$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630323a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666630323a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: Rpoxo+W741nQxWdQnu6cWSiOcJwrjMgG3XrE0Jxxpgo= Subject key identifier: D8:8A:7D:1E:B8:C8:45:87:3F:42:FA:60:22:66:55:C1:40:6A:6A:70 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 04A94AC4EE27DFD969C64AAC8ED688560232F34E Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630323a3a2f34382d3438203d3e20323134333434.roa Signing time: Tue 25 Aug 2026 11:04:27 +0000 ROA not before: Tue 25 Aug 2026 10:59:27 +0000 ROA not after: Tue 24 Aug 2027 11:04:27 +0000 asID: 214344 IP address blocks: 2a06:a004:ff02::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a9:4a:c4:ee:27:df:d9:69:c6:4a:ac:8e:d6:88:56:02:32:f3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 25 10:59:27 2026 GMT Not After : Aug 24 11:04:27 2027 GMT Subject: CN=D88A7D1EB8C845873F42FA60226655C1406A6A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:42:0f:01:04:f7:21:f2:74:66:06:f2:12: 8f:9b:ab:a8:35:07:c4:43:34:f5:0a:6f:2e:e3:01: cd:26:a4:ba:46:4b:3d:b8:23:05:4e:7a:92:fd:59: ff:9f:f1:fa:9f:b8:df:f0:2f:5f:ce:2c:91:10:2a: fe:6a:ba:7f:b0:e9:96:4c:fe:53:88:e5:b0:83:55: f9:88:b8:f4:5b:69:50:b1:3e:21:3e:c8:be:cf:db: 1d:e7:cf:1d:98:7d:60:83:d6:72:f1:da:72:22:93: 20:be:e0:8f:46:aa:76:ee:df:58:ff:c9:11:c4:f1: 4f:bd:f5:d1:e7:b2:b3:ac:6c:fa:42:e7:98:ba:da: 9d:c2:1e:5a:01:68:dc:4a:5b:59:8f:ce:0c:04:7a: 5a:74:6e:d6:a1:2e:76:66:cb:6a:5b:86:7a:79:c5: 9e:c5:20:17:6c:a5:37:e0:dd:14:f1:0e:27:bf:35: f0:3a:96:45:2e:ce:03:fb:5f:8d:f1:49:69:99:f3: d1:5f:58:27:35:c0:79:27:db:e9:b9:5a:27:a8:d4: a5:ab:65:b5:3c:d1:df:45:de:ee:95:77:22:de:95: 3e:aa:42:28:be:b1:78:f8:a0:35:b4:60:3d:a5:95: 03:ab:83:e7:30:5d:2a:7f:37:2f:fd:80:fe:42:2c: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8A:7D:1E:B8:C8:45:87:3F:42:FA:60:22:66:55:C1:40:6A:6A:70 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630323a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ff02::/48 Signature Algorithm: sha256WithRSAEncryption 3f:c7:68:98:47:fb:f4:d2:ce:2f:1a:8b:d0:94:48:d9:1a:28: 0c:c7:c1:47:0d:18:99:f2:e4:a9:57:bc:b5:42:69:db:f1:b9: 4b:60:4b:37:d2:e0:d0:d6:b7:cb:50:b2:ec:59:63:c8:fc:db: 0d:de:35:31:ca:97:1c:c2:3e:9b:48:93:34:4f:88:db:39:e2: 7a:e3:35:cc:99:f8:50:77:56:f4:45:a5:16:c0:c0:40:48:27: 3f:37:e6:15:ba:3e:9c:5c:15:51:7e:31:3c:3f:37:52:ba:59: 02:d1:64:8e:32:df:9a:cc:cb:12:c9:21:35:e5:e2:0b:99:4b: 50:94:60:fe:4c:cc:71:57:10:b0:f2:a8:51:d9:ec:8d:0f:ff: e2:04:41:f9:e2:fb:67:96:3b:b4:d6:41:23:ca:9d:9c:93:66: 84:7b:8e:5c:14:af:02:c8:75:7e:04:3b:2d:bb:78:b0:37:bf: b6:b5:b7:cf:1d:b7:a7:80:07:64:ed:e5:92:0c:b6:16:5b:82: 0a:85:05:93:a2:eb:02:1e:04:29:0c:19:ae:68:a1:ce:24:88: fc:25:f2:e7:30:22:74:79:90:81:a7:16:12:36:c2:0c:c5:47: 23:79:8e:4d:6f:49:c7:02:d7:08:78:73:87:2f:f3:71:4a:63: df:6e:3b:60 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUBKlKxO4n39lpxkqsjtaIVgIy804wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjUxMDU5MjdaFw0yNzA4MjQxMTA0MjdaMDMxMTAvBgNV BAMTKEQ4OEE3RDFFQjhDODQ1ODczRjQyRkE2MDIyNjY1NUMxNDA2QTZBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WUIPAQT3IfJ0ZgbyEo+bq6g1 B8RDNPUKby7jAc0mpLpGSz24IwVOepL9Wf+f8fqfuN/wL1/OLJEQKv5qun+w6ZZM /lOI5bCDVfmIuPRbaVCxPiE+yL7P2x3nzx2YfWCD1nLx2nIikyC+4I9Gqnbu31j/ yRHE8U+99dHnsrOsbPpC55i62p3CHloBaNxKW1mPzgwEelp0btahLnZmy2pbhnp5 xZ7FIBdspTfg3RTxDie/NfA6lkUuzgP7X43xSWmZ89FfWCc1wHkn2+m5Wieo1KWr ZbU80d9F3u6VdyLelT6qQii+sXj4oDW0YD2llQOrg+cwXSp/Ny/9gP5CLCZpAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU2Ip9HrjIRYc/QvpgImZVwUBqanAwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2MzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT/AjANBgkqhkiG9w0BAQsFAAOCAQEAP8domEf79NLOLxqL 0JRI2RooDMfBRw0YmfLkqVe8tUJp2/G5S2BLN9Lg0Na3y1Cy7FljyPzbDd41McqX HMI+m0iTNE+I2znieuM1zJn4UHdW9EWlFsDAQEgnPzfmFbo+nFwVUX4xPD83UrpZ AtFkjjLfmszLEskhNeXiC5lLUJRg/kzMcVcQsPKoUdnsjQ//4gRB+eL7Z5Y7tNZB I8qdnJNmhHuOXBSvAsh1fgQ7Lbt4sDe/trW3zx23p4AHZO3lkgy2FluCCoUFk6Lr Ah4EKQwZrmihziSI/CXy5zAidHmQgacWEjbCDMVHI3mOTW9JxwLXCHhzhy/zcUpj 3247YA== -----END CERTIFICATE-----Generated at Tue Aug 25 16:38:00 2026 by rpki-client