$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa File: 326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa (raw, json) Hash identifier: F5inQOiSNImj2gBvrsVqMCS17ZhaQcVsyimtR4sjAVw= Subject key identifier: 55:FA:E4:78:38:A7:DF:00:10:04:5A:0D:C3:E6:CF:2B:29:C3:10:BA Certificate issuer: /CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Certificate serial: 144B573903CF280C0BED88966DC881E3507641EB Authority key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa Signing time: Sat 09 May 2026 12:17:24 +0000 ROA not before: Sat 09 May 2026 12:12:24 +0000 ROA not after: Sat 08 May 2027 12:17:24 +0000 asID: 214344 IP address blocks: 2a14:7580:fa20::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4b:57:39:03:cf:28:0c:0b:ed:88:96:6d:c8:81:e3:50:76:41:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5 Validity Not Before: May 9 12:12:24 2026 GMT Not After : May 8 12:17:24 2027 GMT Subject: CN=55FAE47838A7DF0010045A0DC3E6CF2B29C310BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:9a:93:13:32:6f:b2:83:99:a9:f3:9f:46: 62:ab:3b:97:9c:03:0e:a8:c5:17:37:33:61:93:2f: 96:11:4f:7a:d0:0e:4c:f0:7d:d8:37:c7:5a:70:36: c6:ac:89:33:c7:4d:5d:2f:9f:67:4d:d6:42:b4:0e: c3:18:c1:e2:15:b8:c4:50:c8:28:8d:e9:80:6e:73: bb:eb:45:e8:3e:49:07:b8:d6:7c:35:52:c6:c0:b9: 36:ae:51:47:96:ce:0d:22:04:1c:6e:46:61:3c:0a: 41:5b:02:a0:fb:b7:93:a3:db:fd:5d:d0:2b:06:04: 76:53:27:e6:be:e8:66:7d:f3:32:39:12:c7:44:8d: aa:34:c5:4c:04:67:44:0d:62:a2:d1:34:78:dc:4f: 29:28:49:eb:6c:aa:41:43:f2:03:20:0d:88:4f:72: dc:7d:5a:1d:59:58:d2:7e:de:f4:47:9b:1c:c7:ca: 8f:0f:ab:da:81:14:f3:b5:bb:40:69:58:51:b0:3d: 81:f1:4b:93:b1:74:f8:94:42:34:18:a2:7f:e4:bb: b6:28:36:a3:c1:4e:b7:bb:e4:8b:74:97:10:cd:74: 83:84:4e:a1:31:98:b1:cd:0e:0b:29:70:6a:1c:04: 48:7c:68:3f:6e:bc:78:37:c1:18:a4:25:b7:0b:77: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:E4:78:38:A7:DF:00:10:04:5A:0D:C3:E6:CF:2B:29:C3:10:BA X509v3 Authority Key Identifier: keyid:77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/326131343a373538303a666132303a3a2f34342d3434203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fa20::/44 Signature Algorithm: sha256WithRSAEncryption 0f:bc:ab:c3:df:d0:22:f7:57:37:eb:0f:9a:9e:77:14:9b:dc: 94:7c:3f:0c:e6:38:31:23:83:0c:a1:62:5a:d3:5a:22:6c:61: 1d:d2:48:f1:ce:29:4c:38:ce:6f:1b:8c:9b:a4:3e:7e:3c:d9: 9c:5d:c3:7a:13:12:75:bf:ad:c5:60:5d:8a:a4:14:a4:29:cc: 8a:eb:c1:08:1c:3c:3b:8f:fe:99:17:36:a3:bd:8d:60:94:1e: 3d:5b:7e:a7:8a:e4:d9:4e:79:11:66:25:cb:32:8c:79:20:a2: bc:3b:20:68:be:0e:6f:40:c4:e7:49:2b:18:8d:a8:46:fa:f3: c3:cc:61:b7:e0:6c:c8:bb:ae:b1:fa:99:99:d1:f5:b3:cd:e5: 25:69:a2:0d:2c:23:e7:90:88:e8:7b:98:2d:3b:dc:46:0b:43: b4:40:9b:89:4e:1a:74:42:c9:f5:a7:e8:9a:09:97:62:93:77: 1b:b0:86:eb:61:b3:9d:c7:a4:8c:48:89:dc:d5:83:ef:56:4f: 1d:df:ca:56:31:ce:69:c2:4f:ca:94:28:2b:63:aa:74:45:4b: c7:83:26:8c:49:a2:2c:31:21:54:e7:18:43:0e:2d:1f:92:37: d9:32:10:50:68:33:c1:9c:e6:18:26:f2:c6:b6:f5:38:65:94: 6a:46:85:09 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFEtXOQPPKAwL7YiWbciB41B2QeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVF RkMzRURBNTAeFw0yNjA1MDkxMjEyMjRaFw0yNzA1MDgxMjE3MjRaMDMxMTAvBgNV BAMTKDU1RkFFNDc4MzhBN0RGMDAxMDA0NUEwREMzRTZDRjJCMjlDMzEwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEg5qTEzJvsoOZqfOfRmKrO5ec Aw6oxRc3M2GTL5YRT3rQDkzwfdg3x1pwNsasiTPHTV0vn2dN1kK0DsMYweIVuMRQ yCiN6YBuc7vrReg+SQe41nw1UsbAuTauUUeWzg0iBBxuRmE8CkFbAqD7t5Oj2/1d 0CsGBHZTJ+a+6GZ98zI5EsdEjao0xUwEZ0QNYqLRNHjcTykoSetsqkFD8gMgDYhP ctx9Wh1ZWNJ+3vRHmxzHyo8Pq9qBFPO1u0BpWFGwPYHxS5OxdPiUQjQYon/ku7Yo NqPBTre75It0lxDNdIOETqExmLHNDgspcGocBEh8aD9uvHg3wRikJbcLd3JnAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUVfrkeDin3wAQBFoNw+bPKynDELowHwYDVR0j BBgwFoAUd+TSPQ/azuKTPZptMDPN9e/D7aUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzEvNzdFNEQyM0QwRkRBQ0VFMjkzM0Q5QTZEMzAzM0NERjVFRkMzRURBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83N0U0RDIzRDBGREFDRUUyOTMzRDlBNkQz MDMzQ0RGNUVGQzNFREE1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iOTZiNjExMy04NWVhLTRmYzItYWVkNC0xZjg2NWQwYWQ0NDQvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjEzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPogMA0GCSqGSIb3DQEBCwUAA4IBAQAP vKvD39Ai91c36w+anncUm9yUfD8M5jgxI4MMoWJa01oibGEd0kjxzilMOM5vG4yb pD5+PNmcXcN6ExJ1v63FYF2KpBSkKcyK68EIHDw7j/6ZFzajvY1glB49W36niuTZ TnkRZiXLMox5IKK8OyBovg5vQMTnSSsYjahG+vPDzGG34GzIu66x+pmZ0fWzzeUl aaINLCPnkIjoe5gtO9xGC0O0QJuJThp0Qsn1p+iaCZdik3cbsIbrYbOdx6SMSInc 1YPvVk8d38pWMc5pwk/KlCgrY6p0RUvHgyaMSaIsMSFU5xhDDi0fkjfZMhBQaDPB nOYYJvLGtvU4ZZRqRoUJ -----END CERTIFICATE-----Generated at Wed May 13 10:22:51 2026 by rpki-client