$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: CqPRVIJ+q90RN8VSTd4vYU1rnp26YUct1kQ2Ab1MyQw= Subject key identifier: C5:39:66:51:27:B1:E8:10:72:AF:C5:F4:8F:19:A9:A6:0C:B0:76:31 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 6B5BD5E6E08ADE39D704D6866C6519005E1F2E40 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa Signing time: Thu 23 Apr 2026 00:34:23 +0000 ROA not before: Thu 23 Apr 2026 00:29:23 +0000 ROA not after: Thu 22 Apr 2027 00:34:23 +0000 asID: 209710 IP address blocks: 2a14:7580:ff55::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5b:d5:e6:e0:8a:de:39:d7:04:d6:86:6c:65:19:00:5e:1f:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Apr 23 00:29:23 2026 GMT Not After : Apr 22 00:34:23 2027 GMT Subject: CN=C539665127B1E81072AFC5F48F19A9A60CB07631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:fa:9b:09:27:93:a9:92:c1:05:fc:79:31: 84:26:ba:fd:9b:28:c8:0d:86:a0:9d:53:66:5b:64: 44:e3:0f:5d:4d:97:c1:36:c2:c2:d4:78:93:d5:2d: a3:af:6f:7f:83:f8:59:f4:13:00:60:ee:b1:fe:71: ce:a6:f6:8a:95:60:a4:1f:dd:58:9a:06:aa:cf:ef: 58:74:cb:6c:b1:21:74:3b:a8:2f:f0:59:bc:28:75: d6:6f:3c:1e:55:cf:c2:bf:90:26:82:5b:5a:3e:88: b5:80:24:db:88:5c:d8:92:e9:dc:ad:55:13:c4:be: fd:dc:b1:fd:48:53:fc:99:2c:56:82:ce:14:23:8e: 30:ed:18:ce:94:e6:4f:15:0b:78:11:7b:d7:d1:db: fc:9d:02:03:e7:3a:f6:2a:46:0f:0c:61:85:4c:0d: 37:df:01:8f:de:92:6c:aa:46:31:20:b2:22:49:dc: 02:08:24:79:68:9e:cb:64:e6:c0:67:9d:6f:21:b3: d9:bc:2c:7b:7d:14:93:0c:63:8a:b1:78:11:3a:f3: 02:58:bd:51:ef:a2:b3:c2:41:ae:88:4f:45:56:d0: 4f:8c:09:42:80:49:19:b8:7a:d0:b4:02:09:13:2a: b2:b7:53:8f:18:37:dd:61:27:0f:e5:7a:91:85:9c: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:39:66:51:27:B1:E8:10:72:AF:C5:F4:8F:19:A9:A6:0C:B0:76:31 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff55::/48 Signature Algorithm: sha256WithRSAEncryption 33:96:4b:1a:15:67:fa:ca:7d:a5:0a:52:32:99:5b:1d:18:e8: 91:01:5e:5c:a4:0f:dc:9a:b2:dd:12:39:bc:b0:34:95:0e:50: 33:e2:59:69:ce:b9:1f:50:b7:b8:77:ae:47:27:c6:4f:e3:77: 6b:57:58:f6:35:e2:eb:9b:8d:ed:ee:65:72:c7:91:14:8d:56: aa:58:41:2b:ad:fd:67:45:db:db:e5:dc:77:85:03:e2:b1:79: ef:a2:ea:55:d2:fc:8a:2f:1f:ed:55:3d:41:2d:ca:8c:e9:3f: b9:9b:ce:70:e4:27:0a:e8:c6:42:8a:3d:78:3a:af:aa:ee:5a: e3:1d:0c:4d:4d:cb:ed:a5:2a:8c:a1:b7:a9:d9:bd:cd:d2:da: 63:a1:07:16:66:dc:8b:25:a6:17:e4:af:b6:ee:ab:ba:69:47: a0:59:92:b6:26:1d:43:be:ba:6b:e8:cc:ac:88:5b:d6:15:e0: 56:8a:f5:32:34:95:9c:1d:b8:30:34:4e:20:ac:49:90:90:b0: cd:ac:ae:ad:a0:57:e0:77:11:95:53:62:23:53:ca:42:b3:0f: 61:da:3d:f8:98:25:ce:9b:9f:91:e1:7c:43:78:b2:72:6a:9e: 36:d2:90:05:e1:a1:ef:4e:32:73:3c:29:fe:b7:ca:66:50:7c: e3:a5:6a:84 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUa1vV5uCK3jnXBNaGbGUZAF4fLkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNjA0MjMwMDI5MjNaFw0yNzA0MjIwMDM0MjNaMDMxMTAvBgNV BAMTKEM1Mzk2NjUxMjdCMUU4MTA3MkFGQzVGNDhGMTlBOUE2MENCMDc2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMPqbCSeTqZLBBfx5MYQmuv2b KMgNhqCdU2ZbZETjD11Nl8E2wsLUeJPVLaOvb3+D+Fn0EwBg7rH+cc6m9oqVYKQf 3ViaBqrP71h0y2yxIXQ7qC/wWbwoddZvPB5Vz8K/kCaCW1o+iLWAJNuIXNiS6dyt VRPEvv3csf1IU/yZLFaCzhQjjjDtGM6U5k8VC3gRe9fR2/ydAgPnOvYqRg8MYYVM DTffAY/ekmyqRjEgsiJJ3AIIJHlonstk5sBnnW8hs9m8LHt9FJMMY4qxeBE68wJY vVHvorPCQa6IT0VW0E+MCUKASRm4etC0AgkTKrK3U48YN91hJw/lepGFnCePAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUxTlmUSex6BByr8X0jxmppgywdjEwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9VMA0GCSqGSIb3DQEBCwUAA4IBAQAz lksaFWf6yn2lClIymVsdGOiRAV5cpA/cmrLdEjm8sDSVDlAz4llpzrkfULe4d65H J8ZP43drV1j2NeLrm43t7mVyx5EUjVaqWEErrf1nRdvb5dx3hQPisXnvoupV0vyK Lx/tVT1BLcqM6T+5m85w5CcK6MZCij14Oq+q7lrjHQxNTcvtpSqMobep2b3N0tpj oQcWZtyLJaYX5K+27qu6aUegWZK2Jh1Dvrpr6MysiFvWFeBWivUyNJWcHbgwNE4g rEmQkLDNrK6toFfgdxGVU2IjU8pCsw9h2j34mCXOm5+R4XxDeLJyap420pAF4aHv TjJzPCn+t8pmUHzjpWqE -----END CERTIFICATE-----Generated at Wed May 13 14:53:52 2026 by rpki-client