$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a3130303a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a3130303a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: 1XO6BaxJAehfczsdJQ8Rzbbou7d39qHfdDB4qDEUpn8= Subject key identifier: 6B:0C:5B:69:D8:DB:5D:E1:F7:A7:69:7D:C9:B2:46:EA:53:3C:57:12 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 7D2523111921D9496E679C80A1A4DEFFBD343724 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a3130303a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 21 Aug 2026 05:58:24 +0000 ROA not before: Fri 21 Aug 2026 05:53:24 +0000 ROA not after: Fri 20 Aug 2027 05:58:24 +0000 asID: 214344 IP address blocks: 2a06:a004:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:25:23:11:19:21:d9:49:6e:67:9c:80:a1:a4:de:ff:bd:34:37:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 21 05:53:24 2026 GMT Not After : Aug 20 05:58:24 2027 GMT Subject: CN=6B0C5B69D8DB5DE1F7A7697DC9B246EA533C5712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:a2:16:bf:b9:cf:cf:ea:6f:b8:1f:a4:de: 76:25:48:a4:ee:98:c6:ed:a3:9f:fc:d2:d8:81:4d: 5c:b1:ca:bd:f5:c9:47:b2:d8:0f:bb:3a:07:7a:96: 8d:b0:f8:12:bf:d1:7e:81:84:cf:fe:00:39:bf:c4: 44:7d:b8:02:97:57:49:6b:53:d7:b6:e0:46:21:6b: 1d:e7:0a:ae:fd:7c:5b:8e:a3:ff:ae:91:df:4d:1d: 6d:61:df:ea:66:e8:d3:b4:85:fe:e6:16:62:b8:62: a9:2c:70:a2:51:0a:32:95:19:d2:87:1c:99:de:5f: 6e:a0:20:a2:47:a8:74:b9:91:e9:7f:f4:82:3a:c4: 75:3b:e4:7b:23:35:c2:1e:c1:c5:9e:d3:d9:eb:c5: 2b:43:39:46:f5:a7:86:9d:12:99:39:7d:f8:b3:ea: a5:a8:d9:33:22:b5:15:6d:c8:dd:9b:5d:14:87:30: 6c:c2:89:18:63:4b:8d:63:25:31:26:0e:d3:7d:6e: 45:57:d3:28:6d:af:3b:83:4b:e0:ed:96:cc:c1:43: 85:09:f8:93:1c:fc:3e:66:f8:be:28:9e:fd:7d:10: 5a:df:6c:49:43:54:50:b0:94:05:10:ab:be:fb:4d: 3a:a0:46:e2:9f:4e:ed:81:57:6b:bc:17:bf:95:4f: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0C:5B:69:D8:DB:5D:E1:F7:A7:69:7D:C9:B2:46:EA:53:3C:57:12 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a3130303a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:100::/48 Signature Algorithm: sha256WithRSAEncryption 2d:59:5d:17:62:a1:26:8c:29:c7:4d:d5:60:50:d5:d2:c0:8d: 72:f8:f9:25:7b:aa:a3:e7:07:14:19:70:2e:05:46:4d:7c:a2: b7:14:57:99:9b:28:6a:ee:21:15:6d:a0:c9:07:5f:99:22:fc: d6:9d:1f:93:d6:a0:a4:71:44:68:55:60:4e:68:6f:04:91:26: e8:12:5d:8b:99:95:67:67:6f:e9:d1:3d:dc:34:4c:06:53:27: f9:72:c8:82:b4:3f:ea:64:cb:01:86:86:d3:2d:fb:98:35:6e: 55:a3:c6:45:7a:f8:12:fd:4e:c1:d3:d5:7e:0d:48:c2:f3:b2: 68:f2:68:fa:a8:4e:2b:3b:b3:f5:cc:d8:7f:22:ef:ef:1c:56: 6e:c7:1e:69:8e:44:b4:29:a0:21:e2:77:ea:06:7c:5a:72:6a: ab:8c:8b:a1:1e:fc:2a:c7:f3:a4:97:f6:6b:67:96:c8:63:41: bf:0b:fd:7b:88:6c:0b:fc:91:f8:71:df:7c:28:58:51:2d:98: c1:a4:fb:51:d4:8d:8f:07:0e:a5:59:11:b0:21:96:72:fc:0d: 39:3a:2d:cc:7d:d5:32:fb:82:48:2d:56:b6:d7:32:4d:b5:8e: 1c:c9:b7:8f:d9:7e:5c:3c:09:03:fc:09:b3:61:15:fb:3f:10: df:04:c3:37 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfSUjERkh2UluZ5yAoaTe/700NyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjEwNTUzMjRaFw0yNzA4MjAwNTU4MjRaMDMxMTAvBgNV BAMTKDZCMEM1QjY5RDhEQjVERTFGN0E3Njk3REM5QjI0NkVBNTMzQzU3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+qIWv7nPz+pvuB+k3nYlSKTu mMbto5/80tiBTVyxyr31yUey2A+7Ogd6lo2w+BK/0X6BhM/+ADm/xER9uAKXV0lr U9e24EYhax3nCq79fFuOo/+ukd9NHW1h3+pm6NO0hf7mFmK4YqkscKJRCjKVGdKH HJneX26gIKJHqHS5kel/9II6xHU75HsjNcIewcWe09nrxStDOUb1p4adEpk5ffiz 6qWo2TMitRVtyN2bXRSHMGzCiRhjS41jJTEmDtN9bkVX0yhtrzuDS+DtlszBQ4UJ +JMc/D5m+L4onv19EFrfbElDVFCwlAUQq777TTqgRuKfTu2BV2u8F7+VT5pPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUawxbadjbXeH3p2l9ybJG6lM8VxIwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2EzMTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzMzM0MzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqBqAEAQAwDQYJKoZIhvcNAQELBQADggEBAC1ZXRdioSaMKcdN1WBQ 1dLAjXL4+SV7qqPnBxQZcC4FRk18orcUV5mbKGruIRVtoMkHX5ki/NadH5PWoKRx RGhVYE5obwSRJugSXYuZlWdnb+nRPdw0TAZTJ/lyyIK0P+pkywGGhtMt+5g1blWj xkV6+BL9TsHT1X4NSMLzsmjyaPqoTis7s/XM2H8i7+8cVm7HHmmORLQpoCHid+oG fFpyaquMi6Ee/CrH86SX9mtnlshjQb8L/XuIbAv8kfhx33woWFEtmMGk+1HUjY8H DqVZEbAhlnL8DTk6Lcx91TL7gkgtVrbXMk21jhzJt4/Zflw8CQP8CbNhFfs/EN8E wzc= -----END CERTIFICATE-----Generated at Wed Aug 26 00:53:12 2026 by rpki-client