$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa File: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (raw, json) Hash identifier: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8= Subject key identifier: A6:1B:A7:07:B7:7E:6A:1B:53:D2:B0:C9:BB:CC:AE:60:90:05:0F:42 Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 6397FC8F3F8FE53F7DF7BF2BFFB166318EEBE743 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa Signing time: Wed 29 Apr 2026 10:37:58 +0000 ROA not before: Wed 29 Apr 2026 10:32:58 +0000 ROA not after: Wed 28 Apr 2027 10:37:58 +0000 asID: 63473 IP address blocks: 2a14:7581:d200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 15:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:97:fc:8f:3f:8f:e5:3f:7d:f7:bf:2b:ff:b1:66:31:8e:eb:e7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Apr 29 10:32:58 2026 GMT Not After : Apr 28 10:37:58 2027 GMT Subject: CN=A61BA707B77E6A1B53D2B0C9BBCCAE6090050F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:97:6e:7e:57:2d:e5:c5:e0:77:ff:9a:01: 07:d4:05:d2:99:58:a1:b1:d8:d4:84:0b:b1:6f:48: b5:cf:d4:e9:63:a8:39:e3:00:e8:a3:0c:77:f8:70: fc:aa:bc:55:03:aa:45:97:a2:0c:24:82:41:b9:62: a9:e7:b6:83:2e:2b:2c:91:65:6d:6d:48:c4:f9:95: 37:52:ae:da:b6:f5:e7:d0:d1:0e:5b:4c:97:f5:9e: 61:0b:78:bd:24:86:16:5e:f4:4a:dc:b6:d7:d5:ec: 8b:46:88:0a:f9:90:f8:51:30:66:77:ec:f9:18:e8: d6:e9:f4:71:57:80:4f:9a:75:a1:94:80:30:fe:5e: d8:3d:95:8a:3b:3a:fe:22:28:f6:b2:f2:5e:ca:01: 0a:d7:9b:6c:e7:99:24:84:3b:7d:74:5d:22:46:75: 5d:77:e6:ac:f5:f9:9c:ad:8a:06:ae:dd:da:02:7e: fc:86:20:34:46:5a:92:28:95:ff:ba:28:0c:6f:fd: 82:06:89:56:57:90:a3:a4:2c:35:86:dc:44:7a:39: 21:59:e8:41:c1:14:a6:a8:14:ca:ae:0b:66:08:a3: 55:1f:1e:46:52:73:89:44:25:c1:eb:53:8d:27:e2: 79:d5:c9:5a:83:78:c2:80:da:c9:13:bc:b5:c8:de: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:A7:07:B7:7E:6A:1B:53:D2:B0:C9:BB:CC:AE:60:90:05:0F:42 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:d200::/40 Signature Algorithm: sha256WithRSAEncryption 5b:77:6f:b4:ef:3c:47:3e:74:4e:23:53:67:2f:86:fa:05:7d: 69:91:ab:d4:77:84:b7:2c:15:6b:84:41:b2:bb:e5:24:1a:32: 85:0a:93:99:0d:a2:eb:c4:94:cf:a1:73:2d:f1:4c:a3:de:98: cd:0b:6f:a0:fa:70:6f:22:19:85:87:dc:0e:f0:d7:e2:68:3a: 67:05:c6:84:03:f7:3c:5f:3c:6d:3d:d3:ba:af:cf:2e:c2:93: 07:48:4c:c2:e5:b5:1f:60:7b:90:b1:43:76:22:7c:da:20:53: a6:f1:0c:1d:ae:a1:0a:bc:02:ff:6c:c5:9c:cb:ba:eb:60:7e: 75:59:ff:4a:39:45:c5:0e:a8:49:1e:5a:7a:da:21:f9:f2:05: a6:34:88:21:80:e2:e6:74:a9:77:f0:24:00:b2:06:2a:75:48: f5:26:74:1a:fa:e9:ae:af:06:d0:1d:a2:62:01:f1:5a:50:4e: 01:ce:f2:b3:bf:0e:67:a0:31:c5:d9:6c:b3:31:e3:4a:f2:63: 86:42:e3:50:96:37:0d:a5:35:14:25:08:f2:4c:69:91:c7:f3: 0e:51:a2:ee:ae:9e:d1:7c:c0:5a:17:03:94:a5:7d:a2:9d:0a: 38:aa:0e:ec:d8:45:6c:a7:0b:8d:42:27:34:2a:8f:ce:99:32: 63:69:48:3d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUY5f8jz+P5T99978r/7FmMY7r50MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNjA0MjkxMDMyNThaFw0yNzA0MjgxMDM3NThaMDMxMTAvBgNV BAMTKEE2MUJBNzA3Qjc3RTZBMUI1M0QyQjBDOUJCQ0NBRTYwOTAwNTBGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QJduflct5cXgd/+aAQfUBdKZ WKGx2NSEC7FvSLXP1OljqDnjAOijDHf4cPyqvFUDqkWXogwkgkG5YqnntoMuKyyR ZW1tSMT5lTdSrtq29efQ0Q5bTJf1nmELeL0khhZe9ErcttfV7ItGiAr5kPhRMGZ3 7PkY6Nbp9HFXgE+adaGUgDD+Xtg9lYo7Ov4iKPay8l7KAQrXm2znmSSEO310XSJG dV135qz1+Zytigau3doCfvyGIDRGWpIolf+6KAxv/YIGiVZXkKOkLDWG3ER6OSFZ 6EHBFKaoFMquC2YIo1UfHkZSc4lEJcHrU40n4nnVyVqDeMKA2skTvLXI3jF3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUphunB7d+ahtT0rDJu8yuYJAFD0IwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNTljMTA2Yy01M2I0LTRlOTItOWZiYS1kNjA4MjdiNWJkYjgvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTY0MzIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzYz MzM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYHSMA0GCSqGSIb3DQEBCwUAA4IBAQBbd2+0 7zxHPnROI1NnL4b6BX1pkavUd4S3LBVrhEGyu+UkGjKFCpOZDaLrxJTPoXMt8Uyj 3pjNC2+g+nBvIhmFh9wO8NfiaDpnBcaEA/c8XzxtPdO6r88uwpMHSEzC5bUfYHuQ sUN2InzaIFOm8QwdrqEKvAL/bMWcy7rrYH51Wf9KOUXFDqhJHlp62iH58gWmNIgh gOLmdKl38CQAsgYqdUj1JnQa+umurwbQHaJiAfFaUE4BzvKzvw5noDHF2WyzMeNK 8mOGQuNQljcNpTUUJQjyTGmRx/MOUaLurp7RfMBaFwOUpX2inQo4qg7s2EVspwuN Qic0Ko/OmTJjaUg9 -----END CERTIFICATE-----Generated at Wed May 13 04:39:45 2026 by rpki-client