$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165313a3a2f34382d3438203d3e20313937383137.roa File: 326130613a643638353a3165313a3a2f34382d3438203d3e20313937383137.roa (raw, json) Hash identifier: bJOeQxOmMqd6vowOnt17tapfyPa/lGn86y9za8nAofA= Subject key identifier: AD:55:C3:A7:6E:56:D5:3D:16:E7:4A:32:51:06:63:B1:8B:23:CA:F3 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 609BDFDEEB7EBDCE34E0A2738B2C090702791B17 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165313a3a2f34382d3438203d3e20313937383137.roa Signing time: Sun 09 Aug 2026 10:34:43 +0000 ROA not before: Sun 09 Aug 2026 10:29:43 +0000 ROA not after: Sun 08 Aug 2027 10:34:43 +0000 asID: 197817 IP address blocks: 2a0a:d685:1e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9b:df:de:eb:7e:bd:ce:34:e0:a2:73:8b:2c:09:07:02:79:1b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Aug 9 10:29:43 2026 GMT Not After : Aug 8 10:34:43 2027 GMT Subject: CN=AD55C3A76E56D53D16E74A32510663B18B23CAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:6d:4a:9f:f5:b2:fe:f8:71:f6:47:f0:2d: 71:8b:1b:86:84:3a:4f:09:1f:17:87:58:58:fe:89: 51:91:34:97:7c:97:62:22:cf:40:a9:15:fc:c2:06: 5b:4b:42:a3:5d:ac:65:47:74:ef:72:65:fd:53:29: 8f:c6:51:b2:bd:33:24:78:90:26:03:07:5d:2f:9f: 5c:6a:e3:d4:e3:87:7c:d9:dc:c1:83:76:0b:59:5f: fc:10:33:8f:e5:24:9d:b5:8c:b8:0c:61:e2:2c:36: 0a:1e:1c:04:b3:c6:46:58:b3:35:d8:41:52:c4:c7: c9:77:78:f5:3f:df:c0:c4:ea:34:88:0c:ed:8e:57: 82:61:72:83:48:4a:21:2f:1a:17:5e:12:70:07:e8: f3:34:03:b4:a4:47:c0:15:fb:f4:55:0d:e1:0d:49: 50:fc:4b:8a:17:65:c4:c0:dd:48:14:d8:be:62:ca: f0:67:2a:f8:f3:3d:31:8e:69:e7:50:52:0d:dd:46: 55:86:51:4d:bc:3a:0b:42:d6:41:4e:d7:02:15:07: 7f:fd:fe:f6:0f:9d:75:c7:fe:45:7a:65:39:b4:2c: 4e:e0:28:6b:5a:de:d8:75:6c:fc:25:82:8e:fd:c2: cd:68:ed:ec:d7:5e:ad:0c:11:bd:ee:77:b9:0f:38: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:55:C3:A7:6E:56:D5:3D:16:E7:4A:32:51:06:63:B1:8B:23:CA:F3 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165313a3a2f34382d3438203d3e20313937383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1e1::/48 Signature Algorithm: sha256WithRSAEncryption 15:53:88:ae:f4:77:e9:21:af:c6:71:17:9e:26:64:c6:df:d1: 8f:c5:44:cf:63:00:76:0d:c4:e5:cb:d9:0d:2e:33:88:dd:cc: 0a:3d:35:ec:94:64:33:5f:6e:ea:e2:d8:15:57:4a:a7:7f:cb: ab:e8:55:bd:c5:08:8a:8f:67:7e:d9:f7:4e:9a:ef:19:63:6b: 30:3b:6d:a9:3f:96:86:f5:a5:04:2b:f4:a7:4b:36:97:bf:13: e5:01:9a:cf:1b:45:a0:94:e6:1f:74:3b:77:84:ea:b6:e3:68: 78:8f:8f:1b:5e:8f:8b:de:e9:a6:13:89:a1:3f:82:24:ef:26: 91:b8:e3:f3:e5:1a:cc:a3:87:b6:e0:64:d4:db:ed:9a:b3:ef: bf:1b:a2:8a:01:dd:7b:24:67:2b:d7:99:ba:3f:2b:ce:d4:5c: f1:a8:79:92:cb:81:3b:64:78:86:83:e9:e8:0a:34:ab:cb:ad: af:20:d1:60:ca:ac:5d:b5:3e:1f:03:88:a8:18:c3:42:99:49: d8:a6:1e:e7:ab:ae:1a:f8:81:20:05:78:55:56:b0:a9:b3:41: f6:0d:71:19:4a:a6:83:8a:d5:0d:dc:81:66:b0:7b:36:bf:b3: e3:50:89:3c:d9:de:a0:cb:de:34:2b:88:6b:0a:00:5d:88:3d: c5:d1:e8:5d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUYJvf3ut+vc404KJziywJBwJ5GxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA4MDkxMDI5NDNaFw0yNzA4MDgxMDM0NDNaMDMxMTAvBgNV BAMTKEFENTVDM0E3NkU1NkQ1M0QxNkU3NEEzMjUxMDY2M0IxOEIyM0NBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJm1Kn/Wy/vhx9kfwLXGLG4aE Ok8JHxeHWFj+iVGRNJd8l2Iiz0CpFfzCBltLQqNdrGVHdO9yZf1TKY/GUbK9MyR4 kCYDB10vn1xq49Tjh3zZ3MGDdgtZX/wQM4/lJJ21jLgMYeIsNgoeHASzxkZYszXY QVLEx8l3ePU/38DE6jSIDO2OV4JhcoNISiEvGhdeEnAH6PM0A7SkR8AV+/RVDeEN SVD8S4oXZcTA3UgU2L5iyvBnKvjzPTGOaedQUg3dRlWGUU28OgtC1kFO1wIVB3/9 /vYPnXXH/kV6ZTm0LE7gKGta3th1bPwlgo79ws1o7ezXXq0MEb3ud7kPONGvAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUrVXDp25W1T0W50oyUQZjsYsjyvMwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjUzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz NzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB4TANBgkqhkiG9w0BAQsFAAOCAQEAFVOI rvR36SGvxnEXniZkxt/Rj8VEz2MAdg3E5cvZDS4ziN3MCj017JRkM19u6uLYFVdK p3/Lq+hVvcUIio9nftn3TprvGWNrMDttqT+WhvWlBCv0p0s2l78T5QGazxtFoJTm H3Q7d4TqtuNoeI+PG16Pi97pphOJoT+CJO8mkbjj8+UazKOHtuBk1NvtmrPvvxui igHdeyRnK9eZuj8rztRc8ah5ksuBO2R4hoPp6Ao0q8utryDRYMqsXbU+HwOIqBjD QplJ2KYe56uuGviBIAV4VVawqbNB9g1xGUqmg4rVDdyBZrB7Nr+z41CJPNneoMve NCuIawoAXYg9xdHoXQ== -----END CERTIFICATE-----Generated at Wed Aug 26 20:06:31 2026 by rpki-client