$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: 9UWTF9iOH6Z8mdDpbREEu5a0hC5xt7Bg4lhZ1je0aZk= Subject key identifier: EE:FA:2F:9D:73:CE:DE:21:36:71:AA:52:57:65:2B:94:8E:24:9A:01 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 1241910CF9981D636A7C15154C1865036B0A4BCE Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa Signing time: Sat 18 Apr 2026 15:34:18 +0000 ROA not before: Sat 18 Apr 2026 15:29:18 +0000 ROA not after: Sat 17 Apr 2027 15:34:18 +0000 asID: 209710 IP address blocks: 2a14:7580:ff53::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:41:91:0c:f9:98:1d:63:6a:7c:15:15:4c:18:65:03:6b:0a:4b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Apr 18 15:29:18 2026 GMT Not After : Apr 17 15:34:18 2027 GMT Subject: CN=EEFA2F9D73CEDE213671AA5257652B948E249A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e5:4c:00:1e:f7:c8:d5:93:ea:6b:73:53:36: 03:69:be:74:a8:53:ba:3d:d9:23:49:1e:25:26:dc: 14:c1:7a:b8:c5:c6:64:f0:0e:0b:24:be:68:ae:79: 05:84:95:b0:41:3e:fd:e0:94:3a:91:17:6b:33:18: 39:9e:39:1b:25:dd:b1:00:82:70:05:86:4a:52:8c: 9c:69:3a:10:b5:f2:b6:39:89:8b:b6:7e:b0:42:61: 5b:42:37:77:d8:cd:9f:ed:60:a6:74:df:07:a7:39: 42:05:b9:36:20:70:c9:8f:d1:a0:26:c8:3f:a8:44: 18:bf:f6:df:a1:92:c7:19:94:db:5a:89:d2:7b:bd: 3a:41:e9:09:25:ce:78:1f:d5:67:ec:a0:09:5d:aa: d6:ac:64:a2:16:2a:19:0b:c9:39:a8:d0:ad:72:7e: 89:49:b3:e4:2c:2b:cf:dc:b8:6c:18:3d:00:45:4c: 8d:54:f6:a3:72:5c:e2:67:db:90:9d:98:2f:74:37: 1c:fe:90:bc:98:a4:15:5b:78:3b:bc:41:d5:8e:71: ed:85:48:67:b7:98:dc:90:8b:68:99:45:f1:fe:9d: c0:39:91:80:01:01:21:ca:0a:21:43:7b:56:36:19: 94:47:5b:8b:f9:3f:26:dc:26:60:27:4b:63:f4:e6: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FA:2F:9D:73:CE:DE:21:36:71:AA:52:57:65:2B:94:8E:24:9A:01 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff53::/48 Signature Algorithm: sha256WithRSAEncryption 85:62:96:43:15:54:f0:18:d0:2e:df:5f:c0:ef:3f:27:f3:38: e4:bd:d9:44:bd:d5:ff:ef:7f:47:4a:9b:c1:27:6a:6f:59:5a: 4d:57:eb:39:f6:bb:54:10:4f:2a:de:9d:14:2e:94:84:5c:a0: 86:58:86:f8:7a:4a:98:a9:bd:ee:3b:87:73:ff:3a:47:2c:3c: db:47:6d:0f:38:b2:10:5b:57:88:74:b0:ea:3c:7b:b3:02:39: 59:61:b3:99:bd:5f:ff:a8:6f:70:13:c6:15:94:ab:d3:c4:2b: d1:15:6b:e5:f4:d4:56:a3:68:97:7a:51:32:47:51:10:8e:9e: 75:7c:2e:14:ec:7c:5a:91:2a:68:1e:97:62:3e:e8:d2:f6:3a: a0:c4:e5:7e:b4:e6:31:8f:ca:49:b8:90:13:dd:1c:f3:65:75: f9:07:20:3c:6d:fc:34:0e:ba:ae:cc:02:32:2f:d0:ef:08:87: 16:86:cb:71:c8:13:5f:0b:0c:19:1f:0e:c4:60:23:8f:2d:de: d1:53:fe:ad:78:1d:76:8c:87:ed:9d:4c:90:07:e9:b8:22:29: 7a:47:34:e5:fc:b8:61:41:5a:09:3e:ae:cc:b5:70:92:c6:ef: 4d:b7:0b:75:1e:16:b4:57:6d:a1:2e:48:f8:87:32:00:8e:a3: c5:49:3c:e6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEkGRDPmYHWNqfBUVTBhlA2sKS84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA0MTgxNTI5MThaFw0yNzA0MTcxNTM0MThaMDMxMTAvBgNV BAMTKEVFRkEyRjlENzNDRURFMjEzNjcxQUE1MjU3NjUyQjk0OEUyNDlBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL5UwAHvfI1ZPqa3NTNgNpvnSo U7o92SNJHiUm3BTBerjFxmTwDgskvmiueQWElbBBPv3glDqRF2szGDmeORsl3bEA gnAFhkpSjJxpOhC18rY5iYu2frBCYVtCN3fYzZ/tYKZ03wenOUIFuTYgcMmP0aAm yD+oRBi/9t+hkscZlNtaidJ7vTpB6Qklzngf1WfsoAldqtasZKIWKhkLyTmo0K1y folJs+QsK8/cuGwYPQBFTI1U9qNyXOJn25CdmC90Nxz+kLyYpBVbeDu8QdWOce2F SGe3mNyQi2iZRfH+ncA5kYABASHKCiFDe1Y2GZRHW4v5PybcJmAnS2P05mv5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU7vovnXPO3iE2capSV2UrlI4kmgEwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9TMA0GCSqGSIb3DQEBCwUAA4IBAQCF YpZDFVTwGNAu31/A7z8n8zjkvdlEvdX/739HSpvBJ2pvWVpNV+s59rtUEE8q3p0U LpSEXKCGWIb4ekqYqb3uO4dz/zpHLDzbR20POLIQW1eIdLDqPHuzAjlZYbOZvV// qG9wE8YVlKvTxCvRFWvl9NRWo2iXelEyR1EQjp51fC4U7HxakSpoHpdiPujS9jqg xOV+tOYxj8pJuJAT3RzzZXX5ByA8bfw0DrquzAIyL9DvCIcWhstxyBNfCwwZHw7E YCOPLd7RU/6teB12jIftnUyQB+m4Iil6RzTl/LhhQVoJPq7MtXCSxu9Ntwt1Hha0 V22hLkj4hzIAjqPFSTzm -----END CERTIFICATE-----Generated at Wed May 13 14:04:44 2026 by rpki-client