$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230343a3a2f34362d3436203d3e20323139333331.roa File: 326130623a346530373a326230343a3a2f34362d3436203d3e20323139333331.roa (raw, json) Hash identifier: rtzli0bQcjL2PMSSMMwxLqe/iYamFiYzGeUDhzFyMBw= Subject key identifier: D5:7D:D7:15:AC:4B:E2:6E:F2:8C:94:28:03:03:3F:B5:3E:E2:4F:A8 Certificate issuer: /CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Certificate serial: 4CA73909C5B6624DDC46EB67ADDD9E5AC27600F9 Authority key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230343a3a2f34362d3436203d3e20323139333331.roa Signing time: Fri 25 Sep 2026 20:32:29 +0000 ROA not before: Fri 25 Sep 2026 20:27:29 +0000 ROA not after: Fri 24 Sep 2027 20:32:29 +0000 asID: 219331 IP address blocks: 2a0b:4e07:2b04::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 23:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a7:39:09:c5:b6:62:4d:dc:46:eb:67:ad:dd:9e:5a:c2:76:00:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Validity Not Before: Sep 25 20:27:29 2026 GMT Not After : Sep 24 20:32:29 2027 GMT Subject: CN=D57DD715AC4BE26EF28C942803033FB53EE24FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:b5:2b:74:79:af:1e:0e:bc:c6:d4:89:7d: 56:a7:f4:98:5a:6b:d1:dc:38:6f:79:2e:cd:fa:43: b4:f2:54:c2:00:10:1b:88:7d:04:67:f6:c4:d4:44: 21:f8:32:b6:54:74:ee:64:c2:44:43:6f:1e:db:da: 71:c3:c0:b5:c5:79:7a:3f:44:cf:88:20:00:e4:ce: a3:c3:92:08:a9:37:58:f6:0c:f2:6c:4d:e5:2b:a8: 3f:7e:71:f5:48:e9:9f:d5:da:53:f2:be:1f:a9:1d: c6:06:bb:b9:d4:59:1c:54:34:7f:81:56:ff:ed:1f: 57:eb:33:db:cb:65:5a:a8:a0:c8:7a:9b:bd:ec:11: 60:d9:54:b6:97:ba:cb:a8:1b:85:7a:83:fa:cf:81: a5:ed:51:97:27:92:e6:ec:49:5a:cd:ae:40:f4:82: 97:4e:44:84:e5:72:cc:41:3c:5b:4f:5c:9a:d3:24: 0c:8d:e0:c5:7f:f7:16:6a:7a:b5:e7:c5:1f:75:a5: 3c:93:b4:d7:91:8d:8f:bc:2c:7f:72:84:7a:5e:0e: f5:d0:92:31:db:14:3b:28:c9:25:00:de:86:6b:24: 35:8a:91:60:a3:c0:b5:8a:53:c2:3e:2d:45:8d:e2: 4b:f6:8f:b9:88:0d:81:d0:cd:53:bf:df:7b:11:7d: 6a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7D:D7:15:AC:4B:E2:6E:F2:8C:94:28:03:03:3F:B5:3E:E2:4F:A8 X509v3 Authority Key Identifier: keyid:37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230343a3a2f34362d3436203d3e20323139333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2b04::/46 Signature Algorithm: sha256WithRSAEncryption 0f:25:fe:6f:76:f4:a6:c9:22:89:41:01:24:25:27:81:01:a4: 86:5e:76:75:2b:7c:d3:a9:b3:6b:39:c6:6a:c4:bf:dd:82:be: f2:e4:e2:ba:3c:8d:49:27:25:c5:5f:71:3b:e8:17:8f:9b:b3: dc:4e:f1:2f:37:f8:63:7f:9c:8f:91:5a:c8:60:55:69:57:70: 59:b0:34:10:71:de:2d:c4:3c:4d:fd:2b:fc:cb:80:35:ec:5b: f7:c9:01:1b:0b:99:10:e6:af:e1:45:34:89:3d:ac:bb:e8:50: b4:d1:d4:23:43:bc:ff:42:c4:b9:fb:4f:28:4e:35:d9:97:6a: 9a:9c:b6:f1:84:53:21:59:9f:05:f5:b1:9f:0d:51:b3:fa:4e: de:07:70:81:fb:ab:d5:ae:d2:b0:98:48:11:4a:b4:6d:e7:fa: 50:99:9f:13:af:c8:82:45:59:e5:91:45:ad:fb:a8:6e:68:83: ff:6a:0d:08:50:7f:ac:e2:6a:d4:f6:b9:6d:47:9f:68:7c:6c: 15:64:9a:32:d0:0a:a2:f1:43:4f:16:4c:fe:10:05:3b:53:3a: 68:74:88:35:5a:0a:a4:de:ab:39:fd:85:42:95:ea:87:89:c0: 9d:6e:4f:81:b6:a6:93:94:aa:c0:03:14:21:f9:17:b4:17:b4: 49:44:71:bb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUTKc5CcW2Yk3cRutnrd2eWsJ2APkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3 M0RFRjdENDAeFw0yNjA5MjUyMDI3MjlaFw0yNzA5MjQyMDMyMjlaMDMxMTAvBgNV BAMTKEQ1N0RENzE1QUM0QkUyNkVGMjhDOTQyODAzMDMzRkI1M0VFMjRGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcbUrdHmvHg68xtSJfVan9Jha a9HcOG95Ls36Q7TyVMIAEBuIfQRn9sTURCH4MrZUdO5kwkRDbx7b2nHDwLXFeXo/ RM+IIADkzqPDkgipN1j2DPJsTeUrqD9+cfVI6Z/V2lPyvh+pHcYGu7nUWRxUNH+B Vv/tH1frM9vLZVqooMh6m73sEWDZVLaXusuoG4V6g/rPgaXtUZcnkubsSVrNrkD0 gpdORITlcsxBPFtPXJrTJAyN4MV/9xZqerXnxR91pTyTtNeRjY+8LH9yhHpeDvXQ kjHbFDsoySUA3oZrJDWKkWCjwLWKU8I+LUWN4kv2j7mIDYHQzVO/33sRfWpJAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU1X3XFaxL4m7yjJQoAwM/tT7iT6gwHwYDVR0j BBgwFoAUN5I0xecfJiTDo18yS8ZzJHPe99QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMtZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUy MTYzLzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RFRjdENC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RF RjdENC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMt ZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUyMTYzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjYyMzAzNDNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDMyMzEzOTMzMzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHAioLTgcrBDANBgkqhkiG9w0BAQsFAAOCAQEADyX+b3b0pskiiUEB JCUngQGkhl52dSt806mzaznGasS/3YK+8uTiujyNSSclxV9xO+gXj5uz3E7xLzf4 Y3+cj5FayGBVaVdwWbA0EHHeLcQ8Tf0r/MuANexb98kBGwuZEOav4UU0iT2su+hQ tNHUI0O8/0LEuftPKE412Zdqmpy28YRTIVmfBfWxnw1Rs/pO3gdwgfur1a7SsJhI EUq0bef6UJmfE6/IgkVZ5ZFFrfuobmiD/2oNCFB/rOJq1Pa5bUefaHxsFWSaMtAK ovFDTxZM/hAFO1M6aHSINVoKpN6rOf2FQpXqh4nAnW5Pgbamk5SqwAMUIfkXtBe0 SURxuw== -----END CERTIFICATE-----Generated at Thu Oct 1 20:22:15 2026 by rpki-client