$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa File: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (raw, json) Hash identifier: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA= Subject key identifier: 68:99:D7:F3:52:21:EC:CA:8B:52:7C:39:90:6B:B0:67:0E:D1:D0:E9 Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Certificate serial: 0C880ED6F2D8A19504AA72575A93D8545561816F Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa Signing time: Fri 06 Mar 2026 23:45:10 +0000 ROA not before: Fri 06 Mar 2026 23:40:10 +0000 ROA not after: Fri 05 Mar 2027 23:45:10 +0000 asID: 204085 IP address blocks: 2a06:a002:a002::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 08:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:88:0e:d6:f2:d8:a1:95:04:aa:72:57:5a:93:d8:54:55:61:81:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Validity Not Before: Mar 6 23:40:10 2026 GMT Not After : Mar 5 23:45:10 2027 GMT Subject: CN=6899D7F35221ECCA8B527C39906BB0670ED1D0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:60:f7:25:c3:3b:52:c8:59:fd:ab:99:a9: 30:e1:26:1c:44:85:45:15:09:1e:39:4f:e9:7d:68: 04:e1:a8:a9:29:11:8d:22:2f:6d:84:bd:fe:5f:12: e2:fc:a2:7e:26:69:98:62:a5:17:2f:3d:a8:26:d9: a3:7e:25:f8:98:46:8a:f7:72:59:de:4b:0c:63:99: 60:3b:e9:32:c1:67:41:a3:0f:45:ba:e4:ec:3a:66: 31:4e:da:b5:5e:08:0f:87:de:23:71:01:1a:1c:f8: 49:0e:95:0a:1d:41:f8:37:2f:f5:21:32:34:ef:26: 95:9f:fb:d0:ba:e8:bb:82:cb:f9:65:91:04:24:e1: 75:f8:1a:7c:8c:44:65:a7:35:20:d1:08:32:90:56: 17:7f:98:e5:80:69:21:ce:53:3d:16:e3:16:d0:05: 26:b3:96:1b:23:6f:3a:da:22:92:0c:27:22:5a:38: ce:5e:50:0f:15:6f:d5:ab:5d:c3:53:7c:e7:db:6a: 06:68:41:34:5a:b6:5c:18:e2:a0:6e:de:b5:a3:dd: 2c:b6:63:e3:ff:c3:0d:46:aa:d5:c5:37:7f:da:ea: b9:a0:fa:74:f9:fc:92:9d:a5:c5:ad:94:12:4d:9d: 05:cf:32:a4:96:33:65:3f:ab:8a:c0:6c:28:af:36: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:D7:F3:52:21:EC:CA:8B:52:7C:39:90:6B:B0:67:0E:D1:D0:E9 X509v3 Authority Key Identifier: keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a002:a002::/48 Signature Algorithm: sha256WithRSAEncryption 76:e5:c1:ce:64:29:69:d6:d6:34:90:2e:bb:7d:19:20:89:c2: 77:27:4c:0d:ae:17:0d:09:39:a0:4a:a4:88:29:91:c2:e2:88: 8c:a0:bf:bf:0f:a1:45:58:f7:bf:27:28:8c:e3:5f:87:0e:24: 45:74:68:a8:1e:9d:37:f0:ad:08:cf:cd:69:33:8a:33:d9:4d: 89:9a:41:4c:28:d6:44:b1:dc:70:ff:75:77:3c:15:76:ff:0e: 22:d2:04:f5:2c:3f:e2:74:ce:1c:7c:6e:40:92:05:1f:42:10: 04:0d:85:da:8b:f4:fc:9c:de:30:cb:c1:07:77:4a:b9:ee:59: 04:11:ac:12:da:55:bc:f9:30:2d:7b:71:ef:84:80:e3:46:ba: 83:8d:4e:43:29:38:11:50:3f:fd:96:ea:4f:53:9f:bd:8e:aa: 0c:ea:6f:84:dd:e3:fd:a1:5b:0b:56:d7:23:06:2e:1f:89:bf: c3:45:09:ee:45:af:e8:5a:5f:03:bd:ca:69:4b:db:31:d5:b6: c4:6f:49:1c:f8:34:7a:7c:e1:02:8b:da:3d:5b:cf:5b:1d:e4: 26:fc:bc:61:a9:6d:32:2d:df:96:93:14:c9:e7:4b:60:ff:8c: 60:27:b3:2a:c6:73:c4:cd:25:c5:2e:b1:75:9b:c7:65:c3:c7: 1a:d3:06:14 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUDIgO1vLYoZUEqnJXWpPYVFVhgW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3 NDAxRTY3NjAeFw0yNjAzMDYyMzQwMTBaFw0yNzAzMDUyMzQ1MTBaMDMxMTAvBgNV BAMTKDY4OTlEN0YzNTIyMUVDQ0E4QjUyN0MzOTkwNkJCMDY3MEVEMUQwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q2D3JcM7UshZ/auZqTDhJhxE hUUVCR45T+l9aAThqKkpEY0iL22Evf5fEuL8on4maZhipRcvPagm2aN+JfiYRor3 clneSwxjmWA76TLBZ0GjD0W65Ow6ZjFO2rVeCA+H3iNxARoc+EkOlQodQfg3L/Uh MjTvJpWf+9C66LuCy/llkQQk4XX4GnyMRGWnNSDRCDKQVhd/mOWAaSHOUz0W4xbQ BSazlhsjbzraIpIMJyJaOM5eUA8Vb9WrXcNTfOfbagZoQTRatlwY4qBu3rWj3Sy2 Y+P/ww1GqtXFN3/a6rmg+nT5/JKdpcWtlBJNnQXPMqSWM2U/q4rAbCivNiG1AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUaJnX81Ih7MqLUnw5kGuwZw7R0OkwHwYDVR0j BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx RTY3Ni5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzMvMzI2MTMwMzYzYTYxMzAzMDMy M2E2MTMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDMwMzgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAKgAjANBgkqhkiG9w0BAQsFAAOCAQEAduXBzmQpadbWNJAu u30ZIInCdydMDa4XDQk5oEqkiCmRwuKIjKC/vw+hRVj3vycojONfhw4kRXRoqB6d N/CtCM/NaTOKM9lNiZpBTCjWRLHccP91dzwVdv8OItIE9Sw/4nTOHHxuQJIFH0IQ BA2F2ov0/JzeMMvBB3dKue5ZBBGsEtpVvPkwLXtx74SA40a6g41OQyk4EVA//Zbq T1OfvY6qDOpvhN3j/aFbC1bXIwYuH4m/w0UJ7kWv6FpfA73KaUvbMdW2xG9JHPg0 enzhAovaPVvPWx3kJvy8YaltMi3flpMUyedLYP+MYCezKsZzxM0lxS6xdZvHZcPH GtMGFA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:09:26 2026 by rpki-client