$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa File: 326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa (raw, json) Hash identifier: 15ggjMeHqDIREZjw9l6zy4xOfQOxACvn6hmmAmBgsSg= Subject key identifier: 12:8C:4D:19:29:83:AE:BF:74:BF:36:37:CE:41:D4:B7:94:D6:E2:6B Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 079C5F8D8F6A325F941AA4B8544022D3B27C3563 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa Signing time: Thu 19 Mar 2026 02:58:43 +0000 ROA not before: Thu 19 Mar 2026 02:53:43 +0000 ROA not after: Thu 18 Mar 2027 02:58:43 +0000 asID: 204211 IP address blocks: 2a14:7586:6100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9c:5f:8d:8f:6a:32:5f:94:1a:a4:b8:54:40:22:d3:b2:7c:35:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Mar 19 02:53:43 2026 GMT Not After : Mar 18 02:58:43 2027 GMT Subject: CN=128C4D192983AEBF74BF3637CE41D4B794D6E26B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:65:53:05:43:36:13:0b:af:3d:54:74:84: f0:61:74:90:ed:43:50:ac:fc:49:f9:0f:34:1c:c5: fc:1f:5c:59:2d:36:3e:66:4d:a4:c4:59:70:76:11: 1e:e8:06:08:56:cc:53:36:70:10:65:85:b0:65:4d: e2:7d:b6:17:28:e0:e8:da:14:a2:81:32:86:61:6a: c2:e4:6e:7d:0c:4e:5e:af:41:10:4c:c5:62:8c:99: c0:ad:4c:c9:50:2a:3a:b9:55:dd:22:0b:e2:fd:2d: 43:90:e2:f6:25:b3:bf:d5:c9:a5:67:23:2d:5d:db: 37:5e:f3:da:37:a6:d0:41:3a:ce:ae:53:10:23:24: df:12:0c:a9:af:b7:f8:f4:15:15:5b:5b:d8:20:e2: 5b:2c:89:aa:3c:fe:3c:ce:60:0c:07:03:6c:20:6a: e3:8d:c4:48:3e:41:68:fe:e8:ae:2d:69:cd:33:5b: c9:11:6a:2f:54:28:73:cb:e3:5a:d8:55:4e:35:8f: e3:03:12:7f:a5:a0:a0:dd:76:42:cd:20:b8:f5:16: cc:b4:36:a0:06:fb:08:87:46:ad:c4:63:fe:35:d8: ba:22:32:66:1b:de:ca:33:3f:61:21:23:8e:5e:b4: 3a:0e:e8:ea:3a:7f:2d:63:ec:aa:f7:4a:b5:2b:83: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8C:4D:19:29:83:AE:BF:74:BF:36:37:CE:41:D4:B7:94:D6:E2:6B X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130303a3a2f34302d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6100::/40 Signature Algorithm: sha256WithRSAEncryption 32:b6:ec:59:99:39:d4:9a:7f:c2:49:5d:df:61:e1:fc:4c:8f: 1d:c8:98:53:e8:f6:d5:73:e6:4c:12:8b:64:7f:de:be:3d:e4: 65:d8:06:67:10:75:03:60:78:e4:8b:50:c0:84:03:74:a8:da: 64:2e:d5:7d:1a:af:aa:6e:e7:a3:8e:46:c2:32:a8:cf:e1:da: b6:28:20:f8:20:54:ca:86:09:a0:f8:7e:b9:e3:81:c0:7c:4b: 30:29:e2:b9:4d:23:2b:7e:fa:43:08:16:31:a5:32:4a:f4:37: cf:46:d9:5a:42:11:97:98:69:52:9e:3f:6e:5e:58:ea:78:cc: 48:ca:41:2f:5e:6c:4c:4d:b9:09:ea:76:24:38:ef:7e:8f:66: 82:16:84:29:85:02:49:dd:e6:f6:b7:a8:eb:32:33:f0:dd:19: 43:ab:c0:2e:66:12:bb:23:3a:89:e2:e2:d4:52:9a:f2:c1:4d: 41:64:12:f9:1e:2e:d2:04:1a:af:8d:5e:b5:42:ee:d4:89:a0: 53:35:d7:a2:d0:37:9e:10:1e:16:d3:be:bf:bd:3f:8d:84:88: 71:36:0f:90:1c:9a:4a:d7:15:3d:a8:e4:d7:7b:99:bc:86:1f: 82:c4:a8:d2:79:cc:05:a6:88:4d:0d:82:c5:c8:4b:f5:f6:fa: de:1a:6c:87 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUB5xfjY9qMl+UGqS4VEAi07J8NWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAzMTkwMjUzNDNaFw0yNzAzMTgwMjU4NDNaMDMxMTAvBgNV BAMTKDEyOEM0RDE5Mjk4M0FFQkY3NEJGMzYzN0NFNDFENEI3OTRENkUyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1mVTBUM2EwuvPVR0hPBhdJDt Q1Cs/En5DzQcxfwfXFktNj5mTaTEWXB2ER7oBghWzFM2cBBlhbBlTeJ9thco4Oja FKKBMoZhasLkbn0MTl6vQRBMxWKMmcCtTMlQKjq5Vd0iC+L9LUOQ4vYls7/VyaVn Iy1d2zde89o3ptBBOs6uUxAjJN8SDKmvt/j0FRVbW9gg4lssiao8/jzOYAwHA2wg auONxEg+QWj+6K4tac0zW8kRai9UKHPL41rYVU41j+MDEn+loKDddkLNILj1Fsy0 NqAG+wiHRq3EY/412LoiMmYb3sozP2EhI45etDoO6Oo6fy1j7Kr3SrUrg9OtAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUEoxNGSmDrr90vzY3zkHUt5TW4mswHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1hmEwDQYJKoZIhvcNAQELBQADggEBADK2 7FmZOdSaf8JJXd9h4fxMjx3ImFPo9tVz5kwSi2R/3r495GXYBmcQdQNgeOSLUMCE A3So2mQu1X0ar6pu56OORsIyqM/h2rYoIPggVMqGCaD4frnjgcB8SzAp4rlNIyt+ +kMIFjGlMkr0N89G2VpCEZeYaVKeP25eWOp4zEjKQS9ebExNuQnqdiQ4736PZoIW hCmFAknd5va3qOsyM/DdGUOrwC5mErsjOoni4tRSmvLBTUFkEvkeLtIEGq+NXrVC 7tSJoFM116LQN54QHhbTvr+9P42EiHE2D5AcmkrXFT2o5Nd7mbyGH4LEqNJ5zAWm iE0NgsXIS/X2+t4abIc= -----END CERTIFICATE-----Generated at Wed Mar 25 21:27:15 2026 by rpki-client