$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa File: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (raw, json) Hash identifier: 5lFV6n1egrRD+zZC7S5Y6cdaZ7S+Fa6NFVUn/ZEuZbs= Subject key identifier: 0A:FE:17:F8:6C:3C:18:BB:F9:08:1B:DA:86:FB:A9:E0:B7:0B:DE:BD Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 3F5A093FA3C84CFE55AF1514382D569BA8AB2953 Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa Signing time: Tue 18 Aug 2026 16:23:13 +0000 ROA not before: Tue 18 Aug 2026 16:18:13 +0000 ROA not after: Tue 17 Aug 2027 16:23:13 +0000 asID: 44817 IP address blocks: 2a0f:85c1:325::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 15:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:09:3f:a3:c8:4c:fe:55:af:15:14:38:2d:56:9b:a8:ab:29:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Aug 18 16:18:13 2026 GMT Not After : Aug 17 16:23:13 2027 GMT Subject: CN=0AFE17F86C3C18BBF9081BDA86FBA9E0B70BDEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:b6:c1:00:4b:4f:14:a9:a9:17:66:70:15: da:df:a9:be:99:91:3d:62:8d:8f:c5:e7:18:0a:a7: bc:c0:57:02:75:aa:40:0e:6d:8f:3e:20:4f:c8:06: 26:80:c7:b7:78:e9:7e:f8:94:77:10:7e:df:57:f4: 64:6c:ad:ad:13:72:ba:46:6c:77:0c:f9:a7:6a:d5: 50:cf:45:92:18:74:33:3c:74:6b:d9:30:1e:c2:bc: f2:12:a4:5b:79:16:01:46:3e:c7:f9:9f:a7:9a:05: 46:d5:e0:17:a9:b1:62:7d:a5:9c:c1:b5:b0:62:41: f0:f7:10:60:75:1a:96:4a:37:2a:18:f3:83:8d:06: 05:f0:7a:48:7e:d0:91:87:09:85:2d:64:a9:69:63: 53:6b:fa:d2:22:be:a9:7a:d3:14:df:4b:c3:c6:17: 54:81:ea:cd:1d:b8:26:4a:54:4c:8f:89:c9:14:72: 53:c8:06:82:e1:bd:8c:51:8a:df:e9:d7:f3:3d:99: 6d:ed:aa:c6:4a:b6:f8:43:ab:45:4b:35:7f:af:dc: a3:12:ec:51:bd:2f:59:69:6c:46:b8:80:54:f5:05: 34:a7:35:fa:d1:75:b0:8a:49:3b:0e:bd:14:1f:f3: 04:8b:8e:fd:c5:c6:a1:c2:39:ea:46:f3:08:69:0c: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FE:17:F8:6C:3C:18:BB:F9:08:1B:DA:86:FB:A9:E0:B7:0B:DE:BD X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:325::/48 Signature Algorithm: sha256WithRSAEncryption 8f:a2:ed:2f:fc:16:87:b8:a6:7e:8e:05:e6:9d:cf:f5:1c:3a: 3a:72:92:78:a4:4e:1d:79:79:c3:b2:e2:ab:77:ed:e8:b3:4e: 9a:75:88:93:ec:68:61:24:d4:e7:11:46:c2:6a:59:2f:10:fc: b6:53:97:ec:8c:9c:3b:68:44:a1:9b:27:bb:4b:5b:03:4b:e5: 69:c0:c7:33:d7:7d:e9:8a:58:87:fa:d6:a6:ff:5a:94:37:aa: 1e:cf:0f:cc:4f:45:4e:20:55:df:2d:f7:1b:b6:3d:00:b2:6d: 89:7e:bb:c4:ca:54:13:80:ce:c2:78:eb:e0:c0:89:f7:49:17: 86:be:09:ca:bc:d4:c7:b8:f4:c1:8c:43:94:1b:e2:30:23:01: 33:49:41:b1:0d:30:c5:35:6a:c6:e9:e8:66:6f:06:84:83:7a: c4:b4:81:b3:19:d6:89:c7:67:00:bc:10:e3:4a:ab:c7:7a:85: 04:ac:fb:d0:d9:97:17:82:4e:b9:0d:d3:5d:b9:4e:17:37:6e: 1c:cc:a8:56:92:24:25:9a:d2:c8:90:35:78:ff:be:4d:a0:d0: 79:ea:ff:53:a6:bd:5e:ab:85:8e:23:a1:8c:8f:80:b9:0b:74: 80:ed:f8:ba:83:56:57:79:14:43:90:30:0e:a6:48:59:ac:0f: 14:d6:d5:8a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUP1oJP6PITP5VrxUUOC1Wm6irKVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNjA4MTgxNjE4MTNaFw0yNzA4MTcxNjIzMTNaMDMxMTAvBgNV BAMTKDBBRkUxN0Y4NkMzQzE4QkJGOTA4MUJEQTg2RkJBOUUwQjcwQkRFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4bbBAEtPFKmpF2ZwFdrfqb6Z kT1ijY/F5xgKp7zAVwJ1qkAObY8+IE/IBiaAx7d46X74lHcQft9X9GRsra0TcrpG bHcM+adq1VDPRZIYdDM8dGvZMB7CvPISpFt5FgFGPsf5n6eaBUbV4BepsWJ9pZzB tbBiQfD3EGB1GpZKNyoY84ONBgXwekh+0JGHCYUtZKlpY1Nr+tIivql60xTfS8PG F1SB6s0duCZKVEyPickUclPIBoLhvYxRit/p1/M9mW3tqsZKtvhDq0VLNX+v3KMS 7FG9L1lpbEa4gFT1BTSnNfrRdbCKSTsOvRQf8wSLjv3FxqHCOepG8whpDI/rAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUCv4X+Gw8GLv5CBvahvup4LcL3r0wHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzMzIzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzQz ODMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqD4XBAyUwDQYJKoZIhvcNAQELBQADggEBAI+i7S/8 Foe4pn6OBeadz/UcOjpyknikTh15ecOy4qt37eizTpp1iJPsaGEk1OcRRsJqWS8Q /LZTl+yMnDtoRKGbJ7tLWwNL5WnAxzPXfemKWIf61qb/WpQ3qh7PD8xPRU4gVd8t 9xu2PQCybYl+u8TKVBOAzsJ46+DAifdJF4a+Ccq81Me49MGMQ5Qb4jAjATNJQbEN MMU1asbp6GZvBoSDesS0gbMZ1onHZwC8EONKq8d6hQSs+9DZlxeCTrkN0125Thc3 bhzMqFaSJCWa0siQNXj/vk2g0Hnq/1OmvV6rhY4joYyPgLkLdIDt+LqDVld5FEOQ MA6mSFmsDxTW1Yo= -----END CERTIFICATE-----Generated at Fri Sep 4 23:38:36 2026 by rpki-client