$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386261303a3a2f34342d313238203d3e20323030393132.roa File: 326130363a313238333a386261303a3a2f34342d313238203d3e20323030393132.roa (raw, json) Hash identifier: 6sSU8R17DGxzkCqgx4cO2EnMf3DRyWmj2I6ZgYOPcNk= Subject key identifier: 18:FC:1F:BA:9B:3D:F1:FE:FC:D8:5F:1B:D0:F5:26:1B:6C:16:C5:D7 Certificate issuer: /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Certificate serial: 75F825F173CE1B115037264A000498F83FD95C56 Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386261303a3a2f34342d313238203d3e20323030393132.roa Signing time: Wed 18 Feb 2026 19:53:07 +0000 ROA not before: Wed 18 Feb 2026 19:48:07 +0000 ROA not after: Wed 17 Feb 2027 19:53:07 +0000 asID: 200912 IP address blocks: 2a06:1283:8ba0::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Feb 2026 05:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f8:25:f1:73:ce:1b:11:50:37:26:4a:00:04:98:f8:3f:d9:5c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Validity Not Before: Feb 18 19:48:07 2026 GMT Not After : Feb 17 19:53:07 2027 GMT Subject: CN=18FC1FBA9B3DF1FEFCD85F1BD0F5261B6C16C5D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:9d:05:c9:e3:9d:24:ab:33:b5:3a:1d:7d: ca:cd:ae:44:b0:49:f9:be:69:ac:41:65:ac:35:f9: bb:af:ee:68:8a:3b:35:8d:fc:15:b3:7d:2d:5d:95: 90:29:b2:4c:80:5c:96:8a:02:91:eb:95:ae:53:fa: 26:a5:ce:79:45:04:1c:e5:45:eb:66:6c:98:91:4d: 1a:c9:65:77:b2:41:f0:96:80:0f:15:3b:be:57:e5: 99:78:62:cd:8f:41:b0:9b:6b:7d:a4:83:8e:44:22: 59:0e:c1:a7:34:1a:9c:eb:19:01:c0:51:f6:01:98: c3:72:9b:09:0e:5e:7e:4a:45:c6:c0:45:7c:1c:e0: c6:0b:b8:ff:93:dc:d0:52:65:c8:2d:90:60:82:eb: bb:85:ac:a3:b1:60:40:a6:e4:52:fc:19:ba:fc:29: 4d:7c:cc:89:a7:9c:bb:40:0e:19:bb:66:4b:46:e5: 95:0d:5a:2d:4f:80:59:6b:86:5f:f1:8a:0f:a2:58: 33:c7:fa:00:91:3e:22:11:7b:97:e7:47:d2:81:19: 9d:d2:90:07:83:b3:a3:63:a1:23:7d:2d:82:c1:69: d5:34:aa:4a:3d:a2:f4:ad:47:f8:01:0d:61:c7:7a: fa:8f:2a:38:26:c2:e6:31:95:69:37:c3:8d:f0:42: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FC:1F:BA:9B:3D:F1:FE:FC:D8:5F:1B:D0:F5:26:1B:6C:16:C5:D7 X509v3 Authority Key Identifier: keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386261303a3a2f34342d313238203d3e20323030393132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8ba0::/44 Signature Algorithm: sha256WithRSAEncryption 2e:65:6f:11:cd:2b:54:c9:3f:c3:1a:8a:1a:bb:ce:62:4c:3a: a4:83:d5:66:13:e6:90:8a:c5:eb:3b:16:dd:e1:c1:fb:de:0e: bd:5c:1b:a2:d5:da:f9:e8:12:66:9c:4b:d2:09:e6:be:f8:74: 09:43:3f:45:64:6b:a3:90:02:83:83:c7:16:9b:ca:76:34:43: 4e:e4:df:07:7f:ba:30:2a:b2:bc:5e:4f:25:bf:c2:ba:09:d4: 58:7a:92:32:19:4b:3d:55:29:b0:f8:cd:c1:06:5c:3b:ac:87: fc:b2:1a:29:7c:e0:9a:09:0a:57:6c:33:64:0f:07:5a:fa:1f: ff:b9:7a:fc:83:8b:01:b3:25:a1:aa:0e:d4:85:81:68:39:b2: 12:0f:09:98:ac:a9:1f:44:c7:01:47:fc:23:69:5b:b8:de:26: 29:28:67:d8:e6:ec:96:68:60:38:ff:43:23:9d:ae:35:04:ba: 2d:cd:d7:3c:fc:3e:69:84:68:56:93:e7:1a:f3:55:7d:8f:98: 62:6a:ee:3e:65:06:8d:84:14:73:fc:3c:0d:3c:5c:fe:f2:0b: 56:23:70:69:bc:55:1a:9d:c2:8b:32:0c:e7:64:59:e7:2e:b7: 44:58:ff:bb:45:5c:d9:21:4f:74:84:af:26:47:7d:e5:01:8b: b1:e5:85:df -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUdfgl8XPOGxFQNyZKAASY+D/ZXFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVC QTgzMEUwNzAeFw0yNjAyMTgxOTQ4MDdaFw0yNzAyMTcxOTUzMDdaMDMxMTAvBgNV BAMTKDE4RkMxRkJBOUIzREYxRkVGQ0Q4NUYxQkQwRjUyNjFCNkMxNkM1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUp0FyeOdJKsztTodfcrNrkSw Sfm+aaxBZaw1+buv7miKOzWN/BWzfS1dlZApskyAXJaKApHrla5T+ialznlFBBzl RetmbJiRTRrJZXeyQfCWgA8VO75X5Zl4Ys2PQbCba32kg45EIlkOwac0GpzrGQHA UfYBmMNymwkOXn5KRcbARXwc4MYLuP+T3NBSZcgtkGCC67uFrKOxYECm5FL8Gbr8 KU18zImnnLtADhm7ZktG5ZUNWi1PgFlrhl/xig+iWDPH+gCRPiIRe5fnR9KBGZ3S kAeDs6NjoSN9LYLBadU0qko9ovStR/gBDWHHevqPKjgmwuYxlWk3w43wQuCDAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUGPwfups98f782F8b0PUmG2wWxdcwHwYDVR0j BBgwFoAUsROzHp8BovQYcOjHdJKxjrqDDgcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzIvQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVCQTgzMEUwNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9CMTEzQjMxRTlGMDFBMkY0MTg3MEU4Qzc3 NDkyQjE4RUJBODMwRTA3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83NzlhNzkwMy0yZWRiLTQ4YWQtYWJlYi1lZTM5YTc5Zjg1MDcvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjI2MTMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAz MjMwMzAzOTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBhKDi6AwDQYJKoZIhvcNAQELBQADggEB AC5lbxHNK1TJP8Maihq7zmJMOqSD1WYT5pCKxes7Ft3hwfveDr1cG6LV2vnoEmac S9IJ5r74dAlDP0Vka6OQAoODxxabynY0Q07k3wd/ujAqsrxeTyW/wroJ1Fh6kjIZ Sz1VKbD4zcEGXDush/yyGil84JoJCldsM2QPB1r6H/+5evyDiwGzJaGqDtSFgWg5 shIPCZisqR9ExwFH/CNpW7jeJikoZ9jm7JZoYDj/QyOdrjUEui3N1zz8PmmEaFaT 5xrzVX2PmGJq7j5lBo2EFHP8PA08XP7yC1YjcGm8VRqdwosyDOdkWecut0RY/7tF XNkhT3SEryZHfeUBi7Hlhd8= -----END CERTIFICATE-----Generated at Mon Feb 23 14:34:13 2026 by rpki-client