$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623236313a3a2f34382d3438203d3e20323130343430.roa File: 326130663a316363363a623236313a3a2f34382d3438203d3e20323130343430.roa (raw, json) Hash identifier: BBIINwZ22Hh6hrSdWji52wFJuJeFGO5YGYYIOcfRZis= Subject key identifier: D7:A1:68:EE:8F:6F:DB:62:1D:10:03:FC:BD:A6:AF:56:76:F4:99:BD Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 42E9A6E836CF26B9259B9BB4B59F9D693DB3C330 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623236313a3a2f34382d3438203d3e20323130343430.roa Signing time: Fri 09 Oct 2026 13:54:52 +0000 ROA not before: Fri 09 Oct 2026 13:49:52 +0000 ROA not after: Fri 08 Oct 2027 13:54:52 +0000 asID: 210440 IP address blocks: 2a0f:1cc6:b261::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 14:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e9:a6:e8:36:cf:26:b9:25:9b:9b:b4:b5:9f:9d:69:3d:b3:c3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Oct 9 13:49:52 2026 GMT Not After : Oct 8 13:54:52 2027 GMT Subject: CN=D7A168EE8F6FDB621D1003FCBDA6AF5676F499BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:d0:3a:22:9f:71:7a:6f:33:2b:15:ff:f5: b8:30:17:9b:5f:61:bc:ce:4a:19:32:6a:d8:90:39: c1:85:65:d8:f5:e0:ed:6f:9e:eb:2a:7f:50:19:12: 74:cb:a1:e4:14:7c:5d:6f:41:a2:7e:83:02:06:2f: 9a:a3:40:1e:7e:35:45:11:0c:d2:25:1e:b9:62:19: 1e:00:2f:3e:bb:5f:9f:54:a2:60:06:ca:5f:07:5c: 66:9c:5c:9d:99:86:68:e7:2b:fd:90:16:a0:33:31: ea:06:33:08:5d:65:3a:a1:50:a0:73:a7:87:cb:99: e7:28:c6:9c:79:c9:11:a2:99:34:9b:23:e0:61:cb: 00:0b:59:a8:20:3f:d2:8e:fb:b8:11:5a:51:b4:78: 98:3d:22:c8:cd:04:20:b4:9a:0a:a2:df:ef:95:00: 08:9e:6e:6a:df:26:bc:2c:f3:77:68:f4:14:58:1b: 03:d5:6a:7d:39:89:48:a0:4c:13:da:84:3d:62:78: 9d:ac:be:be:4d:6d:12:42:22:a4:7e:81:5e:47:6b: ef:e9:9b:e7:b2:dd:7b:47:15:9d:90:8e:44:ac:1e: d3:2f:d7:64:d7:25:28:55:72:73:f9:a0:1c:08:83: 03:32:fc:97:e3:16:33:0c:2d:fd:5f:94:be:f8:92: 0b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A1:68:EE:8F:6F:DB:62:1D:10:03:FC:BD:A6:AF:56:76:F4:99:BD X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623236313a3a2f34382d3438203d3e20323130343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b261::/48 Signature Algorithm: sha256WithRSAEncryption 2a:19:af:38:4b:35:6b:8d:2e:48:81:44:6c:20:74:e8:31:e0: e3:ef:09:78:93:ca:68:aa:35:2c:85:9f:13:1a:94:b7:cc:5d: 19:e3:6b:ff:62:07:cd:fa:34:86:19:51:5f:32:d3:90:e6:f1: 3f:3c:bc:f2:44:d3:d6:b7:15:d6:b0:80:b0:5c:38:0f:04:05: 21:2b:66:ad:f9:19:96:99:c4:c2:4e:9d:35:40:ae:a5:76:4a: 17:1d:74:6e:72:b9:41:5c:b9:65:26:78:22:53:54:d7:8c:16: 83:a3:38:75:c6:4d:fa:c9:71:2e:73:59:b7:0b:87:e0:78:fc: dd:d4:c7:9f:0c:d0:e1:c2:ad:82:98:0f:ab:a6:83:64:73:0f: 50:51:4f:14:15:7c:7b:39:ee:56:94:f6:ac:d3:0b:39:77:6b: 84:4e:cf:45:46:a3:85:85:16:de:95:34:65:2f:f4:9c:fc:5e: d4:af:58:1e:fc:7f:78:4a:17:3a:7d:a0:dd:10:3b:e7:2d:b6: 96:aa:b8:78:3a:d4:7b:4e:91:a4:76:ca:65:f3:1c:cd:04:bb: 7d:48:98:a5:44:48:58:5d:95:dc:60:e3:a1:e2:c6:df:63:07: 64:d5:72:72:25:88:f8:f1:b7:47:d2:54:9d:c3:6f:47:85:3d: 46:02:07:a3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUQumm6DbPJrklm5u0tZ+daT2zwzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjEwMDkxMzQ5NTJaFw0yNzEwMDgxMzU0NTJaMDMxMTAvBgNV BAMTKEQ3QTE2OEVFOEY2RkRCNjIxRDEwMDNGQ0JEQTZBRjU2NzZGNDk5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8tA6Ip9xem8zKxX/9bgwF5tf YbzOShkyatiQOcGFZdj14O1vnusqf1AZEnTLoeQUfF1vQaJ+gwIGL5qjQB5+NUUR DNIlHrliGR4ALz67X59UomAGyl8HXGacXJ2ZhmjnK/2QFqAzMeoGMwhdZTqhUKBz p4fLmecoxpx5yRGimTSbI+BhywALWaggP9KO+7gRWlG0eJg9IsjNBCC0mgqi3++V AAiebmrfJrws83do9BRYGwPVan05iUigTBPahD1ieJ2svr5NbRJCIqR+gV5Ha+/p m+ey3XtHFZ2QjkSsHtMv12TXJShVcnP5oBwIgwMy/JfjFjMMLf1flL74kgtvAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU16Fo7o9v22IdEAP8vaavVnb0mb0wHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzIzNjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTMwMzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxrJhMA0GCSqGSIb3DQEBCwUAA4IBAQAq Ga84SzVrjS5IgURsIHToMeDj7wl4k8poqjUshZ8TGpS3zF0Z42v/YgfN+jSGGVFf MtOQ5vE/PLzyRNPWtxXWsICwXDgPBAUhK2at+RmWmcTCTp01QK6ldkoXHXRucrlB XLllJngiU1TXjBaDozh1xk36yXEuc1m3C4fgePzd1MefDNDhwq2CmA+rpoNkcw9Q UU8UFXx7Oe5WlPas0ws5d2uETs9FRqOFhRbelTRlL/Sc/F7Ur1ge/H94Shc6faDd EDvnLbaWqrh4OtR7TpGkdspl8xzNBLt9SJilREhYXZXcYOOh4sbfYwdk1XJyJYj4 8bdH0lSdw29HhT1GAgej -----END CERTIFICATE-----Generated at Fri Oct 23 04:43:48 2026 by rpki-client