$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663430303a3a2f34342d3438203d3e20323134333434.roa File: 326130363a613030343a663430303a3a2f34342d3438203d3e20323134333434.roa (raw, json) Hash identifier: EFoQaPjlePP1+QHTmEkjEwuCYNUr6UvAZ5o4pM0d7sE= Subject key identifier: 51:E7:06:AA:5C:82:D5:86:E9:B7:22:33:EF:AC:E7:57:51:DC:6B:DD Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 39A4668499D27E47FB9037B6E85C32DFB2EF2741 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663430303a3a2f34342d3438203d3e20323134333434.roa Signing time: Tue 29 Sep 2026 17:01:41 +0000 ROA not before: Tue 29 Sep 2026 16:56:41 +0000 ROA not after: Tue 28 Sep 2027 17:01:41 +0000 asID: 214344 IP address blocks: 2a06:a004:f400::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 03:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a4:66:84:99:d2:7e:47:fb:90:37:b6:e8:5c:32:df:b2:ef:27:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Sep 29 16:56:41 2026 GMT Not After : Sep 28 17:01:41 2027 GMT Subject: CN=51E706AA5C82D586E9B72233EFACE75751DC6BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:71:49:c0:e7:34:b9:71:e0:df:62:b1:a1: 00:26:07:45:40:c2:d8:ab:30:c5:fb:9b:2b:5b:81: 8c:fa:32:d8:dc:25:76:26:db:a1:9a:e8:1c:a1:be: b2:70:c6:ef:5b:dc:da:8c:cc:03:a4:d2:e4:d4:de: 5c:a9:4b:d7:74:55:08:09:86:f4:8e:4f:b7:35:d2: db:73:63:50:48:ac:ff:45:45:dc:8e:1e:1c:1f:7f: 1c:7d:37:ea:c1:91:6b:f9:b0:18:8b:62:a4:5c:9e: 9e:f6:7e:6b:39:35:ab:15:61:ff:20:f1:4a:c5:1a: 4f:a0:2e:60:0f:bf:63:32:09:96:f7:4b:0d:ab:dd: 92:3c:d0:25:ee:18:b6:db:51:0a:91:cd:53:d3:39: be:66:89:56:a6:3c:d4:3c:4e:a0:ec:22:90:76:92: 63:65:6c:0e:a1:2e:86:0c:87:46:5b:e3:6d:50:0b: 2f:cc:29:3a:65:77:7c:54:4b:07:7e:29:f8:97:ee: 29:8a:14:77:6d:40:3e:28:8a:b4:58:cb:7e:2f:88: dd:fc:c9:4b:ab:ec:4f:bb:ea:a3:7b:52:3a:f7:28: a6:0f:6e:81:e4:72:0f:f6:42:b4:27:3c:33:64:5a: bb:7c:6b:6f:af:33:78:02:73:ca:f6:12:dc:dc:5f: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E7:06:AA:5C:82:D5:86:E9:B7:22:33:EF:AC:E7:57:51:DC:6B:DD X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a663430303a3a2f34342d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:f400::/44 Signature Algorithm: sha256WithRSAEncryption 7b:60:f4:f3:68:3a:52:31:0d:96:57:c6:e4:9b:14:ce:80:a2: 2f:5c:73:3f:dc:b0:97:cd:70:76:7d:66:9e:2b:89:be:44:de: b8:e7:30:48:6b:93:23:34:b1:dc:5b:9f:0a:9d:b9:ce:d3:c5: 57:3c:c1:38:d3:7c:58:10:a8:01:5a:69:e2:b9:24:aa:3a:ff: f1:26:2d:00:9e:94:77:58:b6:b5:3c:ff:03:6f:46:5e:f6:cf: 3b:f5:f4:f6:04:c4:f2:e4:98:4c:f3:eb:3d:e7:46:6e:12:6f: 04:69:70:b1:85:10:09:08:d2:78:8c:00:ef:62:b7:ac:7b:92: 4d:09:06:d3:b0:25:fc:4d:3f:df:5e:ae:a3:b3:45:bb:d6:a7: 0c:b2:f3:39:62:0b:fd:65:e2:da:f2:ed:53:04:95:11:c2:b5: 90:05:d3:30:c9:19:ba:fe:94:cc:24:a1:09:ea:da:0e:66:b3: 8c:14:65:e4:53:95:8a:0f:0a:dc:78:49:45:bf:34:f8:dc:cf: d3:b8:61:02:51:70:89:c2:8b:34:a0:8a:9c:43:3d:fe:c2:aa: 0a:e6:bb:46:82:81:e1:31:b9:5a:17:e3:2e:bf:c3:7f:82:45: b3:23:17:59:c8:d0:12:1e:26:1b:4d:63:57:02:6a:70:2f:57: 7e:34:61:5c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUOaRmhJnSfkf7kDe26Fwy37LvJ0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA5MjkxNjU2NDFaFw0yNzA5MjgxNzAxNDFaMDMxMTAvBgNV BAMTKDUxRTcwNkFBNUM4MkQ1ODZFOUI3MjIzM0VGQUNFNzU3NTFEQzZCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo23FJwOc0uXHg32KxoQAmB0VA wtirMMX7mytbgYz6MtjcJXYm26Ga6ByhvrJwxu9b3NqMzAOk0uTU3lypS9d0VQgJ hvSOT7c10ttzY1BIrP9FRdyOHhwffxx9N+rBkWv5sBiLYqRcnp72fms5NasVYf8g 8UrFGk+gLmAPv2MyCZb3Sw2r3ZI80CXuGLbbUQqRzVPTOb5miVamPNQ8TqDsIpB2 kmNlbA6hLoYMh0Zb421QCy/MKTpld3xUSwd+KfiX7imKFHdtQD4oirRYy34viN38 yUur7E+76qN7Ujr3KKYPboHkcg/2QrQnPDNkWrt8a2+vM3gCc8r2EtzcXx6HAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUUecGqlyC1YbptyIz76znV1Hca90wHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjM0MzAzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoGoAT0ADANBgkqhkiG9w0BAQsFAAOCAQEAe2D082g6UjENllfG 5JsUzoCiL1xzP9ywl81wdn1mniuJvkTeuOcwSGuTIzSx3FufCp25ztPFVzzBONN8 WBCoAVpp4rkkqjr/8SYtAJ6Ud1i2tTz/A29GXvbPO/X09gTE8uSYTPPrPedGbhJv BGlwsYUQCQjSeIwA72K3rHuSTQkG07Al/E0/316uo7NFu9anDLLzOWIL/WXi2vLt UwSVEcK1kAXTMMkZuv6UzCShCeraDmazjBRl5FOVig8K3HhJRb80+NzP07hhAlFw icKLNKCKnEM9/sKqCua7RoKB4TG5WhfjLr/Df4JFsyMXWcjQEh4mG01jVwJqcC9X fjRhXA== -----END CERTIFICATE-----Generated at Sun Oct 11 13:40:09 2026 by rpki-client