$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa File: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (raw, json) Hash identifier: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c= Subject key identifier: A5:96:63:E9:CA:DF:4D:AC:88:E3:0D:6C:EB:03:7D:DF:90:E4:D1:44 Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Certificate serial: 288F068B9BE93C4DA816DF2C9A54BA9C2108E31F Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa Signing time: Mon 20 Jul 2026 12:03:27 +0000 ROA not before: Mon 20 Jul 2026 11:58:27 +0000 ROA not after: Mon 19 Jul 2027 12:03:27 +0000 asID: 215828 IP address blocks: 2a13:c8c1:111::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8f:06:8b:9b:e9:3c:4d:a8:16:df:2c:9a:54:ba:9c:21:08:e3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Validity Not Before: Jul 20 11:58:27 2026 GMT Not After : Jul 19 12:03:27 2027 GMT Subject: CN=A59663E9CADF4DAC88E30D6CEB037DDF90E4D144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:f3:5f:f4:fc:35:4a:d0:b8:10:16:71:b3: 56:4a:87:66:aa:24:50:21:cc:52:fa:86:43:ec:82: ad:22:c8:c5:05:18:98:8c:eb:45:4e:a5:d0:91:fd: 12:5f:ec:69:e3:5b:65:63:f8:f1:3d:5e:87:65:62: a7:77:75:cc:6a:e7:82:ec:c0:fa:22:7c:e2:50:37: 25:b5:4b:3f:1d:de:2c:14:f2:3f:4e:01:7b:4d:a2: ee:73:19:38:4a:5b:fe:8e:24:e5:40:a3:90:64:17: 37:06:98:cb:1c:a2:59:7f:94:6a:cb:e0:ac:44:e0: 15:05:6c:99:ac:8e:11:36:53:4f:cc:64:d6:bb:c7: 77:c6:f8:9d:f7:d4:41:3c:44:f2:bb:69:c5:c5:35: c4:86:a2:fd:49:aa:06:be:97:70:38:e4:56:8d:13: 04:aa:71:09:20:c1:20:23:c5:3b:34:c2:38:58:28: cb:82:09:66:f5:3e:cd:07:05:53:34:1f:81:87:b3: d2:91:7f:d1:5f:3e:24:df:f7:8a:a9:2a:da:bd:a2: 52:bb:43:6d:ed:4c:1e:34:ef:46:e1:34:c4:dd:36: 15:6a:25:bc:7e:d8:f4:61:90:e9:f4:63:a8:94:c0: 03:e0:66:58:d9:c1:5f:bb:6c:bd:4a:27:05:2d:5f: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:96:63:E9:CA:DF:4D:AC:88:E3:0D:6C:EB:03:7D:DF:90:E4:D1:44 X509v3 Authority Key Identifier: keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c1:111::/48 Signature Algorithm: sha256WithRSAEncryption a7:8b:cd:4e:36:c1:a5:95:f1:40:3f:4f:53:e1:d1:c0:83:c7: 3f:14:a6:a4:2f:09:f4:b2:bf:a0:f0:e2:05:86:16:30:a7:5e: bb:94:69:d6:a1:c9:14:0d:53:46:18:58:0a:a2:41:62:0f:26: c7:5e:78:e3:b5:32:b0:0b:a9:30:88:e6:59:c6:b0:6e:8c:f7: 5c:e3:fe:ba:67:7e:7e:d4:b3:86:22:ee:28:bc:d9:6e:ff:b4: 70:0b:fa:01:7d:95:33:5f:93:c6:c9:21:68:1e:68:de:2e:b0: 4e:b4:11:8d:62:be:6a:6c:77:f4:7d:ef:6f:d4:15:e7:da:97: e4:c1:ca:55:5b:e8:ac:03:32:9e:0b:f2:2f:02:b1:a2:ee:4f: 15:7d:4c:42:f3:e2:c8:aa:92:37:b5:1a:19:b9:0b:8d:63:d4: 87:25:47:a3:fe:49:39:3b:a5:e4:a9:f4:4f:d3:5e:93:78:c7: f1:9d:d1:e0:37:79:3c:19:7d:ed:46:ef:ee:a5:a8:67:cf:b3: 8f:0e:f0:ed:98:02:f2:70:e6:9c:d7:b2:81:b4:8d:a0:5d:78: 5c:49:de:2f:88:ef:2d:75:ec:63:ae:36:21:b9:cd:7e:6c:1f: 9e:67:1a:52:3c:11:fe:0d:34:ac:5c:c1:cc:7b:b4:6b:59:b3: 75:88:f4:e8 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUKI8Gi5vpPE2oFt8smlS6nCEI4x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0 NzdBOTFBRTAeFw0yNjA3MjAxMTU4MjdaFw0yNzA3MTkxMjAzMjdaMDMxMTAvBgNV BAMTKEE1OTY2M0U5Q0FERjREQUM4OEUzMEQ2Q0VCMDM3RERGOTBFNEQxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGx/Nf9Pw1StC4EBZxs1ZKh2aq JFAhzFL6hkPsgq0iyMUFGJiM60VOpdCR/RJf7GnjW2Vj+PE9XodlYqd3dcxq54Ls wPoifOJQNyW1Sz8d3iwU8j9OAXtNou5zGThKW/6OJOVAo5BkFzcGmMscoll/lGrL 4KxE4BUFbJmsjhE2U0/MZNa7x3fG+J331EE8RPK7acXFNcSGov1Jqga+l3A45FaN EwSqcQkgwSAjxTs0wjhYKMuCCWb1Ps0HBVM0H4GHs9KRf9FfPiTf94qpKtq9olK7 Q23tTB4070bhNMTdNhVqJbx+2PRhkOn0Y6iUwAPgZljZwV+7bL1KJwUtX/65AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUpZZj6crfTayI4w1s6wN935Dk0UQwHwYDVR0j BBgwFoAUXvTHULGTXuS/f8JEGi7kkEd6ka4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzgvNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0NzdBOTFBRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC81RUY0Qzc1MEIxOTM1RUU0QkY3RkMyNDQx QTJFRTQ5MDQ3N0E5MUFFLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85YzBlZDA0Ni1mYTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvOC8zMjYxMzEz MzNhNjMzODYzMzEzYTMxMzEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoTyMEBETANBgkqhkiG9w0BAQsFAAOCAQEAp4vN TjbBpZXxQD9PU+HRwIPHPxSmpC8J9LK/oPDiBYYWMKdeu5Rp1qHJFA1TRhhYCqJB Yg8mx15447UysAupMIjmWcawboz3XOP+umd+ftSzhiLuKLzZbv+0cAv6AX2VM1+T xskhaB5o3i6wTrQRjWK+amx39H3vb9QV59qX5MHKVVvorAMyngvyLwKxou5PFX1M QvPiyKqSN7UaGbkLjWPUhyVHo/5JOTul5Kn0T9Nek3jH8Z3R4Dd5PBl97Ubv7qWo Z8+zjw7w7ZgC8nDmnNeygbSNoF14XEneL4jvLXXsY642IbnNfmwfnmcaUjwR/g00 rFzBzHu0a1mzdYj06A== -----END CERTIFICATE-----Generated at Thu Jul 23 22:59:14 2026 by rpki-client