$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: 6oVaAmUHgRd5I4Ls+xapNszkxDvRNa6SDHify0SU1pc= Subject key identifier: DF:9F:F1:29:50:94:73:96:CC:2D:FC:6C:44:6D:55:B9:B7:28:F3:97 Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 143DFD818CEFF99787A7C5DC2D8FA4C9F9F162CF Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa Signing time: Thu 19 Mar 2026 12:50:12 +0000 ROA not before: Thu 19 Mar 2026 12:45:12 +0000 ROA not after: Thu 18 Mar 2027 12:50:12 +0000 asID: 204211 IP address blocks: 2a14:7586:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3d:fd:81:8c:ef:f9:97:87:a7:c5:dc:2d:8f:a4:c9:f9:f1:62:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Mar 19 12:45:12 2026 GMT Not After : Mar 18 12:50:12 2027 GMT Subject: CN=DF9FF12950947396CC2DFC6C446D55B9B728F397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:af:b6:05:55:9d:e2:93:93:86:f6:68:8b: 21:db:76:ce:87:b6:df:60:f4:94:4a:aa:ae:6d:09: d7:b0:1f:e6:a6:c0:fb:5e:2d:4f:6f:bd:4d:ff:1b: a8:3c:6f:95:85:a5:24:8f:9e:b2:a7:8c:38:0a:ef: 5e:6d:39:d5:c6:e7:61:3f:6f:05:03:01:80:44:c8: 06:ef:31:05:43:a1:ca:f2:cc:d5:9f:4b:7f:36:c3: af:4b:63:f7:36:08:10:ae:8a:23:91:fb:d6:63:ab: 55:9b:2f:73:17:e9:71:d5:38:1d:e8:16:cb:0e:43: 83:13:71:10:2a:a2:db:7c:6d:ef:8e:bd:d4:9d:d8: 62:ee:5a:da:47:b5:fb:a6:9c:78:33:6f:5c:86:ae: 7d:4f:44:1e:36:a8:f9:e2:ea:4c:79:df:b5:8a:9a: da:05:5f:4f:ec:11:ee:d1:9c:37:2c:a6:37:7e:d7: aa:fd:19:6d:58:96:b3:96:be:28:95:d4:33:c2:7a: 51:68:d6:30:ed:e9:11:c3:d3:c1:03:99:80:76:fa: 3f:e2:ac:3e:64:fa:60:c2:38:0c:b1:b4:e3:17:0a: bf:b6:48:11:c3:95:94:88:fb:5f:e8:fc:ac:48:d4: 53:f9:46:ac:0a:6e:3e:1b:75:9c:c2:dd:4d:32:55: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9F:F1:29:50:94:73:96:CC:2D:FC:6C:44:6D:55:B9:B7:28:F3:97 X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6110::/48 Signature Algorithm: sha256WithRSAEncryption 16:44:35:91:96:90:b7:11:cc:90:6f:74:7b:44:f5:cc:dc:7a: 95:5d:82:a8:30:ba:3f:06:a5:f4:ee:5d:b1:b0:2f:f9:1c:dc: 7b:69:c6:09:9c:54:aa:a6:00:20:4b:b7:cb:0f:d0:55:a1:a5: a5:03:9f:d2:47:20:54:0c:1a:a7:3c:b3:ee:d3:8e:66:1e:18: 41:5b:97:6a:22:c8:01:a3:9e:0a:d5:42:2c:57:64:9b:a7:41: e6:08:95:42:6f:fa:81:31:94:88:83:20:42:96:dd:60:72:13: 7e:63:33:db:2b:22:cf:d8:c8:4b:05:e1:03:9f:60:ab:15:7f: 59:47:1a:c8:c9:35:7f:f8:ee:78:8d:b5:70:c4:ad:9c:ff:bb: d8:13:cb:fb:c5:10:e2:2e:fb:1b:d8:b5:ef:54:a9:84:a5:09: bb:a0:b6:40:c9:79:58:79:3a:94:06:b7:4b:eb:aa:c7:22:0b: 38:05:82:e3:65:77:21:b9:63:18:fa:c9:8d:76:ac:66:a7:30: 48:cf:2f:9c:e2:74:88:de:78:94:02:7c:3e:f7:3e:0e:a7:ee: f7:47:e0:3a:97:f4:27:95:b2:9b:08:0e:02:34:e6:5c:3f:b4: 8c:01:1d:48:56:5d:cf:1d:41:c8:f4:53:75:28:bb:f9:fe:48: 74:4b:e0:de -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFD39gYzv+ZeHp8XcLY+kyfnxYs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjAzMTkxMjQ1MTJaFw0yNzAzMTgxMjUwMTJaMDMxMTAvBgNV BAMTKERGOUZGMTI5NTA5NDczOTZDQzJERkM2QzQ0NkQ1NUI5QjcyOEYzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHK+2BVWd4pOThvZoiyHbds6H tt9g9JRKqq5tCdewH+amwPteLU9vvU3/G6g8b5WFpSSPnrKnjDgK715tOdXG52E/ bwUDAYBEyAbvMQVDocryzNWfS382w69LY/c2CBCuiiOR+9Zjq1WbL3MX6XHVOB3o FssOQ4MTcRAqott8be+OvdSd2GLuWtpHtfumnHgzb1yGrn1PRB42qPni6kx537WK mtoFX0/sEe7RnDcspjd+16r9GW1YlrOWviiV1DPCelFo1jDt6RHD08EDmYB2+j/i rD5k+mDCOAyxtOMXCr+2SBHDlZSI+1/o/KxI1FP5RqwKbj4bdZzC3U0yVXnZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU35/xKVCUc5bMLfxsRG1Vubco85cwHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEQMA0GCSqGSIb3DQEBCwUAA4IBAQAW RDWRlpC3EcyQb3R7RPXM3HqVXYKoMLo/BqX07l2xsC/5HNx7acYJnFSqpgAgS7fL D9BVoaWlA5/SRyBUDBqnPLPu045mHhhBW5dqIsgBo54K1UIsV2Sbp0HmCJVCb/qB MZSIgyBClt1gchN+YzPbKyLP2MhLBeEDn2CrFX9ZRxrIyTV/+O54jbVwxK2c/7vY E8v7xRDiLvsb2LXvVKmEpQm7oLZAyXlYeTqUBrdL66rHIgs4BYLjZXchuWMY+smN dqxmpzBIzy+c4nSI3niUAnw+9z4Op+73R+A6l/QnlbKbCA4CNOZcP7SMAR1IVl3P HUHI9FN1KLv5/kh0S+De -----END CERTIFICATE-----Generated at Wed Mar 25 21:27:13 2026 by rpki-client