$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa File: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (raw, json) Hash identifier: vUmqEtEfYQI1zWEs+VA6phQsPoAXeEbQEq0Kg2kwRRk= Subject key identifier: 1C:52:5E:64:B1:AB:35:C3:3B:33:A6:69:B7:35:B1:82:EB:EC:CE:49 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 59CFC1E627FF610013A238CFE559D85F45567298 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa Signing time: Thu 16 Jul 2026 16:18:10 +0000 ROA not before: Thu 16 Jul 2026 16:13:10 +0000 ROA not after: Thu 15 Jul 2027 16:18:10 +0000 asID: 209109 IP address blocks: 2a14:7581:2600::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cf:c1:e6:27:ff:61:00:13:a2:38:cf:e5:59:d8:5f:45:56:72:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 16 16:13:10 2026 GMT Not After : Jul 15 16:18:10 2027 GMT Subject: CN=1C525E64B1AB35C33B33A669B735B182EBECCE49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:ed:55:5c:9b:2f:9b:42:92:e6:1d:ea:4f: 5e:77:6f:d0:b3:d0:49:80:66:c4:33:f9:a5:87:7b: 00:11:58:b7:ab:c2:4f:c5:b2:90:0d:81:cf:22:43: 7f:4a:a4:27:00:78:2b:89:41:20:dd:d6:4e:3e:cf: 3b:e4:0e:66:5d:67:95:9c:4d:b7:32:c5:6d:8e:7c: 97:07:67:16:d7:85:2d:bb:3a:97:6d:e8:12:05:38: fb:ef:ad:20:c7:2e:65:c4:cc:06:d3:e2:fd:15:0d: ea:40:64:66:ef:17:8b:ba:aa:35:cc:43:94:90:07: d1:e3:ca:e9:c7:3b:fa:64:10:9f:e3:da:6e:04:f1: 4d:4f:50:90:9d:29:eb:bf:a8:00:e6:f8:ae:5a:a9: 48:b9:fb:a4:45:ad:77:c2:42:4c:c7:3c:be:6e:03: 8a:34:b0:70:32:38:6f:01:f2:34:b1:30:a2:0f:e2: 0c:12:ce:41:f6:03:8c:7d:7a:f6:d1:8b:79:4b:f7: 89:60:23:3d:f8:28:8b:73:17:f8:7b:fc:64:2b:eb: 79:36:bb:50:a3:1d:df:da:83:d0:ad:3c:e7:0f:77: b2:18:a3:7d:7f:ad:ff:87:4b:82:fb:70:3a:69:23: 4e:c9:ee:fb:ac:87:44:a8:be:c3:0c:c0:58:57:4c: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:52:5E:64:B1:AB:35:C3:3B:33:A6:69:B7:35:B1:82:EB:EC:CE:49 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2600::/40 Signature Algorithm: sha256WithRSAEncryption 0a:36:d3:32:08:fe:43:c4:0d:64:1c:1c:6f:73:a6:46:db:a9: 5b:68:70:bc:32:30:21:5a:91:7b:94:8a:2c:0c:75:34:fc:4c: b2:9f:01:5f:0a:07:c6:6c:73:bc:4b:84:3c:62:5d:e1:ac:65: 71:bc:e6:5c:5c:6d:47:58:83:5a:c7:23:a6:4a:f0:c7:b6:08: 04:0d:84:ef:ee:60:a7:3a:e3:29:2f:3c:0b:7c:27:cb:01:f6: 7d:08:60:78:bc:c6:6a:a2:08:b6:90:62:f4:54:ee:fb:a1:a3: 5f:5d:45:85:f7:a1:67:b3:bf:66:ea:f0:46:f2:69:fa:33:92: d5:56:d9:6f:36:fe:45:ad:60:8d:9a:ff:58:af:8b:97:a4:b5: c0:16:33:84:bc:26:17:54:48:1d:b1:e4:10:5c:3f:a2:32:15: c6:a1:0e:28:e7:61:5c:a1:eb:26:4c:6a:2d:11:45:48:48:a8: c6:a2:29:75:23:81:27:5f:78:69:01:d4:ec:09:11:bb:0a:5d: a8:ce:e1:54:ed:bd:da:a2:b4:21:1e:1d:71:d7:47:e0:94:d8: 1f:b9:85:f2:7b:1e:97:d2:13:dd:61:d8:c4:81:18:ec:36:40: 1c:7e:97:e3:8f:00:0d:7a:70:58:e9:20:31:ca:ba:d4:b8:70: d9:dc:6f:1b -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUWc/B5if/YQATojjP5VnYX0VWcpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA3MTYxNjEzMTBaFw0yNzA3MTUxNjE4MTBaMDMxMTAvBgNV BAMTKDFDNTI1RTY0QjFBQjM1QzMzQjMzQTY2OUI3MzVCMTgyRUJFQ0NFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1o+1VXJsvm0KS5h3qT153b9Cz 0EmAZsQz+aWHewARWLerwk/FspANgc8iQ39KpCcAeCuJQSDd1k4+zzvkDmZdZ5Wc TbcyxW2OfJcHZxbXhS27Opdt6BIFOPvvrSDHLmXEzAbT4v0VDepAZGbvF4u6qjXM Q5SQB9HjyunHO/pkEJ/j2m4E8U1PUJCdKeu/qADm+K5aqUi5+6RFrXfCQkzHPL5u A4o0sHAyOG8B8jSxMKIP4gwSzkH2A4x9evbRi3lL94lgIz34KItzF/h7/GQr63k2 u1CjHd/ag9CtPOcPd7IYo31/rf+HS4L7cDppI07J7vush0SovsMMwFhXTO+tAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUHFJeZLGrNcM7M6ZptzWxguvszkkwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzYzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDM5MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSYwDQYJKoZIhvcNAQELBQADggEBAAo2 0zII/kPEDWQcHG9zpkbbqVtocLwyMCFakXuUiiwMdTT8TLKfAV8KB8Zsc7xLhDxi XeGsZXG85lxcbUdYg1rHI6ZK8Me2CAQNhO/uYKc64ykvPAt8J8sB9n0IYHi8xmqi CLaQYvRU7vuho19dRYX3oWezv2bq8EbyafozktVW2W82/kWtYI2a/1ivi5ektcAW M4S8JhdUSB2x5BBcP6IyFcahDijnYVyh6yZMai0RRUhIqMaiKXUjgSdfeGkB1OwJ EbsKXajO4VTtvdqitCEeHXHXR+CU2B+5hfJ7HpfSE91h2MSBGOw2QBx+l+OPAA16 cFjpIDHKutS4cNncbxs= -----END CERTIFICATE-----Generated at Fri Jul 24 09:11:39 2026 by rpki-client