$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa File: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (raw, json) Hash identifier: Fc5meuqIyHvSJMam3rJL0obBwPV9mwfFbxFUFjfiIBA= Subject key identifier: 80:0C:B9:B4:D7:1E:13:CD:BD:06:4A:15:24:F0:DA:2C:22:A5:25:AA Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 5EE4B8121FEF292777128AE809890FA2F259AD73 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa Signing time: Wed 29 Jul 2026 11:00:34 +0000 ROA not before: Wed 29 Jul 2026 10:55:34 +0000 ROA not after: Wed 28 Jul 2027 11:00:34 +0000 asID: 215147 IP address blocks: 2a09:54c3:a102::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e4:b8:12:1f:ef:29:27:77:12:8a:e8:09:89:0f:a2:f2:59:ad:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 29 10:55:34 2026 GMT Not After : Jul 28 11:00:34 2027 GMT Subject: CN=800CB9B4D71E13CDBD064A1524F0DA2C22A525AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:ca:ff:33:a0:38:a9:f0:2e:30:88:0c:c7: f3:a3:73:18:bc:1a:ff:c9:a2:ef:5b:41:47:2b:d2: 0b:a3:67:33:88:18:6e:4d:a5:ed:84:d2:2e:87:96: 61:9e:b0:02:8c:88:00:73:b5:f3:d2:0e:04:75:ad: d6:ec:16:4c:3e:dc:aa:f8:12:ec:6e:75:a8:f6:51: 32:58:08:82:17:69:85:7e:f1:d0:fa:74:4b:4d:0b: 79:e2:d0:dc:bb:ff:68:34:42:e8:97:be:34:55:0f: 7b:ca:bf:ed:01:1e:d4:a7:f2:89:db:97:47:dd:2e: 85:64:33:10:0d:68:a9:22:96:8b:8c:67:c8:b7:d5: c9:95:8f:9d:53:7a:8b:34:07:05:56:84:c9:77:42: 4d:b6:69:cc:f9:d7:e4:83:0c:c8:67:e1:93:f3:6d: fe:01:6a:65:5c:34:db:e5:a0:1d:58:e0:ba:bb:97: 79:4a:36:cd:99:78:0b:0d:31:53:8a:9d:4b:ca:0c: 22:63:5a:8c:bd:00:68:42:dc:3d:16:5a:00:9f:91: 0b:43:33:4e:ae:e0:fa:8b:c6:72:20:4b:1b:df:61: fb:42:ac:ab:b5:24:5d:8d:b8:fe:07:ff:fa:49:9b: 93:fc:4f:78:ff:bc:c5:2a:94:68:f2:33:1c:0a:6a: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0C:B9:B4:D7:1E:13:CD:BD:06:4A:15:24:F0:DA:2C:22:A5:25:AA X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a102::/48 Signature Algorithm: sha256WithRSAEncryption 01:64:3e:9b:c9:92:ee:98:4d:cf:97:6c:02:d0:f1:24:c7:8b: 05:21:92:51:4f:56:fd:1f:bf:4f:cd:e0:76:05:8c:79:ba:48: 8f:fd:f6:bc:74:fe:18:eb:d8:c9:de:9a:96:74:ce:a9:60:af: 73:04:94:ad:91:38:99:11:64:c0:5d:44:1a:aa:44:2e:a4:09: 99:96:1d:ec:84:8e:88:87:90:c9:a7:6c:4f:c3:e2:5e:71:78: 6d:87:d6:46:ef:7a:fc:7b:c3:4a:b5:05:26:1b:66:68:f5:01: 6b:bd:6f:cb:81:09:fb:ce:76:0e:c6:96:ef:d5:b6:a9:b0:c3: cd:e5:ed:67:ca:cd:26:b9:de:5d:65:1c:0d:fc:72:a6:8b:48: f4:81:a9:fa:c8:81:ef:98:0d:8b:8c:44:fb:65:72:08:ce:88: 16:8f:0b:43:96:a9:75:80:16:a2:f7:44:72:b2:26:ae:17:09: 07:68:cf:d9:f1:cc:55:94:06:47:aa:da:32:40:59:d6:ae:4a: 70:cf:04:4d:1b:cd:00:c0:ae:7d:9d:cd:89:2a:c9:a2:fa:b3: 74:db:37:4a:99:d7:ed:35:72:97:ff:c9:83:94:45:9c:f1:19: 1a:fd:94:38:38:16:a1:65:47:96:20:10:c8:66:b7:04:58:66: ca:2b:44:a0 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUXuS4Eh/vKSd3EoroCYkPovJZrXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MjkxMDU1MzRaFw0yNzA3MjgxMTAwMzRaMDMxMTAvBgNV BAMTKDgwMENCOUI0RDcxRTEzQ0RCRDA2NEExNTI0RjBEQTJDMjJBNTI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkMr/M6A4qfAuMIgMx/Ojcxi8 Gv/Jou9bQUcr0gujZzOIGG5Npe2E0i6HlmGesAKMiABztfPSDgR1rdbsFkw+3Kr4 Euxudaj2UTJYCIIXaYV+8dD6dEtNC3ni0Ny7/2g0QuiXvjRVD3vKv+0BHtSn8onb l0fdLoVkMxANaKkilouMZ8i31cmVj51Teos0BwVWhMl3Qk22acz51+SDDMhn4ZPz bf4BamVcNNvloB1Y4Lq7l3lKNs2ZeAsNMVOKnUvKDCJjWoy9AGhC3D0WWgCfkQtD M06u4PqLxnIgSxvfYftCrKu1JF2NuP4H//pJm5P8T3j/vMUqlGjyMxwKapTPAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUgAy5tNceE829BkoVJPDaLCKlJaowHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMxMzAzMjNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzIzMTM1MzEzNDM3 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw ETAPBAIAAjAJAwcAKglUw6ECMA0GCSqGSIb3DQEBCwUAA4IBAQABZD6byZLumE3P l2wC0PEkx4sFIZJRT1b9H79PzeB2BYx5ukiP/fa8dP4Y69jJ3pqWdM6pYK9zBJSt kTiZEWTAXUQaqkQupAmZlh3shI6Ih5DJp2xPw+JecXhth9ZG73r8e8NKtQUmG2Zo 9QFrvW/LgQn7znYOxpbv1bapsMPN5e1nys0mud5dZRwN/HKmi0j0gan6yIHvmA2L jET7ZXIIzogWjwtDlql1gBai90RysiauFwkHaM/Z8cxVlAZHqtoyQFnWrkpwzwRN G80AwK59nc2JKsmi+rN02zdKmdftNXKX/8mDlEWc8Rka/ZQ4OBahZUeWIBDIZrcE WGbKK0Sg -----END CERTIFICATE-----Generated at Sat Sep 5 04:02:41 2026 by rpki-client