$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa File: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (raw, json) Hash identifier: aJxJdeQwMHofslUnDDqMw8h3IFJQNhUeWr0oOm65z48= Subject key identifier: A0:D7:0E:D9:EC:96:B8:04:EE:36:B1:8F:A3:DF:09:3C:98:3C:7B:02 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 19BA1F5929104BF213EC91C6CF3EC2BD07F7B647 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa Signing time: Sat 26 Sep 2026 23:00:50 +0000 ROA not before: Sat 26 Sep 2026 22:55:50 +0000 ROA not after: Sat 25 Sep 2027 23:00:50 +0000 asID: 214033 IP address blocks: 2a06:1283:8906::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ba:1f:59:29:10:4b:f2:13:ec:91:c6:cf:3e:c2:bd:07:f7:b6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Sep 26 22:55:50 2026 GMT Not After : Sep 25 23:00:50 2027 GMT Subject: CN=A0D70ED9EC96B804EE36B18FA3DF093C983C7B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:08:2c:2a:9d:84:7b:c0:15:ed:e5:09:25: d0:ab:ff:99:0b:0e:46:5a:ee:b9:53:4f:9b:ae:b3: 7f:cf:b4:f3:d5:e8:a8:67:ba:24:55:b7:26:f0:23: 82:c8:f4:65:04:4f:58:c4:73:0d:78:a5:c7:6c:f8: 76:cd:79:74:7e:2c:8e:82:af:cb:30:bc:66:4c:22: c8:5d:ea:fb:2a:f8:b4:ca:a0:26:2f:d1:ac:82:a6: 41:5f:d7:fc:4a:42:0c:80:86:ff:0d:78:64:09:7d: 61:85:0c:47:f9:53:04:8e:79:ec:3b:b1:f3:fd:92: 46:e2:1b:56:6b:35:af:61:8b:55:28:a9:0b:a3:31: 55:06:a1:1a:af:33:73:85:dc:e9:d9:4f:46:42:62: dd:40:d9:f7:04:e2:1d:1e:db:bb:e5:3f:fb:36:75: ff:67:d1:0b:ce:76:78:b2:81:73:dc:4e:b7:62:03: b8:6d:11:4c:3c:a8:37:1c:75:f3:54:6f:f9:d6:df: b0:5d:d8:38:e3:e7:e8:48:00:45:98:b3:e6:18:76: fc:b3:3b:49:ba:cd:9d:fe:53:75:0c:58:76:16:32: bd:9c:21:44:36:df:0e:a6:4d:ba:52:8d:ce:16:7d: 7c:56:66:ac:7d:3c:cb:63:ba:58:a9:37:e0:5c:ea: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D7:0E:D9:EC:96:B8:04:EE:36:B1:8F:A3:DF:09:3C:98:3C:7B:02 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8906::/48 Signature Algorithm: sha256WithRSAEncryption 9e:59:13:c9:ae:4c:66:9c:5b:ac:e9:b9:0f:ec:58:b7:88:81: 2e:54:1d:e1:d1:1e:ff:80:b8:fb:38:b6:58:0e:c9:66:f9:8b: 02:33:ae:ae:d7:d7:d1:8e:eb:07:66:4a:6a:6d:d4:cd:0d:80: dc:e5:22:4c:79:9d:5c:72:86:ed:15:a6:30:0d:03:af:e5:f8: 1a:40:a9:5b:e5:da:f0:10:a2:bc:ad:67:99:cc:03:1a:87:2a: ed:bf:e6:f3:8a:7e:f0:ea:36:c2:54:be:b4:6f:a0:70:ef:61: cc:67:79:51:9d:fd:10:c3:71:dd:6d:5a:de:92:91:fd:a6:e6: e9:88:f6:80:0c:05:81:5c:d0:27:ca:9f:a8:58:0d:bd:cb:25: 76:dd:21:3c:86:01:aa:c2:f2:b3:a8:5b:76:05:b6:32:bf:7b: 34:54:d1:3d:5f:2e:8f:72:78:24:39:7a:c5:08:a4:c9:84:9a: 4b:02:de:87:6e:78:0b:0d:83:1b:a7:91:42:55:13:c8:e1:3f: d0:c3:fe:3c:56:02:1c:56:77:91:c9:05:f3:93:bd:f9:14:ed: 3c:9e:1c:dc:ac:58:ec:4c:3b:29:84:d6:46:6e:4e:ae:54:86: 0a:64:a9:a5:c5:1c:67:91:a0:9d:a3:50:8b:af:83:ca:71:4d: 8e:d5:88:b8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUGbofWSkQS/IT7JHGzz7CvQf3tkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA5MjYyMjU1NTBaFw0yNzA5MjUyMzAwNTBaMDMxMTAvBgNV BAMTKEEwRDcwRUQ5RUM5NkI4MDRFRTM2QjE4RkEzREYwOTNDOTgzQzdCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKwgsKp2Ee8AV7eUJJdCr/5kL DkZa7rlTT5uus3/PtPPV6KhnuiRVtybwI4LI9GUET1jEcw14pcds+HbNeXR+LI6C r8swvGZMIshd6vsq+LTKoCYv0ayCpkFf1/xKQgyAhv8NeGQJfWGFDEf5UwSOeew7 sfP9kkbiG1ZrNa9hi1UoqQujMVUGoRqvM3OF3OnZT0ZCYt1A2fcE4h0e27vlP/s2 df9n0QvOdniygXPcTrdiA7htEUw8qDccdfNUb/nW37Bd2Djj5+hIAEWYs+YYdvyz O0m6zZ3+U3UMWHYWMr2cIUQ23w6mTbpSjc4WfXxWZqx9PMtjulipN+Bc6q4LAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUoNcO2eyWuATuNrGPo98JPJg8ewIwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM2M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzQzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiQYwDQYJKoZIhvcNAQELBQADggEB AJ5ZE8muTGacW6zpuQ/sWLeIgS5UHeHRHv+AuPs4tlgOyWb5iwIzrq7X19GO6wdm Smpt1M0NgNzlIkx5nVxyhu0VpjANA6/l+BpAqVvl2vAQorytZ5nMAxqHKu2/5vOK fvDqNsJUvrRvoHDvYcxneVGd/RDDcd1tWt6Skf2m5umI9oAMBYFc0CfKn6hYDb3L JXbdITyGAarC8rOoW3YFtjK/ezRU0T1fLo9yeCQ5esUIpMmEmksC3odueAsNgxun kUJVE8jhP9DD/jxWAhxWd5HJBfOTvfkU7TyeHNysWOxMOymE1kZuTq5UhgpkqaXF HGeRoJ2jUIuvg8pxTY7ViLg= -----END CERTIFICATE-----Generated at Tue Oct 13 08:25:07 2026 by rpki-client