$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666666663a3a2f34382d3438203d3e20323134333434.roa File: 326130363a613030343a666666663a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: 35yf8q/WF+ftBqPGIIAa3y1w8C8sN/ndAbGwnqOMhUo= Subject key identifier: E1:BF:C9:D1:7B:6A:9D:6C:16:C2:61:FF:B6:96:4A:9E:58:21:80:73 Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Certificate serial: 5722B7A35E6766A8E3AA28C640C1A12BF6058B86 Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666666663a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 21 Aug 2026 07:41:18 +0000 ROA not before: Fri 21 Aug 2026 07:36:18 +0000 ROA not after: Fri 20 Aug 2027 07:41:18 +0000 asID: 214344 IP address blocks: 2a06:a004:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 14:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:22:b7:a3:5e:67:66:a8:e3:aa:28:c6:40:c1:a1:2b:f6:05:8b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129 Validity Not Before: Aug 21 07:36:18 2026 GMT Not After : Aug 20 07:41:18 2027 GMT Subject: CN=E1BFC9D17B6A9D6C16C261FFB6964A9E58218073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:58:3d:28:59:32:ad:00:86:db:1d:72:37:c2: ee:54:59:80:cf:1b:a8:b3:8c:98:1a:e0:3b:0b:f7: 9e:52:f7:98:e7:a6:b2:eb:58:1b:43:64:bc:ef:44: 95:2c:72:ac:fb:8f:fd:ed:e5:70:ad:5e:46:d3:1a: 7e:e3:58:b2:4e:66:12:69:03:d6:3a:68:50:51:f2: 6c:61:43:ee:ac:96:09:d7:02:4e:2d:05:d9:a6:b2: 66:12:d1:bb:9b:03:bf:45:9a:c9:14:3a:23:ce:f6: f6:39:ca:b0:6c:4e:19:d2:ff:b7:03:d0:20:8b:ee: 86:e3:cf:10:91:45:b3:52:b4:4f:68:a9:bd:86:fe: 65:c2:88:16:bf:9b:06:55:8b:11:a1:11:bc:1a:07: 5e:53:e2:b1:6b:93:bd:72:ac:cf:83:8d:2f:22:9f: 88:12:04:45:e8:e0:b1:8d:d5:b9:ea:69:3b:34:ff: 93:08:83:91:89:45:62:e8:e8:99:ac:95:f4:8f:09: bf:8b:03:27:aa:b2:c1:92:ab:fb:ae:5a:3e:96:eb: 27:bd:29:cc:2b:f5:4f:db:ed:d8:d3:96:43:0a:67: 98:ae:b5:26:52:c9:42:56:be:3c:4e:1a:d7:c4:98: 04:df:0a:70:73:d1:c7:7d:35:79:a6:3b:ba:ca:82: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:C9:D1:7B:6A:9D:6C:16:C2:61:FF:B6:96:4A:9E:58:21:80:73 X509v3 Authority Key Identifier: keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/326130363a613030343a666666663a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a004:ffff::/48 Signature Algorithm: sha256WithRSAEncryption b1:15:f8:a8:33:4e:31:62:ea:06:a2:e9:46:78:e2:92:ad:13: f5:44:c3:21:03:88:77:55:3b:77:0b:fa:2d:8d:2f:9c:77:76: bb:8f:30:a5:3e:a9:01:f7:9b:be:b8:47:8b:bc:99:d4:38:39: 5d:04:97:27:34:fe:f0:b1:56:5d:16:46:c4:6f:fd:6f:a0:24: be:79:02:17:db:64:10:65:90:c0:3d:36:24:c8:e9:87:4f:82: 61:bd:91:5b:e3:de:eb:a6:73:9f:d1:b1:6e:f9:03:3c:7b:8e: 91:c4:a6:2c:5e:2d:ed:aa:64:31:bf:d2:71:0e:47:03:3b:12: f7:67:f1:fd:61:4e:e3:9e:84:a1:58:59:9c:15:56:95:56:ad: 10:5b:33:9d:3d:ca:51:65:ab:2d:57:a1:11:2f:44:80:9c:6a: 97:b4:42:2d:38:05:28:9d:4a:18:fd:d2:08:00:0c:c5:af:ad: a7:36:3f:1d:e4:57:70:38:1c:7b:5f:61:a7:7d:9f:72:a1:c7: d6:3c:6f:b8:29:f2:9d:77:a4:5b:ac:a7:6d:c3:59:20:58:4d: 85:da:1b:24:11:59:d6:53:41:b3:47:fa:2c:dd:4c:13:a5:f0: 27:88:dd:f1:c4:68:8a:fa:0d:ce:d3:3b:ca:73:99:af:30:06: 4e:0b:43:23 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUVyK3o15nZqjjqijGQMGhK/YFi4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2 N0ZFQzEyOTAeFw0yNjA4MjEwNzM2MThaFw0yNzA4MjAwNzQxMThaMDMxMTAvBgNV BAMTKEUxQkZDOUQxN0I2QTlENkMxNkMyNjFGRkI2OTY0QTlFNTgyMTgwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWD0oWTKtAIbbHXI3wu5UWYDP G6izjJga4DsL955S95jnprLrWBtDZLzvRJUscqz7j/3t5XCtXkbTGn7jWLJOZhJp A9Y6aFBR8mxhQ+6slgnXAk4tBdmmsmYS0bubA79FmskUOiPO9vY5yrBsThnS/7cD 0CCL7objzxCRRbNStE9oqb2G/mXCiBa/mwZVixGhEbwaB15T4rFrk71yrM+DjS8i n4gSBEXo4LGN1bnqaTs0/5MIg5GJRWLo6JmslfSPCb+LAyeqssGSq/uuWj6W6ye9 Kcwr9U/b7djTlkMKZ5iutSZSyUJWvjxOGtfEmATfCnBz0cd9NXmmO7rKgskHAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU4b/J0XtqnWwWwmH/tpZKnlghgHMwHwYDVR0j BBgwFoAUPnnFJkq1AAr8TWDeVot1rWf+wSkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzEvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZFQzEyOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvM0U3OUM1MjY0QUI1MDAwQUZDNEQ2MERFNTY4Qjc1QUQ2N0ZF QzEyOS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYt OTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1MjMyLzEvMzI2MTMwMzYzYTYxMzAzMDM0 M2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDMzMzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAT//zANBgkqhkiG9w0BAQsFAAOCAQEAsRX4qDNOMWLqBqLp Rnjikq0T9UTDIQOId1U7dwv6LY0vnHd2u48wpT6pAfebvrhHi7yZ1Dg5XQSXJzT+ 8LFWXRZGxG/9b6AkvnkCF9tkEGWQwD02JMjph0+CYb2RW+Pe66Zzn9GxbvkDPHuO kcSmLF4t7apkMb/ScQ5HAzsS92fx/WFO456EoVhZnBVWlVatEFsznT3KUWWrLVeh ES9EgJxql7RCLTgFKJ1KGP3SCAAMxa+tpzY/HeRXcDgce19hp32fcqHH1jxvuCny nXekW6ynbcNZIFhNhdobJBFZ1lNBs0f6LN1ME6XwJ4jd8cRoivoNztM7ynOZrzAG TgtDIw== -----END CERTIFICATE-----Generated at Tue Aug 25 16:37:47 2026 by rpki-client