$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931373a3a2f34382d3438203d3e20323035333035.roa File: 326130363a313238333a383931373a3a2f34382d3438203d3e20323035333035.roa (raw, json) Hash identifier: rhL38qg/W10yIpndI3LKqIuuEEEeF98B/XXYMapKGsI= Subject key identifier: 85:0A:4B:1F:5A:8C:A3:3C:A9:64:BA:1F:14:03:70:AA:62:DE:56:C6 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 4F86A105D5A3285BEDB823D83C53F975BB1F1F7D Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931373a3a2f34382d3438203d3e20323035333035.roa Signing time: Sat 07 Mar 2026 23:01:16 +0000 ROA not before: Sat 07 Mar 2026 22:56:16 +0000 ROA not after: Sat 06 Mar 2027 23:01:16 +0000 asID: 205305 IP address blocks: 2a06:1283:8917::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:86:a1:05:d5:a3:28:5b:ed:b8:23:d8:3c:53:f9:75:bb:1f:1f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Mar 7 22:56:16 2026 GMT Not After : Mar 6 23:01:16 2027 GMT Subject: CN=850A4B1F5A8CA33CA964BA1F140370AA62DE56C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ba:37:e0:1a:1b:58:8f:c7:84:ce:06:4c:53: bb:3f:49:ad:a8:3f:76:06:ef:cd:04:7f:4d:7c:45: c5:0b:b4:57:93:0e:80:fc:e0:3b:d3:87:0d:f2:72: 36:2d:e3:87:2d:36:25:27:0e:3b:b2:d9:3e:25:4a: 72:40:6a:7f:17:05:47:aa:df:5a:77:b5:9f:bc:58: c0:0f:7a:f8:e6:ef:5f:cd:63:14:51:a1:ae:08:d6: f9:b1:7f:02:d0:36:a5:a6:f5:8b:ee:81:ce:7f:f6: 03:7a:53:fa:93:f6:6d:b1:8e:59:70:d1:a0:17:ec: 95:1d:44:4d:19:bc:74:35:51:b2:8b:ce:13:06:09: 15:6c:33:91:5c:cf:74:74:38:26:7b:e5:d4:2a:39: 41:8a:39:4e:69:ef:70:32:47:ad:30:50:9d:b8:ed: fb:e3:c0:48:23:f9:55:4d:90:6c:d3:a6:c5:a3:92: 06:db:eb:7e:c7:30:2d:fd:9c:78:8d:3f:38:a3:bd: df:e3:57:6d:9b:62:30:27:ef:10:f8:1a:ca:f2:bb: 42:93:2e:b0:c6:64:df:fb:00:f8:19:cf:70:50:ba: e2:cd:4b:24:47:45:37:4c:44:ac:01:2d:5d:5b:3f: de:dc:5d:9c:a0:56:ef:67:a0:fe:f6:94:dd:41:1a: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0A:4B:1F:5A:8C:A3:3C:A9:64:BA:1F:14:03:70:AA:62:DE:56:C6 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931373a3a2f34382d3438203d3e20323035333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8917::/48 Signature Algorithm: sha256WithRSAEncryption 4b:e8:5b:be:9e:fc:6c:0b:66:41:aa:17:30:cc:4e:fe:a6:75: bd:bb:f2:33:80:58:77:7f:b2:c7:1d:77:2a:df:57:7f:96:aa: 3c:05:5c:e9:fd:42:81:f4:16:d2:f3:cf:91:06:14:de:3d:b1: 91:da:05:ef:7e:37:9e:69:39:7c:b7:1b:7e:11:e5:6d:21:50: ca:20:3c:38:17:d7:de:c3:60:67:33:2e:91:2e:25:5a:1d:cf: d3:30:9d:10:e5:81:ec:9c:fa:6f:4c:5d:90:01:0c:f2:4b:a5: f7:80:45:fe:b6:73:5c:c2:21:c8:de:2e:e4:6a:96:a1:ff:80: da:80:6a:cd:27:0d:6d:37:5c:68:26:2d:41:c5:54:08:fc:bf: 9a:64:86:ef:46:41:fa:ed:ea:5f:88:18:d2:e1:b5:95:35:ce: c0:e0:45:96:0a:23:a0:0d:11:9d:57:06:c2:3e:5e:93:0b:d1: 30:a4:30:c0:a6:9e:52:b6:d8:be:f9:9d:e3:cf:d7:8b:1c:92: be:4d:8b:b4:67:2b:5f:19:70:f3:e8:20:75:c4:d3:c7:14:fe: 16:23:6f:9e:33:41:10:d3:c3:af:3a:bb:be:0b:f2:e1:e7:58: d6:f9:df:33:32:92:60:41:87:4c:fe:64:6c:68:27:4e:6d:71: ad:a0:bf:cc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUT4ahBdWjKFvtuCPYPFP5dbsfH30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjAzMDcyMjU2MTZaFw0yNzAzMDYyMzAxMTZaMDMxMTAvBgNV BAMTKDg1MEE0QjFGNUE4Q0EzM0NBOTY0QkExRjE0MDM3MEFBNjJERTU2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoujfgGhtYj8eEzgZMU7s/Sa2o P3YG780Ef018RcULtFeTDoD84DvThw3ycjYt44ctNiUnDjuy2T4lSnJAan8XBUeq 31p3tZ+8WMAPevjm71/NYxRRoa4I1vmxfwLQNqWm9Yvugc5/9gN6U/qT9m2xjllw 0aAX7JUdRE0ZvHQ1UbKLzhMGCRVsM5Fcz3R0OCZ75dQqOUGKOU5p73AyR60wUJ24 7fvjwEgj+VVNkGzTpsWjkgbb637HMC39nHiNPzijvd/jV22bYjAn7xD4Gsryu0KT LrDGZN/7APgZz3BQuuLNSyRHRTdMRKwBLV1bP97cXZygVu9noP72lN1BGmTBAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUhQpLH1qMozypZLofFANwqmLeVsYwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kXMA0GCSqGSIb3DQEBCwUAA4IBAQBL 6Fu+nvxsC2ZBqhcwzE7+pnW9u/IzgFh3f7LHHXcq31d/lqo8BVzp/UKB9BbS88+R BhTePbGR2gXvfjeeaTl8txt+EeVtIVDKIDw4F9few2BnMy6RLiVaHc/TMJ0Q5YHs nPpvTF2QAQzyS6X3gEX+tnNcwiHI3i7kapah/4DagGrNJw1tN1xoJi1BxVQI/L+a ZIbvRkH67epfiBjS4bWVNc7A4EWWCiOgDRGdVwbCPl6TC9EwpDDApp5Stti++Z3j z9eLHJK+TYu0ZytfGXDz6CB1xNPHFP4WI2+eM0EQ08OvOru+C/Lh51jW+d8zMpJg QYdM/mRsaCdObXGtoL/M -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:01 2026 by rpki-client