$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: VelXelft33k12XYWNbcZyfGji313tB3O+se8Vz2O0Mg= Subject key identifier: 93:65:92:C1:88:EB:D3:A3:3B:EC:78:09:1B:AB:DC:E7:BB:42:D8:A7 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 4A4C0C2BD69CD49E8E14F7F709EB6CA898837F21 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa Signing time: Wed 26 Aug 2026 18:38:38 +0000 ROA not before: Wed 26 Aug 2026 18:33:38 +0000 ROA not after: Wed 25 Aug 2027 18:38:38 +0000 asID: 214344 IP address blocks: 2a06:a004:ff03::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 19:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4c:0c:2b:d6:9c:d4:9e:8e:14:f7:f7:09:eb:6c:a8:98:83:7f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 26 18:33:38 2026 GMT Not After : Aug 25 18:38:38 2027 GMT Subject: CN=936592C188EBD3A33BEC78091BABDCE7BB42D8A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:58:77:f7:1e:10:50:75:93:78:2b:22:12: 0c:86:d9:f3:4e:e1:19:a1:50:b7:a0:8d:b8:61:63: 33:2c:8b:9c:23:7a:b5:ba:4d:1b:c0:ea:bd:58:cf: a0:49:0f:57:1e:fa:1e:20:20:4f:65:80:b4:46:57: 59:53:96:a6:8f:31:07:10:b3:7d:65:e2:4f:ca:4e: 75:b5:df:98:0e:15:02:89:43:c0:52:36:81:ea:64: 07:18:e8:ed:69:09:89:4a:4c:b0:3a:78:34:d7:89: 14:da:a1:e6:d9:4f:c3:42:31:54:22:4a:bc:3a:3a: e4:b7:bf:a4:23:4d:70:ca:87:e5:4f:54:49:56:97: 2c:15:ad:bb:a3:d1:6c:92:cf:74:0d:d4:5f:ab:8a: bd:44:dd:18:f6:1d:a8:2f:5e:3a:8b:81:41:77:e4: 2e:c9:5f:db:b6:e7:65:99:16:8f:44:40:13:c6:8b: db:b5:eb:86:c5:12:3c:25:55:82:84:17:0e:b0:41: 15:8b:f9:d8:49:96:23:24:b0:f5:cd:b1:08:54:89: 5d:a5:f1:9a:56:3b:de:73:ee:35:c2:b7:d2:16:2b: 5e:38:84:59:8f:f5:7c:6b:83:13:ee:bf:e1:12:60: 86:98:af:28:40:c2:19:11:0b:73:da:0a:2b:34:8a: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:65:92:C1:88:EB:D3:A3:3B:EC:78:09:1B:AB:DC:E7:BB:42:D8:A7 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ff03::/48 Signature Algorithm: sha256WithRSAEncryption 20:7d:3e:b3:ad:84:41:10:fb:00:50:45:ad:d5:7c:fa:29:6f: 16:6a:4f:56:fb:d6:b8:c1:c0:31:12:21:e0:3a:11:1e:52:fe: a4:51:5c:38:69:85:06:fb:e4:6d:f5:db:ed:58:b5:0a:64:a7: 44:7a:02:1d:11:6a:6a:21:af:a2:ee:76:60:8a:d9:21:0d:f0: a6:8f:14:b7:1e:b7:d4:8c:2f:b1:4c:fa:08:23:bb:99:36:e7: 24:18:97:aa:75:01:f1:c6:9d:06:71:64:a1:f6:a0:99:b8:27: 8f:e3:70:b2:ed:9f:78:77:fa:0c:89:c4:ab:b5:60:9a:58:7a: 2b:47:c0:77:9f:d5:7f:18:5b:2f:c8:57:a9:90:21:89:28:4b: c7:ac:cb:19:8f:b0:af:92:9e:17:65:74:a3:d0:94:ca:ee:e4: 07:63:b6:f3:ee:fb:48:f6:d2:d6:98:f7:5f:f3:21:b4:98:af: df:c8:36:5f:57:3d:bc:dc:cc:c8:33:83:c4:57:43:a9:9d:b8: 4a:53:3e:2a:b1:19:28:5a:0b:27:ff:46:6a:6e:a8:4c:69:04: e0:41:db:87:94:15:2f:72:1d:af:c4:45:cf:ff:44:37:ef:6f: ff:b7:1b:6d:83:3a:49:c1:85:3a:f7:1e:2f:3b:86:de:48:18: 22:f6:00:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUSkwMK9ac1J6OFPf3CetsqJiDfyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjYxODMzMzhaFw0yNzA4MjUxODM4MzhaMDMxMTAvBgNV BAMTKDkzNjU5MkMxODhFQkQzQTMzQkVDNzgwOTFCQUJEQ0U3QkI0MkQ4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwlh39x4QUHWTeCsiEgyG2fNO 4RmhULegjbhhYzMsi5wjerW6TRvA6r1Yz6BJD1ce+h4gIE9lgLRGV1lTlqaPMQcQ s31l4k/KTnW135gOFQKJQ8BSNoHqZAcY6O1pCYlKTLA6eDTXiRTaoebZT8NCMVQi Srw6OuS3v6QjTXDKh+VPVElWlywVrbuj0WySz3QN1F+rir1E3Rj2HagvXjqLgUF3 5C7JX9u252WZFo9EQBPGi9u164bFEjwlVYKEFw6wQRWL+dhJliMksPXNsQhUiV2l 8ZpWO95z7jXCt9IWK144hFmP9XxrgxPuv+ESYIaYryhAwhkRC3PaCis0igT5AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUk2WSwYjr06M77HgJG6vc57tC2KcwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2MzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT/AzANBgkqhkiG9w0BAQsFAAOCAQEAIH0+s62EQRD7AFBF rdV8+ilvFmpPVvvWuMHAMRIh4DoRHlL+pFFcOGmFBvvkbfXb7Vi1CmSnRHoCHRFq aiGvou52YIrZIQ3wpo8Utx631IwvsUz6CCO7mTbnJBiXqnUB8cadBnFkofagmbgn j+Nwsu2feHf6DInEq7Vgmlh6K0fAd5/VfxhbL8hXqZAhiShLx6zLGY+wr5KeF2V0 o9CUyu7kB2O28+77SPbS1pj3X/MhtJiv38g2X1c9vNzMyDODxFdDqZ24SlM+KrEZ KFoLJ/9Gam6oTGkE4EHbh5QVL3Idr8RFz/9EN+9v/7cbbYM6ScGFOvceLzuG3kgY IvYAtA== -----END CERTIFICATE-----Generated at Tue Sep 29 04:34:58 2026 by rpki-client