$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166623a3a2f34382d3438203d3e20313937383137.roa File: 326130613a643638353a3166623a3a2f34382d3438203d3e20313937383137.roa (raw, json) Hash identifier: i3JPYdFiKaoucKD0n63fM055+ZwLCpQhkyb2yOyuTSU= Subject key identifier: E4:F7:EF:DE:8D:20:D2:BB:14:F4:D9:29:B7:FF:DD:28:17:6F:98:62 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 22383AC257F4B56624F44FD76132B5F184594105 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166623a3a2f34382d3438203d3e20313937383137.roa Signing time: Sun 16 Aug 2026 01:41:46 +0000 ROA not before: Sun 16 Aug 2026 01:36:46 +0000 ROA not after: Sun 15 Aug 2027 01:41:46 +0000 asID: 197817 IP address blocks: 2a0a:d685:1fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:38:3a:c2:57:f4:b5:66:24:f4:4f:d7:61:32:b5:f1:84:59:41:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Aug 16 01:36:46 2026 GMT Not After : Aug 15 01:41:46 2027 GMT Subject: CN=E4F7EFDE8D20D2BB14F4D929B7FFDD28176F9862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:5a:eb:99:1f:25:f2:b4:87:85:da:13:84: 30:18:bd:bb:22:0f:24:5c:4d:19:40:d7:59:9c:f5: 42:ef:9a:d1:4e:36:ff:15:0d:68:db:bc:44:ff:b9: 61:f7:c0:89:de:5c:07:27:af:2a:d1:60:fc:f8:df: e5:e3:b7:06:86:7d:b4:0d:6b:ec:68:0c:e9:63:d4: f0:cb:27:7a:63:21:10:27:24:57:79:8e:d4:5a:22: ab:23:71:c1:f5:5e:8c:c1:97:c3:de:0c:31:d5:84: b2:4d:60:25:aa:f8:80:93:48:5f:1f:03:06:87:ff: 52:8e:ed:2a:af:5f:94:2b:e2:79:37:b0:2a:09:b7: ec:12:88:f5:d9:7b:ad:65:a5:41:8a:72:fe:99:56: 9a:33:f6:23:c6:17:ad:4c:97:5e:bc:e9:fb:d0:f9: f9:33:2e:1f:16:d0:78:15:54:e0:5d:0e:3f:fe:80: 7e:15:fb:80:c2:02:62:b9:6f:27:71:06:0e:67:06: 0b:ca:06:ce:87:ae:ef:df:d9:70:26:6a:db:b2:3e: 4a:6b:4f:63:31:88:58:9e:9d:2c:5f:6f:c8:6f:c1: 7d:34:b2:a3:f3:23:f9:32:11:95:c6:a1:23:cd:4c: f8:c7:62:de:ee:c6:b2:d0:55:8b:66:84:73:4e:30: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F7:EF:DE:8D:20:D2:BB:14:F4:D9:29:B7:FF:DD:28:17:6F:98:62 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166623a3a2f34382d3438203d3e20313937383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fb::/48 Signature Algorithm: sha256WithRSAEncryption 3a:a9:9c:7a:e9:a6:b7:7a:c0:de:42:5a:cd:de:ab:d3:66:a3: 62:eb:aa:b7:30:09:25:d0:28:78:ac:26:19:2c:4a:4d:20:05: 31:8b:7a:82:15:9b:3b:3f:9d:e7:c9:f3:36:d2:a6:87:bf:24: 53:cb:e2:53:2c:c6:a3:1b:54:11:c5:fa:1a:77:fa:8b:1e:44: 42:4c:b3:7a:2f:b9:6f:1b:6d:94:03:92:74:6e:61:d4:df:06: f1:ed:5e:20:8f:99:33:dd:03:57:b3:31:b9:aa:6e:b6:c4:3f: 08:ce:9d:30:81:22:9d:b0:68:95:02:f0:99:96:b8:14:e8:fb: 69:ed:df:05:c9:11:c0:e7:59:47:43:fa:4b:b0:f9:32:58:20: 1e:6c:d9:da:52:48:a9:47:11:74:a8:45:89:88:7d:ff:23:be: 3f:72:7e:d5:6f:af:08:6a:e2:df:40:b3:8f:0a:e8:19:d9:7b: 91:c9:6c:52:d7:1e:18:c2:cc:36:f6:31:a5:9c:16:8a:83:1a: 1b:a4:2e:8c:c9:38:af:28:4a:87:5c:c3:88:a2:a8:cb:2b:0c: 58:85:8d:30:64:5d:04:48:5e:d6:ce:e6:74:ad:7d:16:24:ad: 83:49:b3:ea:7b:29:54:40:0c:6f:60:5e:05:e3:89:c7:f0:f6: 8b:d2:cb:09 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUIjg6wlf0tWYk9E/XYTK18YRZQQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA4MTYwMTM2NDZaFw0yNzA4MTUwMTQxNDZaMDMxMTAvBgNV BAMTKEU0RjdFRkRFOEQyMEQyQkIxNEY0RDkyOUI3RkZERDI4MTc2Rjk4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGFrrmR8l8rSHhdoThDAYvbsi DyRcTRlA11mc9ULvmtFONv8VDWjbvET/uWH3wIneXAcnryrRYPz43+XjtwaGfbQN a+xoDOlj1PDLJ3pjIRAnJFd5jtRaIqsjccH1XozBl8PeDDHVhLJNYCWq+ICTSF8f AwaH/1KO7SqvX5Qr4nk3sCoJt+wSiPXZe61lpUGKcv6ZVpoz9iPGF61Ml1686fvQ +fkzLh8W0HgVVOBdDj/+gH4V+4DCAmK5bydxBg5nBgvKBs6Hru/f2XAmatuyPkpr T2MxiFienSxfb8hvwX00sqPzI/kyEZXGoSPNTPjHYt7uxrLQVYtmhHNOMPOhAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU5Pfv3o0g0rsU9Nkpt//dKBdvmGIwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz NzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB+zANBgkqhkiG9w0BAQsFAAOCAQEAOqmc eummt3rA3kJazd6r02ajYuuqtzAJJdAoeKwmGSxKTSAFMYt6ghWbOz+d58nzNtKm h78kU8viUyzGoxtUEcX6Gnf6ix5EQkyzei+5bxttlAOSdG5h1N8G8e1eII+ZM90D V7MxuaputsQ/CM6dMIEinbBolQLwmZa4FOj7ae3fBckRwOdZR0P6S7D5MlggHmzZ 2lJIqUcRdKhFiYh9/yO+P3J+1W+vCGri30CzjwroGdl7kclsUtceGMLMNvYxpZwW ioMaG6QujMk4ryhKh1zDiKKoyysMWIWNMGRdBEhe1s7mdK19FiStg0mz6nspVEAM b2BeBeOJx/D2i9LLCQ== -----END CERTIFICATE-----Generated at Wed Aug 26 20:06:21 2026 by rpki-client