$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa File: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (raw, json) Hash identifier: NFvsPoacApBzdz+FlXYxKS+SrJRRGDFokmaNHzKzBOQ= Subject key identifier: 3B:49:3D:33:A0:D5:E2:D1:A0:86:FB:CE:CE:A0:E5:46:4C:4F:96:33 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 4506CA6B6A16D021534CBB9780526F4826CB02E3 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa Signing time: Mon 07 Sep 2026 22:00:42 +0000 ROA not before: Mon 07 Sep 2026 21:55:42 +0000 ROA not after: Mon 06 Sep 2027 22:00:42 +0000 asID: 212770 IP address blocks: 2a06:1283:8902::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 01:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:06:ca:6b:6a:16:d0:21:53:4c:bb:97:80:52:6f:48:26:cb:02:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Sep 7 21:55:42 2026 GMT Not After : Sep 6 22:00:42 2027 GMT Subject: CN=3B493D33A0D5E2D1A086FBCECEA0E5464C4F9633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:fc:65:e9:30:82:74:59:50:bc:79:fc:3c: 07:03:6a:07:9b:f0:0c:ae:06:5e:88:73:5d:90:2c: c7:92:47:40:23:c6:85:57:23:b7:e2:89:3e:53:14: e3:11:4c:c3:ee:f8:f9:af:2c:e1:37:8a:c8:c0:f2: a3:8f:ca:91:43:1f:38:74:e1:3b:c0:86:f6:a0:d1: 82:c3:29:28:fe:f3:fd:6d:12:a4:a8:aa:ed:20:85: 57:aa:9f:e3:d0:24:7b:a1:b5:01:f1:84:ea:55:1a: 4b:7c:69:0c:9e:a7:80:89:47:62:d6:46:a0:77:e0: 28:81:6c:81:3b:86:c0:86:85:c6:7d:3b:34:d8:a0: 3f:1c:4f:24:b0:19:c6:8e:11:de:b1:f3:a9:18:b1: 0b:6b:5c:08:e5:4b:d3:18:dd:49:d2:a6:4f:b4:e7: 56:c2:ab:0d:b1:59:b4:9c:92:dc:30:c5:ef:ee:54: 3a:e7:02:3c:82:65:a2:ab:f1:0b:07:d6:35:9d:b6: d9:87:9a:5f:0e:f5:cc:4c:f4:90:43:23:da:b1:10: e5:68:ee:28:7e:76:02:01:2a:47:2a:69:a1:1d:b7: 88:9e:8b:6f:a5:fd:7a:80:39:65:a6:2b:ed:87:7f: ab:34:4f:60:b3:43:a3:c3:d5:b8:ef:e5:18:eb:9d: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:49:3D:33:A0:D5:E2:D1:A0:86:FB:CE:CE:A0:E5:46:4C:4F:96:33 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8902::/48 Signature Algorithm: sha256WithRSAEncryption 25:7d:21:31:9a:4b:91:b5:c1:5f:d1:6d:b3:f0:82:86:86:64: d6:fe:a0:08:ea:f0:03:ae:1d:8d:b7:e8:c8:4b:c2:23:aa:e6: b6:72:9b:1e:08:95:c1:8d:08:e7:24:ae:3f:e4:b8:2f:af:82: 82:3e:3c:14:16:c2:bc:d5:fe:43:bd:d7:8d:54:15:0e:2c:0b: c7:f2:e3:fd:50:41:00:45:b4:ec:0f:e6:33:b0:a7:b0:2a:a5: ea:f7:74:6f:1c:63:ca:60:d2:85:75:5f:cb:90:2e:7e:17:7a: 40:10:61:af:13:b4:af:18:0f:f0:9d:62:27:a5:39:09:76:88: d5:1e:bc:10:e9:7a:f3:31:50:7c:14:f7:ca:40:f3:e7:c2:66: 11:26:77:90:a4:1b:e3:48:24:23:48:0f:2a:cc:d8:94:c6:3d: 5e:ae:b9:3b:69:8e:52:be:01:ee:1c:dd:ec:15:39:67:29:c5: e2:6e:75:06:50:34:3d:ef:35:31:af:e4:ca:5d:bf:f0:ef:c1: 25:ec:c0:2d:fa:b7:eb:78:2a:ae:70:72:8b:8c:ce:fc:2f:06: 69:4a:88:34:3a:55:20:f6:b3:f2:9e:f4:67:f3:83:ee:b5:a2: 52:27:36:c3:31:45:a1:ba:72:ce:e9:ed:d8:83:c2:93:3c:d1: 2a:8e:fc:4c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIURQbKa2oW0CFTTLuXgFJvSCbLAuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA5MDcyMTU1NDJaFw0yNzA5MDYyMjAwNDJaMDMxMTAvBgNV BAMTKDNCNDkzRDMzQTBENUUyRDFBMDg2RkJDRUNFQTBFNTQ2NEM0Rjk2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpfxl6TCCdFlQvHn8PAcDageb 8AyuBl6Ic12QLMeSR0AjxoVXI7fiiT5TFOMRTMPu+PmvLOE3isjA8qOPypFDHzh0 4TvAhvag0YLDKSj+8/1tEqSoqu0ghVeqn+PQJHuhtQHxhOpVGkt8aQyep4CJR2LW RqB34CiBbIE7hsCGhcZ9OzTYoD8cTySwGcaOEd6x86kYsQtrXAjlS9MY3UnSpk+0 51bCqw2xWbScktwwxe/uVDrnAjyCZaKr8QsH1jWdttmHml8O9cxM9JBDI9qxEOVo 7ih+dgIBKkcqaaEdt4iei2+l/XqAOWWmK+2Hf6s0T2CzQ6PD1bjv5RjrndYrAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUO0k9M6DV4tGghvvOzqDlRkxPljMwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDMyM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzIzNzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiQIwDQYJKoZIhvcNAQELBQADggEB ACV9ITGaS5G1wV/RbbPwgoaGZNb+oAjq8AOuHY236MhLwiOq5rZymx4IlcGNCOck rj/kuC+vgoI+PBQWwrzV/kO9141UFQ4sC8fy4/1QQQBFtOwP5jOwp7Aqper3dG8c Y8pg0oV1X8uQLn4XekAQYa8TtK8YD/CdYielOQl2iNUevBDpevMxUHwU98pA8+fC ZhEmd5CkG+NIJCNIDyrM2JTGPV6uuTtpjlK+Ae4c3ewVOWcpxeJudQZQND3vNTGv 5Mpdv/DvwSXswC36t+t4Kq5wcouMzvwvBmlKiDQ6VSD2s/Ke9Gfzg+61olInNsMx RaG6cs7p7diDwpM80SqO/Ew= -----END CERTIFICATE-----Generated at Sun Oct 11 08:16:00 2026 by rpki-client