$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/326131333a633863343a663430303a3a2f34312d3431203d3e20323035333035.roa File: 326131333a633863343a663430303a3a2f34312d3431203d3e20323035333035.roa (raw, json) Hash identifier: pe+b9f7vSgc+6Km3teAs1TmzzeEKzWB4WHRIERv2Vjo= Subject key identifier: 3A:A5:24:92:28:50:F7:C7:B8:C3:39:61:E3:B7:77:CA:95:58:B4:D2 Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 722CD3188D35266289C19576743E5EC39E2DA0D8 Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/326131333a633863343a663430303a3a2f34312d3431203d3e20323035333035.roa Signing time: Mon 28 Sep 2026 05:59:28 +0000 ROA not before: Mon 28 Sep 2026 05:54:28 +0000 ROA not after: Mon 27 Sep 2027 05:59:28 +0000 asID: 205305 IP address blocks: 2a13:c8c4:f400::/41 maxlen: 41 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Oct 2026 20:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2c:d3:18:8d:35:26:62:89:c1:95:76:74:3e:5e:c3:9e:2d:a0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Sep 28 05:54:28 2026 GMT Not After : Sep 27 05:59:28 2027 GMT Subject: CN=3AA524922850F7C7B8C33961E3B777CA9558B4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:f6:70:a8:84:7c:03:67:da:e9:8c:07:bd: 82:90:32:a2:61:27:f8:0f:b9:35:43:48:18:86:f7: eb:43:a2:19:82:0d:b0:82:f2:7b:97:b7:9a:c5:7b: 63:8c:35:29:05:0e:12:f6:6d:09:d9:86:70:71:25: ef:6a:33:f2:f3:7b:5b:fe:ca:53:8a:77:9f:3c:60: 6d:df:8e:6e:a0:42:65:2b:6c:49:0c:c8:73:c9:a7: 9c:31:71:bd:2b:74:91:d8:74:dd:ab:ab:15:82:14: 7e:85:32:44:e1:0b:83:37:61:b6:a3:41:e0:a1:72: fa:26:a8:d8:37:7a:23:7e:41:62:76:5d:21:15:75: 38:c5:0f:62:0d:3c:a4:dc:98:16:25:28:87:d3:35: 5b:70:4e:4c:50:2e:23:61:a9:44:93:1e:43:88:6d: e4:41:24:4f:5e:5c:e2:f2:ff:d3:b2:fa:d6:46:f8: 62:4a:60:f6:76:85:a4:72:d7:8e:74:0e:01:3a:5d: 01:84:4a:cc:c8:3f:34:42:50:5b:93:68:38:ea:77: c5:dc:b2:48:04:52:58:76:11:5f:00:cb:e4:0b:59: 0a:66:d4:8a:76:89:76:a1:14:5c:c0:c2:65:d8:7a: e6:d3:2f:70:3d:7f:e2:f6:63:aa:8a:9c:6b:e7:1b: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:24:92:28:50:F7:C7:B8:C3:39:61:E3:B7:77:CA:95:58:B4:D2 X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/326131333a633863343a663430303a3a2f34312d3431203d3e20323035333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:f400::/41 Signature Algorithm: sha256WithRSAEncryption 44:09:34:83:f1:a6:a9:9d:2d:36:90:77:3f:52:f4:73:d2:5e: b9:bc:ac:0f:de:f8:15:01:8d:19:88:76:b5:4a:ce:39:e7:4c: 54:a9:d2:a5:f8:a9:ed:c4:4d:4c:eb:f4:e9:c4:4f:e8:5a:eb: e0:db:20:45:19:65:00:b3:cb:6c:bf:6a:af:ec:1e:6b:0f:a7: 4b:70:ef:1e:f5:79:50:12:b6:7c:f1:74:07:b0:2d:ec:18:1e: 0a:20:3e:4b:5b:01:b7:71:4f:09:d5:d9:05:7f:d2:41:c3:fd: b9:cd:36:8c:48:71:e3:88:f8:24:ea:37:6b:93:c3:04:d6:f8: f8:a5:4c:82:21:8d:b6:e9:73:c1:23:49:36:d9:c3:e5:ad:47: b7:4a:ec:f1:a7:25:ce:11:6d:82:5a:f0:3b:13:78:ef:95:f4: e0:1e:47:34:58:cb:3a:bf:a7:b8:03:dc:e5:52:72:10:22:85: 8e:0c:1e:81:c0:05:45:4f:be:7c:0c:24:86:9c:1b:3c:dc:db: 2f:8f:45:dc:a2:ff:b9:8a:5c:04:a1:8c:14:13:fd:90:41:95: 0d:a8:10:d4:3f:a5:2f:03:56:41:b1:29:57:ff:7d:ee:4f:1e: 88:56:f6:19:a4:8b:aa:58:72:c0:45:a2:33:0e:72:7e:e0:ab: 2b:bb:16:68 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcizTGI01JmKJwZV2dD5ew54toNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA5MjgwNTU0MjhaFw0yNzA5MjcwNTU5MjhaMDMxMTAvBgNV BAMTKDNBQTUyNDkyMjg1MEY3QzdCOEMzMzk2MUUzQjc3N0NBOTU1OEI0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yfZwqIR8A2fa6YwHvYKQMqJh J/gPuTVDSBiG9+tDohmCDbCC8nuXt5rFe2OMNSkFDhL2bQnZhnBxJe9qM/Lze1v+ ylOKd588YG3fjm6gQmUrbEkMyHPJp5wxcb0rdJHYdN2rqxWCFH6FMkThC4M3Ybaj QeChcvomqNg3eiN+QWJ2XSEVdTjFD2INPKTcmBYlKIfTNVtwTkxQLiNhqUSTHkOI beRBJE9eXOLy/9Oy+tZG+GJKYPZ2haRy1450DgE6XQGESszIPzRCUFuTaDjqd8Xc skgEUlh2EV8Ay+QLWQpm1Ip2iXahFFzAwmXYeubTL3A9f+L2Y6qKnGvnG3QlAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUOqUkkihQ98e4wzlh47d3ypVYtNIwHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kOTQxZmQxMS1jM2Q4LTQ3NzQtYjY1YS1jODFhNDkwN2E0NjAvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2MzQzMDMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzIz MDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcHKhPIxPQAMA0GCSqGSIb3DQEBCwUAA4IBAQBE CTSD8aapnS02kHc/UvRz0l65vKwP3vgVAY0ZiHa1Ss4550xUqdKl+KntxE1M6/Tp xE/oWuvg2yBFGWUAs8tsv2qv7B5rD6dLcO8e9XlQErZ88XQHsC3sGB4KID5LWwG3 cU8J1dkFf9JBw/25zTaMSHHjiPgk6jdrk8ME1vj4pUyCIY226XPBI0k22cPlrUe3 SuzxpyXOEW2CWvA7E3jvlfTgHkc0WMs6v6e4A9zlUnIQIoWODB6BwAVFT758DCSG nBs83Nsvj0Xcov+5ilwEoYwUE/2QQZUNqBDUP6UvA1ZBsSlX/33uTx6IVvYZpIuq WHLARaIzDnJ+4KsruxZo -----END CERTIFICATE-----Generated at Sat Oct 3 12:25:51 2026 by rpki-client