$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165313a3a2f34382d3438203d3e203230343733.roa File: 326130613a643638353a3165313a3a2f34382d3438203d3e203230343733.roa (raw, json) Hash identifier: rE1SpPJswTDC0zkT8N3FCsmpMJAK1wSE9lpjiIqQGp8= Subject key identifier: AE:F3:DF:10:7C:23:89:30:D6:AA:7B:12:5E:7A:0C:5E:33:58:B7:43 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 28387173179E27FB340F872CB2A0313C5AFF5B13 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165313a3a2f34382d3438203d3e203230343733.roa Signing time: Sun 09 Aug 2026 10:35:16 +0000 ROA not before: Sun 09 Aug 2026 10:30:16 +0000 ROA not after: Sun 08 Aug 2027 10:35:16 +0000 asID: 20473 IP address blocks: 2a0a:d685:1e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:38:71:73:17:9e:27:fb:34:0f:87:2c:b2:a0:31:3c:5a:ff:5b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Aug 9 10:30:16 2026 GMT Not After : Aug 8 10:35:16 2027 GMT Subject: CN=AEF3DF107C238930D6AA7B125E7A0C5E3358B743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:d2:86:7a:ad:02:74:81:8d:68:ef:63:9e: d3:bf:c6:01:c6:16:b4:fd:28:53:c1:19:dd:9b:f8: 14:7c:f9:b2:68:25:b1:30:4d:99:85:76:d1:2b:12: c7:dd:8b:40:94:cb:97:04:12:d0:1d:12:3a:84:2e: ec:6b:b3:b6:86:15:0b:cd:96:76:f0:3c:b2:a7:3f: 2d:45:5d:cb:27:c5:21:76:fb:fb:23:e0:05:e2:4f: e6:e2:02:9a:ee:7d:5e:43:1e:3c:99:3a:62:b0:2a: 5f:db:a7:6f:c3:c5:cf:5f:03:7e:48:86:3c:92:46: a5:34:6a:b6:91:ce:4e:1a:d0:d6:49:87:18:47:f7: 76:46:a5:e1:49:59:c6:0e:94:cd:5f:fe:00:74:c4: 51:33:71:7e:b4:be:93:b1:f3:f3:2e:1f:de:e4:2e: 3e:15:80:99:ae:81:d2:6b:e9:7a:eb:d3:cf:7f:ae: 5d:88:ed:88:9b:9b:26:00:a7:02:21:47:bd:89:4d: f9:27:a3:4f:5e:d0:fe:e9:92:07:16:61:e4:57:9a: cb:7c:7f:96:d3:27:cf:63:e6:2d:39:71:ac:e5:15: d2:f7:06:18:28:22:59:ce:c8:32:9c:97:55:80:51: c5:d3:f6:f0:45:c6:85:83:18:62:42:79:07:f9:e4: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F3:DF:10:7C:23:89:30:D6:AA:7B:12:5E:7A:0C:5E:33:58:B7:43 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3165313a3a2f34382d3438203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1e1::/48 Signature Algorithm: sha256WithRSAEncryption 96:20:08:0b:db:40:d5:99:dd:f2:25:3c:ca:77:40:7f:13:6e: 68:9a:de:75:25:7d:9d:c1:1f:75:d3:57:77:d0:5c:26:1a:f8: 26:51:e2:1f:cc:27:d8:a1:12:94:c6:72:68:b0:a4:a3:4e:6a: 1b:7b:55:cb:28:57:32:c0:62:1e:c6:0f:72:51:f6:14:35:bd: 84:ac:0c:25:f2:50:2a:be:f5:b2:d6:d9:44:ed:3e:f7:8e:21: c4:90:ff:8f:37:0c:ea:83:51:e6:ae:70:01:da:76:45:b6:7c: 63:49:c8:15:34:40:1f:47:48:4f:64:74:43:ba:a4:44:d7:7a: 82:7e:24:d1:c0:8c:b8:0c:72:ae:bd:66:63:dc:88:53:c0:aa: 01:a4:20:30:c7:c2:6c:67:dd:d6:b6:2a:5c:89:17:d2:9c:83: 8d:8c:f5:f2:c5:35:61:94:29:c7:0f:c8:fb:eb:ac:53:c5:9f: 44:3c:89:df:b0:a4:76:4b:75:a3:96:58:99:bf:8f:d0:dd:a1: 53:96:e7:45:e2:9f:15:fe:88:b0:9d:a4:dc:ec:2f:d8:5d:f5: 4f:fa:72:0b:4d:8e:58:67:55:11:62:fc:61:c7:aa:2a:aa:cd: a5:86:9d:5e:98:c4:3e:f3:38:49:99:cb:76:56:85:eb:69:cd: 1c:13:58:b4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUKDhxcxeeJ/s0D4cssqAxPFr/WxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA4MDkxMDMwMTZaFw0yNzA4MDgxMDM1MTZaMDMxMTAvBgNV BAMTKEFFRjNERjEwN0MyMzg5MzBENkFBN0IxMjVFN0EwQzVFMzM1OEI3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiq9KGeq0CdIGNaO9jntO/xgHG FrT9KFPBGd2b+BR8+bJoJbEwTZmFdtErEsfdi0CUy5cEEtAdEjqELuxrs7aGFQvN lnbwPLKnPy1FXcsnxSF2+/sj4AXiT+biAprufV5DHjyZOmKwKl/bp2/Dxc9fA35I hjySRqU0araRzk4a0NZJhxhH93ZGpeFJWcYOlM1f/gB0xFEzcX60vpOx8/MuH97k Lj4VgJmugdJr6Xrr089/rl2I7YibmyYApwIhR72JTfkno09e0P7pkgcWYeRXmst8 f5bTJ89j5i05cazlFdL3BhgoIlnOyDKcl1WAUcXT9vBFxoWDGGJCeQf55EKFAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUrvPfEHwjiTDWqnsSXnoMXjNYt0MwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjUzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCtaFAeEwDQYJKoZIhvcNAQELBQADggEBAJYgCAvb QNWZ3fIlPMp3QH8Tbmia3nUlfZ3BH3XTV3fQXCYa+CZR4h/MJ9ihEpTGcmiwpKNO aht7VcsoVzLAYh7GD3JR9hQ1vYSsDCXyUCq+9bLW2UTtPveOIcSQ/483DOqDUeau cAHadkW2fGNJyBU0QB9HSE9kdEO6pETXeoJ+JNHAjLgMcq69ZmPciFPAqgGkIDDH wmxn3da2KlyJF9Kcg42M9fLFNWGUKccPyPvrrFPFn0Q8id+wpHZLdaOWWJm/j9Dd oVOW50XinxX+iLCdpNzsL9hd9U/6cgtNjlhnVRFi/GHHqiqqzaWGnV6YxD7zOEmZ y3ZWhetpzRwTWLQ= -----END CERTIFICATE-----Generated at Thu Aug 27 03:56:12 2026 by rpki-client