$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463363a3a2f34372d3438203d3e20323135393536.roa File: 326131343a373538303a656463363a3a2f34372d3438203d3e20323135393536.roa (raw, json) Hash identifier: CDZ5Uw4jubx9y6TEf6PKZgKyr2aXvHf0g4lqLWcyWVg= Subject key identifier: 1A:5C:37:FD:DC:91:1B:B4:7E:C6:6D:FE:98:62:55:91:4B:A9:C9:1B Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 57B80219606FFB2F7ABC5E37B8BBCDAA88B29CCC Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463363a3a2f34372d3438203d3e20323135393536.roa Signing time: Tue 12 May 2026 06:53:27 +0000 ROA not before: Tue 12 May 2026 06:48:27 +0000 ROA not after: Tue 11 May 2027 06:53:27 +0000 asID: 215956 IP address blocks: 2a14:7580:edc6::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 01:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b8:02:19:60:6f:fb:2f:7a:bc:5e:37:b8:bb:cd:aa:88:b2:9c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: May 12 06:48:27 2026 GMT Not After : May 11 06:53:27 2027 GMT Subject: CN=1A5C37FDDC911BB47EC66DFE986255914BA9C91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:15:7a:05:3c:43:ef:79:60:71:36:21:69: fe:17:51:63:e5:e2:ae:c9:55:71:03:f7:68:30:06: ca:9c:a5:85:c0:99:ad:30:b3:a4:4f:1a:11:58:45: 67:88:fb:94:6f:c7:ac:d3:ee:6a:49:00:a1:16:37: 95:34:84:9a:9a:70:d5:59:d9:48:af:9c:53:0c:89: d9:55:49:dd:b9:ff:13:d8:6b:f9:98:01:27:93:4d: 30:11:a1:86:96:cf:ce:cb:63:d7:0b:6d:68:71:81: cf:f7:42:9b:f9:71:40:42:e2:fe:52:af:8c:de:e6: 04:ab:e9:3c:47:cf:3e:06:8d:82:3d:7e:87:d8:cb: 2b:f7:01:6d:4b:d6:c9:5e:0e:a0:39:de:bc:b0:d4: 0f:50:a1:14:c3:7a:90:a6:a7:86:76:13:e9:3f:6d: 7e:a9:79:84:1d:ca:4a:39:82:ba:d7:ae:18:95:06: 97:dc:c5:c9:e8:e8:eb:50:ee:13:da:fe:bc:1c:8d: e1:dc:72:5c:aa:5a:cc:a8:6e:f0:80:3e:32:aa:46: 41:48:6d:f6:2c:b5:f0:0c:35:fa:52:f4:a7:e9:10: e2:3f:ea:a6:be:d1:64:26:7e:76:26:bc:d8:d9:63: e6:50:47:6d:5d:ea:2b:f5:74:cb:06:20:11:ed:9d: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:37:FD:DC:91:1B:B4:7E:C6:6D:FE:98:62:55:91:4B:A9:C9:1B X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656463363a3a2f34372d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:edc6::/47 Signature Algorithm: sha256WithRSAEncryption b1:0b:90:78:11:87:fb:85:9c:f1:01:8c:ac:da:4f:13:1a:21: 41:77:a7:a7:f5:08:f0:db:e6:c5:b2:95:2c:93:dd:df:13:c7: 9a:21:99:9d:7b:45:65:87:e2:8d:39:4f:59:1d:bd:c9:dc:96: 1e:e5:cd:fe:05:32:1b:4a:31:44:c2:a6:b4:b8:83:66:52:a6: 6c:94:1f:15:b8:73:b3:30:2b:b9:eb:eb:37:49:fb:ee:97:2d: 28:ba:67:62:fd:c3:99:a5:bf:da:52:57:24:2b:c2:ee:ef:5c: ac:a7:49:e7:dd:b4:20:a9:b1:a2:2e:5f:fd:40:26:c1:c3:5d: 4d:eb:81:09:03:65:b9:58:a6:ed:26:f4:c6:05:45:17:c0:57: 40:67:18:b5:82:a4:6d:6a:a7:7d:05:24:9e:2c:64:17:af:75: f6:c3:c6:de:d2:aa:d2:64:b9:2b:79:bf:a6:c2:46:61:05:7d: 64:a2:3f:ec:a5:e3:b2:d5:cb:f3:0f:a6:c6:1f:2d:90:9b:5d: 38:0c:b8:05:4c:c2:fe:f8:f7:5f:6a:a3:e0:2b:b5:ce:e3:f6: 02:8f:8c:a1:d8:73:24:23:45:ae:95:ca:ec:93:2d:21:9d:b5: 9c:fd:cf:da:d0:bf:35:fb:8b:f2:9e:ac:de:a0:f4:58:61:9a: 5c:80:a1:7a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUV7gCGWBv+y96vF43uLvNqoiynMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNjA1MTIwNjQ4MjdaFw0yNzA1MTEwNjUzMjdaMDMxMTAvBgNV BAMTKDFBNUMzN0ZEREM5MTFCQjQ3RUM2NkRGRTk4NjI1NTkxNEJBOUM5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssRV6BTxD73lgcTYhaf4XUWPl 4q7JVXED92gwBsqcpYXAma0ws6RPGhFYRWeI+5Rvx6zT7mpJAKEWN5U0hJqacNVZ 2UivnFMMidlVSd25/xPYa/mYASeTTTARoYaWz87LY9cLbWhxgc/3Qpv5cUBC4v5S r4ze5gSr6TxHzz4GjYI9fofYyyv3AW1L1sleDqA53ryw1A9QoRTDepCmp4Z2E+k/ bX6peYQdyko5grrXrhiVBpfcxcno6OtQ7hPa/rwcjeHcclyqWsyobvCAPjKqRkFI bfYstfAMNfpS9KfpEOI/6qa+0WQmfnYmvNjZY+ZQR21d6iv1dMsGIBHtnSpBAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGlw3/dyRG7R+xm3+mGJVkUupyRswHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQ2MzM2M2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO3GMA0GCSqGSIb3DQEBCwUAA4IBAQCx C5B4EYf7hZzxAYys2k8TGiFBd6en9Qjw2+bFspUsk93fE8eaIZmde0Vlh+KNOU9Z Hb3J3JYe5c3+BTIbSjFEwqa0uINmUqZslB8VuHOzMCu56+s3Sfvuly0oumdi/cOZ pb/aUlckK8Lu71ysp0nn3bQgqbGiLl/9QCbBw11N64EJA2W5WKbtJvTGBUUXwFdA Zxi1gqRtaqd9BSSeLGQXr3X2w8be0qrSZLkreb+mwkZhBX1koj/speOy1cvzD6bG Hy2Qm104DLgFTML++PdfaqPgK7XO4/YCj4yh2HMkI0Wulcrsky0hnbWc/c/a0L81 +4vynqzeoPRYYZpcgKF6 -----END CERTIFICATE-----Generated at Wed May 13 16:00:28 2026 by rpki-client