$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930353a3a2f34382d3438203d3e20313939373436.roa File: 326130363a313238333a383930353a3a2f34382d3438203d3e20313939373436.roa (raw, json) Hash identifier: PerQMoBxNts2yRsT+spuxntZx3DrZuCer0TBRrK+Q5I= Subject key identifier: 29:A5:19:FB:CD:35:05:92:05:3A:85:0C:71:FC:27:5C:DD:D2:5B:68 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 034AF20440C1545A2C555DDC7F75D6165141DAB2 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930353a3a2f34382d3438203d3e20313939373436.roa Signing time: Thu 08 Oct 2026 11:01:25 +0000 ROA not before: Thu 08 Oct 2026 10:56:25 +0000 ROA not after: Thu 07 Oct 2027 11:01:25 +0000 asID: 199746 IP address blocks: 2a06:1283:8905::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 13:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4a:f2:04:40:c1:54:5a:2c:55:5d:dc:7f:75:d6:16:51:41:da:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Oct 8 10:56:25 2026 GMT Not After : Oct 7 11:01:25 2027 GMT Subject: CN=29A519FBCD350592053A850C71FC275CDDD25B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a5:75:81:1a:11:b0:81:41:5e:2e:ab:0d:72: 5e:13:85:c7:0a:04:d5:71:5d:db:fa:fe:95:38:13: 63:9f:6c:c5:49:01:e5:ea:34:94:ec:90:f3:1f:af: 7a:1f:45:4c:c3:f6:ec:21:d2:bc:6b:f2:f4:a8:15: 19:d5:49:4a:85:de:92:ce:43:d5:7f:f5:43:7b:ed: 70:0e:2f:03:77:6e:ba:f5:9e:09:6d:05:77:60:d6: 3b:28:1e:51:7e:0c:94:4d:40:12:10:3b:eb:6b:ed: c5:90:d7:d2:be:11:42:2b:2b:a4:fb:fc:c6:37:fe: 52:c6:66:ee:16:08:5b:06:7b:d4:70:ac:28:5e:ca: 17:3f:e7:4e:16:f2:62:10:47:2c:f8:41:4c:90:b5: 40:2e:83:ea:1c:df:1b:60:9b:fb:cb:08:14:45:60: af:b4:6d:dd:12:4e:86:65:04:e5:7c:c8:47:b0:d1: 9a:96:d8:87:35:16:96:d9:6b:50:4c:82:54:a1:4c: 97:3a:9d:63:72:32:53:1c:7a:e5:3a:2a:ed:6d:ec: de:fc:17:48:89:0d:97:f0:74:22:28:9e:52:0b:bd: fb:3c:4f:6d:36:74:56:11:b1:28:94:4c:d1:32:3c: d0:b0:b5:4b:95:70:f6:fa:4e:2d:e9:d8:97:5f:a6: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A5:19:FB:CD:35:05:92:05:3A:85:0C:71:FC:27:5C:DD:D2:5B:68 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930353a3a2f34382d3438203d3e20313939373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8905::/48 Signature Algorithm: sha256WithRSAEncryption 0c:6a:2d:ff:a3:e2:65:db:5e:c8:8c:56:03:c7:d1:23:d5:74: 64:35:e2:c5:ed:a2:02:19:68:6a:d1:ca:1b:39:52:c9:9c:17: 7d:a3:dc:9c:29:2b:cc:8e:f2:b8:d0:66:d2:22:1f:34:69:d1: 41:75:f5:03:1a:0c:9f:36:6b:24:84:ec:8e:25:93:83:1b:62: 47:ca:14:a4:56:f7:21:3d:a7:65:a4:4e:a1:33:34:30:c5:f0: 99:5f:c4:42:31:96:4b:9e:80:4c:de:a3:b3:28:b7:c9:20:53: 56:da:7d:e4:b9:69:44:ac:94:13:5f:ab:62:44:e0:45:19:bf: 4f:d0:21:92:1a:83:4b:cf:ad:d1:f7:09:81:34:cd:ab:93:3a: 93:dc:d3:b0:be:6f:05:fa:3e:08:eb:cc:53:c5:11:0b:97:d2: 35:86:8b:42:33:b2:8d:18:ff:9a:57:1f:5b:44:91:5a:4e:b2: 0d:5c:11:15:28:c4:72:40:b8:a5:ab:9b:c6:0e:0d:21:8a:8b: 80:c0:4d:9f:18:3e:a9:ad:32:5f:f5:27:53:16:38:5b:04:cb: 8f:d4:2e:93:67:3f:6c:2a:ac:8e:3b:af:8d:c5:38:f1:e9:ce: 4b:a5:cb:ad:c4:a2:10:98:02:13:b5:1f:28:4b:06:43:f9:15: 67:63:20:8c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUA0ryBEDBVFosVV3cf3XWFlFB2rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjEwMDgxMDU2MjVaFw0yNzEwMDcxMTAxMjVaMDMxMTAvBgNV BAMTKDI5QTUxOUZCQ0QzNTA1OTIwNTNBODUwQzcxRkMyNzVDREREMjVCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpXWBGhGwgUFeLqsNcl4ThccK BNVxXdv6/pU4E2OfbMVJAeXqNJTskPMfr3ofRUzD9uwh0rxr8vSoFRnVSUqF3pLO Q9V/9UN77XAOLwN3brr1ngltBXdg1jsoHlF+DJRNQBIQO+tr7cWQ19K+EUIrK6T7 /MY3/lLGZu4WCFsGe9RwrCheyhc/504W8mIQRyz4QUyQtUAug+oc3xtgm/vLCBRF YK+0bd0SToZlBOV8yEew0ZqW2Ic1FpbZa1BMglShTJc6nWNyMlMceuU6Ku1t7N78 F0iJDZfwdCIonlILvfs8T202dFYRsSiUTNEyPNCwtUuVcPb6Ti3p2JdfplcBAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUKaUZ+801BZIFOoUMcfwnXN3SW2gwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz OTM5MzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kFMA0GCSqGSIb3DQEBCwUAA4IBAQAM ai3/o+Jl217IjFYDx9Ej1XRkNeLF7aICGWhq0cobOVLJnBd9o9ycKSvMjvK40GbS Ih80adFBdfUDGgyfNmskhOyOJZODG2JHyhSkVvchPadlpE6hMzQwxfCZX8RCMZZL noBM3qOzKLfJIFNW2n3kuWlErJQTX6tiROBFGb9P0CGSGoNLz63R9wmBNM2rkzqT 3NOwvm8F+j4I68xTxRELl9I1hotCM7KNGP+aVx9bRJFaTrINXBEVKMRyQLilq5vG Dg0hiouAwE2fGD6prTJf9SdTFjhbBMuP1C6TZz9sKqyOO6+NxTjx6c5LpcutxKIQ mAITtR8oSwZD+RVnYyCM -----END CERTIFICATE-----Generated at Sat Oct 24 08:08:38 2026 by rpki-client