$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230383a3a2f34362d3436203d3e20323139333331.roa File: 326130623a346530373a326230383a3a2f34362d3436203d3e20323139333331.roa (raw, json) Hash identifier: XiE0p3ZGZBfOdrVNgdrQdhGOiNzb9PIabGsrgos39tE= Subject key identifier: 24:58:94:9D:39:89:88:A4:10:75:79:9D:D5:69:D1:C0:06:75:6C:41 Certificate issuer: /CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Certificate serial: 7F1CAEBE1407D6F7E7AFC108A747F4115D8D65A3 Authority key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230383a3a2f34362d3436203d3e20323139333331.roa Signing time: Sat 26 Sep 2026 09:22:54 +0000 ROA not before: Sat 26 Sep 2026 09:17:54 +0000 ROA not after: Sat 25 Sep 2027 09:22:54 +0000 asID: 219331 IP address blocks: 2a0b:4e07:2b08::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1c:ae:be:14:07:d6:f7:e7:af:c1:08:a7:47:f4:11:5d:8d:65:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Validity Not Before: Sep 26 09:17:54 2026 GMT Not After : Sep 25 09:22:54 2027 GMT Subject: CN=2458949D398988A41075799DD569D1C006756C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:a6:45:2c:45:c4:57:a1:2f:41:42:20:64: 62:64:04:28:44:61:71:c7:db:07:6f:a1:e5:af:e6: 84:70:aa:fb:75:4c:bd:59:a9:f4:1a:85:de:ba:d2: f1:04:ae:49:69:e5:4a:da:ec:c7:3a:00:56:b4:9a: fe:e0:79:e2:c2:ba:87:69:b0:96:09:2e:59:95:9e: 94:71:d1:8e:09:80:ce:df:fd:a7:d7:9b:7f:7a:36: e3:f7:c9:dc:b0:1c:e1:54:89:30:72:1f:41:82:5c: 9e:51:66:e4:d2:cd:a3:74:80:8e:ca:f7:df:5e:44: 89:55:04:0d:94:c8:63:f4:2a:03:27:ab:3e:06:15: 66:0e:f9:5d:63:a9:7e:16:d2:ed:ae:02:89:20:ba: 46:9f:f3:dd:9b:f8:1b:92:6a:4c:d0:f9:18:61:6c: ad:25:54:c6:98:b1:ee:47:89:0b:96:2a:c1:f2:90: eb:09:6b:b5:4a:2b:dd:1e:24:87:24:b1:4c:94:15: 2b:a6:83:66:c7:0d:94:df:f3:b3:64:aa:16:89:5d: b8:71:e2:6d:66:f8:fa:5d:6b:20:97:2b:97:10:29: 50:48:27:2c:f7:0d:b7:79:de:76:07:4a:6c:6a:59: 25:52:d3:30:f2:37:b1:9d:2c:c5:6c:ae:ab:ba:3f: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:94:9D:39:89:88:A4:10:75:79:9D:D5:69:D1:C0:06:75:6C:41 X509v3 Authority Key Identifier: keyid:37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230383a3a2f34362d3436203d3e20323139333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2b08::/46 Signature Algorithm: sha256WithRSAEncryption 41:fc:6c:35:b8:85:10:f6:2c:5e:b7:3b:ec:39:3c:5f:3b:7b: e6:30:d2:db:d0:06:3f:7f:5f:87:8b:cf:66:53:3c:09:20:43: ae:09:23:0e:f8:b2:f4:25:85:48:59:2b:4d:9d:7e:58:7d:ce: b3:11:d9:94:86:7c:b6:26:84:a0:e1:17:c6:2c:af:51:84:85: b2:ac:04:c4:77:47:3a:32:3d:38:7f:25:77:72:b6:b0:cf:72: 24:a0:d5:d1:23:8f:57:f4:3e:7c:7e:5d:a9:36:38:3d:a6:f1: 08:4d:96:75:6c:41:a3:9e:40:d0:d5:48:ac:54:a0:51:f9:fa: 7f:49:ad:41:f0:a1:d3:21:8b:14:67:07:c2:6a:8a:56:3d:79: f0:c7:6a:c2:45:ad:e6:dd:26:09:19:af:8a:c8:bc:ba:8f:3e: bc:8a:a9:cc:1a:93:d1:47:a3:69:ff:00:dc:61:8f:c0:18:9c: 61:2b:6a:a9:ac:1e:ab:67:4b:bb:99:2d:eb:de:ae:59:2e:ac: b7:8f:8e:68:71:ff:c4:90:33:71:ab:a7:4e:41:d2:9c:c2:50: 76:ab:3f:ac:0f:b2:bf:4f:13:8b:2c:05:58:95:4c:ce:04:ce: 1d:a3:99:47:ce:2e:99:61:cd:6e:a0:56:c6:37:96:de:bf:55: 46:8d:e9:fe -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUfxyuvhQH1vfnr8EIp0f0EV2NZaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3 M0RFRjdENDAeFw0yNjA5MjYwOTE3NTRaFw0yNzA5MjUwOTIyNTRaMDMxMTAvBgNV BAMTKDI0NTg5NDlEMzk4OTg4QTQxMDc1Nzk5REQ1NjlEMUMwMDY3NTZDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL86ZFLEXEV6EvQUIgZGJkBChE YXHH2wdvoeWv5oRwqvt1TL1ZqfQahd660vEErklp5Ura7Mc6AFa0mv7geeLCuodp sJYJLlmVnpRx0Y4JgM7f/afXm396NuP3ydywHOFUiTByH0GCXJ5RZuTSzaN0gI7K 999eRIlVBA2UyGP0KgMnqz4GFWYO+V1jqX4W0u2uAokgukaf892b+BuSakzQ+Rhh bK0lVMaYse5HiQuWKsHykOsJa7VKK90eJIcksUyUFSumg2bHDZTf87NkqhaJXbhx 4m1m+PpdayCXK5cQKVBIJyz3Dbd53nYHSmxqWSVS0zDyN7GdLMVsrqu6P+V5AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUJFiUnTmJiKQQdXmd1WnRwAZ1bEEwHwYDVR0j BBgwFoAUN5I0xecfJiTDo18yS8ZzJHPe99QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMtZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUy MTYzLzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RFRjdENC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RF RjdENC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMt ZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUyMTYzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjYyMzAzODNhM2EyZjM0MzYyZDM0MzYyMDNkM2UyMDMyMzEzOTMzMzMzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHAioLTgcrCDANBgkqhkiG9w0BAQsFAAOCAQEAQfxsNbiFEPYsXrc7 7Dk8Xzt75jDS29AGP39fh4vPZlM8CSBDrgkjDviy9CWFSFkrTZ1+WH3OsxHZlIZ8 tiaEoOEXxiyvUYSFsqwExHdHOjI9OH8ld3K2sM9yJKDV0SOPV/Q+fH5dqTY4Pabx CE2WdWxBo55A0NVIrFSgUfn6f0mtQfCh0yGLFGcHwmqKVj158MdqwkWt5t0mCRmv isi8uo8+vIqpzBqT0Uejaf8A3GGPwBicYStqqaweq2dLu5kt696uWS6st4+OaHH/ xJAzcaunTkHSnMJQdqs/rA+yv08TiywFWJVMzgTOHaOZR84umWHNbqBWxjeW3r9V Ro3p/g== -----END CERTIFICATE-----Generated at Wed Sep 30 15:07:42 2026 by rpki-client