$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: oduxdCtQvXNc6ctPbCrLlRtfzRRekU/B8PphIdwPh98= Subject key identifier: 7B:CE:06:66:22:13:89:9E:90:78:A7:6D:1E:9E:C7:5B:DE:C3:CC:D5 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 1759F122E5CE1071E052AA979DE01BE450655B64 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa Signing time: Tue 21 Apr 2026 08:34:21 +0000 ROA not before: Tue 21 Apr 2026 08:29:21 +0000 ROA not after: Tue 20 Apr 2027 08:34:21 +0000 asID: 209710 IP address blocks: 2a14:7580:ff54::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:59:f1:22:e5:ce:10:71:e0:52:aa:97:9d:e0:1b:e4:50:65:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Apr 21 08:29:21 2026 GMT Not After : Apr 20 08:34:21 2027 GMT Subject: CN=7BCE06662213899E9078A76D1E9EC75BDEC3CCD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:62:6e:67:e1:06:db:d6:9c:27:01:c6:7d: ff:ee:8b:c5:f5:7b:be:0f:5d:02:8c:13:9d:6d:79: db:92:d6:c9:a0:cd:06:ec:3f:93:de:64:8d:0a:39: 58:2b:67:f6:ce:f3:35:cd:43:cf:81:ea:e1:1b:fa: c3:08:d2:9c:bb:9a:a1:df:57:83:43:6e:b9:6a:d0: 72:02:59:4b:1c:d0:f0:94:7f:2d:1f:14:71:c1:bf: fc:35:62:87:41:9c:8c:2c:32:d3:8f:60:d5:57:aa: 2b:62:e3:e4:4d:d5:10:93:e4:c2:fa:90:7d:64:35: 81:03:77:07:4c:a6:14:d9:16:fa:ad:34:ab:48:3c: 00:b7:dc:8f:c6:93:ac:c2:7d:dd:3f:b5:90:e7:74: bb:c5:05:69:2a:c5:2a:97:cc:3e:fa:b3:ab:c1:51: 44:3e:70:27:5b:a2:22:fc:1f:2d:20:0a:c5:eb:07: 33:15:c4:72:d6:fd:a5:33:b9:d4:81:63:88:28:ed: 47:3b:f9:6d:a3:27:c1:ed:21:77:a1:22:2b:56:eb: 37:ac:41:6b:ad:c9:17:69:3c:3b:f0:ae:3d:3b:5e: 81:24:95:b3:53:e8:2c:c7:1a:53:98:d1:fe:d2:31: 5f:63:e9:88:54:e7:8d:5c:55:a6:8b:a1:f9:15:9f: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:06:66:22:13:89:9E:90:78:A7:6D:1E:9E:C7:5B:DE:C3:CC:D5 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff54::/48 Signature Algorithm: sha256WithRSAEncryption 13:41:45:b9:73:52:cf:ad:7e:7d:7d:da:00:29:f6:20:34:da: 9a:a2:12:e6:3e:83:18:7a:c4:19:e2:7b:f0:f4:17:3d:a2:14: 55:c0:68:c8:0e:51:d0:58:83:8a:2a:98:c2:45:0b:9e:33:24: 1b:93:bd:7d:4c:b6:25:fd:a8:ed:c6:04:ac:30:fb:40:18:70: 12:d3:1c:62:1f:25:bb:fa:a0:fd:7c:01:55:12:2e:90:ab:12: df:1d:5a:bc:c0:5d:9f:5d:0f:cc:e6:92:0e:1d:db:18:aa:28: 32:27:00:7d:ca:a6:4b:75:22:f9:5e:64:36:f3:62:68:34:2c: 29:96:34:45:aa:b8:94:1f:21:10:b5:d8:1b:88:80:64:3b:70: f9:44:f7:be:f8:0a:2a:4f:cc:de:11:01:19:bf:4e:f4:4f:0b: bd:3e:b7:23:f8:68:50:d8:aa:76:ad:c8:36:91:c2:44:8e:d5: ec:26:5d:ef:4b:06:0c:96:17:7d:22:26:63:75:af:6f:de:b9: 81:c1:a6:d6:31:cb:26:8d:3f:2a:73:57:76:7f:56:31:f3:f7: 5c:8d:4a:4e:e3:f8:c1:d0:66:b0:73:bb:a5:bd:15:5b:c9:5c: 94:b1:f0:21:64:6b:ce:d6:15:33:5d:c0:a7:c1:38:3c:9f:54: 7d:08:0b:45 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUF1nxIuXOEHHgUqqXneAb5FBlW2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA0MjEwODI5MjFaFw0yNzA0MjAwODM0MjFaMDMxMTAvBgNV BAMTKDdCQ0UwNjY2MjIxMzg5OUU5MDc4QTc2RDFFOUVDNzVCREVDM0NDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltmJuZ+EG29acJwHGff/ui8X1 e74PXQKME51teduS1smgzQbsP5PeZI0KOVgrZ/bO8zXNQ8+B6uEb+sMI0py7mqHf V4NDbrlq0HICWUsc0PCUfy0fFHHBv/w1YodBnIwsMtOPYNVXqiti4+RN1RCT5ML6 kH1kNYEDdwdMphTZFvqtNKtIPAC33I/Gk6zCfd0/tZDndLvFBWkqxSqXzD76s6vB UUQ+cCdboiL8Hy0gCsXrBzMVxHLW/aUzudSBY4go7Uc7+W2jJ8HtIXehIitW6zes QWutyRdpPDvwrj07XoEklbNT6CzHGlOY0f7SMV9j6YhU541cVaaLofkVny5lAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUe84GZiITiZ6QeKdtHp7HW97DzNUwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9UMA0GCSqGSIb3DQEBCwUAA4IBAQAT QUW5c1LPrX59fdoAKfYgNNqaohLmPoMYesQZ4nvw9Bc9ohRVwGjIDlHQWIOKKpjC RQueMyQbk719TLYl/ajtxgSsMPtAGHAS0xxiHyW7+qD9fAFVEi6QqxLfHVq8wF2f XQ/M5pIOHdsYqigyJwB9yqZLdSL5XmQ282JoNCwpljRFqriUHyEQtdgbiIBkO3D5 RPe++AoqT8zeEQEZv070Twu9Prcj+GhQ2Kp2rcg2kcJEjtXsJl3vSwYMlhd9IiZj da9v3rmBwabWMcsmjT8qc1d2f1Yx8/dcjUpO4/jB0Gawc7ulvRVbyVyUsfAhZGvO 1hUzXcCnwTg8n1R9CAtF -----END CERTIFICATE-----Generated at Wed May 13 15:30:05 2026 by rpki-client