$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165303a3a2f34382d3438203d3e20323034323131.roa File: 326130613a643638353a3165303a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: gxxOao4ftafq33QRBG+PpfOKheoCtYzj2f7hrMr47mQ= Subject key identifier: E4:87:24:10:EE:A4:E0:60:FF:30:19:8B:31:A5:6A:17:0F:B3:48:05 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 5757E3D3B8353C84FA321733B510644004BB9EDD Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165303a3a2f34382d3438203d3e20323034323131.roa Signing time: Sat 08 Aug 2026 01:20:44 +0000 ROA not before: Sat 08 Aug 2026 01:15:44 +0000 ROA not after: Sat 07 Aug 2027 01:20:44 +0000 asID: 204211 IP address blocks: 2a0a:d685:1e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:57:e3:d3:b8:35:3c:84:fa:32:17:33:b5:10:64:40:04:bb:9e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Aug 8 01:15:44 2026 GMT Not After : Aug 7 01:20:44 2027 GMT Subject: CN=E4872410EEA4E060FF30198B31A56A170FB34805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:12:6b:fc:7c:ae:45:9e:d1:bc:1e:b8:73: 29:12:69:71:c5:de:78:58:af:7a:44:80:53:23:5a: 85:f5:39:e2:4d:18:34:b5:70:3d:a6:14:ea:4e:05: 85:0b:8c:11:32:3f:66:0b:8c:09:85:17:61:ef:12: ad:64:55:36:4d:89:0a:91:32:0e:3a:ce:ed:e3:0d: 12:a6:d6:ed:ff:d9:be:38:28:c1:88:b8:f9:fc:03: f8:e3:73:b1:4b:96:f1:df:69:f9:5d:34:64:19:6d: 70:31:87:6a:47:4a:45:d0:bb:e4:e9:a4:c9:da:1b: ab:2f:be:2c:b8:b2:8c:06:bc:40:5c:5d:31:fa:11: 8b:34:45:ca:0c:90:c0:da:9d:eb:86:98:f9:2f:7e: f9:5d:49:80:38:68:16:c8:01:6c:e7:3b:ca:4b:f7: c2:d5:c7:71:71:b7:cc:4c:1a:78:cd:e1:7e:9d:c0: 55:45:72:72:57:46:88:bf:3c:be:fe:b7:d7:1d:f0: 07:16:e5:1e:df:43:91:a5:99:a8:cc:25:7f:c8:a7: dc:26:b6:62:a6:56:22:65:03:37:4b:31:de:30:c1: 2c:80:ff:ca:8a:e4:9c:5f:4a:49:8b:fd:07:ca:84: e7:37:29:cd:c7:30:8d:46:d9:43:72:8f:21:87:de: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:87:24:10:EE:A4:E0:60:FF:30:19:8B:31:A5:6A:17:0F:B3:48:05 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165303a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1e0::/48 Signature Algorithm: sha256WithRSAEncryption 35:37:90:e0:64:a4:47:ab:4f:92:13:29:cb:63:2b:4f:0c:85: f5:4f:38:d9:5a:bb:95:fb:67:77:d6:3c:b1:f6:4f:42:aa:40: bb:99:9f:6a:0e:f6:07:23:6a:f0:44:6d:4d:2d:f8:07:c2:85: e4:7b:71:47:55:1a:07:44:10:e6:0e:ca:a9:41:bf:fd:2a:4a: ba:28:bf:97:df:4f:a5:79:e5:a5:1f:e6:4d:f2:d4:d4:b2:43: 14:db:d5:7c:a5:b4:21:3c:2e:65:3f:bb:65:14:0d:ec:d3:ca: 8d:db:43:0e:6c:b4:8a:20:da:61:d7:f1:bd:ed:75:7c:f8:27: e8:e6:de:19:13:ab:2e:0f:7f:52:01:38:29:c0:b1:71:01:16: 6d:5b:12:5c:ad:2e:78:fc:10:6f:39:9b:ef:6f:f0:d6:54:6e: b2:68:9a:7e:17:5a:b7:84:b8:50:b0:64:75:17:10:20:01:d5: 27:38:fe:d1:3e:dd:c8:10:35:4e:6f:58:04:4b:52:71:eb:32: 2a:0a:a7:6e:b7:80:f9:8e:db:83:2f:f9:24:08:11:95:75:2d: 12:75:e8:34:a6:4b:c8:f5:36:c6:ca:05:1c:39:44:d8:bc:bb: 56:32:04:a4:2b:77:e8:97:fe:59:16:17:9c:53:c9:27:e6:0d: ba:9d:df:2c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUV1fj07g1PIT6MhcztRBkQAS7nt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA4MDgwMTE1NDRaFw0yNzA4MDcwMTIwNDRaMDMxMTAvBgNV BAMTKEU0ODcyNDEwRUVBNEUwNjBGRjMwMTk4QjMxQTU2QTE3MEZCMzQ4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UxJr/HyuRZ7RvB64cykSaXHF 3nhYr3pEgFMjWoX1OeJNGDS1cD2mFOpOBYULjBEyP2YLjAmFF2HvEq1kVTZNiQqR Mg46zu3jDRKm1u3/2b44KMGIuPn8A/jjc7FLlvHfafldNGQZbXAxh2pHSkXQu+Tp pMnaG6svviy4sowGvEBcXTH6EYs0RcoMkMDaneuGmPkvfvldSYA4aBbIAWznO8pL 98LVx3Fxt8xMGnjN4X6dwFVFcnJXRoi/PL7+t9cd8AcW5R7fQ5GlmajMJX/Ip9wm tmKmViJlAzdLMd4wwSyA/8qK5JxfSkmL/QfKhOc3Kc3HMI1G2UNyjyGH3mlBAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU5IckEO6k4GD/MBmLMaVqFw+zSAUwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjUzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDMyMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB4DANBgkqhkiG9w0BAQsFAAOCAQEANTeQ 4GSkR6tPkhMpy2MrTwyF9U842Vq7lftnd9Y8sfZPQqpAu5mfag72ByNq8ERtTS34 B8KF5HtxR1UaB0QQ5g7KqUG//SpKuii/l99PpXnlpR/mTfLU1LJDFNvVfKW0ITwu ZT+7ZRQN7NPKjdtDDmy0iiDaYdfxve11fPgn6ObeGROrLg9/UgE4KcCxcQEWbVsS XK0uePwQbzmb72/w1lRusmiafhdat4S4ULBkdRcQIAHVJzj+0T7dyBA1Tm9YBEtS cesyKgqnbreA+Y7bgy/5JAgRlXUtEnXoNKZLyPU2xsoFHDlE2Ly7VjIEpCt36Jf+ WRYXnFPJJ+YNup3fLA== -----END CERTIFICATE-----Generated at Thu Aug 27 02:04:38 2026 by rpki-client