$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa File: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (raw, json) Hash identifier: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY= Subject key identifier: 9A:DE:83:83:0D:4E:2A:CD:6D:CF:41:2F:F4:C0:A5:A8:21:EC:76:F5 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 5C6F6D62348153C1DBE95800F961A6DDF2DBC90A Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa Signing time: Tue 30 Sep 2025 12:37:32 +0000 ROA not before: Tue 30 Sep 2025 12:32:32 +0000 ROA not after: Tue 29 Sep 2026 12:37:32 +0000 asID: 210796 IP address blocks: 2a09:54c3:a1f0::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 18:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6f:6d:62:34:81:53:c1:db:e9:58:00:f9:61:a6:dd:f2:db:c9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Sep 30 12:32:32 2025 GMT Not After : Sep 29 12:37:32 2026 GMT Subject: CN=9ADE83830D4E2ACD6DCF412FF4C0A5A821EC76F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:7a:32:11:fe:89:4c:7a:45:a5:f5:ed:4c: 49:2d:5c:04:6c:a0:39:d2:da:54:df:7b:2d:a7:f4: 48:24:4a:2d:66:8f:06:80:00:a6:c1:bb:14:1f:e9: fd:4f:91:77:3d:ce:98:3a:72:de:19:3c:99:ea:7e: f7:64:4b:b6:fe:79:59:57:84:45:e4:19:8e:9e:87: 9a:7c:9b:d9:98:a3:2c:ee:ff:9c:0a:68:a3:9a:cb: 59:da:24:b2:00:09:12:41:40:5f:8d:ed:61:5e:91: 46:70:ad:5a:11:e2:b3:cc:d5:01:9a:67:19:5c:fb: 2a:0b:88:46:9d:f7:9c:2d:24:97:96:6f:f2:7c:1c: 5a:88:5d:7c:f4:15:8d:83:fb:e7:87:43:17:c6:11: ef:13:6d:71:69:ef:e1:76:9d:10:62:60:0a:6b:c8: 9f:ce:ef:44:e8:1b:19:e8:18:1e:df:ef:85:7c:7d: b4:7c:10:29:82:5c:a2:ee:81:b4:c9:cc:29:61:e1: 7d:3a:e9:0b:eb:e9:4b:6e:4e:52:3f:a8:59:96:a5: 79:36:b9:e4:85:a1:21:36:56:2f:3e:be:79:35:33: 32:e3:cf:02:f2:c3:3a:dd:b8:f0:b4:2e:7f:12:05: d6:ae:88:6c:c2:b3:e0:77:8c:79:58:d2:c4:7e:61: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DE:83:83:0D:4E:2A:CD:6D:CF:41:2F:F4:C0:A5:A8:21:EC:76:F5 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a1f0::/44 Signature Algorithm: sha256WithRSAEncryption c5:46:e3:df:58:1e:e8:0c:c7:64:0c:34:be:5a:e3:74:b4:d0: bd:3c:ba:b2:20:b6:a0:23:89:5d:ae:a7:ee:6a:f2:f8:f9:76: 9b:52:74:28:b0:51:f6:a7:e1:8f:90:f9:71:ed:88:11:0a:44: 97:b1:23:cb:08:27:da:e6:ea:35:64:51:aa:30:c3:ca:37:d1: a9:ea:d5:d0:ab:a3:f1:ed:20:15:61:bb:dc:c1:34:ca:d5:dd: db:9e:ae:0b:1d:07:84:a7:67:8d:cb:5d:45:b7:f3:aa:4c:bf: 25:20:c6:e5:ea:eb:1f:cd:f2:05:66:38:58:9f:40:f1:63:c5: 21:b7:24:27:6c:de:6e:80:7d:4b:31:b2:14:0b:0d:b3:99:78: d3:7c:44:fc:f0:5e:fa:9f:cd:20:ce:e9:df:ef:1c:cf:10:52: 47:b2:6f:8b:dc:4e:09:d5:ea:7c:ca:28:26:ee:6b:7b:f7:5f: a2:2a:90:ae:44:32:9d:47:79:b7:7b:40:b5:95:e8:ed:e4:89: e0:82:d0:9d:ff:8e:11:5c:c0:60:54:cf:4c:cc:2f:5f:d3:a9: 1a:4e:65:29:61:3c:8e:9b:c8:9a:a4:8c:69:e8:ab:ce:ca:75: b7:5b:b8:2a:9e:eb:75:af:e0:b4:37:7b:c2:27:f0:c7:b8:73: 1b:d2:e2:92 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUXG9tYjSBU8Hb6VgA+WGm3fLbyQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNTA5MzAxMjMyMzJaFw0yNjA5MjkxMjM3MzJaMDMxMTAvBgNV BAMTKDlBREU4MzgzMEQ0RTJBQ0Q2RENGNDEyRkY0QzBBNUE4MjFFQzc2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZnoyEf6JTHpFpfXtTEktXARs oDnS2lTfey2n9EgkSi1mjwaAAKbBuxQf6f1PkXc9zpg6ct4ZPJnqfvdkS7b+eVlX hEXkGY6eh5p8m9mYoyzu/5wKaKOay1naJLIACRJBQF+N7WFekUZwrVoR4rPM1QGa Zxlc+yoLiEad95wtJJeWb/J8HFqIXXz0FY2D++eHQxfGEe8TbXFp7+F2nRBiYApr yJ/O70ToGxnoGB7f74V8fbR8ECmCXKLugbTJzClh4X066Qvr6UtuTlI/qFmWpXk2 ueSFoSE2Vi8+vnk1MzLjzwLywzrduPC0Ln8SBdauiGzCs+B3jHlY0sR+YWULAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUmt6Dgw1OKs1tz0Ev9MClqCHsdvUwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMxNjYzMDNhM2EyZjM0MzQyZDMxMzIzODIwM2QzZTIwMzIzMTMwMzczOTM2 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw ETAPBAIAAjAJAwcEKglUw6HwMA0GCSqGSIb3DQEBCwUAA4IBAQDFRuPfWB7oDMdk DDS+WuN0tNC9PLqyILagI4ldrqfuavL4+XabUnQosFH2p+GPkPlx7YgRCkSXsSPL CCfa5uo1ZFGqMMPKN9Gp6tXQq6Px7SAVYbvcwTTK1d3bnq4LHQeEp2eNy11Ft/Oq TL8lIMbl6usfzfIFZjhYn0DxY8UhtyQnbN5ugH1LMbIUCw2zmXjTfET88F76n80g zunf7xzPEFJHsm+L3E4J1ep8yigm7mt791+iKpCuRDKdR3m3e0C1lejt5InggtCd /44RXMBgVM9MzC9f06kaTmUpYTyOm8iapIxp6KvOynW3W7gqnut1r+C0N3vCJ/DH uHMb0uKS -----END CERTIFICATE-----Generated at Thu Oct 9 08:06:06 2025 by rpki-client