$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa File: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (raw, json) Hash identifier: fNdgpZfzM+lTdkTHtAnx5kJSH3iOKuMJEshssLvwnVk= Subject key identifier: 5C:D2:95:C5:03:53:E9:F8:FF:2D:49:A2:A2:62:EF:CD:A6:64:5F:6A Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 69233B5B463FB17FB447B92175E64BFE63ACAF2F Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa Signing time: Sat 18 Jul 2026 18:18:16 +0000 ROA not before: Sat 18 Jul 2026 18:13:16 +0000 ROA not after: Sat 17 Jul 2027 18:18:16 +0000 asID: 209109 IP address blocks: 2a14:7581:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:23:3b:5b:46:3f:b1:7f:b4:47:b9:21:75:e6:4b:fe:63:ac:af:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Jul 18 18:13:16 2026 GMT Not After : Jul 17 18:18:16 2027 GMT Subject: CN=5CD295C50353E9F8FF2D49A2A262EFCDA6645F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:76:0d:2b:a4:62:d7:fe:d1:88:82:81:d3: 37:e9:42:bd:8c:61:85:eb:28:a5:3e:94:30:3b:7e: 92:e1:8e:d6:9c:78:5f:1a:b7:3b:54:6c:83:0e:69: c6:52:47:03:32:2a:9e:20:79:2a:8d:9b:b4:28:fe: 88:10:7d:11:6a:d8:1e:3f:e1:2f:75:00:a3:a4:3a: 97:ad:33:51:50:db:88:22:51:d1:eb:fd:fd:db:cf: f2:ca:22:21:07:46:c4:31:1d:90:95:30:e7:97:9b: 35:75:3d:03:04:fb:5b:45:f6:67:f1:f2:ca:ea:7e: 73:c5:cc:32:cb:01:d4:25:e4:e9:61:24:3c:36:9c: 7b:45:b6:ca:a8:56:5a:01:be:65:76:93:ac:42:5c: 28:e7:bb:67:55:fd:01:ee:4b:ac:d5:09:83:b8:fb: 2d:e4:89:28:58:42:27:ff:90:d3:48:d5:2a:37:9f: ab:59:4d:b1:18:d8:e5:18:c2:2e:a4:ab:e9:13:c6: 01:7a:c5:d8:b7:b9:4f:ac:7f:8d:94:3f:d7:14:16: 3f:1c:95:36:71:9d:43:84:a5:12:3a:1f:1b:30:6a: ec:5b:5e:fb:b1:d9:38:29:29:2d:df:b0:8d:f0:ba: 18:a8:91:dc:24:fe:0f:07:81:41:bc:8a:30:83:f1: fd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D2:95:C5:03:53:E9:F8:FF:2D:49:A2:A2:62:EF:CD:A6:64:5F:6A X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2900::/40 Signature Algorithm: sha256WithRSAEncryption 59:c1:fd:1f:1c:9b:e3:56:27:f4:c5:39:74:44:28:fb:15:4e: fe:80:96:90:b3:3b:65:1b:27:cd:dc:48:33:07:42:9b:8a:75: 4a:08:22:64:df:a9:07:07:8e:7e:a8:3f:cb:60:9f:12:ac:0e: c4:a4:c3:1d:19:2f:e3:49:4d:70:66:d5:ed:30:5f:7f:cb:92: 98:a7:4c:60:38:ee:4b:44:63:4e:f2:fa:ca:0f:48:58:10:30: 57:d9:39:42:a6:c3:27:a7:34:d1:ef:04:11:fa:f7:28:c6:3f: 34:60:b7:d5:bf:6c:a7:a0:68:13:12:2c:4c:f7:f4:3f:b5:1a: f9:56:55:41:15:65:00:88:8d:57:3f:50:7e:90:e9:bd:01:c3: e2:1a:c8:10:79:57:5b:2d:55:3d:38:95:ca:84:fa:1d:d7:c1: b0:a1:c5:9a:bb:1b:e1:49:fd:f0:ec:f7:2e:41:bb:db:b1:0e: 30:6f:69:d4:76:41:5b:4c:76:80:0b:ce:72:3d:2a:e5:6c:9e: b3:d7:35:f9:cc:c3:c7:33:32:12:ba:65:6b:c7:cb:cf:04:02: 6f:31:05:a5:70:c2:9a:6c:03:86:2c:a9:e1:1e:7d:87:67:15: 39:38:c4:2c:c2:1b:93:34:67:4a:ce:54:05:d2:c2:f2:59:a3: b5:66:6a:13 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUaSM7W0Y/sX+0R7khdeZL/mOsry8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNjA3MTgxODEzMTZaFw0yNzA3MTcxODE4MTZaMDMxMTAvBgNV BAMTKDVDRDI5NUM1MDM1M0U5RjhGRjJENDlBMkEyNjJFRkNEQTY2NDVGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsHYNK6Ri1/7RiIKB0zfpQr2M YYXrKKU+lDA7fpLhjtaceF8atztUbIMOacZSRwMyKp4geSqNm7Qo/ogQfRFq2B4/ 4S91AKOkOpetM1FQ24giUdHr/f3bz/LKIiEHRsQxHZCVMOeXmzV1PQME+1tF9mfx 8srqfnPFzDLLAdQl5OlhJDw2nHtFtsqoVloBvmV2k6xCXCjnu2dV/QHuS6zVCYO4 +y3kiShYQif/kNNI1So3n6tZTbEY2OUYwi6kq+kTxgF6xdi3uU+sf42UP9cUFj8c lTZxnUOEpRI6HxswauxbXvux2TgpKS3fsI3wuhiokdwk/g8HgUG8ijCD8f2nAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUXNKVxQNT6fj/LUmiomLvzaZkX2owHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzkzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MDM5MzEzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSkwDQYJKoZIhvcNAQELBQADggEBAFnB /R8cm+NWJ/TFOXREKPsVTv6AlpCzO2UbJ83cSDMHQpuKdUoIImTfqQcHjn6oP8tg nxKsDsSkwx0ZL+NJTXBm1e0wX3/LkpinTGA47ktEY07y+soPSFgQMFfZOUKmwyen NNHvBBH69yjGPzRgt9W/bKegaBMSLEz39D+1GvlWVUEVZQCIjVc/UH6Q6b0Bw+Ia yBB5V1stVT04lcqE+h3XwbChxZq7G+FJ/fDs9y5Bu9uxDjBvadR2QVtMdoALznI9 KuVsnrPXNfnMw8czMhK6ZWvHy88EAm8xBaVwwppsA4YsqeEefYdnFTk4xCzCG5M0 Z0rOVAXSwvJZo7VmahM= -----END CERTIFICATE-----Generated at Fri Jul 24 16:23:16 2026 by rpki-client