$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630303a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666630303a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: Imul87Q0laBEeGR6b4JgXOeVMgCJd+ACSUs3lfjQcHw= Subject key identifier: 78:4A:B1:5D:ED:D6:92:6C:AF:21:25:BE:66:86:64:21:1E:12:A0:A4 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 2990305107B91EA5280412B1A0B5B63811CB9BB4 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630303a3a2f34382d3438203d3e20323134333434.roa Signing time: Tue 25 Aug 2026 11:03:47 +0000 ROA not before: Tue 25 Aug 2026 10:58:47 +0000 ROA not after: Tue 24 Aug 2027 11:03:47 +0000 asID: 214344 IP address blocks: 2a06:a004:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:90:30:51:07:b9:1e:a5:28:04:12:b1:a0:b5:b6:38:11:cb:9b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 25 10:58:47 2026 GMT Not After : Aug 24 11:03:47 2027 GMT Subject: CN=784AB15DEDD6926CAF2125BE668664211E12A0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:54:1b:c7:e0:39:19:df:69:a4:c7:85:37: fc:3b:21:87:10:d3:57:19:26:15:2b:70:46:d6:0e: f2:20:9e:76:54:14:be:14:3d:da:61:6d:94:b4:4f: b6:57:27:1f:71:59:e9:61:87:c8:47:86:b7:8e:af: 95:38:1c:a3:b1:0a:4d:31:f2:47:34:93:06:7f:67: 93:5a:85:18:57:0f:9b:02:fe:f0:33:f9:da:d1:2e: c9:36:d4:09:fa:0c:25:5b:0c:cb:5a:93:4d:5b:7e: 61:3c:f7:0b:47:54:ac:7d:85:62:de:9b:71:17:2b: b5:56:20:a9:74:f6:37:c8:f6:79:64:e5:5e:21:e0: 69:84:2c:4e:04:2d:42:7c:14:12:c3:d1:cc:c5:17: 54:8f:0c:7e:85:0a:c1:21:c1:0d:af:be:84:80:df: eb:0b:36:ce:4e:9e:20:fb:54:76:94:c2:6f:49:0f: 13:a5:07:8d:3d:43:5e:e8:d2:86:0a:13:d9:d8:48: 33:b3:35:64:61:c7:39:b0:4c:d3:ba:b3:81:0c:d1: 7a:d2:d5:9b:f9:61:10:fe:9c:37:1a:58:e9:40:a8: d0:db:c4:3e:ad:86:de:c9:f1:37:59:cd:a1:35:9b: c4:d8:e1:f7:7c:a2:8e:73:f5:b0:ea:d6:f8:0a:b7: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:B1:5D:ED:D6:92:6C:AF:21:25:BE:66:86:64:21:1E:12:A0:A4 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630303a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ff00::/48 Signature Algorithm: sha256WithRSAEncryption be:41:3b:a5:e5:88:34:f2:12:12:71:09:65:c4:3a:e6:cc:a8: 66:aa:16:41:0a:d3:20:5a:e9:db:0b:64:93:f2:f1:c3:e4:6a: 77:d5:1e:e4:d5:2d:a7:3e:2b:4f:41:89:7e:92:21:41:66:9a: 65:57:8b:62:04:87:4b:c2:ae:51:fe:3c:49:c1:b2:64:bc:34: 40:5c:38:45:51:ad:c9:44:50:d3:dd:68:97:d2:a0:de:c8:ee: 5a:e5:d2:ae:4f:90:da:9f:16:12:28:ce:74:05:03:7c:e0:6d: f1:cf:89:27:ae:37:cb:1f:4d:8a:55:95:c1:c6:d6:58:53:23: 70:a1:92:98:89:d8:ef:fe:d2:c1:87:60:1c:ee:2f:5d:ef:a0: 17:2b:43:c0:7d:59:b9:f8:1a:2d:61:92:e6:0c:af:cd:a9:ab: ea:11:16:be:44:eb:42:a1:84:2b:48:79:81:50:12:2a:16:75: f0:16:e5:84:a7:ab:74:0f:f7:55:02:8f:a9:36:a6:66:fc:93: db:4e:26:e0:48:86:80:62:72:9f:82:bc:4e:b1:42:eb:47:d7: 84:ce:40:bd:1c:95:da:f8:41:96:2f:50:8f:6d:5b:10:79:5a: 3d:d0:86:47:ce:47:d9:9d:10:24:8e:dd:9d:ee:dc:cc:9c:af: fd:2e:e9:f7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUKZAwUQe5HqUoBBKxoLW2OBHLm7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjUxMDU4NDdaFw0yNzA4MjQxMTAzNDdaMDMxMTAvBgNV BAMTKDc4NEFCMTVERURENjkyNkNBRjIxMjVCRTY2ODY2NDIxMUUxMkEwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlVQbx+A5Gd9ppMeFN/w7IYcQ 01cZJhUrcEbWDvIgnnZUFL4UPdphbZS0T7ZXJx9xWelhh8hHhreOr5U4HKOxCk0x 8kc0kwZ/Z5NahRhXD5sC/vAz+drRLsk21An6DCVbDMtak01bfmE89wtHVKx9hWLe m3EXK7VWIKl09jfI9nlk5V4h4GmELE4ELUJ8FBLD0czFF1SPDH6FCsEhwQ2vvoSA 3+sLNs5OniD7VHaUwm9JDxOlB409Q17o0oYKE9nYSDOzNWRhxzmwTNO6s4EM0XrS 1Zv5YRD+nDcaWOlAqNDbxD6tht7J8TdZzaE1m8TY4fd8oo5z9bDq1vgKtwrLAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUeEqxXe3WkmyvISW+ZoZkIR4SoKQwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT/ADANBgkqhkiG9w0BAQsFAAOCAQEAvkE7peWINPISEnEJ ZcQ65syoZqoWQQrTIFrp2wtkk/Lxw+Rqd9Ue5NUtpz4rT0GJfpIhQWaaZVeLYgSH S8KuUf48ScGyZLw0QFw4RVGtyURQ091ol9Kg3sjuWuXSrk+Q2p8WEijOdAUDfOBt 8c+JJ643yx9NilWVwcbWWFMjcKGSmInY7/7SwYdgHO4vXe+gFytDwH1ZufgaLWGS 5gyvzamr6hEWvkTrQqGEK0h5gVASKhZ18BblhKerdA/3VQKPqTamZvyT204m4EiG gGJyn4K8TrFC60fXhM5AvRyV2vhBli9Qj21bEHlaPdCGR85H2Z0QJI7dne7czJyv /S7p9w== -----END CERTIFICATE-----Generated at Tue Aug 25 16:38:04 2026 by rpki-client