$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa File: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (raw, json) Hash identifier: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go= Subject key identifier: 8C:D9:79:61:55:28:3E:D5:6E:78:89:B4:A5:19:C8:80:12:8E:C9:A3 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 47EAE4F786E19CD5B66C786B9F511C4D682C6E81 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa Signing time: Wed 29 Apr 2026 13:37:30 +0000 ROA not before: Wed 29 Apr 2026 13:32:30 +0000 ROA not after: Wed 28 Apr 2027 13:37:30 +0000 asID: 198331 IP address blocks: 2a0f:1cc6:b180::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ea:e4:f7:86:e1:9c:d5:b6:6c:78:6b:9f:51:1c:4d:68:2c:6e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Apr 29 13:32:30 2026 GMT Not After : Apr 28 13:37:30 2027 GMT Subject: CN=8CD9796155283ED56E7889B4A519C880128EC9A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cb:b6:71:28:01:78:15:ab:d9:37:7c:da:43: 28:8c:02:fa:40:42:58:06:8d:a8:32:e6:05:fe:7c: 93:ef:ff:1d:24:67:14:25:62:0d:88:df:b2:50:83: d2:ee:f4:c9:39:c0:10:b5:b7:5a:c8:02:6a:c5:35: 60:f8:a3:b5:ce:7a:0b:44:b9:f8:cf:e6:40:92:1f: 8a:2e:8b:f1:01:8b:cf:d0:f2:f8:96:da:9b:ef:26: a4:75:14:b6:a7:c6:6a:d4:73:e4:0b:5f:fb:94:fc: 04:87:b0:e3:ee:14:19:ec:5a:5c:94:8a:e4:e8:cd: dd:a9:17:b8:de:f0:6c:7d:b0:b1:08:9d:80:28:c6: 85:91:c9:af:3d:27:76:4f:ed:cd:df:41:98:80:b6: 07:8a:b1:09:8b:ca:e7:7b:b0:64:a9:2d:fc:2b:9c: a6:e8:d9:c2:32:fd:fb:fc:67:93:ab:85:8b:8a:e8: c7:09:43:62:27:a5:96:3a:d6:38:c3:2d:c3:26:5f: c8:9f:f6:bb:a3:9b:11:92:b2:ee:6f:3c:85:c5:79: ee:16:d6:cc:6f:25:89:9b:eb:77:57:ab:be:1a:c9: 14:67:29:ab:cf:c2:39:2b:46:c0:b9:b1:71:73:1a: 64:4f:ae:99:03:65:00:c5:a7:0f:1b:fd:41:44:70: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D9:79:61:55:28:3E:D5:6E:78:89:B4:A5:19:C8:80:12:8E:C9:A3 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b180::/44 Signature Algorithm: sha256WithRSAEncryption 5f:e7:94:3a:6d:4e:fe:ec:94:24:99:29:82:48:65:c7:a9:76: 5e:0a:e8:60:1a:ab:c0:5a:e6:ab:f9:17:bb:c0:d9:a5:64:62: 2a:d4:52:e3:75:2a:c3:43:9f:75:8b:68:72:ac:e4:83:46:31: 56:44:3e:35:ed:37:66:f7:16:3b:36:b6:25:e8:44:48:67:a8: 71:5e:9d:9b:b6:ba:ef:21:4f:c1:68:6c:f3:65:80:89:65:17: 44:46:6e:40:8c:ac:83:f2:67:0f:c4:39:8b:f7:7a:9d:26:10: 76:dc:70:a7:48:2b:0a:c6:84:5b:67:bd:e2:e2:2b:79:4f:fe: 9a:15:e0:20:9c:80:4a:62:d6:06:e8:5a:92:fc:6b:ee:38:ce: 1b:7f:58:7c:12:0c:a1:d6:95:85:8f:13:ca:5c:76:9d:a7:77: 9a:ec:8e:cd:93:69:66:6d:bc:c2:3d:b8:37:b1:63:cf:38:41: fe:14:b7:3a:f1:95:cd:ac:87:c8:dd:34:de:ae:b6:ff:cf:a1: 43:ac:ea:08:5e:15:f6:f6:d2:88:28:ee:96:cc:bf:7a:56:82: 57:8a:b7:d7:fd:7b:e3:b0:62:49:60:f9:d4:33:b2:22:d0:20: d7:2b:89:42:8c:f6:15:05:32:20:37:5a:ae:d4:e2:6c:47:de: 52:6d:20:ac -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUR+rk94bhnNW2bHhrn1EcTWgsboEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA0MjkxMzMyMzBaFw0yNzA0MjgxMzM3MzBaMDMxMTAvBgNV BAMTKDhDRDk3OTYxNTUyODNFRDU2RTc4ODlCNEE1MTlDODgwMTI4RUM5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0y7ZxKAF4FavZN3zaQyiMAvpA QlgGjagy5gX+fJPv/x0kZxQlYg2I37JQg9Lu9Mk5wBC1t1rIAmrFNWD4o7XOegtE ufjP5kCSH4oui/EBi8/Q8viW2pvvJqR1FLanxmrUc+QLX/uU/ASHsOPuFBnsWlyU iuTozd2pF7je8Gx9sLEInYAoxoWRya89J3ZP7c3fQZiAtgeKsQmLyud7sGSpLfwr nKbo2cIy/fv8Z5OrhYuK6McJQ2InpZY61jjDLcMmX8if9rujmxGSsu5vPIXFee4W 1sxvJYmb63dXq74ayRRnKavPwjkrRsC5sXFzGmRPrpkDZQDFpw8b/UFEcPFJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUjNl5YVUoPtVueIm0pRnIgBKOyaMwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzEzODMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz OTM4MzMzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrGAMA0GCSqGSIb3DQEBCwUAA4IBAQBf 55Q6bU7+7JQkmSmCSGXHqXZeCuhgGqvAWuar+Re7wNmlZGIq1FLjdSrDQ591i2hy rOSDRjFWRD417Tdm9xY7NrYl6ERIZ6hxXp2btrrvIU/BaGzzZYCJZRdERm5AjKyD 8mcPxDmL93qdJhB23HCnSCsKxoRbZ73i4it5T/6aFeAgnIBKYtYG6FqS/GvuOM4b f1h8Egyh1pWFjxPKXHadp3ea7I7Nk2lmbbzCPbg3sWPPOEH+FLc68ZXNrIfI3TTe rrb/z6FDrOoIXhX29tKIKO6WzL96VoJXirfX/XvjsGJJYPnUM7Ii0CDXK4lCjPYV BTIgN1qu1OJsR95SbSCs -----END CERTIFICATE-----Generated at Wed May 13 10:03:54 2026 by rpki-client