$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623237303a3a2f34342d3438203d3e20323138333831.roa File: 326130663a316363363a623237303a3a2f34342d3438203d3e20323138333831.roa (raw, json) Hash identifier: 2MmLnL57ra7Wby+jYaCtzMXod1WyRblYvU/0wEIFC+8= Subject key identifier: F7:8B:D9:7D:66:05:7E:FB:97:6C:E4:4F:86:23:04:65:11:AA:54:5A Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 3101383D1097398C1D94AA3034C41DD0EB7A0F1E Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623237303a3a2f34342d3438203d3e20323138333831.roa Signing time: Fri 16 Oct 2026 15:25:15 +0000 ROA not before: Fri 16 Oct 2026 15:20:15 +0000 ROA not after: Fri 15 Oct 2027 15:25:15 +0000 asID: 218381 IP address blocks: 2a0f:1cc6:b270::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 04:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:01:38:3d:10:97:39:8c:1d:94:aa:30:34:c4:1d:d0:eb:7a:0f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Oct 16 15:20:15 2026 GMT Not After : Oct 15 15:25:15 2027 GMT Subject: CN=F78BD97D66057EFB976CE44F8623046511AA545A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:ef:f6:b7:c9:90:c6:59:b5:35:71:42:c5: b2:e9:2a:22:65:5f:5e:25:03:37:24:e6:9e:86:4c: 35:c7:49:af:2b:69:e1:77:2c:bd:fa:e4:1e:ad:42: dd:cc:ae:14:84:1c:08:c8:6f:3e:41:b0:5c:1d:43: cf:59:32:9f:26:62:6d:6a:7e:c0:00:fc:b5:98:23: 21:91:81:17:0e:a9:17:5e:a0:fe:a2:10:b5:76:75: c3:02:b3:82:45:4a:1b:8f:2d:e3:a6:db:85:91:95: 3a:c6:11:98:dd:8e:1c:85:fe:01:a1:7d:ff:e6:05: 09:53:8f:0b:f1:42:49:36:b1:22:c7:68:89:ef:9c: 6c:a9:92:62:fe:cd:61:96:fe:05:4f:20:36:d3:c2: 43:f7:98:86:c0:35:48:d5:98:03:3c:c8:66:fb:d4: d0:e0:de:5a:0e:37:bc:dc:c1:2c:3f:0c:6f:1e:ab: c0:f8:83:c2:ed:45:66:b3:d2:d3:80:18:5f:d1:cc: f0:38:cb:07:57:56:39:d3:9d:57:7f:93:ef:68:fd: be:c6:51:10:51:6b:28:83:0f:82:c3:e1:86:a0:a9: f6:e9:be:44:76:b6:67:c8:c6:b7:14:1f:be:3b:12: a7:4e:5c:ea:6d:8f:f4:ca:1b:16:69:5e:c2:54:8d: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:D9:7D:66:05:7E:FB:97:6C:E4:4F:86:23:04:65:11:AA:54:5A X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623237303a3a2f34342d3438203d3e20323138333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b270::/44 Signature Algorithm: sha256WithRSAEncryption aa:0c:ba:88:8a:e5:0c:bd:1a:cc:86:95:7c:07:57:aa:99:4a: 2d:5d:b3:84:de:d7:05:43:b7:24:20:00:6a:b7:a9:24:1e:39: f4:06:fe:05:00:94:63:61:3f:97:01:68:f1:6f:20:04:47:4a: ac:1c:28:71:33:df:f7:b2:ac:54:8e:8c:f2:09:ce:9f:df:1a: 39:82:ba:96:5e:8b:e9:a8:91:01:ae:31:75:16:a2:65:63:29: 24:e5:21:3f:28:2a:10:57:e1:cd:78:34:d2:8b:74:35:51:3f: 2a:d9:a3:c6:93:63:31:18:f2:08:b3:e2:f7:41:c2:b0:e2:86: 8a:05:6d:d9:ab:18:b7:ac:c4:81:3e:ef:c0:65:80:df:08:7a: fd:f5:e6:8c:4b:b5:3c:0b:59:5c:da:6b:8a:47:ff:a0:e4:0a: b2:67:3f:4a:34:7b:c0:08:38:b1:35:70:e5:cd:6c:d9:fa:c5: 8a:ba:4b:8a:78:93:6d:f3:a7:4d:6e:62:45:08:e7:3b:8f:d9: e6:30:01:36:3b:c9:f7:c5:20:a9:13:68:26:ee:24:5c:e6:1b: 58:4f:db:ad:3a:b7:b6:dc:b2:c7:b1:4b:5f:0c:8b:00:33:b1: 5d:61:72:c1:68:bc:08:11:9c:66:24:e7:ee:e7:3c:be:4a:99: 31:9d:24:a6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMQE4PRCXOYwdlKowNMQd0Ot6Dx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjEwMTYxNTIwMTVaFw0yNzEwMTUxNTI1MTVaMDMxMTAvBgNV BAMTKEY3OEJEOTdENjYwNTdFRkI5NzZDRTQ0Rjg2MjMwNDY1MTFBQTU0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCln+/2t8mQxlm1NXFCxbLpKiJl X14lAzck5p6GTDXHSa8raeF3LL365B6tQt3MrhSEHAjIbz5BsFwdQ89ZMp8mYm1q fsAA/LWYIyGRgRcOqRdeoP6iELV2dcMCs4JFShuPLeOm24WRlTrGEZjdjhyF/gGh ff/mBQlTjwvxQkk2sSLHaInvnGypkmL+zWGW/gVPIDbTwkP3mIbANUjVmAM8yGb7 1NDg3loON7zcwSw/DG8eq8D4g8LtRWaz0tOAGF/RzPA4ywdXVjnTnVd/k+9o/b7G URBRayiDD4LD4YagqfbpvkR2tmfIxrcUH747EqdOXOptj/TKGxZpXsJUjeIfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU94vZfWYFfvuXbORPhiMEZRGqVFowHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzIzNzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM4MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrJwMA0GCSqGSIb3DQEBCwUAA4IBAQCq DLqIiuUMvRrMhpV8B1eqmUotXbOE3tcFQ7ckIABqt6kkHjn0Bv4FAJRjYT+XAWjx byAER0qsHChxM9/3sqxUjozyCc6f3xo5grqWXovpqJEBrjF1FqJlYykk5SE/KCoQ V+HNeDTSi3Q1UT8q2aPGk2MxGPIIs+L3QcKw4oaKBW3Zqxi3rMSBPu/AZYDfCHr9 9eaMS7U8C1lc2muKR/+g5AqyZz9KNHvACDixNXDlzWzZ+sWKukuKeJNt86dNbmJF COc7j9nmMAE2O8n3xSCpE2gm7iRc5htYT9utOre23LLHsUtfDIsAM7FdYXLBaLwI EZxmJOfu5zy+SpkxnSSm -----END CERTIFICATE-----Generated at Thu Oct 22 20:06:48 2026 by rpki-client