$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa File: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (raw, json) Hash identifier: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80= Subject key identifier: 66:AA:52:BC:C9:66:E7:0D:8B:10:E5:69:5B:85:B4:AC:08:5D:E7:B6 Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 114256E9EDDC19D87157A61028C07152989E2FA9 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa Signing time: Wed 18 Mar 2026 18:13:05 +0000 ROA not before: Wed 18 Mar 2026 18:08:05 +0000 ROA not after: Wed 17 Mar 2027 18:13:05 +0000 asID: 210796 IP address blocks: 2a06:1283:bd41::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:42:56:e9:ed:dc:19:d8:71:57:a6:10:28:c0:71:52:98:9e:2f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Mar 18 18:08:05 2026 GMT Not After : Mar 17 18:13:05 2027 GMT Subject: CN=66AA52BCC966E70D8B10E5695B85B4AC085DE7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:05:cb:25:6a:f6:5c:bf:18:d5:9e:38:b1: 8f:f8:76:1e:13:21:9a:51:c4:e2:7c:b4:6a:4c:35: 63:cd:38:49:d5:7c:36:16:fd:9d:53:92:fb:d0:fd: 4f:1b:38:5b:81:ef:85:ec:69:d3:b8:c3:61:6a:07: 42:76:b6:35:4b:e1:d7:bd:de:cd:44:e6:71:27:cb: 36:c4:e2:03:d6:fa:0f:14:91:d5:90:ef:81:a8:1c: 86:10:e0:47:19:8a:41:d9:fd:13:e4:41:3e:73:7a: ea:cb:f9:90:6d:49:67:e0:a2:ea:32:38:7e:22:35: f2:e8:27:90:8d:0e:2d:e8:b5:a6:9c:3d:09:32:8f: f6:a9:93:46:85:d5:53:cb:dc:69:fa:8a:70:b6:7b: 86:2d:9d:d1:d4:41:cc:86:f2:8d:1e:7f:71:c0:cd: 85:6d:93:2a:93:0b:fd:40:c2:bf:45:5b:30:6b:89: a1:ef:5f:e5:93:6a:9d:0a:3e:40:0a:56:6f:d0:cf: cb:91:5e:e6:ff:14:d7:a4:66:c9:8a:ca:19:08:2e: 24:0b:c4:94:eb:f3:45:91:57:2a:fb:06:de:5b:ea: 71:1c:b9:c0:a8:85:61:bc:c1:75:fe:b3:de:c0:8c: c4:71:a6:c3:81:28:92:00:79:b4:28:ce:1b:84:af: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AA:52:BC:C9:66:E7:0D:8B:10:E5:69:5B:85:B4:AC:08:5D:E7:B6 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:bd41::/48 Signature Algorithm: sha256WithRSAEncryption b9:c8:85:76:95:eb:53:b9:11:50:dc:4b:40:44:bd:62:ac:84: ed:9f:01:09:7c:72:43:36:ca:05:10:a0:18:71:05:99:c3:41: 4d:e4:05:72:14:92:5f:65:86:87:b1:f7:85:b5:fa:29:32:61: 92:74:69:4f:60:9a:d9:96:17:43:51:70:93:3c:d3:08:fb:9e: 63:af:eb:a7:4e:3c:8a:81:b5:0f:64:db:88:36:ff:29:3c:05: 49:94:c4:fc:92:1d:f5:40:ef:c5:ea:75:16:bf:c2:9b:b1:66: 4c:89:b4:b5:9d:58:eb:7e:1c:d2:85:33:87:fa:93:aa:9c:01: be:da:e9:cd:e7:c5:78:03:da:14:3b:fa:8c:98:28:49:75:e9: 63:97:ff:99:1d:fc:74:cf:26:78:e1:5e:fd:b5:a5:47:b2:e6: 58:2b:77:14:a2:be:27:20:d7:c9:88:06:cb:85:7c:bd:55:c7: 1f:33:69:7f:99:a4:80:bf:d0:96:b5:4a:9d:73:f8:bb:9f:23: ac:71:14:e1:56:4a:22:0a:d8:d8:fc:04:16:2a:5a:e5:b5:30: 93:51:ce:9b:33:d0:c6:47:36:0c:10:1c:d4:7b:27:3c:36:b3: 74:55:e8:9d:40:bb:b5:c2:3c:37:97:e3:8a:25:41:b8:83:48: 8b:ea:fc:8a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUEUJW6e3cGdhxV6YQKMBxUpieL6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNjAzMTgxODA4MDVaFw0yNzAzMTcxODEzMDVaMDMxMTAvBgNV BAMTKDY2QUE1MkJDQzk2NkU3MEQ4QjEwRTU2OTVCODVCNEFDMDg1REU3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfwXLJWr2XL8Y1Z44sY/4dh4T IZpRxOJ8tGpMNWPNOEnVfDYW/Z1TkvvQ/U8bOFuB74XsadO4w2FqB0J2tjVL4de9 3s1E5nEnyzbE4gPW+g8UkdWQ74GoHIYQ4EcZikHZ/RPkQT5zeurL+ZBtSWfgouoy OH4iNfLoJ5CNDi3otaacPQkyj/apk0aF1VPL3Gn6inC2e4YtndHUQcyG8o0ef3HA zYVtkyqTC/1Awr9FWzBriaHvX+WTap0KPkAKVm/Qz8uRXub/FNekZsmKyhkILiQL xJTr80WRVyr7Bt5b6nEcucCohWG8wXX+s97AjMRxpsOBKJIAebQozhuEr3Y/AgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUZqpSvMlm5w2LEOVpW4W0rAhd57YwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iODg0NDMxOC0zNWQ3LTQ4MmUtYmJkNS1iNjI0Y2YwYjIwNDEvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTYyNjQzNDMxM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzAzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDvUEwDQYJKoZIhvcNAQELBQADggEB ALnIhXaV61O5EVDcS0BEvWKshO2fAQl8ckM2ygUQoBhxBZnDQU3kBXIUkl9lhoex 94W1+ikyYZJ0aU9gmtmWF0NRcJM80wj7nmOv66dOPIqBtQ9k24g2/yk8BUmUxPyS HfVA78XqdRa/wpuxZkyJtLWdWOt+HNKFM4f6k6qcAb7a6c3nxXgD2hQ7+oyYKEl1 6WOX/5kd/HTPJnjhXv21pUey5lgrdxSivicg18mIBsuFfL1Vxx8zaX+ZpIC/0Ja1 Sp1z+LufI6xxFOFWSiIK2Nj8BBYqWuW1MJNRzpsz0MZHNgwQHNR7Jzw2s3RV6J1A u7XCPDeX44olQbiDSIvq/Io= -----END CERTIFICATE-----Generated at Wed Mar 25 23:10:52 2026 by rpki-client