$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330353a3a2f34382d3438203d3e20313531373034.roa File: 326130623a346530373a316330353a3a2f34382d3438203d3e20313531373034.roa (raw, json) Hash identifier: klgVth/TtNnRat+Cjm7g/vn2bJkgb8SLrowCN2zlal8= Subject key identifier: 82:7C:06:65:D6:A8:60:25:53:6A:D2:91:0C:E2:89:28:B1:62:A1:DD Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 2D86660364B72ED7A38E3C0B1CD4394C8B38F0C1 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330353a3a2f34382d3438203d3e20313531373034.roa Signing time: Thu 24 Sep 2026 17:16:16 +0000 ROA not before: Thu 24 Sep 2026 17:11:16 +0000 ROA not after: Thu 23 Sep 2027 17:16:16 +0000 asID: 151704 IP address blocks: 2a0b:4e07:1c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 06:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:86:66:03:64:b7:2e:d7:a3:8e:3c:0b:1c:d4:39:4c:8b:38:f0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Sep 24 17:11:16 2026 GMT Not After : Sep 23 17:16:16 2027 GMT Subject: CN=827C0665D6A86025536AD2910CE28928B162A1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:a7:8f:e6:16:5d:a9:65:0e:4d:6e:dc:35: f4:41:5f:a7:2e:4a:a1:e3:c5:cf:54:47:7b:83:35: 9a:1a:e6:2c:57:33:43:f0:93:a4:c2:63:63:3a:26: 40:8a:ad:f0:16:29:5b:93:41:d5:82:66:88:cd:56: 21:7f:d0:93:62:f3:77:2c:a0:69:76:5c:ec:44:8c: 53:2d:a8:7e:e9:ee:80:b6:dc:8f:f6:c2:2e:b6:ab: 08:76:45:91:d1:4e:fa:89:78:b4:9a:2d:ec:b8:8e: 53:c1:fd:5a:34:c2:3e:29:96:8e:94:05:7a:98:fd: fe:b7:e9:13:1a:92:f9:aa:d5:9e:ad:47:5f:b1:bf: 24:43:6d:91:90:9b:a9:fb:4c:15:2f:05:24:6e:4f: 3d:4e:ae:ec:de:77:a5:44:54:84:63:76:ce:8a:e3: 50:8c:e1:94:d5:87:30:f9:c6:c1:45:2b:9d:3d:9d: a2:b6:80:ea:de:ae:d5:c3:86:93:2c:ce:05:66:fe: 16:b3:88:af:4d:b5:e8:e8:22:eb:2b:cb:90:48:8e: 8f:02:59:d2:2d:77:37:22:92:db:17:49:e0:b7:a3: 4e:04:f1:b3:01:a4:3d:e7:b1:12:9c:d9:3d:c7:22: 7a:33:10:af:dd:53:28:0a:d5:b8:1d:06:27:e2:47: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7C:06:65:D6:A8:60:25:53:6A:D2:91:0C:E2:89:28:B1:62:A1:DD X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330353a3a2f34382d3438203d3e20313531373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c05::/48 Signature Algorithm: sha256WithRSAEncryption 50:d3:df:57:e9:ca:8d:ae:52:5f:8d:0d:1d:10:47:69:1f:5b: 45:c5:d0:3d:28:78:ac:42:e6:b3:1d:b2:b7:f8:2a:2c:12:74: 2f:19:3e:c5:45:25:a3:72:f1:f2:7c:0f:a9:dc:e3:8b:0d:bc: ca:a8:e5:70:e6:23:3d:93:8f:76:b1:3f:65:02:8a:8b:f7:74: b1:69:3d:4b:d6:d6:83:74:85:3b:21:8f:33:07:bf:dd:da:3c: 69:64:d7:8b:5e:60:47:3c:6d:e6:a8:f3:17:05:0f:07:ff:52: 18:8c:ff:50:bd:db:d8:0f:ca:08:bb:20:44:0a:7a:b8:f4:d8: 95:cb:12:b6:9c:c1:7d:c9:37:9d:0a:a9:68:a2:cc:84:ca:ef: 56:4d:67:28:d1:60:ba:46:c7:6e:73:ef:89:a1:8f:64:cc:72: 6d:d5:17:25:77:88:42:53:1a:a7:33:32:aa:f8:2d:9b:48:e7: c0:70:e0:04:2c:81:d2:6d:f3:ce:6f:58:33:9c:9b:36:8c:f0: c0:03:6f:dc:8c:ea:5f:5d:33:3c:98:db:7e:25:82:de:aa:af: 17:b1:f7:f1:13:10:3e:c7:e3:ab:42:be:f4:f4:0f:68:02:68: 6d:c8:3c:90:bb:0b:4f:54:da:3e:bd:54:0b:1a:97:29:7d:e0: ed:04:8d:3d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIULYZmA2S3LtejjjwLHNQ5TIs48MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA5MjQxNzExMTZaFw0yNzA5MjMxNzE2MTZaMDMxMTAvBgNV BAMTKDgyN0MwNjY1RDZBODYwMjU1MzZBRDI5MTBDRTI4OTI4QjE2MkExREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOaeP5hZdqWUOTW7cNfRBX6cu SqHjxc9UR3uDNZoa5ixXM0Pwk6TCY2M6JkCKrfAWKVuTQdWCZojNViF/0JNi83cs oGl2XOxEjFMtqH7p7oC23I/2wi62qwh2RZHRTvqJeLSaLey4jlPB/Vo0wj4plo6U BXqY/f636RMakvmq1Z6tR1+xvyRDbZGQm6n7TBUvBSRuTz1Oruzed6VEVIRjds6K 41CM4ZTVhzD5xsFFK509naK2gOrertXDhpMszgVm/haziK9NtejoIusry5BIjo8C WdItdzciktsXSeC3o04E8bMBpD3nsRKc2T3HInozEK/dUygK1bgdBifiR8CfAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUgnwGZdaoYCVTatKRDOKJKLFiod0wHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAt MGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMTYzMzAzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTM3MzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgccBTANBgkqhkiG9w0BAQsFAAOCAQEAUNPfV+nKja5SX40N HRBHaR9bRcXQPSh4rELmsx2yt/gqLBJ0Lxk+xUUlo3Lx8nwPqdzjiw28yqjlcOYj PZOPdrE/ZQKKi/d0sWk9S9bWg3SFOyGPMwe/3do8aWTXi15gRzxt5qjzFwUPB/9S GIz/UL3b2A/KCLsgRAp6uPTYlcsStpzBfck3nQqpaKLMhMrvVk1nKNFgukbHbnPv iaGPZMxybdUXJXeIQlMapzMyqvgtm0jnwHDgBCyB0m3zzm9YM5ybNozwwANv3Izq X10zPJjbfiWC3qqvF7H38RMQPsfjq0K+9PQPaAJobcg8kLsLT1TaPr1UCxqXKX3g 7QSNPQ== -----END CERTIFICATE-----Generated at Fri Oct 9 23:12:49 2026 by rpki-client