$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa File: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (raw, json) Hash identifier: LjXLVKawHfjxwlnzEPj/O4eLJ/0ypP1ElNw9Bcg9ZBY= Subject key identifier: 0B:90:D7:DB:FD:A5:70:8E:7C:65:B9:8A:5E:58:6F:97:51:63:4D:01 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 2743B790F601B3D6ADA7651879F991E808792AFE Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa Signing time: Fri 25 Sep 2026 13:00:32 +0000 ROA not before: Fri 25 Sep 2026 12:55:32 +0000 ROA not after: Fri 24 Sep 2027 13:00:32 +0000 asID: 214720 IP address blocks: 2a14:7583:f460::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:43:b7:90:f6:01:b3:d6:ad:a7:65:18:79:f9:91:e8:08:79:2a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Sep 25 12:55:32 2026 GMT Not After : Sep 24 13:00:32 2027 GMT Subject: CN=0B90D7DBFDA5708E7C65B98A5E586F9751634D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fa:13:80:b4:0b:7c:16:86:86:29:ca:c8:8b: d9:78:84:69:1b:cb:71:e6:62:f8:0b:08:04:63:c2: 99:bc:4a:5e:81:21:76:0d:5f:22:38:70:16:9e:d0: f4:3d:3d:c0:a0:a2:26:54:8a:12:6f:0f:f3:e2:8f: 42:dd:25:68:4d:75:07:c5:16:36:ad:45:ed:c4:0d: 5e:c8:92:fa:e9:22:96:2f:5d:a6:54:7c:04:e5:97: e3:41:31:1c:7e:de:d1:3d:f5:42:e0:7e:1b:32:26: 32:9a:ab:13:bb:6e:e2:ac:f2:3b:f6:71:ae:a5:85: 55:5f:31:d3:ec:73:ac:b4:53:f7:16:5a:f2:b1:02: a6:39:41:d0:17:6c:7b:25:a7:22:85:60:ae:05:54: 23:f8:b1:2a:f6:e8:84:1f:f0:40:3e:31:72:49:a7: 88:34:29:e6:b3:e3:61:74:ae:bf:2f:cb:a0:01:21: 3a:c3:26:ac:0e:fd:ac:9b:7d:d8:2a:aa:e1:45:21: e1:5f:d8:9e:10:f2:72:a5:6f:d3:65:c2:0f:78:7b: 84:d1:35:e1:86:2c:f8:8c:e0:d8:ab:c0:3b:b4:fb: e8:2b:ad:04:53:2a:f4:3d:db:dd:4f:60:b6:11:3d: 73:15:c3:7b:5b:51:5e:6c:eb:00:2a:c6:fb:69:55: 41:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:D7:DB:FD:A5:70:8E:7C:65:B9:8A:5E:58:6F:97:51:63:4D:01 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f460::/44 Signature Algorithm: sha256WithRSAEncryption 8e:79:f8:98:0b:2b:ea:13:65:85:f2:47:b0:be:c4:20:f8:58: 79:cb:60:f7:24:e8:73:58:81:28:fc:c9:79:c8:bf:30:66:a0: d0:17:28:f7:e2:87:b9:b6:e2:36:35:45:46:bd:51:97:96:a2: dd:ac:e6:e4:51:78:09:85:b6:8e:3d:1c:b8:99:d9:03:65:e8: a8:e6:84:62:6a:ba:f0:f7:2a:0a:4b:c5:3b:ae:f9:76:77:26: c7:d7:43:c8:4f:9e:a9:2a:91:8d:07:3a:eb:1a:da:a3:58:04: a8:8a:5b:e5:ba:ab:06:7d:4c:31:90:d4:e9:24:09:eb:ae:0c: 53:e4:12:02:1a:b7:b4:69:36:9b:b2:51:dd:8c:6d:ed:7b:6e: 15:6d:93:72:67:b0:eb:8f:1d:6f:90:ed:8d:26:2b:cc:31:a9: 92:6b:18:97:70:44:41:19:9a:63:6c:ee:cf:61:bc:3f:04:2a: 0d:01:c1:a0:b8:69:4e:f0:bd:a0:d0:be:3a:10:02:31:a0:19: 6f:74:74:97:e6:6d:97:9f:e7:1f:1e:19:ee:a9:48:80:b4:98: 13:6e:c2:68:f5:67:7a:d6:1f:6a:a6:e0:38:63:4c:a0:51:cf: b7:6a:74:ea:4b:19:cb:41:07:f2:e2:eb:a6:6a:88:69:23:27: 9f:50:f0:41 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJ0O3kPYBs9atp2UYefmR6Ah5Kv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNjA5MjUxMjU1MzJaFw0yNzA5MjQxMzAwMzJaMDMxMTAvBgNV BAMTKDBCOTBEN0RCRkRBNTcwOEU3QzY1Qjk4QTVFNTg2Rjk3NTE2MzREMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+hOAtAt8FoaGKcrIi9l4hGkb y3HmYvgLCARjwpm8Sl6BIXYNXyI4cBae0PQ9PcCgoiZUihJvD/Pij0LdJWhNdQfF FjatRe3EDV7IkvrpIpYvXaZUfATll+NBMRx+3tE99ULgfhsyJjKaqxO7buKs8jv2 ca6lhVVfMdPsc6y0U/cWWvKxAqY5QdAXbHslpyKFYK4FVCP4sSr26IQf8EA+MXJJ p4g0Keaz42F0rr8vy6ABITrDJqwO/aybfdgqquFFIeFf2J4Q8nKlb9Nlwg94e4TR NeGGLPiM4NirwDu0++grrQRTKvQ9291PYLYRPXMVw3tbUV5s6wAqxvtpVUF9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUC5DX2/2lcI58ZbmKXlhvl1FjTQEwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ODFmOTc4Mi04OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzQzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzczMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1g/RgMA0GCSqGSIb3DQEBCwUAA4IBAQCO efiYCyvqE2WF8kewvsQg+Fh5y2D3JOhzWIEo/Ml5yL8wZqDQFyj34oe5tuI2NUVG vVGXlqLdrObkUXgJhbaOPRy4mdkDZeio5oRiarrw9yoKS8U7rvl2dybH10PIT56p KpGNBzrrGtqjWASoilvluqsGfUwxkNTpJAnrrgxT5BICGre0aTabslHdjG3te24V bZNyZ7Drjx1vkO2NJivMMamSaxiXcERBGZpjbO7PYbw/BCoNAcGguGlO8L2g0L46 EAIxoBlvdHSX5m2Xn+cfHhnuqUiAtJgTbsJo9Wd61h9qpuA4Y0ygUc+3anTqSxnL QQfy4uumaohpIyefUPBB -----END CERTIFICATE-----Generated at Sat Oct 3 10:54:09 2026 by rpki-client