$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa File: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (raw, json) Hash identifier: RGywHnxAYLuO6cDdu+OqsmlkwS7ZjWl9Xx30KtT8IYc= Subject key identifier: 82:FF:AE:BF:A5:7B:80:F9:D7:18:EA:FA:57:B6:2C:B2:BC:33:FF:16 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 253200689BA97C8A0B89A764AE46732FD0E04DC3 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa Signing time: Sat 18 Jul 2026 18:18:19 +0000 ROA not before: Sat 18 Jul 2026 18:13:19 +0000 ROA not after: Sat 17 Jul 2027 18:18:19 +0000 asID: 14447 IP address blocks: 2a14:7581:2500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:32:00:68:9b:a9:7c:8a:0b:89:a7:64:ae:46:73:2f:d0:e0:4d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 18 18:13:19 2026 GMT Not After : Jul 17 18:18:19 2027 GMT Subject: CN=82FFAEBFA57B80F9D718EAFA57B62CB2BC33FF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:fa:f7:5a:82:19:9d:53:a1:ff:64:d1:1a: a5:75:4d:51:66:c7:e0:62:a3:54:05:54:64:57:bf: 92:cc:fb:55:a4:a8:a9:1c:ba:5d:a7:d6:af:23:4c: c5:6c:db:5f:f1:7c:a5:9f:85:79:88:f3:a6:9f:1f: 77:e4:d4:20:37:3c:38:2f:aa:98:c7:5d:a9:9a:85: 0c:fc:f3:f6:59:85:1b:1f:a2:6b:a6:43:47:c0:b6: 6a:88:aa:31:cd:16:18:6b:46:0d:e3:2e:34:93:ec: 3f:38:72:5f:37:07:5b:2e:a5:6a:e0:58:c5:39:8a: b6:76:be:f9:97:9a:a7:cf:e0:65:9b:cf:60:b9:e7: 07:62:b1:70:e0:43:f9:6f:73:a8:e4:61:12:20:57: 27:f6:ca:e8:bf:ad:17:e9:ad:4b:fa:ec:d9:f3:1b: 04:94:19:3d:3a:f7:37:80:28:fd:33:dc:a3:3c:e9: 02:d4:9c:8b:4f:65:83:44:e6:4b:e7:51:a5:fb:78: 10:e3:8b:a1:69:b8:47:6e:70:54:ca:ae:61:81:80: 2d:cf:fa:83:49:bc:ba:6e:36:be:71:fd:b9:fc:8b: 45:0f:78:8a:aa:f8:c0:0f:3e:fc:70:89:15:ef:7c: 1b:dc:9a:07:8a:74:c3:47:c9:a2:49:e4:24:72:f5: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:AE:BF:A5:7B:80:F9:D7:18:EA:FA:57:B6:2C:B2:BC:33:FF:16 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2500::/40 Signature Algorithm: sha256WithRSAEncryption 54:5f:6d:f4:97:52:65:3e:65:ec:c9:e6:b4:19:38:fd:5b:c9: 2e:5b:92:b0:00:61:e8:db:9e:9e:bd:97:f6:6f:c6:5f:95:9c: e7:cd:84:3e:70:ed:e9:4b:4b:e3:a8:e5:43:8b:b6:8b:54:f5: 94:2d:90:e4:70:7b:d0:a6:36:13:ac:87:c4:7c:0d:96:b4:ff: 6f:68:8f:b2:48:e0:69:29:a1:5a:83:2c:12:7d:cc:de:58:b0: 45:55:6d:88:3a:8f:fc:28:39:b8:76:f2:5b:f7:dc:ca:ca:fb: 8c:b5:bf:8c:07:a0:9b:79:36:ac:87:fa:e9:93:e5:d7:62:c8: 62:94:39:6e:60:f1:e7:70:98:67:d2:f2:85:81:12:72:8e:5f: d1:7a:4f:0e:fe:94:17:c0:fa:8b:0d:6d:35:dd:93:c7:8a:58: a8:a7:f9:6f:da:6f:08:f1:b5:34:42:23:c0:60:5b:2e:8a:c3: ff:8a:41:b7:b9:66:fd:df:2b:a0:7c:fc:61:fe:b0:56:53:23: db:11:42:42:6f:46:1e:71:f3:ee:85:7a:d7:a1:47:12:d6:2d: 5b:33:a4:69:47:d4:6f:c8:67:3e:4f:41:da:b9:d4:74:0f:91: 56:2a:e7:e8:61:03:e7:82:f4:20:4a:e5:47:7f:c5:2d:df:38: cf:41:a6:d1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJTIAaJupfIoLiadkrkZzL9DgTcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA3MTgxODEzMTlaFw0yNzA3MTcxODE4MTlaMDMxMTAvBgNV BAMTKDgyRkZBRUJGQTU3QjgwRjlENzE4RUFGQTU3QjYyQ0IyQkMzM0ZGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwb/r3WoIZnVOh/2TRGqV1TVFm x+Bio1QFVGRXv5LM+1WkqKkcul2n1q8jTMVs21/xfKWfhXmI86afH3fk1CA3PDgv qpjHXamahQz88/ZZhRsfomumQ0fAtmqIqjHNFhhrRg3jLjST7D84cl83B1supWrg WMU5irZ2vvmXmqfP4GWbz2C55wdisXDgQ/lvc6jkYRIgVyf2yui/rRfprUv67Nnz GwSUGT069zeAKP0z3KM86QLUnItPZYNE5kvnUaX7eBDji6FpuEducFTKrmGBgC3P +oNJvLpuNr5x/bn8i0UPeIqq+MAPPvxwiRXvfBvcmgeKdMNHyaJJ5CRy9eIxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgv+uv6V7gPnXGOr6V7Yssrwz/xYwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEz NDM0MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYElMA0GCSqGSIb3DQEBCwUAA4IBAQBUX230 l1JlPmXsyea0GTj9W8kuW5KwAGHo256evZf2b8ZflZznzYQ+cO3pS0vjqOVDi7aL VPWULZDkcHvQpjYTrIfEfA2WtP9vaI+ySOBpKaFagywSfczeWLBFVW2IOo/8KDm4 dvJb99zKyvuMtb+MB6CbeTash/rpk+XXYshilDluYPHncJhn0vKFgRJyjl/Rek8O /pQXwPqLDW013ZPHiliop/lv2m8I8bU0QiPAYFsuisP/ikG3uWb93yugfPxh/rBW UyPbEUJCb0YecfPuhXrXoUcS1i1bM6RpR9RvyGc+T0HaudR0D5FWKufoYQPngvQg SuVHf8Ut3zjPQabR -----END CERTIFICATE-----Generated at Fri Jul 24 16:19:30 2026 by rpki-client