$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a323030303a3a2f34302d3438203d3e20323134333434.roa File: 326130363a613030343a323030303a3a2f34302d3438203d3e20323134333434.roa (raw, json) Hash identifier: 1D8X9kxUUskGkFIPDvUqS1a+r1AGrrO/CIdMtju/AtY= Subject key identifier: E5:74:45:16:78:2C:A5:A0:76:F0:74:59:C0:2B:1A:77:93:CA:14:6D Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 4E70EE90ADFA7266E9135D28CCFE98C1914D586A Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a323030303a3a2f34302d3438203d3e20323134333434.roa Signing time: Fri 21 Aug 2026 05:58:54 +0000 ROA not before: Fri 21 Aug 2026 05:53:54 +0000 ROA not after: Fri 20 Aug 2027 05:58:54 +0000 asID: 214344 IP address blocks: 2a06:a004:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:70:ee:90:ad:fa:72:66:e9:13:5d:28:cc:fe:98:c1:91:4d:58:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 21 05:53:54 2026 GMT Not After : Aug 20 05:58:54 2027 GMT Subject: CN=E5744516782CA5A076F07459C02B1A7793CA146D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:7c:d3:d7:54:e4:5f:af:1a:63:a7:40:c0: 7a:cd:43:52:09:b8:7b:ed:35:64:80:03:98:33:cc: aa:6a:03:04:e3:7b:cc:80:62:00:77:34:98:a6:75: ec:6f:09:fc:6a:ab:4f:6c:e7:30:18:55:f2:9c:c6: ff:f6:7b:0d:fb:b1:9c:ca:a7:8e:27:b1:af:19:bd: a4:92:7b:d7:b4:df:1f:13:59:0a:cb:2e:b9:1b:60: 9f:dd:43:32:10:b8:cb:1a:04:85:e4:26:2e:35:78: 2f:2d:b2:9c:0f:ce:59:da:74:20:e7:d5:85:5b:5b: 8f:6f:43:a8:46:23:3d:51:14:d7:cf:34:37:d8:3c: ba:80:a2:02:fe:3b:a2:f8:e8:1e:45:46:37:3d:8e: 60:97:12:6d:6e:03:ed:34:d7:3f:a4:b4:d4:82:1c: bd:ed:92:30:48:cb:f1:6d:45:13:2a:61:f7:e1:10: 3d:6e:a7:16:4c:a3:24:24:ff:c9:5e:83:0f:09:f4: 97:58:2b:b7:46:87:e6:67:39:f4:0e:20:93:9b:ed: ad:9c:83:4b:50:cc:99:ca:af:55:a5:11:89:18:31: 2a:25:fe:08:fa:63:ee:33:3d:c3:cd:16:17:83:d7: b3:04:01:ae:83:4e:a7:89:3e:80:9f:00:36:c0:ac: cd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:45:16:78:2C:A5:A0:76:F0:74:59:C0:2B:1A:77:93:CA:14:6D X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a323030303a3a2f34302d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:2000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:1f:98:fd:4b:c1:e1:93:d4:0e:06:35:63:ed:0e:54:6d:45: 96:37:e4:f0:ec:3b:1a:ff:89:30:3a:b0:69:44:a5:cb:2e:ed: c0:90:4e:01:a5:12:e9:7d:7e:2e:0f:59:08:ca:36:b5:b6:ad: 7b:45:78:39:f6:84:a4:3e:44:f4:8c:c2:f2:4e:0d:12:83:6f: 99:1c:6f:d6:dd:08:3d:28:40:c5:01:e0:53:90:c8:6d:32:3a: 4f:7b:b0:c0:1f:7f:f4:ed:77:ae:21:5a:9b:2c:d5:f2:98:01: 6b:a7:1a:a7:02:82:f7:e6:84:ff:2b:c8:1a:13:be:d9:bd:d7: b3:4c:bb:1d:f2:df:56:6e:c0:05:bf:a4:81:66:f8:4d:91:41: 8a:3f:a0:93:db:23:aa:1a:6a:8d:9d:33:e3:11:8c:b7:0a:62: 0e:ca:43:ac:73:3a:61:cf:53:e9:61:33:ac:45:db:5f:53:20: 92:db:71:5a:8d:b9:2b:ad:af:1e:0e:c7:c1:4f:e1:0e:6a:bc: 75:94:bf:6a:41:c0:f3:d6:98:51:9a:44:95:ab:dc:57:2e:16: 7c:79:69:bf:90:88:b2:dd:2c:b2:52:bd:89:e6:4c:36:3c:89: 48:24:e2:f9:84:0d:9c:30:63:55:a2:1d:0c:30:2d:3f:f2:3a: 86:8c:7e:f8 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUTnDukK36cmbpE10ozP6YwZFNWGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjEwNTUzNTRaFw0yNzA4MjAwNTU4NTRaMDMxMTAvBgNV BAMTKEU1NzQ0NTE2NzgyQ0E1QTA3NkYwNzQ1OUMwMkIxQTc3OTNDQTE0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChbXzT11TkX68aY6dAwHrNQ1IJ uHvtNWSAA5gzzKpqAwTje8yAYgB3NJimdexvCfxqq09s5zAYVfKcxv/2ew37sZzK p44nsa8ZvaSSe9e03x8TWQrLLrkbYJ/dQzIQuMsaBIXkJi41eC8tspwPzlnadCDn 1YVbW49vQ6hGIz1RFNfPNDfYPLqAogL+O6L46B5FRjc9jmCXEm1uA+001z+ktNSC HL3tkjBIy/FtRRMqYffhED1upxZMoyQk/8legw8J9JdYK7dGh+ZnOfQOIJOb7a2c g0tQzJnKr1WlEYkYMSol/gj6Y+4zPcPNFheD17MEAa6DTqeJPoCfADbArM0FAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU5XRFFngspaB28HRZwCsad5PKFG0wHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoGoAQgMA0GCSqGSIb3DQEBCwUAA4IBAQB+H5j9S8Hhk9QOBjVj 7Q5UbUWWN+Tw7Dsa/4kwOrBpRKXLLu3AkE4BpRLpfX4uD1kIyja1tq17RXg59oSk PkT0jMLyTg0Sg2+ZHG/W3Qg9KEDFAeBTkMhtMjpPe7DAH3/07XeuIVqbLNXymAFr pxqnAoL35oT/K8gaE77ZvdezTLsd8t9WbsAFv6SBZvhNkUGKP6CT2yOqGmqNnTPj EYy3CmIOykOsczphz1PpYTOsRdtfUyCS23Fajbkrra8eDsfBT+EOarx1lL9qQcDz 1phRmkSVq9xXLhZ8eWm/kIiy3SyyUr2J5kw2PIlIJOL5hA2cMGNVoh0MMC0/8jqG jH74 -----END CERTIFICATE-----Generated at Tue Aug 25 16:37:39 2026 by rpki-client