$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/326131333a633863343a663438303a3a2f34322d3432203d3e20323035333035.roa File: 326131333a633863343a663438303a3a2f34322d3432203d3e20323035333035.roa (raw, json) Hash identifier: L3Uv7B+hE+Oyxs5R782Os6cl3p6QystB9KEXfmwlw58= Subject key identifier: AB:67:1F:A1:3A:41:F6:4E:D2:A2:78:37:9B:A0:87:31:C8:30:E6:16 Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Certificate serial: 4E94B55F2C40B0F5556C5BAA19C801DF2EB002F3 Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/326131333a633863343a663438303a3a2f34322d3432203d3e20323035333035.roa Signing time: Mon 28 Sep 2026 05:59:38 +0000 ROA not before: Mon 28 Sep 2026 05:54:38 +0000 ROA not after: Mon 27 Sep 2027 05:59:38 +0000 asID: 205305 IP address blocks: 2a13:c8c4:f480::/42 maxlen: 42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 05:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:94:b5:5f:2c:40:b0:f5:55:6c:5b:aa:19:c8:01:df:2e:b0:02:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Validity Not Before: Sep 28 05:54:38 2026 GMT Not After : Sep 27 05:59:38 2027 GMT Subject: CN=AB671FA13A41F64ED2A278379BA08731C830E616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:fb:d2:88:0c:59:70:01:df:fe:06:35:05: a4:2e:de:2a:7a:52:1b:58:7a:42:a0:71:4b:53:dc: d9:cc:89:07:bc:b8:35:50:4b:f2:13:83:5e:30:ec: 8f:7b:7e:e3:3f:ff:2e:66:9a:c0:6d:3d:e2:93:d9: 09:df:1c:99:7b:49:21:a7:9e:6a:3c:fb:31:00:08: 66:a5:b2:93:b6:ea:cd:9d:ad:da:b6:5a:6a:b3:90: a7:f8:20:75:cb:18:45:b9:ad:60:7b:38:60:1b:cf: b0:82:89:19:91:0d:0d:f1:f9:2d:8f:24:fb:51:e5: 0d:19:d6:f8:c4:e7:bd:fc:60:33:fb:0e:f7:d9:51: e9:03:9d:e8:30:7d:c7:70:2c:fc:74:06:68:b8:80: 52:a9:f8:4b:d1:bf:bd:1d:90:77:dd:4e:85:9f:4f: 56:8d:5b:b7:08:86:6a:3d:88:20:ab:28:b0:41:b0: 35:8a:31:84:c0:b4:2d:b0:e2:88:da:9f:0a:50:1b: 49:e5:cf:9c:a7:21:95:d4:f7:6c:74:7b:5e:5f:36: c0:22:28:35:40:f7:21:9f:33:af:39:6e:7d:df:55: 16:65:2f:08:0a:b2:92:0a:8b:60:7f:a5:e7:cd:67: cd:11:e0:2f:b9:e0:c0:41:78:9d:50:14:c3:5d:0c: a7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:1F:A1:3A:41:F6:4E:D2:A2:78:37:9B:A0:87:31:C8:30:E6:16 X509v3 Authority Key Identifier: keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/326131333a633863343a663438303a3a2f34322d3432203d3e20323035333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:f480::/42 Signature Algorithm: sha256WithRSAEncryption b1:b5:06:2f:69:a2:d1:ff:76:4c:78:e6:cf:0b:5c:86:be:dc: 72:2b:1b:0e:b5:4a:87:09:5a:d4:03:79:82:97:13:76:92:12: 40:0f:fa:8c:80:66:0a:44:94:69:39:6c:58:e5:f4:2c:95:f6: c6:f6:d8:02:60:5c:7f:0a:f8:a1:38:6f:97:1b:4a:4c:24:57: 63:c8:01:df:99:e0:92:a3:7d:33:7a:84:a0:f1:6c:93:c0:81: d4:e4:c2:54:61:d6:10:00:5e:23:67:af:eb:4b:72:1a:79:c0: 92:22:ee:f2:9d:bf:95:b5:7a:42:cf:2e:37:72:f8:19:86:f2: c5:ad:76:1a:ca:52:ff:b5:ea:1d:9f:11:5f:b8:47:41:7f:f1: 37:18:d6:e5:41:99:33:ca:2e:6b:b3:95:a1:3f:f9:24:19:fd: a7:f3:a2:94:ac:10:e6:9d:5a:b2:a7:bc:f8:3f:b1:02:91:8f: 9d:b6:e2:ad:ec:37:7d:91:c1:ca:14:65:3b:8d:96:2f:cb:69: e7:aa:98:1b:7b:f4:f1:e2:02:63:2c:2b:74:e5:8a:5f:af:84: 7c:5d:d8:f3:ad:b5:cd:d1:83:17:ef:c2:e9:ae:aa:3b:7d:91: 37:dd:3d:a7:e8:3e:c2:88:ff:f0:39:71:92:f1:c8:86:6a:ef: 85:30:70:ba -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUTpS1XyxAsPVVbFuqGcgB3y6wAvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RC Q0EyOTlCRjAeFw0yNjA5MjgwNTU0MzhaFw0yNzA5MjcwNTU5MzhaMDMxMTAvBgNV BAMTKEFCNjcxRkExM0E0MUY2NEVEMkEyNzgzNzlCQTA4NzMxQzgzMEU2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u/vSiAxZcAHf/gY1BaQu3ip6 UhtYekKgcUtT3NnMiQe8uDVQS/ITg14w7I97fuM//y5mmsBtPeKT2QnfHJl7SSGn nmo8+zEACGalspO26s2drdq2WmqzkKf4IHXLGEW5rWB7OGAbz7CCiRmRDQ3x+S2P JPtR5Q0Z1vjE5738YDP7DvfZUekDnegwfcdwLPx0Bmi4gFKp+EvRv70dkHfdToWf T1aNW7cIhmo9iCCrKLBBsDWKMYTAtC2w4ojanwpQG0nlz5ynIZXU92x0e15fNsAi KDVA9yGfM685bn3fVRZlLwgKspIKi2B/pefNZ80R4C+54MBBeJ1QFMNdDKcxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUq2cfoTpB9k7Song3m6CHMcgw5hYwHwYDVR0j BBgwFoAUsKWoq7GKqo29R4MjRRG1Pbyimb8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2NWEtYzgxYTQ5MDdh NDYwLzEvQjBBNUE4QUJCMThBQUE4REJENDc4MzIzNDUxMUI1M0RCQ0EyOTlCRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0 NTExQjUzREJDQTI5OUJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kOTQxZmQxMS1jM2Q4LTQ3NzQtYjY1YS1jODFhNDkwN2E0NjAvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2MzQzODMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIz MDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcGKhPIxPSAMA0GCSqGSIb3DQEBCwUAA4IBAQCx tQYvaaLR/3ZMeObPC1yGvtxyKxsOtUqHCVrUA3mClxN2khJAD/qMgGYKRJRpOWxY 5fQslfbG9tgCYFx/CvihOG+XG0pMJFdjyAHfmeCSo30zeoSg8WyTwIHU5MJUYdYQ AF4jZ6/rS3IaecCSIu7ynb+VtXpCzy43cvgZhvLFrXYaylL/teodnxFfuEdBf/E3 GNblQZkzyi5rs5WhP/kkGf2n86KUrBDmnVqyp7z4P7ECkY+dtuKt7Dd9kcHKFGU7 jZYvy2nnqpgbe/Tx4gJjLCt05Ypfr4R8XdjzrbXN0YMX78Lprqo7fZE33T2n6D7C iP/wOXGS8ciGau+FMHC6 -----END CERTIFICATE-----Generated at Thu Oct 8 15:38:41 2026 by rpki-client