$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa File: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (raw, json) Hash identifier: BgI8MCbrdQrLXGBmcxKTWUA61uXQRIT/7G+jUcNg+Cg= Subject key identifier: 9B:5D:7E:2E:90:C9:36:75:5D:C9:B6:31:23:27:56:6B:96:50:6D:9E Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 686511A1D514364D1F6560677D83168E72575C0C Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa Signing time: Sat 18 Jul 2026 18:18:15 +0000 ROA not before: Sat 18 Jul 2026 18:13:15 +0000 ROA not after: Sat 17 Jul 2027 18:18:15 +0000 asID: 209109 IP address blocks: 2a14:7581:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:65:11:a1:d5:14:36:4d:1f:65:60:67:7d:83:16:8e:72:57:5c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 18 18:13:15 2026 GMT Not After : Jul 17 18:18:15 2027 GMT Subject: CN=9B5D7E2E90C936755DC9B6312327566B96506D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:53:89:22:c2:fb:08:c5:a4:c8:62:71:27: b8:d0:6a:05:28:81:63:14:9e:02:e2:6f:8f:b9:9b: fc:f5:ff:90:1f:f5:de:d7:a4:6b:36:2c:c4:54:3a: db:f4:97:c6:c8:7e:7c:2e:8d:80:79:1b:53:5f:82: 75:fa:b9:7b:0e:8c:c7:55:85:df:5e:47:64:4c:5b: 22:31:93:0e:7b:59:97:ff:b3:c5:a9:dc:76:d2:29: 21:ce:69:fc:2f:d3:ea:56:3a:be:04:40:00:5b:fb: be:25:bc:31:cd:20:88:06:4a:cb:55:88:28:29:92: 8c:9f:41:61:1e:ab:23:5d:2b:1e:c7:31:a4:3b:30: 3b:68:63:cc:28:f2:4e:38:3a:3a:43:4c:38:60:23: 0f:5c:4f:0e:be:89:9a:94:a2:2e:19:f1:40:98:7e: b8:86:5a:02:c8:17:1e:48:75:a6:ea:33:ff:5f:7b: e8:c4:7c:c9:60:96:d8:ff:67:2d:23:28:ec:cc:64: 9c:e6:90:56:5f:77:21:6f:71:75:4c:16:8c:a2:11: ec:d5:24:b0:58:97:2a:2b:3a:a2:ba:95:c9:f6:2b: 03:9e:0a:d0:d7:3e:3e:a5:8b:50:b3:d7:11:94:cb: 13:d6:a0:d1:48:96:05:ad:8b:32:a3:53:a8:02:68: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:7E:2E:90:C9:36:75:5D:C9:B6:31:23:27:56:6B:96:50:6D:9E X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2800::/40 Signature Algorithm: sha256WithRSAEncryption 36:47:c2:0f:d9:94:4f:71:b2:66:52:af:cf:7e:ff:e5:19:77: 9d:89:2d:3e:76:b4:34:b5:db:45:d2:a2:a2:51:49:8d:e3:f0: e9:50:dd:1c:79:2a:0b:c4:46:69:34:83:42:57:62:41:bd:fc: a7:61:19:8f:6e:e0:e2:c5:cb:9f:34:b3:92:87:61:fa:3f:bd: 00:5f:26:ad:db:c3:b4:1d:eb:a2:a6:f8:ec:37:f2:2f:34:05: 99:37:14:4a:3c:18:c9:b8:18:61:f4:cc:f6:fd:03:7c:72:f2: ab:42:e9:09:49:30:02:e2:43:4c:31:13:7c:0c:5b:bf:a7:83: 3e:8a:f9:ed:37:e4:e4:1e:b4:de:8b:d9:ed:f6:10:aa:93:1a: 30:74:4d:c3:27:b3:ff:9f:03:58:89:39:50:1d:99:ba:39:6f: 91:60:88:91:b8:6b:e0:af:aa:3a:0b:ef:b9:65:58:77:da:7b: 50:e0:dd:14:0a:95:41:e0:73:94:ca:5c:d9:06:66:fb:df:e7: cb:18:ef:f8:e4:09:72:33:88:17:58:ab:a0:be:1f:99:6a:c0: b7:7e:4e:a9:f8:06:da:5a:1b:44:b9:5f:e6:01:39:91:6d:b4: 81:83:eb:dd:b9:72:1e:68:ad:3b:56:e7:81:46:eb:3b:6f:ae: a5:d7:48:f0 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUaGURodUUNk0fZWBnfYMWjnJXXAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA3MTgxODEzMTVaFw0yNzA3MTcxODE4MTVaMDMxMTAvBgNV BAMTKDlCNUQ3RTJFOTBDOTM2NzU1REM5QjYzMTIzMjc1NjZCOTY1MDZEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YFOJIsL7CMWkyGJxJ7jQagUo gWMUngLib4+5m/z1/5Af9d7XpGs2LMRUOtv0l8bIfnwujYB5G1NfgnX6uXsOjMdV hd9eR2RMWyIxkw57WZf/s8Wp3HbSKSHOafwv0+pWOr4EQABb+74lvDHNIIgGSstV iCgpkoyfQWEeqyNdKx7HMaQ7MDtoY8wo8k44OjpDTDhgIw9cTw6+iZqUoi4Z8UCY friGWgLIFx5IdabqM/9fe+jEfMlgltj/Zy0jKOzMZJzmkFZfdyFvcXVMFoyiEezV JLBYlyorOqK6lcn2KwOeCtDXPj6li1Cz1xGUyxPWoNFIlgWtizKjU6gCaBe9AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUm11+LpDJNnVdybYxIydWa5ZQbZ4wHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzgzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDM5MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSgwDQYJKoZIhvcNAQELBQADggEBADZH wg/ZlE9xsmZSr89+/+UZd52JLT52tDS120XSoqJRSY3j8OlQ3Rx5KgvERmk0g0JX YkG9/KdhGY9u4OLFy580s5KHYfo/vQBfJq3bw7Qd66Km+Ow38i80BZk3FEo8GMm4 GGH0zPb9A3xy8qtC6QlJMALiQ0wxE3wMW7+ngz6K+e035OQetN6L2e32EKqTGjB0 TcMns/+fA1iJOVAdmbo5b5FgiJG4a+CvqjoL77llWHfae1Dg3RQKlUHgc5TKXNkG Zvvf58sY7/jkCXIziBdYq6C+H5lqwLd+Tqn4BtpaG0S5X+YBOZFttIGD6925ch5o rTtW54FG6ztvrqXXSPA= -----END CERTIFICATE-----Generated at Fri Jul 24 10:27:53 2026 by rpki-client