$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: VqS5xTgMt4Ve90n9OZrI0nbLdp3XJUGys6dJrhIFmL4= Subject key identifier: 9D:CE:0B:8C:27:40:91:DC:2C:D0:1B:7B:1C:C6:FB:B5:55:23:89:0D Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 611117D520046B763E1940F45868C71414D0F693 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa Signing time: Sat 18 Apr 2026 15:34:19 +0000 ROA not before: Sat 18 Apr 2026 15:29:19 +0000 ROA not after: Sat 17 Apr 2027 15:34:19 +0000 asID: 209710 IP address blocks: 2a14:7580:ff51::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:11:17:d5:20:04:6b:76:3e:19:40:f4:58:68:c7:14:14:d0:f6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Apr 18 15:29:19 2026 GMT Not After : Apr 17 15:34:19 2027 GMT Subject: CN=9DCE0B8C274091DC2CD01B7B1CC6FBB55523890D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:7b:d0:6a:31:cb:a3:4c:e7:3c:69:73:ee: 89:4b:20:84:04:51:ed:a1:a9:8e:06:71:28:1a:d9: 3a:c9:46:3a:f9:6a:1d:ff:aa:50:e6:36:24:a3:f9: 44:0c:1e:45:44:ee:7a:4b:93:1d:cb:19:5e:47:3b: 18:86:7f:fa:9e:65:a2:0b:fd:da:a0:5e:fc:6f:af: 91:fa:d7:69:b5:8e:03:ed:f0:9f:29:3a:08:14:df: d5:9f:5b:42:ad:6f:ca:25:bc:3f:05:f2:4f:86:4e: bb:65:8f:6a:8c:dc:63:87:e6:b1:2e:5e:f2:de:a0: 37:03:d9:1d:bb:bc:9d:d5:c8:4e:e0:04:24:55:04: 2f:65:c8:3a:ff:68:43:10:17:70:ce:3f:02:68:95: c0:c2:1e:12:c9:e3:31:60:b0:8d:a3:92:0f:31:bb: 7f:32:c2:7d:c4:3f:0e:30:af:34:ef:7b:ab:96:56: 89:79:f8:3b:19:f7:b6:15:91:e7:95:40:a2:b2:33: 51:41:47:dc:4f:be:7a:ed:32:a7:66:fb:32:86:05: e4:b1:d1:5f:5b:36:c2:1e:2c:e7:de:b5:5b:35:c3: a8:c4:b7:e4:9d:0f:d4:ff:cd:7e:8d:0d:6f:9c:99: f6:48:f9:ac:b5:ce:7e:f2:f8:96:00:3b:a9:f4:55: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CE:0B:8C:27:40:91:DC:2C:D0:1B:7B:1C:C6:FB:B5:55:23:89:0D X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff51::/48 Signature Algorithm: sha256WithRSAEncryption 3f:21:19:59:04:ec:4f:c5:28:97:86:8c:f6:8e:5e:26:4c:13: c5:90:2d:a5:74:5e:57:bb:e5:c3:91:8c:81:a1:67:87:fc:eb: ac:d5:f9:b4:f1:77:c3:a3:dc:2d:c5:b4:b1:8a:16:02:2d:61: 85:78:9b:cd:5c:b0:eb:77:c4:3a:05:81:b4:f5:4c:c7:78:23: a9:33:c8:16:fd:2b:e4:d3:b7:66:93:43:6c:52:ff:ec:60:7c: 4d:bb:b7:df:6f:69:5d:97:54:92:11:3e:0a:d2:75:aa:3b:4c: 97:49:31:c8:6a:24:ad:d1:9b:56:90:2b:1a:e2:c1:0e:f8:2c: b2:ee:c9:55:97:3a:f0:37:9c:30:d4:4d:23:e3:93:fc:ba:77: bc:f3:54:69:0f:55:8f:19:21:71:2a:3d:6a:00:cd:0d:af:fd: 74:0f:91:47:a2:28:a0:7c:2d:96:42:86:35:50:66:16:ad:12: b2:8e:ee:f1:29:33:28:ee:eb:e6:e1:3b:9b:68:bc:4d:d1:fb: cb:de:05:5c:a4:1c:9d:59:80:9d:7d:fc:54:53:66:d7:55:a4: f0:9c:25:fb:98:c1:16:94:48:3f:af:f8:ce:61:89:ba:e3:38: c9:2b:10:7e:5e:f0:8a:f9:9a:7a:d8:42:d2:72:48:bf:7d:27: f4:10:07:22 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYREX1SAEa3Y+GUD0WGjHFBTQ9pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA0MTgxNTI5MTlaFw0yNzA0MTcxNTM0MTlaMDMxMTAvBgNV BAMTKDlEQ0UwQjhDMjc0MDkxREMyQ0QwMUI3QjFDQzZGQkI1NTUyMzg5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaDHvQajHLo0znPGlz7olLIIQE Ue2hqY4GcSga2TrJRjr5ah3/qlDmNiSj+UQMHkVE7npLkx3LGV5HOxiGf/qeZaIL /dqgXvxvr5H612m1jgPt8J8pOggU39WfW0Ktb8olvD8F8k+GTrtlj2qM3GOH5rEu XvLeoDcD2R27vJ3VyE7gBCRVBC9lyDr/aEMQF3DOPwJolcDCHhLJ4zFgsI2jkg8x u38ywn3EPw4wrzTve6uWVol5+DsZ97YVkeeVQKKyM1FBR9xPvnrtMqdm+zKGBeSx 0V9bNsIeLOfetVs1w6jEt+SdD9T/zX6NDW+cmfZI+ay1zn7y+JYAO6n0VZ5ZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUnc4LjCdAkdws0Bt7HMb7tVUjiQ0wHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9RMA0GCSqGSIb3DQEBCwUAA4IBAQA/ IRlZBOxPxSiXhoz2jl4mTBPFkC2ldF5Xu+XDkYyBoWeH/Ous1fm08XfDo9wtxbSx ihYCLWGFeJvNXLDrd8Q6BYG09UzHeCOpM8gW/Svk07dmk0NsUv/sYHxNu7ffb2ld l1SSET4K0nWqO0yXSTHIaiSt0ZtWkCsa4sEO+Cyy7slVlzrwN5ww1E0j45P8une8 81RpD1WPGSFxKj1qAM0Nr/10D5FHoiigfC2WQoY1UGYWrRKyju7xKTMo7uvm4Tub aLxN0fvL3gVcpBydWYCdffxUU2bXVaTwnCX7mMEWlEg/r/jOYYm64zjJKxB+XvCK +Zp62ELScki/fSf0EAci -----END CERTIFICATE-----Generated at Wed May 13 14:23:14 2026 by rpki-client