$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: wNL34hFTFgtgCbbDS3SH1yua78oNZC0w3rTHVRh3TH8= Subject key identifier: 95:C3:1F:1F:07:29:4F:34:7A:5D:F9:B9:98:EF:82:8F:0D:DA:AC:7D Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 4BBE9EAA7CA7FD27EAC941F25338F8D848A2E3A8 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa Signing time: Tue 25 Aug 2026 14:24:46 +0000 ROA not before: Tue 25 Aug 2026 14:19:46 +0000 ROA not after: Tue 24 Aug 2027 14:24:46 +0000 asID: 214344 IP address blocks: 2a06:a004:ff04::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:9e:aa:7c:a7:fd:27:ea:c9:41:f2:53:38:f8:d8:48:a2:e3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 25 14:19:46 2026 GMT Not After : Aug 24 14:24:46 2027 GMT Subject: CN=95C31F1F07294F347A5DF9B998EF828F0DDAAC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:e8:21:f1:2a:11:2f:5a:61:9c:3c:39:ff: 5f:7c:fd:6c:d5:ac:52:69:66:64:d5:29:de:91:f7: 58:cc:46:19:01:30:e8:d5:81:e7:16:26:88:f9:b5: 98:36:1f:46:99:9f:15:4a:55:88:9c:60:c1:ab:e8: 48:8e:5f:e5:ae:2f:16:52:f4:69:2c:08:ac:45:1f: 27:1f:32:67:5c:03:d0:71:08:10:1f:9c:57:73:64: 1b:96:aa:6b:42:5e:35:5e:d9:f1:ba:56:d8:30:7c: df:23:07:17:67:63:ca:57:6a:a9:be:09:3b:2c:d9: b5:2a:f8:ae:e1:59:21:0b:db:37:31:98:fd:c2:2d: 25:41:1d:ba:17:15:54:42:72:f2:31:f5:a7:f5:da: ff:98:fc:7e:c0:35:d3:dd:31:39:2a:00:d4:3f:dd: b6:b8:b1:5a:e1:a1:d6:f5:e5:85:96:b4:fe:02:ea: 39:d3:8e:38:4d:51:91:3e:13:a7:cb:29:88:cd:6d: f5:c1:04:f6:b5:e0:32:0f:31:c1:df:7c:c7:3f:f2: 12:18:50:e4:20:f2:7f:6b:b9:83:e4:ed:5c:28:6b: 9f:26:75:55:8b:e6:95:ea:76:52:29:03:f7:10:68: 4d:49:01:57:88:e0:11:b1:f4:f3:a3:c0:11:8d:6b: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:1F:1F:07:29:4F:34:7A:5D:F9:B9:98:EF:82:8F:0D:DA:AC:7D X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666630343a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ff04::/48 Signature Algorithm: sha256WithRSAEncryption cb:24:0f:c1:47:45:b4:5b:bd:ee:44:2d:1e:d5:44:9b:86:cd: 58:57:d7:ec:27:01:cb:cd:80:09:0a:32:57:55:e4:85:26:b0: 68:db:a6:7c:5d:db:b0:c0:98:f8:7b:ee:de:ca:5e:66:f1:aa: 11:6b:28:73:48:3b:40:76:0c:74:8f:be:38:f5:7f:d4:e1:a0: ba:25:91:8d:a6:45:95:d0:b2:39:bd:50:4d:fe:e5:7f:7a:58: f9:12:c2:c3:74:32:d0:2c:52:f6:68:6e:44:44:f9:2f:68:fe: ac:cc:c3:79:bd:e1:b3:65:cc:ac:93:9d:2e:6e:34:48:eb:85: d4:7c:e7:12:2f:e4:4c:56:af:65:d5:04:82:89:91:a3:fe:65: 77:99:f4:11:dd:dd:ab:85:1e:c7:a7:51:43:18:32:83:ab:ec: e9:1d:d2:f3:ee:e0:27:73:4c:4b:bd:2c:a9:de:e0:a9:1a:c3: 57:dd:89:c7:79:99:be:c1:fb:da:f8:8a:62:45:99:e2:7b:30: 2c:57:f8:ef:17:08:2f:2b:c0:d4:e2:4a:de:d0:be:2f:35:68: 1d:6e:73:b8:fc:e2:ce:eb:d1:0b:df:de:df:57:b2:fe:39:5d: 0d:e2:73:d9:f4:b9:a7:36:3e:e8:f2:2e:27:ff:7f:f9:06:d6: 26:d4:bb:93 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUS76eqnyn/SfqyUHyUzj42Eii46gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjUxNDE5NDZaFw0yNzA4MjQxNDI0NDZaMDMxMTAvBgNV BAMTKDk1QzMxRjFGMDcyOTRGMzQ3QTVERjlCOTk4RUY4MjhGMEREQUFDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdi+gh8SoRL1phnDw5/198/WzV rFJpZmTVKd6R91jMRhkBMOjVgecWJoj5tZg2H0aZnxVKVYicYMGr6EiOX+WuLxZS 9GksCKxFHycfMmdcA9BxCBAfnFdzZBuWqmtCXjVe2fG6VtgwfN8jBxdnY8pXaqm+ CTss2bUq+K7hWSEL2zcxmP3CLSVBHboXFVRCcvIx9af12v+Y/H7ANdPdMTkqANQ/ 3ba4sVrhodb15YWWtP4C6jnTjjhNUZE+E6fLKYjNbfXBBPa14DIPMcHffMc/8hIY UOQg8n9ruYPk7Vwoa58mdVWL5pXqdlIpA/cQaE1JAVeI4BGx9POjwBGNa7QnAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUlcMfHwcpTzR6Xfm5mO+Cjw3arH0wHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2MzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT/BDANBgkqhkiG9w0BAQsFAAOCAQEAyyQPwUdFtFu97kQt HtVEm4bNWFfX7CcBy82ACQoyV1XkhSawaNumfF3bsMCY+Hvu3speZvGqEWsoc0g7 QHYMdI++OPV/1OGguiWRjaZFldCyOb1QTf7lf3pY+RLCw3Qy0CxS9mhuRET5L2j+ rMzDeb3hs2XMrJOdLm40SOuF1HznEi/kTFavZdUEgomRo/5ld5n0Ed3dq4Uex6dR Qxgyg6vs6R3S8+7gJ3NMS70sqd7gqRrDV92Jx3mZvsH72viKYkWZ4nswLFf47xcI LyvA1OJK3tC+LzVoHW5zuPzizuvRC9/e31ey/jldDeJz2fS5pzY+6PIuJ/9/+QbW JtS7kw== -----END CERTIFICATE-----Generated at Wed Aug 26 07:54:01 2026 by rpki-client