$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa File: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (raw, json) Hash identifier: TKf8xHI7Znfvczs+OhInQSS2K1sFYnWdNo6ENxHlGpg= Subject key identifier: 30:4B:4A:A9:86:02:BF:6A:50:3D:FF:A0:EB:EC:8A:21:4E:28:23:55 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 0901D394B0B3DBAF81C1DB8220E39D2800E2B44D Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa Signing time: Sat 31 Oct 2026 00:00:50 +0000 ROA not before: Fri 30 Oct 2026 23:55:50 +0000 ROA not after: Sat 30 Oct 2027 00:00:50 +0000 asID: 213413 IP address blocks: 2a06:1283:8903::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 13:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:01:d3:94:b0:b3:db:af:81:c1:db:82:20:e3:9d:28:00:e2:b4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Oct 30 23:55:50 2026 GMT Not After : Oct 30 00:00:50 2027 GMT Subject: CN=304B4AA98602BF6A503DFFA0EBEC8A214E282355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7e:c0:d9:98:f0:95:2d:9c:1e:77:d8:01:bf: 50:04:b9:4e:35:d3:23:87:54:02:32:1a:55:96:42: 42:28:72:c1:27:02:8e:3d:f0:11:e5:54:99:7e:5b: b5:28:ac:9b:0a:0a:e4:dd:5a:43:ac:95:a2:b7:f6: 14:d9:36:20:72:27:62:f4:69:44:90:ee:cc:3b:96: c0:8b:d2:95:7f:ef:b0:8e:86:14:c9:ac:65:4b:69: c2:6c:86:e8:da:ef:3a:48:33:7f:c9:80:8a:b2:35: 62:81:43:a4:2d:3f:70:4d:7d:ef:f4:15:4b:6f:aa: 42:52:da:0a:3b:57:18:7a:81:48:20:74:5a:5a:98: 1b:bc:74:12:1f:f9:13:3c:df:db:e5:a4:ec:0f:81: 38:60:0c:4b:85:ce:bd:09:a4:13:1d:97:57:83:2a: b3:dc:3c:14:62:97:67:6c:ca:03:85:64:e2:d0:b6: 9c:d7:7e:dd:d4:0c:dc:4e:1d:2c:7c:33:4a:c5:0a: 92:5c:8f:e4:a7:45:37:2d:81:b1:e4:9d:b6:c2:7d: 52:2b:1f:c7:0b:7d:bd:84:42:a3:87:39:45:e9:a1: ee:67:8d:18:e4:8b:45:ed:77:2e:8a:81:3a:a7:ba: f5:88:35:a9:61:d3:49:25:64:6e:9e:e7:00:23:24: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4B:4A:A9:86:02:BF:6A:50:3D:FF:A0:EB:EC:8A:21:4E:28:23:55 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8903::/48 Signature Algorithm: sha256WithRSAEncryption 4c:4b:79:44:25:ee:ca:c8:7d:57:ca:4d:8c:8a:c3:b4:d6:15: fc:67:ca:b1:0e:63:46:ad:5d:8e:a5:86:52:59:e9:ad:37:05: 82:dc:fe:25:9a:83:d0:a3:38:60:7a:d1:5d:9c:ff:9e:8c:0f: f0:2e:1b:55:81:f9:17:49:63:a1:5b:3b:01:81:f6:15:41:4c: 4b:05:c1:b9:f4:35:89:c0:45:7b:94:20:0a:c7:74:32:51:c9: fd:af:73:59:4c:10:5e:a6:8e:a7:30:5e:f7:2a:be:20:30:99: 61:24:52:f3:09:ac:0d:61:94:2e:1a:59:3d:9a:97:c8:0e:bc: c1:4a:c0:1b:f4:b0:e6:0f:6c:db:c0:06:7f:89:c8:a2:31:3b: a0:e0:ee:3b:f6:3c:0b:85:e3:93:f8:30:e5:4f:a4:6d:c7:aa: 9d:44:6c:9b:aa:6c:d2:be:b4:70:5c:34:8a:04:be:b9:92:96: de:ae:8f:db:bb:c1:20:06:b1:39:c9:aa:08:fc:65:84:bd:d6: 28:8b:e0:e8:b8:33:58:5d:5e:99:e7:ff:83:02:7d:52:24:43: 61:db:fe:b8:93:e1:8b:d9:ff:4a:b8:13:02:3b:0c:d3:8d:71: 99:50:a0:2a:01:ab:8d:81:e8:0a:98:e1:f0:9c:46:c4:e3:97: 34:a4:22:db -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCQHTlLCz26+BwduCIOOdKADitE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjEwMzAyMzU1NTBaFw0yNzEwMzAwMDAwNTBaMDMxMTAvBgNV BAMTKDMwNEI0QUE5ODYwMkJGNkE1MDNERkZBMEVCRUM4QTIxNEUyODIzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRfsDZmPCVLZwed9gBv1AEuU41 0yOHVAIyGlWWQkIocsEnAo498BHlVJl+W7UorJsKCuTdWkOslaK39hTZNiByJ2L0 aUSQ7sw7lsCL0pV/77COhhTJrGVLacJshuja7zpIM3/JgIqyNWKBQ6QtP3BNfe/0 FUtvqkJS2go7Vxh6gUggdFpamBu8dBIf+RM839vlpOwPgThgDEuFzr0JpBMdl1eD KrPcPBRil2dsygOFZOLQtpzXft3UDNxOHSx8M0rFCpJcj+SnRTctgbHknbbCfVIr H8cLfb2EQqOHOUXpoe5njRjki0Xtdy6KgTqnuvWINalh00klZG6e5wAjJFBJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUMEtKqYYCv2pQPf+g6+yKIU4oI1UwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTMzMzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kDMA0GCSqGSIb3DQEBCwUAA4IBAQBM S3lEJe7KyH1Xyk2MisO01hX8Z8qxDmNGrV2OpYZSWemtNwWC3P4lmoPQozhgetFd nP+ejA/wLhtVgfkXSWOhWzsBgfYVQUxLBcG59DWJwEV7lCAKx3QyUcn9r3NZTBBe po6nMF73Kr4gMJlhJFLzCawNYZQuGlk9mpfIDrzBSsAb9LDmD2zbwAZ/iciiMTug 4O479jwLheOT+DDlT6Rtx6qdRGybqmzSvrRwXDSKBL65kpbero/bu8EgBrE5yaoI /GWEvdYoi+DouDNYXV6Z5/+DAn1SJENh2/64k+GL2f9KuBMCOwzTjXGZUKAqAauN gegKmOHwnEbE45c0pCLb -----END CERTIFICATE-----Generated at Sun Nov 1 03:31:54 2026 by rpki-client