$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa File: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (raw, json) Hash identifier: Gvyqzv+EeRXXX6oIvX2v8cOmGoeLMARy+xDqyokmIuw= Subject key identifier: E2:6A:18:D4:D7:1C:36:45:25:12:9D:0C:0C:90:95:30:62:35:80:0B Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 59FF7ABCF5452A62F730B437059BEA2A612468A6 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa Signing time: Tue 01 Sep 2026 13:00:41 +0000 ROA not before: Tue 01 Sep 2026 12:55:41 +0000 ROA not after: Tue 31 Aug 2027 13:00:41 +0000 asID: 210796 IP address blocks: 2a09:54c3:a1f0::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 14:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ff:7a:bc:f5:45:2a:62:f7:30:b4:37:05:9b:ea:2a:61:24:68:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Sep 1 12:55:41 2026 GMT Not After : Aug 31 13:00:41 2027 GMT Subject: CN=E26A18D4D71C364525129D0C0C9095306235800B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:1b:1a:7f:c7:39:f3:c8:ab:68:df:64:72: f0:97:f5:6f:42:33:6b:e6:8a:ea:64:e2:15:4a:b3: df:b6:06:6b:2b:02:18:27:d4:fd:aa:e3:d0:44:39: 3d:e3:8f:73:d1:c0:95:ab:c9:90:0a:89:8e:ff:f8: 53:3a:40:cf:e2:03:a9:b9:3a:59:26:e1:36:d4:45: 47:09:df:63:f8:6b:01:57:e4:fe:e5:31:4f:db:7f: c7:85:96:4d:0c:f3:79:21:30:bf:f7:fb:59:bd:01: 13:4d:6c:e7:88:4f:e0:39:e3:b7:f1:fa:5d:a0:9d: 8b:f9:c5:66:53:e9:88:93:64:8b:43:d9:ab:d3:67: ff:6a:28:03:53:26:e6:97:15:3f:ab:c8:12:4e:db: f3:6c:ff:2f:2a:6f:be:b8:2a:9a:68:97:89:b0:51: 56:d0:50:fc:56:6d:85:d6:dd:45:f4:4f:ed:37:a3: 52:f4:09:74:86:c1:60:c9:fc:cf:33:22:e3:5b:43: 02:fe:1a:43:18:a1:0b:d5:49:82:d2:99:d3:e1:2e: 01:c0:d5:69:c1:0f:da:b1:24:ce:36:e5:7e:da:7e: 15:65:2f:62:2c:c0:d3:32:62:0d:04:dd:d4:2c:29: 90:af:97:d7:19:4b:11:36:ed:bc:4c:44:21:05:8a: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6A:18:D4:D7:1C:36:45:25:12:9D:0C:0C:90:95:30:62:35:80:0B X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a1f0::/44 Signature Algorithm: sha256WithRSAEncryption 87:a1:de:7e:64:a1:cf:f7:47:5e:72:28:e4:fb:ff:73:0f:37: bd:9b:1b:f1:3d:e6:e5:b6:04:d2:a4:14:80:99:62:0d:5e:87: bc:44:09:f4:db:6a:85:70:4f:ce:c8:6b:c2:fd:61:36:8d:8b: 59:f5:b7:16:06:81:60:56:87:df:80:42:11:03:63:00:98:05: 31:72:2c:0a:ab:19:de:f0:3a:d6:e8:e2:90:4f:f5:e9:6b:94: 8b:8d:6c:a7:e2:09:dd:e9:b2:e3:57:1d:ba:da:a2:35:3e:f0: 96:da:75:e9:87:14:e9:d1:b4:81:d7:7a:0e:6c:0e:f9:71:c9: 0e:59:e4:0c:38:d9:07:bc:31:47:07:e0:83:90:e8:e1:72:7b: 79:05:51:ad:ac:9a:86:e6:77:26:7d:7e:17:d6:29:d2:47:38: 6d:79:b8:98:b7:1a:77:59:33:c2:09:b1:8a:fe:82:d2:14:84: 09:8a:d1:94:c4:eb:1d:97:f3:26:9f:24:b3:ff:d1:ec:f7:3c: 98:63:02:36:b8:e4:1a:8a:bf:69:d5:c6:7b:a1:6a:b7:78:d3: f5:25:49:17:d6:43:f1:c9:4e:bb:c6:ad:46:50:99:3e:0c:93: bc:fa:f0:b1:66:47:12:f0:ed:0b:9b:1b:9e:bd:75:f8:48:75: 41:9b:47:21 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUWf96vPVFKmL3MLQ3BZvqKmEkaKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA5MDExMjU1NDFaFw0yNzA4MzExMzAwNDFaMDMxMTAvBgNV BAMTKEUyNkExOEQ0RDcxQzM2NDUyNTEyOUQwQzBDOTA5NTMwNjIzNTgwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1xsaf8c588iraN9kcvCX9W9C M2vmiupk4hVKs9+2BmsrAhgn1P2q49BEOT3jj3PRwJWryZAKiY7/+FM6QM/iA6m5 Olkm4TbURUcJ32P4awFX5P7lMU/bf8eFlk0M83khML/3+1m9ARNNbOeIT+A547fx +l2gnYv5xWZT6YiTZItD2avTZ/9qKANTJuaXFT+ryBJO2/Ns/y8qb764Kppol4mw UVbQUPxWbYXW3UX0T+03o1L0CXSGwWDJ/M8zIuNbQwL+GkMYoQvVSYLSmdPhLgHA 1WnBD9qxJM425X7afhVlL2IswNMyYg0E3dQsKZCvl9cZSxE27bxMRCEFikd3AgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQU4moY1NccNkUlEp0MDJCVMGI1gAswHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMxNjYzMDNhM2EyZjM0MzQyZDMxMzIzODIwM2QzZTIwMzIzMTMwMzczOTM2 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw ETAPBAIAAjAJAwcEKglUw6HwMA0GCSqGSIb3DQEBCwUAA4IBAQCHod5+ZKHP90de cijk+/9zDze9mxvxPebltgTSpBSAmWINXoe8RAn022qFcE/OyGvC/WE2jYtZ9bcW BoFgVoffgEIRA2MAmAUxciwKqxne8DrW6OKQT/Xpa5SLjWyn4gnd6bLjVx262qI1 PvCW2nXphxTp0bSB13oObA75cckOWeQMONkHvDFHB+CDkOjhcnt5BVGtrJqG5ncm fX4X1inSRzhtebiYtxp3WTPCCbGK/oLSFIQJitGUxOsdl/MmnySz/9Hs9zyYYwI2 uOQair9p1cZ7oWq3eNP1JUkX1kPxyU67xq1GUJk+DJO8+vCxZkcS8O0LmxuevXX4 SHVBm0ch -----END CERTIFICATE-----Generated at Sat Sep 5 02:45:57 2026 by rpki-client