$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383131303a3a2f34362d313238203d3e20323135313437.roa File: 326130363a313238333a383131303a3a2f34362d313238203d3e20323135313437.roa (raw, json) Hash identifier: b6S80x2wgRrbjnz20BvYv5vIJmicPbI+oJm+svVleIg= Subject key identifier: E5:E9:FE:E1:FC:D9:CA:93:62:E6:57:F8:BD:4D:58:05:63:2A:34:68 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 6C9B2471750AE0346498B88599279B35FBA9D70A Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383131303a3a2f34362d313238203d3e20323135313437.roa Signing time: Thu 27 Aug 2026 10:51:24 +0000 ROA not before: Thu 27 Aug 2026 10:46:24 +0000 ROA not after: Thu 26 Aug 2027 10:51:24 +0000 asID: 215147 IP address blocks: 2a06:1283:8110::/46 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9b:24:71:75:0a:e0:34:64:98:b8:85:99:27:9b:35:fb:a9:d7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Aug 27 10:46:24 2026 GMT Not After : Aug 26 10:51:24 2027 GMT Subject: CN=E5E9FEE1FCD9CA9362E657F8BD4D5805632A3468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:03:68:64:e5:0e:1e:65:b4:e9:43:1d:ed: 59:c3:74:eb:ec:a4:0b:8a:e9:06:66:b5:7e:3c:4c: a6:47:94:91:3b:96:e1:b5:8b:b9:f7:56:f0:33:d0: 0a:40:58:ed:87:93:0d:1b:fb:70:8d:80:35:2d:6a: 2e:ea:47:f2:55:d9:ca:44:c9:b7:a6:60:c0:88:dc: 85:87:2a:81:c4:fc:2e:3c:42:4a:e0:34:64:da:83: 06:b3:4f:4f:b4:4e:59:62:1e:99:35:2f:0c:fe:6e: 09:42:bb:78:83:09:86:5c:5f:2d:6d:30:8b:58:cd: 44:07:83:f0:32:a7:40:26:dc:c8:7c:44:c3:af:e1: 99:2e:da:cd:67:94:b5:6d:95:37:cb:67:f3:f8:b6: 59:59:5c:85:f0:10:8e:e1:ce:30:31:c1:7e:df:76: 7e:ae:6c:b8:dd:10:19:04:1a:8d:ce:39:32:86:6f: f2:5b:fd:7e:2e:00:87:ac:8a:e9:53:80:22:51:25: 85:91:3a:ff:82:29:f7:1d:0b:12:f3:d5:d0:3f:ec: 6d:d9:10:21:ef:96:b6:ac:3e:ba:97:4c:ae:87:05: 53:4e:3a:b8:5c:c2:4a:8f:df:10:b2:4a:e4:75:e0: 65:22:4e:b9:d2:51:f4:88:d9:63:17:4c:eb:3a:6c: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:FE:E1:FC:D9:CA:93:62:E6:57:F8:BD:4D:58:05:63:2A:34:68 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383131303a3a2f34362d313238203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8110::/46 Signature Algorithm: sha256WithRSAEncryption 86:d7:97:25:4e:22:db:2c:52:93:04:90:55:72:7b:d1:5a:21: ba:08:ed:e3:7d:68:a8:ae:c5:b7:c6:43:6a:69:fb:e0:92:c2: 1e:48:01:cb:08:a4:8b:22:7e:f4:20:a1:0e:89:1d:1e:88:9b: ec:da:bc:c9:5c:d2:82:08:7c:46:0c:1c:48:c3:4e:d1:be:b1: 1b:ac:4c:06:0c:f8:fc:68:f8:3e:11:4d:1c:44:e7:e3:5a:f8: a2:b8:95:c4:7d:33:a4:4b:1a:f5:c3:3b:6c:55:4d:d9:04:cf: e2:4d:1c:19:4f:4a:41:01:c2:7b:77:bd:e1:6c:cf:c3:ff:dd: 8c:6d:f9:5e:bd:47:95:ac:1d:15:03:b5:75:f4:48:97:b8:dd: 8d:82:15:52:69:d9:37:ef:37:2d:bf:dd:2f:94:8a:c4:c3:1e: 66:8e:a1:57:39:1f:19:09:3f:ac:04:44:9a:e7:f3:eb:ce:62: de:af:90:70:b9:48:dc:b5:03:fb:54:1b:3c:01:da:11:3c:32: 53:dc:49:53:11:e4:17:8c:bc:08:e4:23:4d:0f:59:36:ca:68: 2c:5b:3e:cc:08:65:23:be:c8:08:5b:36:96:8c:f4:d9:d4:3f: 72:74:6f:f4:96:6c:2b:55:8c:6b:c8:5d:93:6a:e9:20:65:6c: 1b:8d:e1:a8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUbJskcXUK4DRkmLiFmSebNfup1wowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA4MjcxMDQ2MjRaFw0yNzA4MjYxMDUxMjRaMDMxMTAvBgNV BAMTKEU1RTlGRUUxRkNEOUNBOTM2MkU2NTdGOEJENEQ1ODA1NjMyQTM0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDANoZOUOHmW06UMd7VnDdOvs pAuK6QZmtX48TKZHlJE7luG1i7n3VvAz0ApAWO2Hkw0b+3CNgDUtai7qR/JV2cpE ybemYMCI3IWHKoHE/C48QkrgNGTagwazT0+0TlliHpk1Lwz+bglCu3iDCYZcXy1t MItYzUQHg/Ayp0Am3Mh8RMOv4Zku2s1nlLVtlTfLZ/P4tllZXIXwEI7hzjAxwX7f dn6ubLjdEBkEGo3OOTKGb/Jb/X4uAIesiulTgCJRJYWROv+CKfcdCxLz1dA/7G3Z ECHvlrasPrqXTK6HBVNOOrhcwkqP3xCySuR14GUiTrnSUfSI2WMXTOs6bN8TAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQU5en+4fzZypNi5lf4vU1YBWMqNGgwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzEzMTMwM2EzYTJmMzQzNjJkMzEzMjM4MjAzZDNlMjAz MjMxMzUzMTM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwIqBhKDgRAwDQYJKoZIhvcNAQELBQADggEB AIbXlyVOItssUpMEkFVye9FaIboI7eN9aKiuxbfGQ2pp++CSwh5IAcsIpIsifvQg oQ6JHR6Im+zavMlc0oIIfEYMHEjDTtG+sRusTAYM+Pxo+D4RTRxE5+Na+KK4lcR9 M6RLGvXDO2xVTdkEz+JNHBlPSkEBwnt3veFsz8P/3Yxt+V69R5WsHRUDtXX0SJe4 3Y2CFVJp2TfvNy2/3S+UisTDHmaOoVc5HxkJP6wERJrn8+vOYt6vkHC5SNy1A/tU GzwB2hE8MlPcSVMR5BeMvAjkI00PWTbKaCxbPswIZSO+yAhbNpaM9NnUP3J0b/SW bCtVjGvIXZNq6SBlbBuN4ag= -----END CERTIFICATE-----Generated at Sat Sep 5 01:46:38 2026 by rpki-client