$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3164303a3a2f34382d3438203d3e2038303735.roa File: 326130613a643638353a3164303a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: y5t9c2h1TskAMbwftSr1Wl1iwKUN7RUvTHYwKJ+Rd6E= Subject key identifier: DC:B8:34:C4:0E:CA:3A:3C:BD:D6:A6:57:0D:2B:0D:8A:74:B1:E4:6F Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 76E3617FE5E2B469B77EF4037F95E1A486689254 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3164303a3a2f34382d3438203d3e2038303735.roa Signing time: Fri 02 Oct 2026 11:46:17 +0000 ROA not before: Fri 02 Oct 2026 11:41:17 +0000 ROA not after: Fri 01 Oct 2027 11:46:17 +0000 asID: 8075 IP address blocks: 2a0a:d685:1d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 22:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:61:7f:e5:e2:b4:69:b7:7e:f4:03:7f:95:e1:a4:86:68:92:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Oct 2 11:41:17 2026 GMT Not After : Oct 1 11:46:17 2027 GMT Subject: CN=DCB834C40ECA3A3CBDD6A6570D2B0D8A74B1E46F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:9a:57:b0:2a:b6:a1:18:05:52:82:57:41: d5:f2:59:06:fc:ef:3d:29:93:9b:f4:1f:4e:7b:88: 3f:9a:48:40:32:d9:e3:ac:35:db:2e:93:69:e5:d6: 48:5b:6d:07:5a:79:bd:18:8c:e6:f0:5d:28:1f:a3: 3d:d3:aa:fd:71:4f:2c:4d:1d:b0:96:4e:85:80:78: db:96:fc:e0:4d:34:ba:ce:e0:5b:53:85:f5:a4:55: 6b:e9:2a:70:cc:e6:d4:17:66:5c:c1:59:95:07:ed: 45:87:16:4f:71:5d:47:3f:74:06:f2:50:a7:01:c4: 64:5a:b9:76:33:61:d0:e5:74:12:6d:d4:ec:f7:dc: 5d:0a:67:4f:6a:f3:73:38:1e:47:13:8b:b7:63:c1: a7:d6:0f:85:1a:75:79:63:e3:05:24:96:83:16:21: 8c:db:9d:63:9f:4f:fe:44:1f:de:8b:6f:d7:9f:f5: 80:7b:7e:7e:28:fe:8e:70:bd:cb:ac:83:08:03:66: ea:d1:a5:7a:06:05:c0:61:70:70:03:0d:84:bd:30: fc:20:45:f4:74:30:e0:76:cb:c5:1e:83:96:e7:40: 1c:2d:93:c2:c0:db:f8:5c:6a:cb:7c:38:c2:f2:6d: 17:70:fd:f2:d0:a7:37:53:25:2f:6f:5d:92:8a:57: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B8:34:C4:0E:CA:3A:3C:BD:D6:A6:57:0D:2B:0D:8A:74:B1:E4:6F X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3164303a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1d0::/48 Signature Algorithm: sha256WithRSAEncryption 7e:0a:b2:23:4e:ef:5d:82:c5:cb:e1:ea:15:bc:29:1e:e5:db: df:86:f2:bc:9f:4b:0b:8e:50:43:04:3f:8c:de:9c:87:70:c7: 32:ca:b6:f9:67:38:21:ee:9a:01:8c:33:a0:ce:32:ff:6d:78: df:68:50:fa:69:a8:cc:f2:87:2b:16:a9:c8:60:9e:be:b8:ac: e5:71:2a:c1:60:28:b3:da:65:f7:72:2d:2b:28:56:24:5f:04: 1b:e4:be:39:b4:d3:17:7c:4e:c1:67:d8:2d:f1:8d:60:35:bc: 06:16:73:c1:f0:49:6d:7b:09:e3:c5:ff:84:f0:39:3f:26:3c: 0f:c3:68:56:da:18:fe:29:f4:1e:3a:e3:8f:f9:8e:66:06:10: b0:90:20:7e:d9:61:82:b7:b6:83:88:22:d3:1a:0b:d4:cb:2b: e9:91:c8:15:9f:df:7e:92:d7:ee:b4:5d:c5:3f:30:79:6b:68: 48:1e:36:74:ec:f1:76:40:81:be:ec:8d:10:04:0b:5b:0f:32: ef:db:31:f6:a1:5d:4f:d0:74:7d:28:9f:5e:d5:d4:6d:fe:5b: 47:90:bb:ce:b5:dd:ef:a3:54:e9:2b:0c:cb:a8:c7:5b:4e:1b: d1:aa:58:fc:86:43:a5:4d:06:49:c4:94:79:15:d7:52:8b:a8: cf:b6:ec:82 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUduNhf+XitGm3fvQDf5XhpIZoklQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjEwMDIxMTQxMTdaFw0yNzEwMDExMTQ2MTdaMDMxMTAvBgNV BAMTKERDQjgzNEM0MEVDQTNBM0NCREQ2QTY1NzBEMkIwRDhBNzRCMUU0NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmqJpXsCq2oRgFUoJXQdXyWQb8 7z0pk5v0H057iD+aSEAy2eOsNdsuk2nl1khbbQdaeb0YjObwXSgfoz3Tqv1xTyxN HbCWToWAeNuW/OBNNLrO4FtThfWkVWvpKnDM5tQXZlzBWZUH7UWHFk9xXUc/dAby UKcBxGRauXYzYdDldBJt1Oz33F0KZ09q83M4HkcTi7djwafWD4UadXlj4wUkloMW IYzbnWOfT/5EH96Lb9ef9YB7fn4o/o5wvcusgwgDZurRpXoGBcBhcHADDYS9MPwg RfR0MOB2y8Ueg5bnQBwtk8LA2/hcast8OMLybRdw/fLQpzdTJS9vXZKKV/RzAgMB AAGjggJ/MIICezAdBgNVHQ4EFgQU3Lg0xA7KOjy91qZXDSsNinSx5G8wHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjQzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM4MzAz NzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAKgrWhQHQMA0GCSqGSIb3DQEBCwUAA4IBAQB+CrIjTu9d gsXL4eoVvCke5dvfhvK8n0sLjlBDBD+M3pyHcMcyyrb5Zzgh7poBjDOgzjL/bXjf aFD6aajM8ocrFqnIYJ6+uKzlcSrBYCiz2mX3ci0rKFYkXwQb5L45tNMXfE7BZ9gt 8Y1gNbwGFnPB8Eltewnjxf+E8Dk/JjwPw2hW2hj+KfQeOuOP+Y5mBhCwkCB+2WGC t7aDiCLTGgvUyyvpkcgVn99+ktfutF3FPzB5a2hIHjZ07PF2QIG+7I0QBAtbDzLv 2zH2oV1P0HR9KJ9e1dRt/ltHkLvOtd3vo1TpKwzLqMdbThvRqlj8hkOlTQZJxJR5 FddSi6jPtuyC -----END CERTIFICATE-----Generated at Mon Oct 12 16:31:18 2026 by rpki-client