$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630313a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666630313a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: rj66gGeGCSu6M9bNO1IZ+A5V4bKw807AYT4Qm+efr9k= Subject key identifier: B2:A9:9F:DD:CE:E4:29:DE:7F:46:FF:8D:98:EE:E7:BA:54:E8:E8:D6 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 35D4B3C9E350044FC42DAF8682BB5C84EACC0040 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630313a3a2f34382d3438203d3e20323134333434.roa Signing time: Tue 25 Aug 2026 11:04:10 +0000 ROA not before: Tue 25 Aug 2026 10:59:10 +0000 ROA not after: Tue 24 Aug 2027 11:04:10 +0000 asID: 214344 IP address blocks: 2a06:a004:ff01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d4:b3:c9:e3:50:04:4f:c4:2d:af:86:82:bb:5c:84:ea:cc:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 25 10:59:10 2026 GMT Not After : Aug 24 11:04:10 2027 GMT Subject: CN=B2A99FDDCEE429DE7F46FF8D98EEE7BA54E8E8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:1c:dd:30:ca:4b:1a:b5:d8:8d:f9:4c:86: 15:33:ac:38:e0:a1:df:45:83:97:02:83:9c:fb:59: 9b:d2:4c:99:5e:00:dd:7d:2e:3b:ff:fe:79:17:e7: b0:3d:9d:eb:e8:88:fb:07:fc:16:a4:d5:8b:9f:36: 45:42:83:78:6b:cc:f8:e6:6d:09:09:81:80:03:3e: 8a:d4:17:f4:cf:73:de:a5:1d:fa:16:a3:db:44:93: 8e:39:ee:d5:4c:32:3e:4f:33:ce:5e:b6:15:36:9c: 9e:74:e6:62:a8:ff:4c:fc:cd:d5:55:84:12:46:2b: 60:d3:5f:98:7e:15:17:3d:83:0f:f0:97:84:57:6e: 27:fb:c2:8e:cc:6d:7a:b6:1f:62:0b:2c:02:62:15: 8c:6f:7f:71:e6:46:89:ad:94:82:5f:a0:04:8c:9e: a9:33:6f:c0:d6:9e:98:87:ba:ea:19:99:16:d9:6a: 2f:2e:0c:4e:eb:a7:bb:d1:cd:d9:f1:4a:6d:9e:bc: 82:ed:27:96:ba:67:58:e4:0f:58:20:9e:84:fe:71: 59:6b:16:a6:97:15:2e:8d:0d:1f:08:97:25:6c:65: c5:c6:1d:86:34:ea:c2:0b:b0:20:0c:5f:2e:2f:1e: 51:a2:0e:9d:8b:f8:35:36:74:28:d5:34:99:c4:0c: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:9F:DD:CE:E4:29:DE:7F:46:FF:8D:98:EE:E7:BA:54:E8:E8:D6 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630313a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ff01::/48 Signature Algorithm: sha256WithRSAEncryption 3b:54:0f:33:ed:d8:65:4e:1b:8f:ae:1b:e9:1b:fe:66:2f:6b: 63:29:b6:69:7c:f7:65:60:41:4e:f4:ab:b8:da:41:a2:7b:f7: 9c:17:0d:69:17:67:e7:93:a0:41:3e:65:5b:76:f2:59:46:73: 12:2e:5e:e3:a6:c4:31:33:1d:37:db:a6:bc:01:59:f2:7d:f5: ad:41:65:3c:64:ee:2f:ca:b6:ed:80:86:02:85:db:c4:99:87: af:f3:13:78:a1:d0:ea:d4:1d:43:2c:37:1a:0a:df:c0:6e:8e: 75:c6:0d:78:8a:e3:87:2c:de:6d:39:38:4a:e1:40:a7:72:38: a8:f8:be:49:3a:89:55:36:71:9b:96:54:94:06:99:52:e7:b3: e5:a8:3d:b9:de:e4:37:b4:a9:4a:03:d0:e2:b1:fe:45:bb:03: fe:bb:db:29:5b:45:e4:e5:7b:0e:7c:94:16:d8:32:ab:c4:ca: 5a:20:5d:8b:c7:77:9f:2d:ae:7b:c7:13:07:1a:86:32:bd:3b: 61:02:0a:c7:b8:af:07:04:a2:3c:41:16:50:d0:10:8b:3f:42: 87:bf:63:be:04:7e:74:57:90:6c:31:56:e5:69:e6:47:45:b5: b5:1e:39:9c:ae:30:3a:fd:ca:02:75:cf:b4:58:65:cf:9b:52: 73:c7:e3:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUNdSzyeNQBE/ELa+GgrtchOrMAEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjUxMDU5MTBaFw0yNzA4MjQxMTA0MTBaMDMxMTAvBgNV BAMTKEIyQTk5RkREQ0VFNDI5REU3RjQ2RkY4RDk4RUVFN0JBNTRFOEU4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KxzdMMpLGrXYjflMhhUzrDjg od9Fg5cCg5z7WZvSTJleAN19Ljv//nkX57A9nevoiPsH/Bak1YufNkVCg3hrzPjm bQkJgYADPorUF/TPc96lHfoWo9tEk4457tVMMj5PM85ethU2nJ505mKo/0z8zdVV hBJGK2DTX5h+FRc9gw/wl4RXbif7wo7MbXq2H2ILLAJiFYxvf3HmRomtlIJfoASM nqkzb8DWnpiHuuoZmRbZai8uDE7rp7vRzdnxSm2evILtJ5a6Z1jkD1ggnoT+cVlr FqaXFS6NDR8IlyVsZcXGHYY06sILsCAMXy4vHlGiDp2L+DU2dCjVNJnEDGG1AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUsqmf3c7kKd5/Rv+NmO7nulTo6NYwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2MzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT/ATANBgkqhkiG9w0BAQsFAAOCAQEAO1QPM+3YZU4bj64b 6Rv+Zi9rYym2aXz3ZWBBTvSruNpBonv3nBcNaRdn55OgQT5lW3byWUZzEi5e46bE MTMdN9umvAFZ8n31rUFlPGTuL8q27YCGAoXbxJmHr/MTeKHQ6tQdQyw3GgrfwG6O dcYNeIrjhyzebTk4SuFAp3I4qPi+STqJVTZxm5ZUlAaZUuez5ag9ud7kN7SpSgPQ 4rH+RbsD/rvbKVtF5OV7DnyUFtgyq8TKWiBdi8d3ny2ue8cTBxqGMr07YQIKx7iv BwSiPEEWUNAQiz9Ch79jvgR+dFeQbDFW5WnmR0W1tR45nK4wOv3KAnXPtFhlz5tS c8fjtA== -----END CERTIFICATE-----Generated at Tue Aug 25 16:37:56 2026 by rpki-client