$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa File: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (raw, json) Hash identifier: E+8UNL877psHx2d/mvBxOYce2n9EOox4ReN2yd7TyWI= Subject key identifier: 5F:95:18:3A:E7:FA:C6:28:C3:65:F6:D4:D8:C9:24:48:1C:89:A1:C8 Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 2D10B7FF3A54DD01F275D7DE7FD97DA597246A14 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa Signing time: Sat 10 Oct 2026 19:00:50 +0000 ROA not before: Sat 10 Oct 2026 18:55:50 +0000 ROA not after: Sat 09 Oct 2027 19:00:50 +0000 asID: 210796 IP address blocks: 2a06:1283:bd40::/42 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 15:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:10:b7:ff:3a:54:dd:01:f2:75:d7:de:7f:d9:7d:a5:97:24:6a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Oct 10 18:55:50 2026 GMT Not After : Oct 9 19:00:50 2027 GMT Subject: CN=5F95183AE7FAC628C365F6D4D8C924481C89A1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:65:13:b9:fa:b9:00:50:0c:73:0a:0c:d2:7a: d1:3c:e4:c1:b7:3a:0d:4a:91:f6:08:5a:53:27:83: c2:e1:b5:c8:06:e9:b8:90:a8:08:dd:33:70:b8:b2: c9:55:68:1e:d2:e2:b0:16:69:73:d2:83:c0:3f:39: ff:4c:52:ae:c3:18:02:67:9a:62:c3:39:d1:8d:2f: 10:f0:5d:06:c9:82:aa:c1:6b:0c:7b:43:8b:f4:e4: 74:ea:00:7d:9f:d5:f6:2a:e3:df:6a:f7:4a:9d:eb: a4:1a:63:40:96:ee:a8:96:cf:87:77:19:b9:9c:94: 8d:24:4d:27:eb:53:97:10:02:77:bb:7f:49:72:a4: b2:e3:e0:1f:f8:70:a4:a7:25:93:7f:d7:35:13:80: c5:15:54:af:42:c3:56:96:72:f9:98:2c:1c:cb:eb: f9:06:13:99:d4:b8:87:ef:7f:64:a6:8e:a2:45:0c: a4:32:55:39:85:0a:62:ea:17:a1:69:9e:af:88:7f: b7:4a:45:d2:97:03:34:f1:9b:81:23:b9:b4:9c:c1: 4c:55:70:48:dd:ce:ae:f6:1e:1f:9b:c4:1e:95:13: e0:30:0a:f3:7d:4c:61:ae:d5:e7:9c:3f:81:20:47: 0b:1d:4b:87:28:04:25:ca:e4:33:f5:c0:a2:51:2f: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:18:3A:E7:FA:C6:28:C3:65:F6:D4:D8:C9:24:48:1C:89:A1:C8 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:bd40::/42 Signature Algorithm: sha256WithRSAEncryption 46:1d:61:10:d3:de:78:52:69:6f:e1:d1:f7:15:26:0c:ca:7d: f0:80:dd:2e:df:e7:f7:05:23:aa:e1:3c:b1:fe:60:97:ba:52: d0:97:cc:fb:4d:ec:16:94:fb:f5:45:a7:b6:91:6f:4f:d1:bc: a6:2d:e2:8e:ce:0f:00:ef:7b:c1:0a:07:02:19:84:98:1e:bd: 51:60:ec:9b:5c:1c:24:1a:21:b8:8f:4a:cb:e2:19:3d:18:df: 49:01:f1:cf:83:c2:57:6a:83:f6:6a:fb:66:32:48:c5:17:03: 7e:4a:1b:df:23:1a:e2:10:a3:9a:de:d2:92:a6:c3:97:e8:ad: 67:d6:30:b4:51:e9:a7:95:60:c4:d1:3a:10:8b:ab:59:44:81: 55:cc:d6:5f:8d:4a:a9:9f:d2:a9:b8:39:d1:a5:66:de:7e:7b: 4a:8f:26:5c:c0:21:a3:21:7c:7c:d5:2a:ce:f2:d5:1a:f3:96: c9:55:c3:12:b6:d1:61:9d:4c:bf:bf:a9:9f:30:59:8f:6f:d9: b8:cd:11:bd:4c:57:52:1a:9b:93:5b:dd:76:e2:e8:2f:a6:e9: b1:36:07:29:ce:a3:61:fd:92:4c:4b:14:96:63:67:6d:f1:87: 7c:3a:e6:1c:3c:5a:ed:37:48:01:04:c5:7a:54:41:af:4c:93: be:5f:93:62 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIULRC3/zpU3QHyddfef9l9pZckahQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjEwMTAxODU1NTBaFw0yNzEwMDkxOTAwNTBaMDMxMTAvBgNV BAMTKDVGOTUxODNBRTdGQUM2MjhDMzY1RjZENEQ4QzkyNDQ4MUM4OUExQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZRO5+rkAUAxzCgzSetE85MG3 Og1KkfYIWlMng8LhtcgG6biQqAjdM3C4sslVaB7S4rAWaXPSg8A/Of9MUq7DGAJn mmLDOdGNLxDwXQbJgqrBawx7Q4v05HTqAH2f1fYq499q90qd66QaY0CW7qiWz4d3 GbmclI0kTSfrU5cQAne7f0lypLLj4B/4cKSnJZN/1zUTgMUVVK9Cw1aWcvmYLBzL 6/kGE5nUuIfvf2SmjqJFDKQyVTmFCmLqF6Fpnq+If7dKRdKXAzTxm4EjubScwUxV cEjdzq72Hh+bxB6VE+AwCvN9TGGu1eecP4EgRwsdS4coBCXK5DP1wKJRLxItAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUX5UYOuf6xijDZfbU2MkkSByJocgwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iODg0NDMxOC0zNWQ3LTQ4MmUtYmJkNS1iNjI0Y2YwYjIwNDEvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTYyNjQzNDMwM2EzYTJmMzQzMjJkMzEzMjM4MjAzZDNlMjAz MjMxMzAzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwYqBhKDvUAwDQYJKoZIhvcNAQELBQADggEB AEYdYRDT3nhSaW/h0fcVJgzKffCA3S7f5/cFI6rhPLH+YJe6UtCXzPtN7BaU+/VF p7aRb0/RvKYt4o7ODwDve8EKBwIZhJgevVFg7JtcHCQaIbiPSsviGT0Y30kB8c+D wldqg/Zq+2YySMUXA35KG98jGuIQo5re0pKmw5forWfWMLRR6aeVYMTROhCLq1lE gVXM1l+NSqmf0qm4OdGlZt5+e0qPJlzAIaMhfHzVKs7y1RrzlslVwxK20WGdTL+/ qZ8wWY9v2bjNEb1MV1Iam5Nb3Xbi6C+m6bE2BynOo2H9kkxLFJZjZ23xh3w65hw8 Wu03SAEExXpUQa9Mk75fk2I= -----END CERTIFICATE-----Generated at Mon Oct 12 04:03:42 2026 by rpki-client