$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa File: 326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa (raw, json) Hash identifier: xS6W9vpcgkAQc0HRDNFnqDu1C6jkUC2PmU4eLlkKlbg= Subject key identifier: E8:03:8C:44:F1:01:51:17:DE:7B:8E:C0:CE:A2:8C:F0:C1:88:6E:34 Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 67146A248BB07A18670036E6223459A1D30821F7 Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa Signing time: Thu 27 Aug 2026 16:00:40 +0000 ROA not before: Thu 27 Aug 2026 15:55:40 +0000 ROA not after: Thu 26 Aug 2027 16:00:40 +0000 asID: 212895 IP address blocks: 2a0b:4e07:290e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 18:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:14:6a:24:8b:b0:7a:18:67:00:36:e6:22:34:59:a1:d3:08:21:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Aug 27 15:55:40 2026 GMT Not After : Aug 26 16:00:40 2027 GMT Subject: CN=E8038C44F1015117DE7B8EC0CEA28CF0C1886E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:52:04:7c:03:5b:e2:d8:e2:b6:ca:bc:e3: 8f:04:98:21:f6:40:a4:5c:c3:0d:57:e5:7b:a7:6f: 34:08:30:eb:3d:2d:a9:a3:83:c6:7d:a8:88:1b:bb: 13:91:8f:04:96:bc:66:e3:1a:75:93:2e:39:4d:8a: 25:9e:0e:c4:65:50:eb:75:74:38:31:df:c0:91:f1: 34:63:c7:82:e0:57:a2:85:9b:1b:9c:d7:d7:a6:ca: 7a:21:e3:dd:6b:8f:23:2a:92:5b:0e:a3:0a:25:31: 0b:69:0c:65:71:3d:f0:7d:21:d1:20:88:ab:b7:7c: 3f:cf:2c:46:72:dc:e1:64:ee:f7:ad:82:55:89:6c: 93:ed:25:a6:96:b2:31:cb:4c:c3:1e:a8:95:ae:cd: f4:27:38:6e:8d:46:0f:d1:59:de:53:b1:75:e3:52: d8:be:4d:ca:0c:51:0a:e0:68:79:ab:f1:9c:30:5d: a0:72:57:03:0b:ec:19:31:b4:12:5f:bd:e6:b3:b3: 68:ec:c9:fa:a2:6c:35:e2:26:bf:ed:cf:00:9e:29: 21:b7:44:85:3e:06:5b:c3:cc:21:14:ec:4a:99:67: 12:6f:13:b0:4f:de:ac:d3:c6:f5:fe:8f:6b:e9:b0: a6:1a:9a:12:4e:e6:63:5b:45:46:30:7f:b7:8f:42: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:03:8C:44:F1:01:51:17:DE:7B:8E:C0:CE:A2:8C:F0:C1:88:6E:34 X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930653a3a2f34382d3438203d3e20323132383935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:290e::/48 Signature Algorithm: sha256WithRSAEncryption 5d:63:76:a4:a7:26:17:62:71:1c:b6:4b:31:c9:0f:a8:2b:bf: 43:f7:5b:67:6b:9e:e7:41:69:80:d3:8d:57:4c:0f:a7:1e:81: 8e:ef:9b:4e:c0:f9:ee:f7:2a:8a:53:15:f7:79:90:87:f8:09: 62:6c:85:fc:b9:75:3e:56:e2:21:4d:d5:a1:bd:cf:1f:a1:fe: b8:0b:85:e0:2a:ae:b1:ef:9a:76:5a:4b:13:c3:e9:14:d5:91: 98:6e:68:1a:4b:d2:33:0b:9f:e8:af:20:fe:8c:31:2f:44:45: 75:35:c1:e1:53:5e:28:d5:b6:1f:4e:c7:82:2a:0d:b3:34:60: 54:a3:4e:12:f5:b0:c8:ab:3e:3b:10:45:86:dc:8d:f0:75:8c: 92:3b:d9:c6:0a:b7:3a:88:84:02:11:86:84:2a:ef:eb:e2:61: a0:54:59:ef:22:7c:69:27:ba:38:16:8a:34:e9:4e:d8:71:fb: d5:5a:61:37:67:ce:ed:2d:6e:12:90:3b:61:4a:4e:29:c7:93: ed:b0:9e:4a:a2:76:fe:e5:87:a6:39:af:5e:82:69:19:5c:31: 8a:10:3a:75:47:fb:ee:07:86:f6:39:2b:a8:52:02:e2:1b:47: 64:31:33:88:84:6b:41:79:39:9c:3a:35:6d:de:17:8c:c5:87: 99:f4:94:e9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUZxRqJIuwehhnADbmIjRZodMIIfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA4MjcxNTU1NDBaFw0yNzA4MjYxNjAwNDBaMDMxMTAvBgNV BAMTKEU4MDM4QzQ0RjEwMTUxMTdERTdCOEVDMENFQTI4Q0YwQzE4ODZFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBj1IEfANb4tjitsq8448EmCH2 QKRcww1X5XunbzQIMOs9Lamjg8Z9qIgbuxORjwSWvGbjGnWTLjlNiiWeDsRlUOt1 dDgx38CR8TRjx4LgV6KFmxuc19emynoh491rjyMqklsOowolMQtpDGVxPfB9IdEg iKu3fD/PLEZy3OFk7vetglWJbJPtJaaWsjHLTMMeqJWuzfQnOG6NRg/RWd5TsXXj Uti+TcoMUQrgaHmr8ZwwXaByVwML7BkxtBJfveazs2jsyfqibDXiJr/tzwCeKSG3 RIU+BlvDzCEU7EqZZxJvE7BP3qzTxvX+j2vpsKYamhJO5mNbRUYwf7ePQgbJAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU6AOMRPEBURfee47AzqKM8MGIbjQwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYxYjQxY2It YTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIyYjE3LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjM5MzA2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjM4MzkzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgcpDjANBgkqhkiG9w0BAQsFAAOCAQEAXWN2pKcmF2JxHLZL MckPqCu/Q/dbZ2ue50FpgNONV0wPpx6Bju+bTsD57vcqilMV93mQh/gJYmyF/Ll1 PlbiIU3Vob3PH6H+uAuF4Cquse+adlpLE8PpFNWRmG5oGkvSMwuf6K8g/owxL0RF dTXB4VNeKNW2H07HgioNszRgVKNOEvWwyKs+OxBFhtyN8HWMkjvZxgq3OoiEAhGG hCrv6+JhoFRZ7yJ8aSe6OBaKNOlO2HH71VphN2fO7S1uEpA7YUpOKceT7bCeSqJ2 /uWHpjmvXoJpGVwxihA6dUf77geG9jkrqFIC4htHZDEziIRrQXk5nDo1bd4XjMWH mfSU6Q== -----END CERTIFICATE-----Generated at Thu Sep 10 10:44:42 2026 by rpki-client