39:37:c9:5b:e2:ee:16: c5:3d:7c:73:4c:67:7f:78:21:d7:35:e3:c8:aa:70: e2:c8:2d:76:2c:6c:6c:cd:93:88:8a:ca:f3:48:95: dd:0f:36:3c:4b:b4:39:b5:e5:6e:02:95:b7:3e:f5: 09:ba:2b:65:53:89:ad:74:61:e1:bc:09:87:93:7d: f9:de:75:5b:b6:cd:9e:46:f9:49:bc:66:4c:c6:17: 9b:20:22:51:89:37:00:73:f6:36:ec:d5:8e:d5:de: 8e:1c:0d:8b:94:1e:98:e7:be:ba:f6:c0:7c:e0:2d: 3e:de:07:43:88:60:d9:e7:1a:95:f8:a3:5d:a0:f7: bb:ed:57:80:a4:e7:7b:c4:d1:d1:4a:a0:f3:bc:68: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AC:A3:79:37:F3:49:BF:7C:1D:BD:87:98:40:1F:77:17:EF:92:69 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f20::/44 Signature Algorithm: sha256WithRSAEncryption 2b:b3:94:4f:a9:6e:24:d1:5b:c9:f0:da:fb:46:39:fb:ec:e0: 95:eb:4a:fa:5c:bb:56:00:29:53:75:78:aa:fd:c1:6c:12:25: a5:e3:b1:4c:d0:f4:02:01:d9:6c:51:01:c4:6f:76:cc:b6:40: eb:c4:d0:b2:42:f0:dc:5c:69:cf:64:51:cb:b1:56:11:28:9c: db:44:b3:f4:74:55:8c:1f:18:16:2b:b3:08:7c:d6:7b:29:f0: 69:b4:71:ad:eb:00:b0:d0:e5:39:4a:02:c9:60:68:1f:4e:ce: 2a:0e:bb:8f:0d:3b:df:4a:0f:5d:a4:a9:1f:72:36:a9:e9:00: 62:1d:0a:8f:00:92:0c:dc:5c:19:59:16:71:20:3c:41:c5:b0: 6f:87:a4:b0:38:92:38:64:0e:6c:ef:9b:c4:e2:6d:4d:4a:91: 9d:e7:44:f8:96:3e:a1:81:ee:cc:6c:51:03:ae:19:4b:86:50: 53:5a:6d:09:b0:4d:66:fe:4b:4a:28:32:05:38:a2:1e:42:62: 2a:d2:cf:e5:03:0d:f8:fb:02:a5:35:9d:44:7c:c9:82:ae:3a: b9:a6:72:5a:27:8c:87:06:45:f0:61:8c:71:dd:47:cc:fe:9a: b4:a9:e3:3a:be:00:23:69:8d:a0:e6:0a:a4:73:a4:46:32:d2: 3d:16:1b:3d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUXv0Hl43j/L83Ky74LXQY1+f0+s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNjA1MDkyMjMxMjdaFw0yNzA1MDgyMjM2MjdaMDMxMTAvBgNV BAMTKEVDQUNBMzc5MzdGMzQ5QkY3QzFEQkQ4Nzk4NDAxRjc3MTdFRjkyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOJJ3+3TXd3rv+9/YpBWNOb4f UybQOooXPptDnmqy5qMu8GJvYgY/sVG25DicdFrV6SIMf/t2p1ZcMIPsRvNccJYw qesbMHwYJLYpv5A24u4T6tl/IEVkMMFLzDDZB1bWSSn4Abqfs8tk83ExeORmOTfJ W+LuFsU9fHNMZ394Idc148iqcOLILXYsbGzNk4iKyvNIld0PNjxLtDm15W4Clbc+ 9Qm6K2VTia10YeG8CYeTffnedVu2zZ5G+Um8ZkzGF5sgIlGJNwBz9jbs1Y7V3o4c DYuUHpjnvrr2wHzgLT7eB0OIYNnnGpX4o12g97vtV4Ck53vE0dFKoPO8aIMvAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU7KyjeTfzSb98Hb2HmEAfdxfvkmkwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84ZDVjZDE0ZS01ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY2MzIzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEz NTMwMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYEPIDANBgkqhkiG9w0BAQsFAAOCAQEAK7OU T6luJNFbyfDa+0Y5++zgletK+ly7VgApU3V4qv3BbBIlpeOxTND0AgHZbFEBxG92 zLZA68TQskLw3Fxpz2RRy7FWESic20Sz9HRVjB8YFiuzCHzWeynwabRxresAsNDl OUoCyWBoH07OKg67jw0730oPXaSpH3I2qekAYh0KjwCSDNxcGVkWcSA8QcWwb4ek sDiSOGQObO+bxOJtTUqRnedE+JY+oYHuzGxRA64ZS4ZQU1ptCbBNZv5LSigyBTii HkJiKtLP5QMN+PsCpTWdRHzJgq46uaZyWieMhwZF8GGMcd1HzP6atKnjOr4AI2mN oOYKpHOkRjLSPRYbPQ== -----END CERTIFICATE-----Generated at Wed May 13 12:29:23 2026 by rpki-client