$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931633a3a2f34382d3438203d3e20313939373436.roa File: 326130363a313238333a383931633a3a2f34382d3438203d3e20313939373436.roa (raw, json) Hash identifier: WAUwk9UDJ//j/O8tPAaLlkjsuNkNbYkZrdWDvqDf8NM= Subject key identifier: 3B:6C:AC:D5:1A:21:CA:7A:E3:AE:4B:E1:E7:FD:6A:2E:A0:EF:E4:B1 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 7B7D484696CD017B666DA6386E03C567AFDE082B Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931633a3a2f34382d3438203d3e20313939373436.roa Signing time: Mon 24 Aug 2026 17:56:02 +0000 ROA not before: Mon 24 Aug 2026 17:51:02 +0000 ROA not after: Mon 23 Aug 2027 17:56:02 +0000 asID: 199746 IP address blocks: 2a06:1283:891c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7d:48:46:96:cd:01:7b:66:6d:a6:38:6e:03:c5:67:af:de:08:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Aug 24 17:51:02 2026 GMT Not After : Aug 23 17:56:02 2027 GMT Subject: CN=3B6CACD51A21CA7AE3AE4BE1E7FD6A2EA0EFE4B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:26:9b:9f:1d:f1:60:12:10:01:95:8c:32: c6:f8:42:ac:43:7e:dc:fa:f2:dd:ba:d8:ca:2e:cf: 5a:c6:4d:c8:46:c4:37:51:37:19:cd:7b:ce:ab:83: 82:e7:3f:55:cf:1d:0f:3a:72:9b:30:87:d3:5c:1e: 0a:e1:93:7e:0f:cf:89:c7:b9:0f:0e:c3:57:04:84: d4:b9:38:a4:f0:d5:dd:35:4e:2c:8f:15:f0:52:df: c8:61:e1:80:93:32:03:24:d8:3d:dd:1c:7a:f5:bd: 28:26:16:5d:34:ee:35:d5:0e:b1:fc:16:4e:de:79: 19:9e:de:60:2a:ca:ce:bf:73:97:ac:6a:fb:3f:7a: 2a:48:f3:46:06:26:d0:14:7a:95:1b:75:2c:ac:47: eb:19:1f:e3:8c:45:59:fe:18:59:92:9a:1d:b6:8b: b7:73:43:a5:b9:11:ab:7d:df:62:21:c7:d7:86:02: 10:58:e8:42:40:4c:ff:02:2c:61:4a:ea:71:04:2a: 10:04:9b:6d:9a:5d:a5:c5:e3:bd:53:13:fa:8e:09: 99:ad:54:05:13:87:6d:d9:20:47:1a:7d:f0:b1:f6: ea:87:b2:0b:aa:b7:f6:d8:f4:40:2c:c6:7d:0e:70: e1:d3:ec:48:3c:b6:19:bd:38:ce:65:c5:3d:77:6f: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6C:AC:D5:1A:21:CA:7A:E3:AE:4B:E1:E7:FD:6A:2E:A0:EF:E4:B1 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931633a3a2f34382d3438203d3e20313939373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:891c::/48 Signature Algorithm: sha256WithRSAEncryption 5b:4d:31:a9:46:4e:1d:9f:e5:07:f5:dc:a1:02:d2:cf:90:bf: c3:5f:0a:d3:a4:ef:1b:cb:37:00:c1:37:33:e5:f7:22:a4:48: 90:0e:a1:42:63:c0:61:a1:f1:37:9a:c0:92:f9:dd:6c:ae:2e: 77:91:17:6f:71:68:40:53:be:5d:b0:27:4e:7c:d5:db:ae:a4: 85:79:b6:6c:f9:e8:86:1c:a2:fb:25:ab:8a:d8:7d:4e:d4:31: ab:96:fa:7b:5b:23:7c:53:8f:af:43:d6:28:8f:02:b5:f0:63: 52:a1:2c:1e:29:13:35:f9:32:71:56:06:e3:df:c7:7e:4f:29: fa:e9:f9:83:8e:a4:c9:80:de:a8:ba:5b:4e:16:50:26:67:b2: ea:62:d5:e4:07:b2:51:ef:7b:4d:3c:92:35:b1:77:8e:32:cd: 09:d1:84:e0:90:1f:cb:9f:83:99:03:bc:36:61:e5:79:22:4f: 6d:cd:09:37:19:11:f3:63:ef:21:72:60:5c:e0:66:99:09:8f: 07:96:48:4b:36:ec:bc:fe:e8:14:57:49:0a:00:f3:66:7c:af: d8:da:9b:f8:bf:ed:d4:26:e8:5b:73:1e:65:6f:90:f5:9e:79: 46:c6:b2:9e:91:97:21:0b:0d:c9:b4:dd:f8:e4:0f:ba:ea:09: 37:34:04:15 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUe31IRpbNAXtmbaY4bgPFZ6/eCCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA4MjQxNzUxMDJaFw0yNzA4MjMxNzU2MDJaMDMxMTAvBgNV BAMTKDNCNkNBQ0Q1MUEyMUNBN0FFM0FFNEJFMUU3RkQ2QTJFQTBFRkU0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4Cabnx3xYBIQAZWMMsb4QqxD ftz68t262Mouz1rGTchGxDdRNxnNe86rg4LnP1XPHQ86cpswh9NcHgrhk34Pz4nH uQ8Ow1cEhNS5OKTw1d01TiyPFfBS38hh4YCTMgMk2D3dHHr1vSgmFl007jXVDrH8 Fk7eeRme3mAqys6/c5esavs/eipI80YGJtAUepUbdSysR+sZH+OMRVn+GFmSmh22 i7dzQ6W5Eat932Ihx9eGAhBY6EJATP8CLGFK6nEEKhAEm22aXaXF471TE/qOCZmt VAUTh23ZIEcaffCx9uqHsguqt/bY9EAsxn0OcOHT7Eg8thm9OM5lxT13b2vRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUO2ys1Rohynrjrkvh5/1qLqDv5LEwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz OTM5MzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kcMA0GCSqGSIb3DQEBCwUAA4IBAQBb TTGpRk4dn+UH9dyhAtLPkL/DXwrTpO8byzcAwTcz5fcipEiQDqFCY8BhofE3msCS +d1sri53kRdvcWhAU75dsCdOfNXbrqSFebZs+eiGHKL7JauK2H1O1DGrlvp7WyN8 U4+vQ9YojwK18GNSoSweKRM1+TJxVgbj38d+Tyn66fmDjqTJgN6oultOFlAmZ7Lq YtXkB7JR73tNPJI1sXeOMs0J0YTgkB/Ln4OZA7w2YeV5Ik9tzQk3GRHzY+8hcmBc 4GaZCY8HlkhLNuy8/ugUV0kKAPNmfK/Y2pv4v+3UJuhbcx5lb5D1nnlGxrKekZch Cw3JtN345A+66gk3NAQV -----END CERTIFICATE-----Generated at Sat Sep 5 00:45:45 2026 by rpki-client