$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa File: 326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa (raw, json) Hash identifier: 8mE1jAfmLyWfaMnOLOuvCITYLEI/kRV9tFQm4x0RWuU= Subject key identifier: A0:20:E6:50:81:C5:B4:49:BA:B5:7E:CA:5B:BC:0C:A4:1F:D2:84:88 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 05EC3310EF1CE4E1F6F242B51307D7A1F78BF77E Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa Signing time: Wed 05 Aug 2026 06:29:00 +0000 ROA not before: Wed 05 Aug 2026 06:24:00 +0000 ROA not after: Wed 04 Aug 2027 06:29:00 +0000 asID: 211575 IP address blocks: 2a0f:1cc6:b250::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 20:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ec:33:10:ef:1c:e4:e1:f6:f2:42:b5:13:07:d7:a1:f7:8b:f7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Aug 5 06:24:00 2026 GMT Not After : Aug 4 06:29:00 2027 GMT Subject: CN=A020E65081C5B449BAB57ECA5BBC0CA41FD28488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2b:05:f8:19:ad:0d:a8:cd:67:f5:0a:b9:a9: ee:01:d4:1f:5d:27:1c:79:db:99:9d:ab:9c:89:4f: 90:37:60:8f:87:41:8f:19:41:e2:d4:b7:4e:2e:9c: 9e:8d:54:31:0d:09:53:ee:07:40:08:fe:7f:ba:67: 1c:db:2e:47:a1:f1:a5:69:4f:2c:ed:9c:68:8d:01: e0:61:f2:ae:7b:33:16:66:f4:02:ce:15:8b:6a:8c: b7:86:d0:0c:c0:e7:5e:9b:62:95:79:c7:78:7c:74: c2:80:c9:b0:18:41:c7:4e:17:d8:48:78:04:0b:8e: 8f:63:a6:ae:d2:b9:53:f5:66:13:ac:24:58:40:50: 70:32:d4:32:23:a8:f1:88:83:21:48:16:60:d6:30: 24:48:33:46:3f:59:ab:88:de:48:4b:fe:1c:ac:14: 28:bf:53:ab:f0:16:df:a3:83:b3:3b:7e:8f:43:43: 6f:ab:db:3c:4e:69:f0:cc:11:4b:1e:bf:df:40:eb: 8b:b8:56:de:9d:4f:b2:8d:7c:e1:35:0d:d9:d3:37: e5:01:7d:3e:6c:fd:b3:a0:66:e3:a7:0b:50:b5:47: f3:37:11:5f:54:46:e3:8c:61:f7:95:3a:3c:d1:27: c4:e4:23:ed:e2:ff:1c:9d:a3:7e:2f:9e:bd:8c:dc: f6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:20:E6:50:81:C5:B4:49:BA:B5:7E:CA:5B:BC:0C:A4:1F:D2:84:88 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b250::/44 Signature Algorithm: sha256WithRSAEncryption bb:63:81:58:f0:79:1d:65:16:c1:ef:d6:fd:c5:7a:28:fd:30: 5e:e9:66:fe:ff:a3:00:54:99:6c:d0:ff:0c:f4:31:8d:fd:56: 0a:ad:c9:2c:dc:42:9c:82:05:83:cb:41:82:97:0b:1c:da:c6: f6:89:ed:da:25:44:01:7b:43:95:d9:4b:40:45:b1:fe:7c:c8: fa:1d:de:5a:39:2c:3a:49:5e:89:03:4a:8b:90:8e:0b:e7:12: bd:58:83:a7:8b:d0:46:89:35:96:aa:6a:93:11:b7:e4:b3:71: 67:62:be:7c:61:4b:6e:a6:5e:55:15:0b:da:9c:99:03:e7:88: 5f:33:9c:3e:33:27:60:59:bc:6e:c5:f5:5d:95:e8:75:46:7b: e7:5e:a9:03:fd:7a:d0:37:f9:98:58:a8:84:d8:4a:ed:d6:dc: 56:a8:78:e7:76:d8:d4:30:c9:66:53:a5:fa:e3:3d:66:8d:00: 5b:c6:85:8a:99:6b:24:71:df:64:0d:d3:b7:af:cd:fb:0e:68: 41:18:41:a0:e7:8e:f7:30:ea:b5:7c:f0:f8:04:60:f7:d3:a0: 79:11:97:a3:6e:e4:49:38:6f:a2:74:55:0b:bc:3b:75:47:e8: 4d:22:e4:41:b2:8c:a9:39:18:e8:63:a6:fb:43:2b:34:95:ce: 8f:d4:43:4b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUBewzEO8c5OH28kK1EwfXofeL934wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA4MDUwNjI0MDBaFw0yNzA4MDQwNjI5MDBaMDMxMTAvBgNV BAMTKEEwMjBFNjUwODFDNUI0NDlCQUI1N0VDQTVCQkMwQ0E0MUZEMjg0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTKwX4Ga0NqM1n9Qq5qe4B1B9d Jxx525mdq5yJT5A3YI+HQY8ZQeLUt04unJ6NVDENCVPuB0AI/n+6ZxzbLkeh8aVp TyztnGiNAeBh8q57MxZm9ALOFYtqjLeG0AzA516bYpV5x3h8dMKAybAYQcdOF9hI eAQLjo9jpq7SuVP1ZhOsJFhAUHAy1DIjqPGIgyFIFmDWMCRIM0Y/WauI3khL/hys FCi/U6vwFt+jg7M7fo9DQ2+r2zxOafDMEUsev99A64u4Vt6dT7KNfOE1DdnTN+UB fT5s/bOgZuOnC1C1R/M3EV9URuOMYfeVOjzRJ8TkI+3i/xydo34vnr2M3PYXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUoCDmUIHFtEm6tX7KW7wMpB/ShIgwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzIzNTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTMxMzUzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrJQMA0GCSqGSIb3DQEBCwUAA4IBAQC7 Y4FY8HkdZRbB79b9xXoo/TBe6Wb+/6MAVJls0P8M9DGN/VYKrcks3EKcggWDy0GC lwsc2sb2ie3aJUQBe0OV2UtARbH+fMj6Hd5aOSw6SV6JA0qLkI4L5xK9WIOni9BG iTWWqmqTEbfks3FnYr58YUtupl5VFQvanJkD54hfM5w+MydgWbxuxfVdleh1Rnvn XqkD/XrQN/mYWKiE2Ert1txWqHjndtjUMMlmU6X64z1mjQBbxoWKmWskcd9kDdO3 r837DmhBGEGg5473MOq1fPD4BGD306B5EZejbuRJOG+idFULvDt1R+hNIuRBsoyp ORjoY6b7Qys0lc6P1ENL -----END CERTIFICATE-----Generated at Sat Sep 5 09:15:03 2026 by rpki-client