$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: cTlyMWzn1otKgftLf6wz2nHMNohH5wLQR9+2Ig5i2Mc= Subject key identifier: 2F:25:6C:E0:47:50:7E:2D:BB:A7:8C:5E:9A:47:7B:0B:3E:E8:B4:85 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 04CFDF8E73C8FBE14922A1323CB6F374A79CF9CF Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa Signing time: Thu 27 Aug 2026 11:20:58 +0000 ROA not before: Thu 27 Aug 2026 11:15:58 +0000 ROA not after: Thu 26 Aug 2027 11:20:58 +0000 asID: 214344 IP address blocks: 2a06:a004:ff04::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 04:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cf:df:8e:73:c8:fb:e1:49:22:a1:32:3c:b6:f3:74:a7:9c:f9:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 27 11:15:58 2026 GMT Not After : Aug 26 11:20:58 2027 GMT Subject: CN=2F256CE047507E2DBBA78C5E9A477B0B3EE8B485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:ca:c0:5f:96:d4:cd:df:17:2b:ab:e4:e3: e6:b9:8d:b8:5f:db:05:be:26:63:c8:87:61:71:3d: 3f:c4:c8:de:ec:c6:f2:f2:e7:6c:bd:40:72:35:26: 64:64:f4:7b:b1:f6:71:0b:8e:3e:bf:e5:56:08:b8: f5:d3:22:6c:62:ab:dd:04:e5:b4:8c:ce:ab:91:b8: d7:2c:59:31:4b:55:c1:69:02:09:a2:33:66:b3:f3: dc:28:71:7c:b8:b3:72:02:e0:6a:9b:21:25:1d:91: ee:c6:95:a8:08:55:51:1b:b7:07:d1:a5:10:07:76: 33:6d:00:44:a4:8d:aa:47:bf:42:b5:5d:76:27:ee: 55:b9:da:1c:10:0d:02:ac:5b:b7:57:88:35:ba:55: b6:d1:71:17:51:fb:d6:6b:c7:88:32:de:4c:e7:bd: 59:c8:3b:34:6f:26:f9:ff:fc:bb:3f:96:31:22:33: b3:0f:9f:53:46:9c:e2:a4:84:d2:eb:2a:8e:9a:b3: cc:2f:49:82:22:f4:ab:e5:ab:42:c0:b0:bb:d8:6f: 8e:7c:43:8c:a9:7e:70:63:c3:73:cf:54:47:1e:d8: 66:0a:f3:4a:3a:01:50:e4:20:16:4e:c3:ba:7d:17: 84:07:44:47:93:92:71:38:c0:14:81:53:85:42:26: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:25:6C:E0:47:50:7E:2D:BB:A7:8C:5E:9A:47:7B:0B:3E:E8:B4:85 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ff04::/48 Signature Algorithm: sha256WithRSAEncryption 18:1a:00:7b:0c:84:6c:3d:8c:19:ed:a3:30:f1:32:f7:f9:58: e0:25:72:3f:b4:ef:13:85:cd:1d:63:ca:aa:99:9f:ca:7d:b5: 03:89:d8:8e:22:2b:a1:6c:86:1f:2b:44:ae:77:61:70:fd:0a: 92:74:71:80:e4:1b:bb:b7:8e:2d:e7:38:a7:8f:4d:d7:a1:6a: 61:09:ff:60:64:ba:b5:70:7d:2f:4e:b4:e2:28:04:e1:83:6d: f3:76:9e:ee:8f:ce:03:46:f0:3b:c7:a2:1d:99:90:7d:fb:b6: e2:44:c6:35:20:83:e8:25:78:53:9a:a6:e6:47:c5:8e:b5:de: 0e:ae:dc:ed:ac:62:41:ae:59:cd:b1:10:da:f9:76:0b:32:91: ef:c7:08:81:10:ab:10:05:3a:c9:44:4e:c3:af:22:c0:18:87: a3:38:c7:8a:db:d7:78:4d:ab:5a:4e:c7:0c:88:b6:c9:dd:e7: 26:6b:0a:b9:76:58:2b:99:c5:83:d7:81:3f:b7:7c:c0:75:2a: b0:c2:07:ef:bc:4c:5a:b8:b8:03:92:7a:d1:3e:c9:30:04:74: c8:b6:11:b5:b4:dc:4e:d9:e4:7d:8b:e8:e1:8f:a8:95:40:6e: e0:89:fd:9a:c5:33:92:91:3a:45:79:68:19:d6:bf:e7:8e:36: f1:45:89:28 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUBM/fjnPI++FJIqEyPLbzdKec+c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjcxMTE1NThaFw0yNzA4MjYxMTIwNThaMDMxMTAvBgNV BAMTKDJGMjU2Q0UwNDc1MDdFMkRCQkE3OEM1RTlBNDc3QjBCM0VFOEI0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8p8rAX5bUzd8XK6vk4+a5jbhf 2wW+JmPIh2FxPT/EyN7sxvLy52y9QHI1JmRk9Hux9nELjj6/5VYIuPXTImxiq90E 5bSMzquRuNcsWTFLVcFpAgmiM2az89wocXy4s3IC4GqbISUdke7GlagIVVEbtwfR pRAHdjNtAESkjapHv0K1XXYn7lW52hwQDQKsW7dXiDW6VbbRcRdR+9Zrx4gy3kzn vVnIOzRvJvn//Ls/ljEiM7MPn1NGnOKkhNLrKo6as8wvSYIi9Kvlq0LAsLvYb458 Q4ypfnBjw3PPVEce2GYK80o6AVDkIBZOw7p9F4QHREeTknE4wBSBU4VCJh+RAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQULyVs4EdQfi27p4xemkd7Cz7otIUwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2MzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT/BDANBgkqhkiG9w0BAQsFAAOCAQEAGBoAewyEbD2MGe2j MPEy9/lY4CVyP7TvE4XNHWPKqpmfyn21A4nYjiIroWyGHytErndhcP0KknRxgOQb u7eOLec4p49N16FqYQn/YGS6tXB9L0604igE4YNt83ae7o/OA0bwO8eiHZmQffu2 4kTGNSCD6CV4U5qm5kfFjrXeDq7c7axiQa5ZzbEQ2vl2CzKR78cIgRCrEAU6yURO w68iwBiHozjHitvXeE2rWk7HDIi2yd3nJmsKuXZYK5nFg9eBP7d8wHUqsMIH77xM Wri4A5J60T7JMAR0yLYRtbTcTtnkfYvo4Y+olUBu4In9msUzkpE6RXloGda/5442 8UWJKA== -----END CERTIFICATE-----Generated at Sat Sep 26 15:29:22 2026 by rpki-client