$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa File: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (raw, json) Hash identifier: AwETYoDWLr+UL+mh9uhHo7iWKly/gsr+Qa4Sf+Pb3lQ= Subject key identifier: 1B:A5:CF:BC:AA:E7:09:24:DE:EC:9A:9F:C4:66:3E:26:DA:CD:12:0B Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 14CCA48C5D638100A7AC19551D33D48DB837EC31 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa Signing time: Thu 27 Aug 2026 18:25:49 +0000 ROA not before: Thu 27 Aug 2026 18:20:49 +0000 ROA not after: Thu 26 Aug 2027 18:25:49 +0000 asID: 212242 IP address blocks: 2a06:9f41:6969::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 14:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cc:a4:8c:5d:63:81:00:a7:ac:19:55:1d:33:d4:8d:b8:37:ec:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Aug 27 18:20:49 2026 GMT Not After : Aug 26 18:25:49 2027 GMT Subject: CN=1BA5CFBCAAE70924DEEC9A9FC4663E26DACD120B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:f7:f8:96:20:7a:d6:46:9f:ab:9d:29:ba: f0:c1:61:fc:7f:ce:c5:ca:6e:59:a4:06:05:72:c6: 3c:7c:db:a8:6a:af:53:6f:bb:22:d1:19:6b:72:77: ad:15:f4:26:2a:4f:a2:15:e7:d4:0d:7b:d7:09:ac: bb:d9:0d:c3:ce:3a:cd:81:32:7d:86:2c:84:44:30: 90:72:67:b6:2d:b8:21:9d:87:84:42:45:69:0d:ad: c5:1a:9d:71:b9:8e:13:6f:c4:26:e1:aa:77:3a:35: b9:29:28:dc:3f:de:bd:5c:03:d3:bc:1d:a6:07:bc: 17:1c:fd:d5:84:74:7a:b5:f1:98:58:f0:dc:95:c4: d1:9c:fb:d5:d8:9f:08:43:b1:ab:56:ff:a7:df:4c: f2:93:31:53:d3:bb:02:8e:62:50:56:c2:fb:a5:a5: 4b:fb:94:05:4f:00:d2:c0:4e:a9:95:5f:49:6f:bb: db:9e:20:83:61:70:ed:0e:bd:49:f3:b4:c4:76:31: 42:ba:ea:3f:2f:17:21:a6:eb:30:24:f7:24:5d:a9: 66:1e:6a:b9:c1:32:36:4c:76:17:c0:fb:0f:68:66: 69:43:3e:d6:51:5d:c4:01:3c:dd:aa:2b:70:c4:2b: a5:cd:d6:57:e9:01:3a:42:9e:64:6d:5f:70:32:81: 59:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A5:CF:BC:AA:E7:09:24:DE:EC:9A:9F:C4:66:3E:26:DA:CD:12:0B X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:6969::/48 Signature Algorithm: sha256WithRSAEncryption 79:9c:a9:d4:30:91:1e:db:50:07:97:fb:fd:48:95:91:2b:21: 79:26:ba:a3:71:da:2f:bb:f6:27:79:40:bc:73:39:79:3e:d3: 0b:80:3c:bf:fe:7d:3c:82:29:82:26:85:4f:d6:76:47:d9:48: 35:3a:39:25:1b:e8:86:c7:f3:99:55:ab:42:09:0f:fd:33:e0: 4a:a4:93:16:f7:16:10:47:21:9d:f3:20:98:3d:e9:b6:57:ec: fc:12:df:14:1e:73:9a:f1:70:b1:49:1b:04:59:5b:04:b1:bf: 33:a3:5b:7c:48:29:b6:48:60:bb:da:f7:19:90:4a:11:8a:9f: e6:9a:2f:cf:b3:1e:c6:ec:91:e6:f9:24:a8:75:3e:85:c8:90: fe:b7:a4:d0:9e:62:04:1e:cb:a5:d8:e8:ab:6b:ca:0e:f7:89: 8a:d7:fd:8e:af:1b:cb:8c:7a:d6:ba:27:16:d7:c2:ef:24:d1: ac:e3:4a:37:c5:18:cb:3c:3f:7f:85:a2:8b:2f:89:b8:79:3f: b4:6b:81:4a:40:63:6a:17:ee:f3:51:0d:20:08:8a:5d:49:34: cf:8b:08:42:32:ad:4e:32:78:68:83:c6:0a:69:1b:2c:b7:86: 32:51:74:1c:ae:b4:07:27:fc:90:da:aa:d8:fa:ac:f0:8e:58: 07:8c:2b:79 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUFMykjF1jgQCnrBlVHTPUjbg37DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA4MjcxODIwNDlaFw0yNzA4MjYxODI1NDlaMDMxMTAvBgNV BAMTKDFCQTVDRkJDQUFFNzA5MjRERUVDOUE5RkM0NjYzRTI2REFDRDEyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bPf4liB61kafq50puvDBYfx/ zsXKblmkBgVyxjx826hqr1NvuyLRGWtyd60V9CYqT6IV59QNe9cJrLvZDcPOOs2B Mn2GLIREMJByZ7YtuCGdh4RCRWkNrcUanXG5jhNvxCbhqnc6NbkpKNw/3r1cA9O8 HaYHvBcc/dWEdHq18ZhY8NyVxNGc+9XYnwhDsatW/6ffTPKTMVPTuwKOYlBWwvul pUv7lAVPANLATqmVX0lvu9ueIINhcO0OvUnztMR2MUK66j8vFyGm6zAk9yRdqWYe arnBMjZMdhfA+w9oZmlDPtZRXcQBPN2qK3DEK6XN1lfpATpCnmRtX3AygVkxAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUG6XPvKrnCSTe7JqfxGY+JtrNEgswHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2EzNjM5MzYzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjMyMzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGn0FpaTANBgkqhkiG9w0BAQsFAAOCAQEAeZyp1DCRHttQB5f7 /UiVkSsheSa6o3HaL7v2J3lAvHM5eT7TC4A8v/59PIIpgiaFT9Z2R9lINTo5JRvo hsfzmVWrQgkP/TPgSqSTFvcWEEchnfMgmD3ptlfs/BLfFB5zmvFwsUkbBFlbBLG/ M6NbfEgptkhgu9r3GZBKEYqf5povz7MexuyR5vkkqHU+hciQ/rek0J5iBB7Lpdjo q2vKDveJitf9jq8by4x61ronFtfC7yTRrONKN8UYyzw/f4Wiiy+JuHk/tGuBSkBj ahfu81ENIAiKXUk0z4sIQjKtTjJ4aIPGCmkbLLeGMlF0HK60Byf8kNqq2Pqs8I5Y B4wreQ== -----END CERTIFICATE-----Generated at Sat Sep 19 00:05:05 2026 by rpki-client