$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: Fch7NV+M7HwpwgT8hMssz5dHHaLPrC93QzHTyYN+N7M= Subject key identifier: CE:D8:8D:B5:B9:00:DD:AA:DC:6B:A8:67:FD:9F:48:E4:01:42:0B:02 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 30D189E22ED0E921C36543C58F40CE9AC8A59AC1 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa Signing time: Tue 25 Aug 2026 11:04:41 +0000 ROA not before: Tue 25 Aug 2026 10:59:41 +0000 ROA not after: Tue 24 Aug 2027 11:04:41 +0000 asID: 214344 IP address blocks: 2a06:a004:ff03::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d1:89:e2:2e:d0:e9:21:c3:65:43:c5:8f:40:ce:9a:c8:a5:9a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 25 10:59:41 2026 GMT Not After : Aug 24 11:04:41 2027 GMT Subject: CN=CED88DB5B900DDAADC6BA867FD9F48E401420B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:00:4f:5e:f5:56:a3:71:7c:4a:ab:7c:75:0a: d6:13:cb:e8:33:d9:9c:ca:f1:de:75:98:ec:c8:7f: fd:4d:00:38:da:8d:6d:ff:33:0a:6d:5c:65:d6:23: b7:b1:1a:95:bd:73:68:d4:7f:91:a9:67:92:1b:39: 8a:e1:82:02:f8:d1:2a:28:9e:08:8f:53:af:34:44: 5c:3f:7d:68:ad:a7:01:dd:ab:37:20:99:19:b7:e6: 8e:4f:9e:59:22:f9:31:f6:81:93:37:17:4f:db:c0: 3d:79:d5:49:c7:53:fb:0a:7b:e0:92:1d:be:24:be: 24:ae:31:a7:2f:97:1f:e0:61:4b:12:af:23:68:7a: c6:1e:a9:cb:90:2a:33:3d:1e:d4:ee:28:78:4d:dd: 4c:6e:e1:83:bc:1d:20:7b:01:27:da:c6:1e:27:d5: 90:51:22:42:88:6a:04:53:10:b0:6c:0e:a3:87:ec: 3a:44:b7:79:b1:2e:89:21:7d:fc:7b:2c:a8:0f:b9: d3:a5:36:9a:40:89:dc:e5:cb:44:dc:7e:61:8a:0f: 05:7c:7a:db:1b:bc:5e:9b:8d:15:c9:14:fd:ec:e8: 53:87:33:06:79:7f:14:8e:12:73:20:06:74:c3:e1: 3f:fc:d6:1f:a0:98:dd:a0:b9:46:b5:fc:f4:18:ed: 87:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:8D:B5:B9:00:DD:AA:DC:6B:A8:67:FD:9F:48:E4:01:42:0B:02 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ff03::/48 Signature Algorithm: sha256WithRSAEncryption 1b:75:c6:1c:f2:0a:33:e8:3b:44:91:46:bd:f8:93:cb:69:13: 2c:dd:4c:d6:2a:f1:61:e6:83:0a:fc:83:f6:9a:8a:4d:90:d8: 4f:46:a2:04:1d:eb:ce:28:d2:d1:9f:e6:eb:21:7e:fc:49:90: b2:cd:48:7b:28:61:9d:ae:86:ad:7c:f7:e1:35:d6:8e:b0:fb: 18:ac:8f:9c:4a:10:09:b2:39:52:ed:aa:07:0f:63:09:b0:a8: 25:0f:94:6c:fd:25:37:38:41:08:54:61:c4:75:ba:1a:80:85: b1:f8:cc:a7:4a:aa:92:16:b4:69:df:12:64:14:17:45:8d:78: 98:37:01:a0:04:8f:a5:1b:79:50:56:f5:0e:ac:5a:12:f0:2b: 26:d9:ee:2a:39:80:1c:e4:3a:06:ff:22:6f:1b:3b:7c:99:f7: 5f:d4:8b:1a:14:c0:85:7f:0f:bc:c7:b5:41:47:39:a4:e7:e2: b8:a2:40:2b:c1:2a:b2:91:48:69:ad:19:44:5a:f6:c1:70:38: 66:6b:01:b1:ca:0b:15:c0:e8:d0:ea:63:96:40:34:69:15:f8: 90:c3:81:d9:3b:90:ff:68:32:8a:18:be:67:4d:7e:72:ca:da: 35:51:5c:33:41:45:42:b1:32:dd:88:39:78:2f:71:b6:de:5b: a4:c3:92:7f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUMNGJ4i7Q6SHDZUPFj0DOmsilmsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjUxMDU5NDFaFw0yNzA4MjQxMTA0NDFaMDMxMTAvBgNV BAMTKENFRDg4REI1QjkwMEREQUFEQzZCQTg2N0ZEOUY0OEU0MDE0MjBCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsAE9e9VajcXxKq3x1CtYTy+gz 2ZzK8d51mOzIf/1NADjajW3/MwptXGXWI7exGpW9c2jUf5GpZ5IbOYrhggL40Soo ngiPU680RFw/fWitpwHdqzcgmRm35o5Pnlki+TH2gZM3F0/bwD151UnHU/sKe+CS Hb4kviSuMacvlx/gYUsSryNoesYeqcuQKjM9HtTuKHhN3Uxu4YO8HSB7ASfaxh4n 1ZBRIkKIagRTELBsDqOH7DpEt3mxLokhffx7LKgPudOlNppAidzly0TcfmGKDwV8 etsbvF6bjRXJFP3s6FOHMwZ5fxSOEnMgBnTD4T/81h+gmN2guUa1/PQY7Yc3AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUztiNtbkA3arca6hn/Z9I5AFCCwIwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2MzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT/AzANBgkqhkiG9w0BAQsFAAOCAQEAG3XGHPIKM+g7RJFG vfiTy2kTLN1M1irxYeaDCvyD9pqKTZDYT0aiBB3rzijS0Z/m6yF+/EmQss1Ieyhh na6GrXz34TXWjrD7GKyPnEoQCbI5Uu2qBw9jCbCoJQ+UbP0lNzhBCFRhxHW6GoCF sfjMp0qqkha0ad8SZBQXRY14mDcBoASPpRt5UFb1DqxaEvArJtnuKjmAHOQ6Bv8i bxs7fJn3X9SLGhTAhX8PvMe1QUc5pOfiuKJAK8EqspFIaa0ZRFr2wXA4ZmsBscoL FcDo0OpjlkA0aRX4kMOB2TuQ/2gyihi+Z01+csraNVFcM0FFQrEy3Yg5eC9xtt5b pMOSfw== -----END CERTIFICATE-----Generated at Tue Aug 25 16:38:06 2026 by rpki-client