$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa File: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (raw, json) Hash identifier: 5vg//wNVRc4UASoUqb5uX0P/AnU0Ro0qvgJWu8grY+s= Subject key identifier: C4:49:8B:C2:EE:21:E0:B3:E0:D9:4C:9E:C9:94:49:6D:4A:0C:A0:EA Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2A5BA004EC9D023E23B680EF9F327365BA9D8149 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa Signing time: Thu 06 Aug 2026 22:36:14 +0000 ROA not before: Thu 06 Aug 2026 22:31:14 +0000 ROA not after: Thu 05 Aug 2027 22:36:14 +0000 asID: 215761 IP address blocks: 2a0f:85c1:7f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 01:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5b:a0:04:ec:9d:02:3e:23:b6:80:ef:9f:32:73:65:ba:9d:81:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Aug 6 22:31:14 2026 GMT Not After : Aug 5 22:36:14 2027 GMT Subject: CN=C4498BC2EE21E0B3E0D94C9EC994496D4A0CA0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:7e:e8:89:e8:59:27:88:d1:2a:95:c2:02: 69:4f:cd:b6:b3:b0:cc:31:af:3c:48:ca:26:a2:a4: 37:d3:d7:49:4c:2c:7a:64:81:0b:eb:73:88:33:ec: e8:1d:be:4e:e1:d8:24:44:4d:a8:34:1d:11:66:07: 4d:e7:ec:03:d0:61:62:38:08:fe:f2:e0:f0:ee:ee: c0:38:3d:1b:ff:b7:f0:a0:19:43:bd:5a:fe:8c:ed: 56:34:02:38:c0:8d:8a:3e:3c:0f:43:e4:01:c7:a6: b2:e5:ed:20:f7:3a:e5:69:3f:f4:b3:a4:f1:5d:42: 25:9e:de:a8:63:12:83:a6:12:17:9a:38:c8:24:82: 78:46:f6:be:67:fc:62:7c:13:8a:8a:a7:3a:8d:9b: 13:3c:07:c8:01:c1:15:a0:b2:8e:19:8e:c4:3e:94: 3b:f8:84:e0:cb:4a:b9:70:95:c5:14:13:ab:25:5b: 96:33:de:75:a6:72:d9:d5:70:1d:ce:67:7e:a7:d7: d1:bb:35:06:e7:ff:10:a2:82:1f:14:a1:b6:06:0c: 68:ec:27:d3:b7:19:73:f3:cc:86:17:c7:d0:90:10: 0f:47:c4:16:28:8b:86:a2:84:35:89:03:6c:dd:eb: 68:79:07:cd:6f:2b:16:ee:cd:be:c5:7e:1e:0b:f7: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:49:8B:C2:EE:21:E0:B3:E0:D9:4C:9E:C9:94:49:6D:4A:0C:A0:EA X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f5::/48 Signature Algorithm: sha256WithRSAEncryption 7b:b1:7c:a9:78:70:e9:a7:a6:b3:e6:fa:47:5f:f5:49:af:4e: 92:08:7e:60:d0:99:36:c8:b1:79:3b:ea:56:7f:86:52:0f:47: 2d:cb:e1:b7:65:34:1f:d7:d1:c2:91:53:9a:80:dc:14:00:16: 05:82:10:4e:73:8d:31:84:b4:e0:58:79:3a:18:29:0f:82:56: 63:9d:b9:34:02:e5:18:14:37:06:42:78:23:59:74:81:78:83: 7c:58:56:f6:24:3d:ac:8b:b1:58:ec:1a:e9:ba:98:60:ae:58: 8d:e8:df:79:c0:74:88:fc:55:98:96:e4:bd:69:fa:07:f3:46: 51:f1:2d:f1:85:83:4d:de:bc:14:f3:9b:35:74:f9:c1:d0:60: 1b:40:eb:c4:ea:9e:d0:15:2c:a5:c5:ba:14:99:eb:5c:2c:bb: 22:95:19:a4:48:07:fe:a5:ef:f1:32:b1:30:94:62:c7:36:8a: 28:e0:53:5c:8b:b0:28:3d:3b:e3:5f:6c:e0:f6:c6:49:07:dc: 0a:cc:d8:6e:73:77:53:33:9c:c1:2e:be:bb:ae:c1:83:34:64: b4:06:a8:f6:a3:58:1b:62:58:a8:c3:9b:ab:b3:f5:98:d6:23: 9b:5f:4b:a8:55:b4:f2:d9:6d:d9:b5:6e:25:8c:59:04:8d:54: a8:1a:b7:40 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUKlugBOydAj4jtoDvnzJzZbqdgUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA4MDYyMjMxMTRaFw0yNzA4MDUyMjM2MTRaMDMxMTAvBgNV BAMTKEM0NDk4QkMyRUUyMUUwQjNFMEQ5NEM5RUM5OTQ0OTZENEEwQ0EwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZn7oiehZJ4jRKpXCAmlPzbaz sMwxrzxIyiaipDfT10lMLHpkgQvrc4gz7Ogdvk7h2CRETag0HRFmB03n7APQYWI4 CP7y4PDu7sA4PRv/t/CgGUO9Wv6M7VY0AjjAjYo+PA9D5AHHprLl7SD3OuVpP/Sz pPFdQiWe3qhjEoOmEheaOMgkgnhG9r5n/GJ8E4qKpzqNmxM8B8gBwRWgso4ZjsQ+ lDv4hODLSrlwlcUUE6slW5Yz3nWmctnVcB3OZ36n19G7NQbn/xCigh8UobYGDGjs J9O3GXPzzIYXx9CQEA9HxBYoi4aihDWJA2zd62h5B81vKxbuzb7Ffh4L9z3BAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUxEmLwu4h4LPg2UyeyZRJbUoMoOowHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM3MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH9TANBgkqhkiG9w0BAQsFAAOCAQEAe7F8 qXhw6aems+b6R1/1Sa9Okgh+YNCZNsixeTvqVn+GUg9HLcvht2U0H9fRwpFTmoDc FAAWBYIQTnONMYS04Fh5OhgpD4JWY525NALlGBQ3BkJ4I1l0gXiDfFhW9iQ9rIux WOwa6bqYYK5YjejfecB0iPxVmJbkvWn6B/NGUfEt8YWDTd68FPObNXT5wdBgG0Dr xOqe0BUspcW6FJnrXCy7IpUZpEgH/qXv8TKxMJRixzaKKOBTXIuwKD07419s4PbG SQfcCszYbnN3UzOcwS6+u67BgzRktAao9qNYG2JYqMObq7P1mNYjm19LqFW08tlt 2bVuJYxZBI1UqBq3QA== -----END CERTIFICATE-----Generated at Thu Aug 13 13:23:34 2026 by rpki-client