$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: loAr9lftLZ3vwuvJmyBvS0IHmVlrS0vLLB8SxJIq1d8= Subject key identifier: 70:6F:CC:A0:94:F3:2A:7B:31:60:B1:00:C9:F3:8B:52:B5:D8:1B:1D Certificate issuer: /CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Certificate serial: 78149BEC8AB570A0653F178F3F88D3A5017B32AB Authority key identifier: 62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa Signing time: Sat 02 May 2026 08:30:26 +0000 ROA not before: Sat 02 May 2026 08:25:26 +0000 ROA not after: Sat 01 May 2027 08:30:26 +0000 asID: 214344 IP address blocks: 2a14:7581:9999::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:14:9b:ec:8a:b5:70:a0:65:3f:17:8f:3f:88:d3:a5:01:7b:32:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536 Validity Not Before: May 2 08:25:26 2026 GMT Not After : May 1 08:30:26 2027 GMT Subject: CN=706FCCA094F32A7B3160B100C9F38B52B5D81B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:52:ad:10:94:a6:51:47:7b:25:b7:43:1e: a8:aa:4f:10:a8:af:95:36:e8:bb:dd:f4:dd:cf:b0: 74:87:62:ba:0a:33:a3:53:07:85:74:5d:75:1b:ae: 6c:dc:05:4b:99:b3:05:0c:0c:2d:d3:d2:15:63:ea: d8:ad:9b:f3:0c:09:62:96:59:4b:6b:30:27:d3:0e: 87:6b:4b:43:d1:f1:ac:33:0b:1a:71:fa:59:88:25: f4:f1:d4:13:e7:6a:4b:c4:04:b3:39:03:01:48:b7: 25:4a:ff:29:6b:69:4c:83:bc:2b:85:cc:94:8d:75: fb:7a:91:96:12:19:44:24:2b:a2:1a:ce:de:cb:d9: 35:f7:37:81:f2:56:31:9d:93:50:6d:6c:2c:48:52: 8f:47:c9:d8:09:74:bc:14:d8:c1:1b:2c:f0:29:40: 2d:5c:47:49:c0:92:21:ca:8e:fc:c0:15:8c:19:13: 68:3b:81:64:dc:1e:e5:5d:81:0f:c6:71:46:a1:d1: 66:f1:96:3c:f7:1c:01:91:25:0e:e8:05:5f:a6:ba: ab:a7:b4:c8:d4:d8:82:b5:35:9e:cd:28:91:45:8b: ba:5f:b3:2d:d5:e5:37:0d:2f:71:01:55:da:76:39: d3:92:34:83:d5:56:2a:e7:0b:fc:08:c0:87:aa:51: 3c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6F:CC:A0:94:F3:2A:7B:31:60:B1:00:C9:F3:8B:52:B5:D8:1B:1D X509v3 Authority Key Identifier: keyid:62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9999::/48 Signature Algorithm: sha256WithRSAEncryption c5:8b:d1:38:96:93:4b:4f:b6:81:cf:64:54:ee:a6:53:7c:cf: bf:73:8b:2d:d0:08:19:7b:11:c2:d5:21:33:a8:22:6c:6c:25: e6:21:ea:5e:c0:ca:ff:35:60:9b:85:0b:9e:66:47:fe:1e:01: 6c:00:d5:03:b0:7d:be:e8:df:2e:f0:eb:5f:7c:91:c3:29:4c: 37:74:bc:5d:05:3d:5a:2e:d7:aa:0b:3e:3b:c0:17:08:bd:8b: 11:70:06:b8:a4:4c:31:b9:23:1a:4b:0d:e6:09:a4:08:d4:a4: 10:a8:0e:7c:06:e5:64:13:8c:a8:eb:c6:63:d5:94:7e:e3:ed: cd:75:80:d9:59:53:e1:4d:e3:63:b8:a2:5f:95:2a:a6:59:da: 58:9b:ce:bf:05:38:ba:88:17:82:1f:f4:6c:f6:ed:e4:41:0f: c9:f5:89:65:00:b7:d6:f3:0b:7c:59:b0:02:42:04:f4:ce:33: ed:39:ad:3e:71:ad:c1:9e:ea:d9:f2:71:6a:8a:8a:73:80:e9: 7d:86:82:78:a2:88:7a:04:60:51:15:33:06:9d:ef:32:21:ac: 8e:46:85:24:0a:cd:d3:20:d2:f8:fa:ea:52:5e:49:c6:e5:ea: 96:c8:16:1b:25:88:16:70:5b:4c:4b:72:5a:0c:9d:22:e2:63: 9c:1c:05:ff -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUeBSb7Iq1cKBlPxePP4jTpQF7MqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5 MkIyMjUzNjAeFw0yNjA1MDIwODI1MjZaFw0yNzA1MDEwODMwMjZaMDMxMTAvBgNV BAMTKDcwNkZDQ0EwOTRGMzJBN0IzMTYwQjEwMEM5RjM4QjUyQjVEODFCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpU1KtEJSmUUd7JbdDHqiqTxCo r5U26Lvd9N3PsHSHYroKM6NTB4V0XXUbrmzcBUuZswUMDC3T0hVj6titm/MMCWKW WUtrMCfTDodrS0PR8awzCxpx+lmIJfTx1BPnakvEBLM5AwFItyVK/ylraUyDvCuF zJSNdft6kZYSGUQkK6Iazt7L2TX3N4HyVjGdk1BtbCxIUo9HydgJdLwU2MEbLPAp QC1cR0nAkiHKjvzAFYwZE2g7gWTcHuVdgQ/GcUah0Wbxljz3HAGRJQ7oBV+muqun tMjU2IK1NZ7NKJFFi7pfsy3V5TcNL3EBVdp2OdOSNIPVVirnC/wIwIeqUTwnAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUcG/MoJTzKnsxYLEAyfOLUrXYGx0wHwYDVR0j BBgwFoAUYtKaBkjubYnZ6aaprBW0ppKyJTYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjk2YjYxMTMtODVlYS00ZmMyLWFlZDQtMWY4NjVkMGFk NDQ0LzIvNjJEMjlBMDY0OEVFNkQ4OUQ5RTlBNkE5QUMxNUI0QTY5MkIyMjUzNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82MkQyOUEwNjQ4RUU2RDg5RDlFOUE2QTlB QzE1QjRBNjkyQjIyNTM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iOTZiNjExMy04NWVhLTRmYzItYWVkNC0xZjg2NWQwYWQ0NDQvMi8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzkzOTM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZmZMA0GCSqGSIb3DQEBCwUAA4IBAQDF i9E4lpNLT7aBz2RU7qZTfM+/c4st0AgZexHC1SEzqCJsbCXmIepewMr/NWCbhQue Zkf+HgFsANUDsH2+6N8u8OtffJHDKUw3dLxdBT1aLteqCz47wBcIvYsRcAa4pEwx uSMaSw3mCaQI1KQQqA58BuVkE4yo68Zj1ZR+4+3NdYDZWVPhTeNjuKJflSqmWdpY m86/BTi6iBeCH/Rs9u3kQQ/J9YllALfW8wt8WbACQgT0zjPtOa0+ca3BnurZ8nFq iopzgOl9hoJ4ooh6BGBRFTMGne8yIayORoUkCs3TINL4+upSXknG5eqWyBYbJYgW cFtMS3JaDJ0i4mOcHAX/ -----END CERTIFICATE-----Generated at Wed May 13 10:16:30 2026 by rpki-client