$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa File: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (raw, json) Hash identifier: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o= Subject key identifier: FD:D4:6A:15:77:40:7E:EF:72:E8:66:BF:99:54:41:2D:75:2E:A5:2F Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 1B15FE79495B193DFAE0DC3DC8C4B0003A48507B Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa Signing time: Tue 28 Apr 2026 13:37:57 +0000 ROA not before: Tue 28 Apr 2026 13:32:57 +0000 ROA not after: Tue 27 Apr 2027 13:37:57 +0000 asID: 37988 IP address blocks: 2a14:7581:d000::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 15:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:15:fe:79:49:5b:19:3d:fa:e0:dc:3d:c8:c4:b0:00:3a:48:50:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Apr 28 13:32:57 2026 GMT Not After : Apr 27 13:37:57 2027 GMT Subject: CN=FDD46A1577407EEF72E866BF9954412D752EA52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:bc:dd:07:2e:ad:f0:04:d7:8e:3c:9c:b9: b5:94:67:c5:98:d9:2d:2e:be:ad:55:ef:3c:68:64: d3:36:b0:97:36:71:da:31:9d:07:0a:02:d3:74:30: ac:eb:c0:65:38:1b:2a:f8:19:ee:53:2b:77:4f:f8: 0f:87:ce:e2:e4:9a:52:12:12:6e:ac:9c:6a:e5:bb: fc:39:4b:76:82:fe:96:61:ed:55:8d:fe:50:a3:f4: 5b:5c:53:ad:59:c0:bb:b8:eb:85:00:a8:f7:47:a6: ad:40:be:9d:d8:69:37:6b:8c:88:7c:a8:82:54:2b: e0:85:e7:27:d6:79:2d:73:4a:fc:52:05:af:7d:39: c4:c2:0a:da:31:e8:73:92:86:66:94:cc:04:69:12: d0:ce:1d:dd:7f:3c:82:26:9c:cb:e9:bf:15:4c:6c: 1c:fc:a0:78:40:bf:67:c8:8c:66:f7:ba:29:0b:32: 07:a4:bd:3f:3f:d6:49:14:ae:c6:52:e1:f7:09:d8: 24:81:d3:ae:4e:f3:f8:96:ce:6c:9a:d9:8d:22:67: 85:88:ad:04:4a:bd:48:e0:b4:3a:3d:79:b1:05:ae: d0:81:ee:ed:fc:0c:ed:4d:a6:17:b7:01:b4:80:3d: fb:4a:a8:80:b2:f4:c6:81:79:03:8d:eb:b8:ca:d2: 15:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:6A:15:77:40:7E:EF:72:E8:66:BF:99:54:41:2D:75:2E:A5:2F X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d000::/40 Signature Algorithm: sha256WithRSAEncryption 32:8e:58:01:db:c7:4c:27:9f:ef:31:01:c3:a0:ec:9e:05:05: 6e:04:ab:30:52:11:f2:d5:30:89:57:ef:12:f5:bb:3a:cb:4e: 09:79:76:6f:eb:5c:69:ef:6d:dd:7c:9e:4e:0a:58:a8:27:b7: 23:55:16:12:36:4a:85:59:d5:1b:49:50:88:9c:25:1a:11:93: 96:8d:14:94:22:53:55:8b:c6:b6:2c:04:66:da:f5:aa:e1:6f: 83:5e:63:43:58:62:47:af:1a:e9:41:be:5f:49:76:e3:5b:cd: 07:51:a8:95:cd:d2:87:63:90:36:b3:c7:8d:c4:64:2a:bb:7d: 73:30:3e:9a:56:87:bc:bc:94:6f:61:d7:c1:b9:44:1e:58:83: 2f:a7:ca:99:67:7e:0c:3a:4b:04:20:5f:b7:6e:17:68:f6:01: 60:31:55:35:0a:c2:ad:85:8b:39:6a:52:35:46:a8:8e:59:d0: 1f:25:cf:93:5f:8e:49:7c:de:18:fd:c8:ab:30:a0:4d:4c:1e: 01:b9:5b:f7:3f:97:05:c1:bd:00:ee:d5:36:30:b0:18:9a:74: ab:bc:81:38:73:a0:77:83:6d:6f:be:81:e2:05:b2:b6:d8:88: f5:7f:32:63:ab:9b:61:32:f5:2f:59:9b:be:e2:b9:f3:b3:a7: 03:cc:2f:50 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGxX+eUlbGT364Nw9yMSwADpIUHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjA0MjgxMzMyNTdaFw0yNzA0MjcxMzM3NTdaMDMxMTAvBgNV BAMTKEZERDQ2QTE1Nzc0MDdFRUY3MkU4NjZCRjk5NTQ0MTJENzUyRUE1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIC7zdBy6t8ATXjjycubWUZ8WY 2S0uvq1V7zxoZNM2sJc2cdoxnQcKAtN0MKzrwGU4Gyr4Ge5TK3dP+A+HzuLkmlIS Em6snGrlu/w5S3aC/pZh7VWN/lCj9FtcU61ZwLu464UAqPdHpq1Avp3YaTdrjIh8 qIJUK+CF5yfWeS1zSvxSBa99OcTCCtox6HOShmaUzARpEtDOHd1/PIImnMvpvxVM bBz8oHhAv2fIjGb3uikLMgekvT8/1kkUrsZS4fcJ2CSB065O8/iWzmya2Y0iZ4WI rQRKvUjgtDo9ebEFrtCB7u38DO1Nphe3AbSAPftKqICy9MaBeQON67jK0hU9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/dRqFXdAfu9y6Ga/mVRBLXUupS8wHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzMz NzM5MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYHQMA0GCSqGSIb3DQEBCwUAA4IBAQAyjlgB 28dMJ5/vMQHDoOyeBQVuBKswUhHy1TCJV+8S9bs6y04JeXZv61xp723dfJ5OClio J7cjVRYSNkqFWdUbSVCInCUaEZOWjRSUIlNVi8a2LARm2vWq4W+DXmNDWGJHrxrp Qb5fSXbjW80HUaiVzdKHY5A2s8eNxGQqu31zMD6aVoe8vJRvYdfBuUQeWIMvp8qZ Z34MOksEIF+3bhdo9gFgMVU1CsKthYs5alI1RqiOWdAfJc+TX45JfN4Y/cirMKBN TB4BuVv3P5cFwb0A7tU2MLAYmnSrvIE4c6B3g21vvoHiBbK22Ij1fzJjq5thMvUv WZu+4rnzs6cDzC9Q -----END CERTIFICATE-----Generated at Wed May 13 05:49:08 2026 by rpki-client