$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a3130313a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a3130313a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: 2NZAbHY13xbv140pN3EL1ABNmOrvc/UVo8YH05InHBs= Subject key identifier: 56:B7:7B:0A:46:5F:36:9B:59:91:6C:CB:7E:7F:D2:26:B2:56:DB:98 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 1B864D5DFE2FC7AABF8F19F2010DF216707D1F53 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a3130313a3a2f34382d3438203d3e20323134333434.roa Signing time: Sun 06 Sep 2026 16:32:32 +0000 ROA not before: Sun 06 Sep 2026 16:27:32 +0000 ROA not after: Sun 05 Sep 2027 16:32:32 +0000 asID: 214344 IP address blocks: 2a06:a004:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 04:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:86:4d:5d:fe:2f:c7:aa:bf:8f:19:f2:01:0d:f2:16:70:7d:1f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Sep 6 16:27:32 2026 GMT Not After : Sep 5 16:32:32 2027 GMT Subject: CN=56B77B0A465F369B59916CCB7E7FD226B256DB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:2c:90:5a:f8:0e:fa:81:34:3c:a6:ab:62: c1:3c:4a:55:c3:7b:3f:0f:8e:42:27:34:9a:33:d2: 1c:40:32:03:f9:6b:ec:55:ec:6c:94:87:b2:d1:14: eb:7f:5b:2a:3f:3f:4c:a6:ab:28:78:a6:da:0f:ee: 76:b2:01:96:7a:3a:31:b9:56:87:06:fc:a7:f1:09: 01:1a:96:75:ed:b2:41:c2:1a:e5:4a:9d:c7:eb:bf: 55:2b:b5:d9:e3:c1:73:c4:8c:10:e9:8a:f1:bf:04: cd:01:08:16:18:33:fc:0e:6f:b6:f8:85:b1:7c:25: da:ea:89:85:2c:35:5b:35:39:04:eb:b0:38:a5:42: 99:9e:58:5f:87:63:02:3b:3b:8c:f8:7f:e1:28:8a: 04:c4:37:8d:6f:26:0e:65:b1:53:83:7d:31:94:2b: c7:3d:be:32:f7:40:a5:49:94:91:6b:f1:b4:a9:f0: 8a:d1:89:36:bc:d5:b2:0b:a3:1f:23:33:6f:9e:d4: 8c:7d:d0:55:8f:25:95:d1:a8:a4:73:7c:76:ea:4a: 6b:6b:ae:16:95:14:ef:4f:10:82:9d:ba:9b:dd:30: 80:36:05:12:68:b7:1e:64:0f:ce:cb:80:b4:ad:bb: 2d:70:3f:2b:57:2e:cb:a7:93:0b:97:aa:a9:ff:07: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B7:7B:0A:46:5F:36:9B:59:91:6C:CB:7E:7F:D2:26:B2:56:DB:98 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a3130313a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:101::/48 Signature Algorithm: sha256WithRSAEncryption 4e:f1:bd:05:59:bf:04:8e:73:22:2a:58:11:51:8e:75:6b:e2: cf:a6:8b:e8:92:9a:c8:ec:d3:e7:1a:53:de:26:c5:59:dd:89: ea:86:09:56:90:c7:5b:8d:fd:11:8b:d7:7b:9e:73:f7:10:74: 2f:64:02:21:dc:c5:55:74:ab:b1:64:6f:ef:7f:a4:42:92:0d: a6:e9:5d:d9:eb:88:24:04:05:cf:c0:c6:2c:08:c3:7a:88:5c: 99:1e:ec:c4:1b:00:5a:00:b6:bd:68:a2:ca:5f:8f:8d:05:91: 4e:1a:91:29:d2:d9:98:2e:1c:ee:1c:c3:d5:29:e9:38:a1:73: 92:af:e3:5f:04:b6:f6:91:32:8f:74:82:b5:3d:75:bf:58:f6: f1:ee:aa:96:05:28:31:a9:10:54:0b:dc:a4:c1:b8:28:9d:62: 25:a1:77:52:00:a2:9b:ba:85:16:2b:a8:df:f0:78:da:5b:1c: 18:eb:8b:9d:04:e7:ba:c4:93:a5:05:ae:5c:a6:e1:21:45:ae: 4d:60:c2:b8:25:14:98:7d:df:c5:05:ab:0e:28:49:39:9c:12: 30:84:14:82:ae:d8:da:b8:5c:ad:24:10:eb:0b:43:d6:55:50: 8c:3b:91:77:56:46:0a:57:ab:1d:72:0c:a9:9e:d5:5c:1d:8f: 98:b6:fd:34 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUG4ZNXf4vx6q/jxnyAQ3yFnB9H1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA5MDYxNjI3MzJaFw0yNzA5MDUxNjMyMzJaMDMxMTAvBgNV BAMTKDU2Qjc3QjBBNDY1RjM2OUI1OTkxNkNDQjdFN0ZEMjI2QjI1NkRCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQCyyQWvgO+oE0PKarYsE8SlXD ez8PjkInNJoz0hxAMgP5a+xV7GyUh7LRFOt/Wyo/P0ymqyh4ptoP7nayAZZ6OjG5 VocG/KfxCQEalnXtskHCGuVKncfrv1UrtdnjwXPEjBDpivG/BM0BCBYYM/wOb7b4 hbF8JdrqiYUsNVs1OQTrsDilQpmeWF+HYwI7O4z4f+EoigTEN41vJg5lsVODfTGU K8c9vjL3QKVJlJFr8bSp8IrRiTa81bILox8jM2+e1Ix90FWPJZXRqKRzfHbqSmtr rhaVFO9PEIKdupvdMIA2BRJotx5kD87LgLStuy1wPytXLsunkwuXqqn/B8zvAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUVrd7CkZfNptZkWzLfn/SJrJW25gwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2EzMTMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzMzM0MzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqBqAEAQEwDQYJKoZIhvcNAQELBQADggEBAE7xvQVZvwSOcyIqWBFR jnVr4s+mi+iSmsjs0+caU94mxVndieqGCVaQx1uN/RGL13uec/cQdC9kAiHcxVV0 q7Fkb+9/pEKSDabpXdnriCQEBc/AxiwIw3qIXJke7MQbAFoAtr1oospfj40FkU4a kSnS2ZguHO4cw9Up6Tihc5Kv418EtvaRMo90grU9db9Y9vHuqpYFKDGpEFQL3KTB uCidYiWhd1IAopu6hRYrqN/weNpbHBjri50E57rEk6UFrlym4SFFrk1gwrglFJh9 38UFqw4oSTmcEjCEFIKu2Nq4XK0kEOsLQ9ZVUIw7kXdWRgpXqx1yDKme1Vwdj5i2 /TQ= -----END CERTIFICATE-----Generated at Sat Sep 26 14:41:03 2026 by rpki-client