$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930663a3a2f34382d3438203d3e20313939373436.roa File: 326130363a313238333a383930663a3a2f34382d3438203d3e20313939373436.roa (raw, json) Hash identifier: NdRpxneoxRH9mvb/aPC98BHveBMQVjWm0oFaNOGGnkI= Subject key identifier: D8:19:C7:07:28:5D:EB:B5:75:2D:2D:11:16:2B:76:E1:D3:01:D8:A0 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 484F9BAAA00F620011D6217FF8F6BE6A13ADD52C Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930663a3a2f34382d3438203d3e20313939373436.roa Signing time: Fri 28 Aug 2026 13:44:22 +0000 ROA not before: Fri 28 Aug 2026 13:39:22 +0000 ROA not after: Fri 27 Aug 2027 13:44:22 +0000 asID: 199746 IP address blocks: 2a06:1283:890f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4f:9b:aa:a0:0f:62:00:11:d6:21:7f:f8:f6:be:6a:13:ad:d5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Aug 28 13:39:22 2026 GMT Not After : Aug 27 13:44:22 2027 GMT Subject: CN=D819C707285DEBB5752D2D11162B76E1D301D8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:1b:9c:fd:db:fa:c9:cd:19:5c:28:ec:fa: b3:d8:5f:f1:28:c9:a1:d5:01:d1:c0:bd:39:5c:a4: f6:be:b6:4b:b6:58:75:63:94:3c:f7:17:4e:51:30: 10:41:83:1c:81:89:41:9f:cf:43:03:24:43:85:d6: c7:66:35:00:a9:13:63:44:0f:e1:22:51:6d:27:14: 97:0b:83:80:5c:96:69:bf:09:9d:55:13:8b:c2:5c: 7e:54:1c:c0:51:8d:f5:59:a2:fc:0d:28:1a:1d:83: b2:55:a2:04:91:06:22:fd:49:45:9a:66:5d:8e:53: ce:03:46:d7:85:48:58:b3:f5:45:c7:81:85:d2:66: 07:0f:ae:e3:dd:b3:6a:37:b0:a8:ea:21:90:49:d0: 02:86:37:f3:8b:08:bc:da:65:fa:c6:3f:bd:23:65: e5:14:1d:ef:ca:b0:52:df:3c:73:49:eb:51:db:a6: 06:e4:46:d1:63:7c:0e:bc:8f:6f:16:1f:ac:ff:34: 05:c3:b9:52:d4:30:05:2e:b2:0d:24:53:f7:9f:23: 1a:28:41:5f:3e:3b:64:f8:f3:2e:d7:3d:1b:cb:1b: 6c:2b:92:c4:43:61:98:34:3a:8f:98:30:2b:98:b9: c9:10:33:59:09:e9:8b:bf:ce:f6:37:6d:47:74:31: d8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:C7:07:28:5D:EB:B5:75:2D:2D:11:16:2B:76:E1:D3:01:D8:A0 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930663a3a2f34382d3438203d3e20313939373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:890f::/48 Signature Algorithm: sha256WithRSAEncryption 0a:4e:d8:42:56:a7:2f:5a:1a:66:6e:7f:61:43:7d:d4:93:a0: ea:2c:fd:b5:bf:74:04:90:46:c4:32:46:dd:0a:b1:e7:5a:98: c3:c2:bb:99:b9:fd:bd:75:29:93:13:be:8a:c1:9b:fd:dc:c9: db:af:a6:85:e2:bb:5d:87:15:cf:2c:5d:e6:b8:c1:8d:22:2a: c4:db:37:f9:9d:4a:13:23:48:16:46:64:dd:b5:fa:f6:3d:1e: 42:fa:02:fc:50:a9:be:af:21:03:b6:b0:fd:8c:57:8f:18:c0: 72:7d:a8:ca:c9:9b:0f:13:83:77:b0:8f:81:28:1c:97:5f:58: 4b:6e:60:c9:9a:52:bc:a0:7a:2c:33:e9:64:62:33:af:81:07: 04:e5:dd:ce:02:2a:ce:b2:c2:4c:19:82:11:6e:60:12:b3:ec: 1f:79:0a:5c:28:41:c4:46:06:9b:c7:eb:b6:90:14:0f:70:1f: cd:cb:53:65:ce:86:32:cd:c3:7e:08:2c:49:7f:2a:b1:a9:a3: 8a:47:3d:3c:04:8d:ab:ee:5e:9d:b8:ee:fb:4e:96:4e:22:62: 08:b7:d4:d9:e5:a0:8f:f9:71:72:37:51:fd:5d:cd:7d:46:b1: 27:9f:f3:31:09:a4:6d:5d:f7:29:77:65:6e:14:b1:07:13:59: 95:56:0d:c0 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSE+bqqAPYgAR1iF/+Pa+ahOt1SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA4MjgxMzM5MjJaFw0yNzA4MjcxMzQ0MjJaMDMxMTAvBgNV BAMTKEQ4MTlDNzA3Mjg1REVCQjU3NTJEMkQxMTE2MkI3NkUxRDMwMUQ4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLARuc/dv6yc0ZXCjs+rPYX/Eo yaHVAdHAvTlcpPa+tku2WHVjlDz3F05RMBBBgxyBiUGfz0MDJEOF1sdmNQCpE2NE D+EiUW0nFJcLg4Bclmm/CZ1VE4vCXH5UHMBRjfVZovwNKBodg7JVogSRBiL9SUWa Zl2OU84DRteFSFiz9UXHgYXSZgcPruPds2o3sKjqIZBJ0AKGN/OLCLzaZfrGP70j ZeUUHe/KsFLfPHNJ61HbpgbkRtFjfA68j28WH6z/NAXDuVLUMAUusg0kU/efIxoo QV8+O2T48y7XPRvLG2wrksRDYZg0Oo+YMCuYuckQM1kJ6Yu/zvY3bUd0MdibAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU2BnHByhd67V1LS0RFit24dMB2KAwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz OTM5MzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kPMA0GCSqGSIb3DQEBCwUAA4IBAQAK TthCVqcvWhpmbn9hQ33Uk6DqLP21v3QEkEbEMkbdCrHnWpjDwruZuf29dSmTE76K wZv93Mnbr6aF4rtdhxXPLF3muMGNIirE2zf5nUoTI0gWRmTdtfr2PR5C+gL8UKm+ ryEDtrD9jFePGMByfajKyZsPE4N3sI+BKByXX1hLbmDJmlK8oHosM+lkYjOvgQcE 5d3OAirOssJMGYIRbmASs+wfeQpcKEHERgabx+u2kBQPcB/Ny1NlzoYyzcN+CCxJ fyqxqaOKRz08BI2r7l6duO77TpZOImIIt9TZ5aCP+XFyN1H9Xc19RrEnn/MxCaRt Xfcpd2VuFLEHE1mVVg3A -----END CERTIFICATE-----Generated at Sat Sep 5 00:44:57 2026 by rpki-client