$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330333a3a2f34382d3438203d3e20323134343835.roa File: 326130623a346530373a316330333a3a2f34382d3438203d3e20323134343835.roa (raw, json) Hash identifier: zPqi+GWy7GJ+kq9mxidL3Cv/L27NlElS9NX8D2AsBYM= Subject key identifier: 42:96:BB:99:01:65:B6:8E:AE:BD:13:4B:A9:8E:E1:21:6B:37:AE:54 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 3274A239E234ACC04DA3340B1D2EC7F32A33DB26 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330333a3a2f34382d3438203d3e20323134343835.roa Signing time: Thu 24 Sep 2026 17:15:47 +0000 ROA not before: Thu 24 Sep 2026 17:10:47 +0000 ROA not after: Thu 23 Sep 2027 17:15:47 +0000 asID: 214485 IP address blocks: 2a0b:4e07:1c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 19:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:74:a2:39:e2:34:ac:c0:4d:a3:34:0b:1d:2e:c7:f3:2a:33:db:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Sep 24 17:10:47 2026 GMT Not After : Sep 23 17:15:47 2027 GMT Subject: CN=4296BB990165B68EAEBD134BA98EE1216B37AE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:b2:27:ab:33:4a:4e:b3:c4:53:ad:f5:8a: ea:bf:27:d2:e9:ad:b5:0a:2d:12:cd:b7:e8:d4:53: 48:41:42:3d:36:c6:d4:76:18:4e:7e:c0:d5:02:d3: ea:70:71:bc:56:ae:8d:a7:90:fa:4d:d7:51:03:e7: 7b:7e:0a:d0:17:f1:fc:57:d8:27:b3:40:fe:0c:21: 43:04:77:85:6a:a8:80:ef:cf:49:99:74:fc:f1:7e: 8f:05:82:03:45:6e:06:42:d7:de:99:78:c0:a0:c4: 58:45:00:37:06:ad:00:a3:9c:fe:9f:2b:df:7c:fd: e4:a9:38:92:61:39:f1:62:83:8c:40:49:45:2d:1b: 8f:d5:83:fc:89:b1:02:f6:b7:f6:93:39:92:2e:22: 63:7d:e7:e6:b1:29:8c:7e:0f:a3:21:10:db:1f:c5: b3:07:f6:d0:04:35:33:a0:09:a7:49:a7:de:30:b9: c1:55:0f:70:04:1f:6e:5b:f6:ec:27:0d:bf:d3:86: ff:0c:6f:4c:dd:e9:41:34:db:a3:b3:9a:b1:3b:d1: 7d:58:37:9e:4a:0c:41:03:03:67:aa:81:d6:0b:22: 1b:d2:df:f7:29:3d:f3:fd:52:00:15:46:a4:f8:94: 8b:74:8c:ba:ed:e8:c1:75:4f:95:28:40:6b:e5:fa: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:96:BB:99:01:65:B6:8E:AE:BD:13:4B:A9:8E:E1:21:6B:37:AE:54 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330333a3a2f34382d3438203d3e20323134343835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c03::/48 Signature Algorithm: sha256WithRSAEncryption b7:0a:ef:08:92:64:37:dd:80:da:de:fd:d1:28:55:33:55:02: 36:2e:57:f9:d6:87:66:28:1b:1f:60:38:b9:87:f2:54:0e:8d: e9:21:f6:83:de:ec:11:e9:de:80:4d:c8:44:b4:1d:6a:86:f0: 5e:1d:fa:58:be:07:f2:d3:82:71:a4:f5:4b:3a:29:da:06:8a: db:9c:ed:52:3f:07:95:4d:f4:36:4f:4a:b4:d0:d6:b9:cb:4f: ab:87:0f:b6:d4:d4:16:82:00:7d:ed:45:4f:6b:40:5d:68:72: 02:d6:9a:bd:ef:e2:03:1e:f5:31:d0:2e:03:3b:80:58:23:fa: de:de:3b:8f:45:a3:73:ba:a4:25:37:c6:6d:9f:99:b9:3e:84: ea:b2:d4:66:71:f8:c9:9f:0b:bf:6d:e4:39:2d:c6:60:5c:9f: 5e:e5:a3:c4:18:a8:2f:21:ce:c4:b1:42:53:81:5d:e6:56:99: 7f:55:77:ef:5b:77:62:41:9c:b2:f2:f1:ea:d4:61:16:14:d2: 76:c7:67:be:e8:18:3d:37:48:30:20:8b:4c:4d:76:58:0b:9f: 2e:60:22:cb:3e:86:92:ef:31:b8:69:94:07:63:47:e8:ea:74: 6a:b5:51:e0:35:0d:0a:ff:00:e7:05:9b:65:e6:c3:80:c6:e0: 18:32:a8:53 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUMnSiOeI0rMBNozQLHS7H8yoz2yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA5MjQxNzEwNDdaFw0yNzA5MjMxNzE1NDdaMDMxMTAvBgNV BAMTKDQyOTZCQjk5MDE2NUI2OEVBRUJEMTM0QkE5OEVFMTIxNkIzN0FFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqrInqzNKTrPEU631iuq/J9Lp rbUKLRLNt+jUU0hBQj02xtR2GE5+wNUC0+pwcbxWro2nkPpN11ED53t+CtAX8fxX 2CezQP4MIUMEd4VqqIDvz0mZdPzxfo8FggNFbgZC196ZeMCgxFhFADcGrQCjnP6f K998/eSpOJJhOfFig4xASUUtG4/Vg/yJsQL2t/aTOZIuImN95+axKYx+D6MhENsf xbMH9tAENTOgCadJp94wucFVD3AEH25b9uwnDb/Thv8Mb0zd6UE026OzmrE70X1Y N55KDEEDA2eqgdYLIhvS3/cpPfP9UgAVRqT4lIt0jLrt6MF1T5UoQGvl+mBPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUQpa7mQFlto6uvRNLqY7hIWs3rlQwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAt MGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMTYzMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM0MzgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgccAzANBgkqhkiG9w0BAQsFAAOCAQEAtwrvCJJkN92A2t79 0ShVM1UCNi5X+daHZigbH2A4uYfyVA6N6SH2g97sEenegE3IRLQdaobwXh36WL4H 8tOCcaT1Szop2gaK25ztUj8HlU30Nk9KtNDWuctPq4cPttTUFoIAfe1FT2tAXWhy Ataave/iAx71MdAuAzuAWCP63t47j0Wjc7qkJTfGbZ+ZuT6E6rLUZnH4yZ8Lv23k OS3GYFyfXuWjxBioLyHOxLFCU4Fd5laZf1V371t3YkGcsvLx6tRhFhTSdsdnvugY PTdIMCCLTE12WAufLmAiyz6Gku8xuGmUB2NH6Op0arVR4DUNCv8A5wWbZebDgMbg GDKoUw== -----END CERTIFICATE-----Generated at Thu Oct 8 12:28:45 2026 by rpki-client