$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa File: 326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: FhiRWcOhFd1e57IfPQu+2j0uinj7188+3VOrSYUtQ6c= Subject key identifier: DC:9B:6C:84:C7:15:52:58:7A:2C:B3:39:CA:DE:D7:8A:ED:BC:83:FE Certificate issuer: /CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Certificate serial: 6F208594F3E43E1BE7CDF5FE3C8A9553D0B58664 Authority key identifier: DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa Signing time: Fri 06 Mar 2026 16:05:39 +0000 ROA not before: Fri 06 Mar 2026 16:00:39 +0000 ROA not after: Fri 05 Mar 2027 16:05:39 +0000 asID: 214955 IP address blocks: 2a0f:1cc5:2d03::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 07:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:20:85:94:f3:e4:3e:1b:e7:cd:f5:fe:3c:8a:95:53:d0:b5:86:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1 Validity Not Before: Mar 6 16:00:39 2026 GMT Not After : Mar 5 16:05:39 2027 GMT Subject: CN=DC9B6C84C71552587A2CB339CADED78AEDBC83FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:ee:42:55:d2:87:f3:43:9f:11:9a:75:92: e4:e6:b5:5f:a1:d7:e1:ea:20:7e:ad:59:e8:4c:7e: 04:a1:fb:bd:95:f9:d3:90:6c:61:4d:d4:03:24:b5: a8:95:5c:a4:e9:f6:dc:b9:c6:87:c1:0d:f6:56:87: 90:ce:ba:5c:2d:08:7e:d2:b0:27:09:19:bc:5b:c9: 82:b9:ee:fe:3f:96:2e:b7:0e:b1:b0:11:12:ec:0d: c8:85:3d:d7:ae:f5:bb:6c:57:0b:49:94:ba:89:13: a6:8e:6a:2b:35:c1:9f:81:27:2c:17:0a:50:d6:68: 5c:90:50:36:f1:bb:6d:12:6f:b7:69:f5:fd:6b:e7: 87:7e:59:c1:03:82:93:d1:d2:c5:4f:8d:3c:96:41: cb:7f:9f:93:60:ef:b4:10:62:9a:4e:c8:37:b8:43: 0b:00:55:68:95:dd:bb:ed:da:aa:31:cf:71:34:19: 7a:11:51:c0:72:64:84:ba:65:06:c7:36:a2:27:e9: 93:06:30:d9:0c:c3:37:91:cd:8b:0c:11:ae:1f:15: bb:74:b3:d4:73:b9:0b:a0:c7:83:c5:fd:bd:65:a2: ae:3a:8e:66:db:30:8c:a8:69:59:28:c6:df:5c:52: 22:bd:06:c2:6b:14:47:a3:3f:4c:e9:d8:13:63:cc: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:6C:84:C7:15:52:58:7A:2C:B3:39:CA:DE:D7:8A:ED:BC:83:FE X509v3 Authority Key Identifier: keyid:DB:5B:BD:B3:02:10:31:4E:90:40:B6:C9:9D:BF:69:EE:85:FA:4E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/3/326130663a316363353a326430333a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:2d03::/48 Signature Algorithm: sha256WithRSAEncryption 4c:cd:8f:8f:c2:44:28:9f:e3:de:22:4e:44:b2:1a:3e:55:59: c9:13:9a:39:e4:54:ae:33:fe:10:96:b0:fb:90:67:cb:88:0a: 7c:ec:2a:18:be:65:69:6a:ef:b5:c9:ad:1f:c0:5a:1b:b0:44: a9:a3:a4:89:ab:28:c5:e2:8a:f5:ec:8f:57:31:97:33:47:39: 84:b8:29:37:7b:5d:a2:1d:ec:67:a2:38:57:03:af:78:81:51: c1:15:90:8d:8a:e0:2c:14:a1:c9:b9:e6:98:ad:47:1b:8c:a8: f8:57:fa:23:45:e0:79:e8:39:88:05:ad:af:02:ad:de:2d:70: e7:67:48:44:62:bc:cf:06:d6:e1:ac:d8:28:4e:7d:cf:aa:55: 66:ff:ee:1a:5c:b3:4a:02:95:d9:c3:3f:19:99:e8:1f:05:1f: 98:8e:b2:7f:12:e1:92:c7:0b:90:90:12:cf:c7:d5:b6:87:0d: 0e:71:1a:5f:d2:09:3a:15:5d:f4:ee:fe:7a:7c:13:7a:22:50: 6c:de:3a:a8:e0:26:f5:14:08:1c:99:3a:5a:c7:6f:8f:b1:08: 18:a0:80:b7:e1:81:8c:0b:ff:95:b3:2e:d0:fd:63:c4:7f:6c: ee:8d:a4:12:54:54:18:88:5a:6d:07:94:9f:7d:2a:89:7d:22: dd:c4:30:dc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbyCFlPPkPhvnzfX+PIqVU9C1hmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4 NUZBNEVFMTAeFw0yNjAzMDYxNjAwMzlaFw0yNzAzMDUxNjA1MzlaMDMxMTAvBgNV BAMTKERDOUI2Qzg0QzcxNTUyNTg3QTJDQjMzOUNBREVENzhBRURCQzgzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtie5CVdKH80OfEZp1kuTmtV+h 1+HqIH6tWehMfgSh+72V+dOQbGFN1AMktaiVXKTp9ty5xofBDfZWh5DOulwtCH7S sCcJGbxbyYK57v4/li63DrGwERLsDciFPdeu9btsVwtJlLqJE6aOais1wZ+BJywX ClDWaFyQUDbxu20Sb7dp9f1r54d+WcEDgpPR0sVPjTyWQct/n5Ng77QQYppOyDe4 QwsAVWiV3bvt2qoxz3E0GXoRUcByZIS6ZQbHNqIn6ZMGMNkMwzeRzYsMEa4fFbt0 s9RzuQugx4PF/b1loq46jmbbMIyoaVkoxt9cUiK9BsJrFEejP0zp2BNjzJQfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU3JtshMcVUlh6LLM5yt7Xiu28g/4wHwYDVR0j BBgwFoAU21u9swIQMU6QQLbJnb9p7oX6TuEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzMvREI1QkJEQjMwMjEwMzE0RTkwNDBCNkM5OURCRjY5RUU4NUZBNEVFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9EQjVCQkRCMzAyMTAzMTRFOTA0MEI2Qzk5 REJGNjlFRTg1RkE0RUUxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMyNjQzMDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxS0DMA0GCSqGSIb3DQEBCwUAA4IBAQBM zY+PwkQon+PeIk5Esho+VVnJE5o55FSuM/4QlrD7kGfLiAp87CoYvmVpau+1ya0f wFobsESpo6SJqyjF4or17I9XMZczRzmEuCk3e12iHexnojhXA694gVHBFZCNiuAs FKHJueaYrUcbjKj4V/ojReB56DmIBa2vAq3eLXDnZ0hEYrzPBtbhrNgoTn3PqlVm /+4aXLNKApXZwz8ZmegfBR+YjrJ/EuGSxwuQkBLPx9W2hw0OcRpf0gk6FV307v56 fBN6IlBs3jqo4Cb1FAgcmTpax2+PsQgYoIC34YGMC/+Vsy7Q/WPEf2zujaQSVFQY iFptB5SffSqJfSLdxDDc -----END CERTIFICATE-----Generated at Thu Mar 12 17:07:27 2026 by rpki-client