$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa File: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (raw, json) Hash identifier: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM= Subject key identifier: 0B:F2:C2:F0:E2:F4:81:A1:A2:6C:99:7D:F9:54:76:78:29:27:E1:C8 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 698CF9933888A349011C0790DA8AB57E15807C5C Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa Signing time: Fri 20 Mar 2026 20:13:50 +0000 ROA not before: Fri 20 Mar 2026 20:08:50 +0000 ROA not after: Fri 19 Mar 2027 20:13:50 +0000 asID: 199817 IP address blocks: 2a0f:1cc6:b150::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8c:f9:93:38:88:a3:49:01:1c:07:90:da:8a:b5:7e:15:80:7c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Mar 20 20:08:50 2026 GMT Not After : Mar 19 20:13:50 2027 GMT Subject: CN=0BF2C2F0E2F481A1A26C997DF95476782927E1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:c9:ea:1f:e5:ed:41:c1:e6:ad:5d:01:e8: e3:5f:83:63:d6:93:65:28:8a:03:cb:08:74:dd:47: d9:0d:7b:d7:f8:66:fd:1c:a1:a4:44:6b:06:78:4f: c9:ba:4a:2a:fe:63:46:96:10:f7:76:7d:e8:e9:d9: e9:0c:a0:ee:46:4a:ae:04:8e:39:d7:ef:45:d4:35: 59:86:e7:5b:d2:5f:af:95:83:8f:d3:71:71:ff:7f: 09:14:92:5e:57:18:50:89:7b:e8:d3:43:d3:46:09: 92:84:3a:c5:c3:a3:7d:c4:2b:5d:90:ea:71:62:47: 65:8b:ce:fd:66:97:09:5d:e3:72:1e:a2:67:6c:d4: 6d:b3:58:f7:ae:64:be:ba:c9:d6:89:eb:71:74:14: 2f:ce:d9:10:4c:d3:e9:cc:91:b8:c4:1e:96:53:89: 1f:7a:9a:98:a3:3a:be:1d:ae:5e:a6:48:29:89:dd: 16:40:c7:96:99:28:4e:88:2e:28:d8:c2:c4:8b:f4: 6b:3c:b0:7b:93:eb:d3:ee:5c:02:e5:b2:3a:5c:80: 7f:8d:9b:9e:4e:94:f4:ab:f2:06:20:d8:48:8c:b2: be:d7:ad:ef:fe:c8:3a:57:39:57:b4:0f:b7:7b:7d: 39:cf:97:71:59:29:e3:19:c1:7d:c9:97:39:84:47: 46:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F2:C2:F0:E2:F4:81:A1:A2:6C:99:7D:F9:54:76:78:29:27:E1:C8 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b150::/44 Signature Algorithm: sha256WithRSAEncryption 7f:d8:df:33:5c:fd:f0:81:52:90:13:38:be:a4:ac:83:b2:82: 49:11:89:fe:90:ba:83:04:3c:df:52:c4:d3:36:bd:3c:69:bc: 17:a6:64:c6:88:cd:75:c0:78:3a:f2:f9:f0:9b:a8:2f:29:24: 58:6b:89:1b:04:80:2b:dc:87:43:f1:2b:1e:48:c6:7c:cb:ef: 66:4b:a9:dd:21:91:11:ad:1a:cd:fc:35:3f:b5:ef:a2:ef:3a: 1a:af:e4:29:c0:cc:a1:78:29:6c:71:92:97:94:95:b1:2a:c4: 56:76:fc:bc:87:35:b4:87:36:f3:13:2a:eb:c8:55:bb:50:b6: 9d:1d:db:c5:e5:e9:9a:72:97:3c:d2:5b:e2:25:56:44:de:12: f4:22:46:63:5c:cb:40:74:65:ff:9d:6f:c6:27:9d:21:1d:dd: dc:47:45:f6:5c:d4:15:98:27:17:06:3f:0e:7f:39:9f:3f:02: 9b:f6:39:65:03:a2:22:c9:13:15:fb:a5:f1:17:79:37:4e:5f: 7d:04:99:a9:8c:00:25:60:94:81:76:1b:54:03:d5:3c:67:37: 69:98:26:0b:86:95:30:28:f8:f0:7f:46:59:7c:65:08:39:91: b9:dd:bb:45:45:ef:ed:4e:bd:a5:7b:9a:2e:99:8f:ff:62:d5: c4:94:2b:65 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUaYz5kziIo0kBHAeQ2oq1fhWAfFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjAzMjAyMDA4NTBaFw0yNzAzMTkyMDEzNTBaMDMxMTAvBgNV BAMTKDBCRjJDMkYwRTJGNDgxQTFBMjZDOTk3REY5NTQ3Njc4MjkyN0UxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgO8nqH+XtQcHmrV0B6ONfg2PW k2UoigPLCHTdR9kNe9f4Zv0coaREawZ4T8m6Sir+Y0aWEPd2fejp2ekMoO5GSq4E jjnX70XUNVmG51vSX6+Vg4/TcXH/fwkUkl5XGFCJe+jTQ9NGCZKEOsXDo33EK12Q 6nFiR2WLzv1mlwld43Ieomds1G2zWPeuZL66ydaJ63F0FC/O2RBM0+nMkbjEHpZT iR96mpijOr4drl6mSCmJ3RZAx5aZKE6ILijYwsSL9Gs8sHuT69PuXALlsjpcgH+N m55OlPSr8gYg2EiMsr7Xre/+yDpXOVe0D7d7fTnPl3FZKeMZwX3JlzmER0bbAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUC/LC8OL0gaGibJl9+VR2eCkn4cgwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz OTM5MzgzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrFQMA0GCSqGSIb3DQEBCwUAA4IBAQB/ 2N8zXP3wgVKQEzi+pKyDsoJJEYn+kLqDBDzfUsTTNr08abwXpmTGiM11wHg68vnw m6gvKSRYa4kbBIAr3IdD8SseSMZ8y+9mS6ndIZERrRrN/DU/te+i7zoar+QpwMyh eClscZKXlJWxKsRWdvy8hzW0hzbzEyrryFW7ULadHdvF5emacpc80lviJVZE3hL0 IkZjXMtAdGX/nW/GJ50hHd3cR0X2XNQVmCcXBj8OfzmfPwKb9jllA6IiyRMV+6Xx F3k3Tl99BJmpjAAlYJSBdhtUA9U8ZzdpmCYLhpUwKPjwf0ZZfGUIOZG53btFRe/t Tr2le5oumY//YtXElCtl -----END CERTIFICATE-----Generated at Thu Mar 26 06:24:58 2026 by rpki-client