$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa File: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (raw, json) Hash identifier: rQObBHe/jYqYen0xEroxiJeJ/RdU+jBQV0kO3W5kaTk= Subject key identifier: F6:1B:D4:59:43:55:78:8A:93:81:BC:A5:19:0D:F0:86:D2:F2:90:01 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 16475A6CDE543C2037D3A26CF4DE63AE3E3B1CC1 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa Signing time: Thu 08 Oct 2026 19:34:33 +0000 ROA not before: Thu 08 Oct 2026 19:29:33 +0000 ROA not after: Thu 07 Oct 2027 19:34:33 +0000 asID: 209710 IP address blocks: 2a14:7580:ff50::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 09:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:47:5a:6c:de:54:3c:20:37:d3:a2:6c:f4:de:63:ae:3e:3b:1c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Oct 8 19:29:33 2026 GMT Not After : Oct 7 19:34:33 2027 GMT Subject: CN=F61BD4594355788A9381BCA5190DF086D2F29001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:8a:93:2a:a6:13:a4:84:f0:5e:c2:a1:fe: 3a:6c:3e:c1:e4:23:e0:a6:e9:5e:ef:d3:5c:b9:13: 0a:34:c1:19:24:e7:bf:e9:fc:72:2a:c5:a3:7a:92: 2c:10:62:1e:7d:1a:6c:30:d1:5f:89:62:96:2e:b3: 65:20:2f:ed:42:0c:7d:7b:92:1d:21:f4:91:ea:a9: 5b:df:44:bf:ef:2d:94:5b:a2:6f:d8:61:9b:35:94: b0:21:bd:12:ec:1c:2f:48:38:24:a3:43:81:c0:74: 69:8e:8d:73:9a:9c:7d:7a:45:b2:4e:28:61:b3:a0: 27:a5:5d:51:d0:44:ea:22:18:d3:dc:18:51:2a:99: ca:b9:c7:6e:20:b5:82:51:a0:ad:1f:69:d3:7d:78: b1:aa:8b:22:83:e2:6b:96:71:b7:24:0e:cb:24:82: 8e:8d:0a:be:03:f5:94:8e:e8:2a:9c:35:f7:12:6d: bd:2e:f6:3b:6e:b0:85:bb:d7:17:3c:93:39:3b:e5: d7:ec:23:a8:84:56:ec:bd:ed:16:29:bd:ec:c8:2c: 13:4a:68:00:9b:dc:0f:88:ab:83:c6:87:da:60:3d: 7b:f2:2e:da:a1:49:f7:65:b2:d8:0b:93:68:a1:79: 1f:8e:c1:f9:40:2b:ff:ae:1a:78:a2:ba:38:96:ab: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1B:D4:59:43:55:78:8A:93:81:BC:A5:19:0D:F0:86:D2:F2:90:01 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff50::/44 Signature Algorithm: sha256WithRSAEncryption b7:5b:25:5f:dd:dc:ae:e5:a1:28:d1:7f:f3:6f:16:06:69:1e: 1f:81:49:09:93:f7:2b:dd:54:36:3d:4d:d7:ce:52:08:bc:54: 16:76:d7:22:47:5e:86:b6:a8:85:10:11:ce:31:3e:d8:66:3b: 2e:ba:25:9d:e4:31:26:2e:f8:ad:bd:57:a5:5d:25:1e:05:63: 7d:6f:88:da:d6:be:24:5b:a8:f3:88:c4:98:37:37:c9:4c:f8: 6e:43:64:a1:33:2c:86:a7:73:82:5c:a0:30:db:14:76:2b:5c: 4c:8e:27:e2:97:24:78:8d:af:78:f0:36:a4:6b:66:38:7a:94: db:06:98:62:99:86:89:fb:71:fc:66:b6:42:b0:2c:30:45:48: 1b:b5:f6:e5:83:90:2f:67:43:80:7e:8d:e1:39:2d:c2:fe:69: 3e:b5:33:14:5e:6b:dd:be:23:04:66:87:0f:bf:74:c7:57:fd: fc:91:00:9c:09:68:18:f3:d4:15:a5:cb:d8:45:3b:d0:e8:95: ce:c7:be:2f:90:de:c6:ab:7b:e5:fe:7b:b2:71:40:c2:81:68: cc:54:6a:c2:44:f3:fa:dd:24:fa:28:5f:b4:12:06:9c:22:a9: 85:90:f1:4c:45:aa:38:29:24:b4:a5:21:ac:1c:f9:5c:f5:af: a7:3d:1b:23 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFkdabN5UPCA306Js9N5jrj47HMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjEwMDgxOTI5MzNaFw0yNzEwMDcxOTM0MzNaMDMxMTAvBgNV BAMTKEY2MUJENDU5NDM1NTc4OEE5MzgxQkNBNTE5MERGMDg2RDJGMjkwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX34qTKqYTpITwXsKh/jpsPsHk I+Cm6V7v01y5Ewo0wRkk57/p/HIqxaN6kiwQYh59Gmww0V+JYpYus2UgL+1CDH17 kh0h9JHqqVvfRL/vLZRbom/YYZs1lLAhvRLsHC9IOCSjQ4HAdGmOjXOanH16RbJO KGGzoCelXVHQROoiGNPcGFEqmcq5x24gtYJRoK0fadN9eLGqiyKD4muWcbckDssk go6NCr4D9ZSO6CqcNfcSbb0u9jtusIW71xc8kzk75dfsI6iEVuy97RYpvezILBNK aACb3A+Iq4PGh9pgPXvyLtqhSfdlstgLk2iheR+OwflAK/+uGniiujiWq/vLAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU9hvUWUNVeIqTgbylGQ3whtLykAEwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gP9QMA0GCSqGSIb3DQEBCwUAA4IBAQC3 WyVf3dyu5aEo0X/zbxYGaR4fgUkJk/cr3VQ2PU3XzlIIvFQWdtciR16GtqiFEBHO MT7YZjsuuiWd5DEmLvitvVelXSUeBWN9b4ja1r4kW6jziMSYNzfJTPhuQ2ShMyyG p3OCXKAw2xR2K1xMjifilyR4ja948Daka2Y4epTbBphimYaJ+3H8ZrZCsCwwRUgb tfblg5AvZ0OAfo3hOS3C/mk+tTMUXmvdviMEZocPv3THV/38kQCcCWgY89QVpcvY RTvQ6JXOx74vkN7Gq3vl/nuycUDCgWjMVGrCRPP63ST6KF+0EgacIqmFkPFMRao4 KSS0pSGsHPlc9a+nPRsj -----END CERTIFICATE-----Generated at Sun Oct 11 03:53:19 2026 by rpki-client