$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a636166653a3a2f34382d3438203d3e20323034343634.roa File: 326130353a646663363a636166653a3a2f34382d3438203d3e20323034343634.roa (raw, json) Hash identifier: h+BlZJcH39WSX81B1N6InEzSXSznqGJxM3wZRfE20nY= Subject key identifier: 33:FF:AA:C0:80:DC:54:35:AD:EF:1A:61:76:EF:11:56:1B:4A:45:B2 Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 1513B790D75EC443E01FE5D55CA965FB8FDD4300 Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a636166653a3a2f34382d3438203d3e20323034343634.roa Signing time: Tue 06 Oct 2026 17:20:14 +0000 ROA not before: Tue 06 Oct 2026 17:15:14 +0000 ROA not after: Tue 05 Oct 2027 17:20:14 +0000 asID: 204464 IP address blocks: 2a05:dfc6:cafe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 11:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:13:b7:90:d7:5e:c4:43:e0:1f:e5:d5:5c:a9:65:fb:8f:dd:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Oct 6 17:15:14 2026 GMT Not After : Oct 5 17:20:14 2027 GMT Subject: CN=33FFAAC080DC5435ADEF1A6176EF11561B4A45B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:e1:ad:55:51:86:85:3f:f7:ca:44:55:08: 5c:19:84:0e:1a:29:ed:f0:12:9d:4e:df:b4:3a:1f: 6b:fb:54:a4:22:78:4e:96:d5:cf:e0:84:c8:bb:64: cc:0b:77:88:18:e7:e1:c1:bb:8a:a7:88:97:72:93: 91:cc:e0:f9:bd:6d:c3:73:de:15:cc:f5:40:92:01: 5e:7a:cf:4b:83:ec:bd:3d:5c:5b:c3:40:d6:7d:a4: 3f:8a:17:ce:a5:1c:af:f8:fb:e5:07:5f:40:60:8e: e0:4e:71:dc:b0:c3:62:a7:ca:e0:20:6b:9e:72:5f: 4a:4d:08:a7:82:30:24:48:74:f6:5d:85:e2:64:ea: 6c:32:d5:a9:1c:04:38:e2:5b:d0:a6:3c:82:a7:59: 63:a9:6b:b8:21:43:48:5c:a4:bb:01:44:29:80:5d: 81:98:51:eb:e1:8b:5f:9f:b7:ff:c5:7e:6c:dc:1e: e6:18:e0:cb:60:b7:8f:ff:43:4a:9a:f7:b5:ae:db: 19:5c:51:a7:d5:b0:94:ff:17:98:96:22:c4:6e:8d: 6c:1f:35:5c:6d:73:61:ed:9b:58:ad:47:10:12:d2: 20:e7:2f:89:2f:65:25:45:12:db:38:db:62:80:07: 72:ac:e2:41:c0:24:d5:35:14:f9:22:ac:2f:8e:8f: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:AA:C0:80:DC:54:35:AD:EF:1A:61:76:EF:11:56:1B:4A:45:B2 X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a636166653a3a2f34382d3438203d3e20323034343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc6:cafe::/48 Signature Algorithm: sha256WithRSAEncryption 47:28:c6:e3:12:ee:f3:5c:dd:1e:ed:6d:01:6f:c3:53:8c:dd: 98:3e:10:f0:0b:52:47:90:a0:52:a0:fd:02:66:42:fa:40:39: bc:b8:50:32:09:8c:7f:1f:01:77:4c:ab:62:49:97:c5:0d:93: 0e:81:af:bf:91:30:1b:86:49:0c:ae:4c:eb:4c:d7:f5:86:7a: 2b:4a:02:b0:4b:35:0c:fe:97:80:82:9d:f0:ec:76:6f:f2:0d: 66:e0:5f:5a:4d:03:f9:31:46:76:98:7e:a6:18:3e:d3:79:99: 4b:b5:48:7e:b1:cf:93:de:a3:17:96:83:ff:03:70:9c:95:8a: 25:35:9e:18:2f:c7:9e:7d:38:ae:bc:61:d0:7a:16:c1:37:f8: 68:00:ce:20:7d:8b:d9:5d:03:ec:e6:2c:b4:86:4c:26:ed:c7: 38:ed:97:c0:b3:55:33:39:c3:1e:f1:07:cd:0b:81:c9:7a:01: 1d:1e:b4:36:7c:af:da:7a:ea:70:a2:81:eb:1c:52:41:5b:45: c3:56:67:e8:c0:8b:32:57:46:9a:ed:f3:75:01:03:d9:25:e6: 72:7a:25:9d:9c:99:1e:17:a7:69:8d:a2:90:01:a8:ea:68:7f: 16:72:5c:21:ee:51:2f:18:44:2f:0c:01:b3:3e:5c:78:20:4f: ca:11:7a:90 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUFRO3kNdexEPgH+XVXKll+4/dQwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjEwMDYxNzE1MTRaFw0yNzEwMDUxNzIwMTRaMDMxMTAvBgNV BAMTKDMzRkZBQUMwODBEQzU0MzVBREVGMUE2MTc2RUYxMTU2MUI0QTQ1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoheGtVVGGhT/3ykRVCFwZhA4a Ke3wEp1O37Q6H2v7VKQieE6W1c/ghMi7ZMwLd4gY5+HBu4qniJdyk5HM4Pm9bcNz 3hXM9UCSAV56z0uD7L09XFvDQNZ9pD+KF86lHK/4++UHX0BgjuBOcdyww2KnyuAg a55yX0pNCKeCMCRIdPZdheJk6mwy1akcBDjiW9CmPIKnWWOpa7ghQ0hcpLsBRCmA XYGYUevhi1+ft//FfmzcHuYY4Mtgt4//Q0qa97Wu2xlcUafVsJT/F5iWIsRujWwf NVxtc2Htm1itRxAS0iDnL4kvZSVFEts422KAB3Ks4kHAJNU1FPkirC+Oj6GTAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUM/+qwIDcVDWt7xphdu8RVhtKRbIwHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzI2MTMwMzUzYTY0NjY2MzM2 M2E2MzYxNjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDM0MzYzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoF38bK/jANBgkqhkiG9w0BAQsFAAOCAQEARyjG4xLu81zdHu1t AW/DU4zdmD4Q8AtSR5CgUqD9AmZC+kA5vLhQMgmMfx8Bd0yrYkmXxQ2TDoGvv5Ew G4ZJDK5M60zX9YZ6K0oCsEs1DP6XgIKd8Ox2b/INZuBfWk0D+TFGdph+phg+03mZ S7VIfrHPk96jF5aD/wNwnJWKJTWeGC/Hnn04rrxh0HoWwTf4aADOIH2L2V0D7OYs tIZMJu3HOO2XwLNVMznDHvEHzQuByXoBHR60Nnyv2nrqcKKB6xxSQVtFw1Zn6MCL MldGmu3zdQED2SXmcnolnZyZHhenaY2ikAGo6mh/FnJcIe5RLxhELwwBsz5ceCBP yhF6kA== -----END CERTIFICATE-----Generated at Thu Oct 8 00:55:45 2026 by rpki-client