$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa File: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (raw, json) Hash identifier: vPzCp2rjo49nQQnT9B2rqDxvXwwh+h9/WPiV7K6IlgQ= Subject key identifier: 55:03:E9:28:32:51:E7:88:E3:B5:4E:71:27:BF:A2:8C:78:72:B1:7C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 1E19C7EEEAA1C6D3F85D35D317DF3C38BDE69367 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa Signing time: Mon 07 Sep 2026 21:00:42 +0000 ROA not before: Mon 07 Sep 2026 20:55:42 +0000 ROA not after: Mon 06 Sep 2027 21:00:42 +0000 asID: 213413 IP address blocks: 2a06:1283:8900::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 05:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:19:c7:ee:ea:a1:c6:d3:f8:5d:35:d3:17:df:3c:38:bd:e6:93:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Sep 7 20:55:42 2026 GMT Not After : Sep 6 21:00:42 2027 GMT Subject: CN=5503E9283251E788E3B54E7127BFA28C7872B17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:11:c4:00:d3:e4:f4:17:ec:e6:f7:7e:97: 7a:24:e8:8e:df:1f:ef:30:01:66:52:2e:4c:d9:ad: b5:70:36:1c:90:d7:5a:37:76:3f:1f:f7:c0:e7:76: 7c:c6:19:60:fc:2c:f4:ad:35:7a:df:67:e9:9f:1a: 05:ac:dc:36:63:d4:3b:df:23:03:62:40:1f:80:cc: df:de:fc:64:da:2c:89:e5:68:b9:34:22:e4:47:c5: 27:5b:0b:ac:f6:87:44:97:64:76:b0:bb:35:33:02: ea:bb:51:e4:88:21:39:0e:ff:a0:90:98:a1:da:bd: c9:d6:36:17:a0:ed:b7:d3:ad:aa:b9:0d:1f:84:ed: 18:21:53:47:65:e4:eb:96:7c:9e:42:1b:33:92:f9: f6:cc:2a:fd:15:b8:04:0f:f1:f8:f9:87:9a:d5:bb: 79:da:0e:6a:d7:c4:8f:01:42:80:93:34:7c:c9:38: 10:4c:e5:44:50:92:00:14:0d:36:bb:b9:04:1a:be: 17:7a:09:0c:a8:6a:72:a4:e0:c3:b7:2e:83:81:a9: d6:3f:2a:10:3a:82:33:fe:97:31:33:f2:78:57:a8: e4:e0:f5:db:b3:2e:a7:5c:ad:1d:0b:7a:c7:71:32: 39:f4:67:f6:95:6f:a3:40:fb:16:d2:a2:d7:35:3b: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:E9:28:32:51:E7:88:E3:B5:4E:71:27:BF:A2:8C:78:72:B1:7C X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8900::/40 Signature Algorithm: sha256WithRSAEncryption 20:b6:1d:d6:74:37:f0:5a:85:ff:0e:3e:e9:7c:ef:71:1a:b2: 29:15:73:01:26:39:25:12:de:b6:6d:61:36:ac:65:2d:17:c4: 4a:72:98:60:b5:5b:df:19:e7:20:d1:7b:de:35:71:76:08:9b: f3:7f:66:81:4e:7f:a0:03:11:b9:53:ab:3a:3c:88:81:39:0a: 28:11:b2:d9:59:46:67:ed:cf:45:7b:d2:14:9a:c8:8c:7a:35: fa:91:b1:57:46:45:34:61:8d:08:0e:a0:53:d1:47:48:be:8a: 12:88:d5:1b:6a:cf:10:73:a8:52:3f:67:e9:a3:0d:61:dd:8c: 81:41:a0:77:ed:a6:73:d5:7a:73:5c:4a:64:d9:57:2d:86:70: 43:78:c1:62:69:89:d3:c2:1c:14:2a:d5:48:dd:98:22:f5:42: 7f:94:26:18:d4:12:2f:18:e7:a5:cd:65:4a:6b:56:11:7e:17: ca:8e:a2:7e:a7:be:29:00:f4:21:98:35:2a:5e:88:79:b2:67: 83:68:6c:45:3d:02:b8:ff:29:cc:a7:77:50:66:5c:51:6c:be: c1:9a:ca:ac:de:bc:29:fa:36:3a:65:13:ab:7d:01:0d:bd:24: ef:0a:e0:11:e7:2e:47:88:39:bc:4f:11:84:e0:63:25:57:42: 38:a9:24:dc -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUHhnH7uqhxtP4XTXTF988OL3mk2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA5MDcyMDU1NDJaFw0yNzA5MDYyMTAwNDJaMDMxMTAvBgNV BAMTKDU1MDNFOTI4MzI1MUU3ODhFM0I1NEU3MTI3QkZBMjhDNzg3MkIxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocxHEANPk9Bfs5vd+l3ok6I7f H+8wAWZSLkzZrbVwNhyQ11o3dj8f98DndnzGGWD8LPStNXrfZ+mfGgWs3DZj1Dvf IwNiQB+AzN/e/GTaLInlaLk0IuRHxSdbC6z2h0SXZHawuzUzAuq7UeSIITkO/6CQ mKHavcnWNheg7bfTraq5DR+E7RghU0dl5OuWfJ5CGzOS+fbMKv0VuAQP8fj5h5rV u3naDmrXxI8BQoCTNHzJOBBM5URQkgAUDTa7uQQavhd6CQyoanKk4MO3LoOBqdY/ KhA6gjP+lzEz8nhXqOTg9duzLqdcrR0LesdxMjn0Z/aVb6NA+xbSotc1O4LXAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUVQPpKDJR54jjtU5xJ7+ijHhysXwwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNlMjAz MjMxMzMzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBhKDiTANBgkqhkiG9w0BAQsFAAOCAQEA ILYd1nQ38FqF/w4+6XzvcRqyKRVzASY5JRLetm1hNqxlLRfESnKYYLVb3xnnINF7 3jVxdgib839mgU5/oAMRuVOrOjyIgTkKKBGy2VlGZ+3PRXvSFJrIjHo1+pGxV0ZF NGGNCA6gU9FHSL6KEojVG2rPEHOoUj9n6aMNYd2MgUGgd+2mc9V6c1xKZNlXLYZw Q3jBYmmJ08IcFCrVSN2YIvVCf5QmGNQSLxjnpc1lSmtWEX4Xyo6ifqe+KQD0IZg1 Kl6IebJng2hsRT0CuP8pzKd3UGZcUWy+wZrKrN68Kfo2OmUTq30BDb0k7wrgEecu R4g5vE8RhOBjJVdCOKkk3A== -----END CERTIFICATE-----Generated at Tue Oct 13 23:38:19 2026 by rpki-client