$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166623a3a2f34382d3438203d3e203230343733.roa File: 326130613a643638353a3166623a3a2f34382d3438203d3e203230343733.roa (raw, json) Hash identifier: ABe5A3mD6+5sUmTPIKiP8LXgad6xlm2khWtM/7ZQFnQ= Subject key identifier: 25:5B:F0:79:94:1A:DE:9D:21:02:95:4D:5A:A7:43:D2:45:E2:F6:62 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 22A97DAACB7971C930A8F08650AA9B67BC4DBCB3 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166623a3a2f34382d3438203d3e203230343733.roa Signing time: Sun 16 Aug 2026 01:25:51 +0000 ROA not before: Sun 16 Aug 2026 01:20:51 +0000 ROA not after: Sun 15 Aug 2027 01:25:51 +0000 asID: 20473 IP address blocks: 2a0a:d685:1fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a9:7d:aa:cb:79:71:c9:30:a8:f0:86:50:aa:9b:67:bc:4d:bc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Aug 16 01:20:51 2026 GMT Not After : Aug 15 01:25:51 2027 GMT Subject: CN=255BF079941ADE9D2102954D5AA743D245E2F662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:83:ad:8f:c5:83:03:23:89:c9:49:f0:1f: 0a:50:30:02:fc:2c:77:67:70:3d:7e:ef:2d:bc:7b: 1e:c6:8c:f0:11:b6:fd:86:39:8d:1a:16:45:7b:dc: 8b:99:95:32:f0:c1:f2:d9:bc:c3:fa:0c:f5:9d:af: 87:8b:9b:b2:e4:80:03:f8:ea:ab:20:58:f9:41:f4: a3:50:ae:43:30:b2:4f:b3:1b:f0:8c:39:df:53:3f: 5e:8c:cf:a2:6e:8d:56:cd:80:59:3d:21:87:d8:5b: bb:9c:dc:4c:3b:c0:b8:90:63:af:68:9d:0a:c1:d7: e2:70:56:79:8f:db:da:82:68:22:e4:49:83:10:d4: f2:07:a7:ef:29:a9:57:19:1a:e3:c5:47:5a:70:02: ee:8e:95:b3:1f:de:3d:8c:3b:b1:f1:1c:e3:0f:8a: 5b:ff:3e:63:3f:5c:a2:12:88:72:fe:e0:0b:4e:d1: 7f:69:02:d9:b2:94:48:c8:cc:3b:58:36:9e:27:f6: 30:bb:99:5f:55:01:b8:1b:ff:d9:3f:91:ba:99:8c: d1:e4:03:ca:f5:ad:a1:8c:47:10:40:9d:05:69:71: eb:12:85:fb:d5:38:1d:91:71:f5:98:cf:0e:92:97: a9:a4:8c:99:b9:79:c1:84:86:02:86:2f:c6:de:cc: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5B:F0:79:94:1A:DE:9D:21:02:95:4D:5A:A7:43:D2:45:E2:F6:62 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166623a3a2f34382d3438203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fb::/48 Signature Algorithm: sha256WithRSAEncryption 1b:54:b1:84:47:93:dc:6c:58:8f:98:45:68:33:75:53:2d:d8: cc:96:eb:36:b3:f7:f9:a7:16:3f:74:26:02:a8:98:d3:7c:b7: ea:46:52:8f:3f:4b:b6:c1:4c:24:7b:51:a8:cf:83:1c:28:ae: 03:a4:99:51:97:df:28:50:39:dc:50:3d:50:b5:27:19:ab:82: 2d:d7:87:5f:11:a2:8c:b9:6e:e2:63:93:a8:62:0f:ba:1e:0d: 1b:43:5a:4a:60:94:e9:7c:5c:3a:9e:e4:6f:3e:a5:00:be:91: ff:c7:59:dd:68:30:69:13:4a:fe:73:93:cb:85:c8:5a:eb:88: 3a:7f:5d:53:99:90:1a:bd:67:00:c2:67:73:9f:4c:bb:f4:c2: 3d:84:ac:5e:88:dd:62:40:8f:23:c4:7b:90:31:53:77:88:f3: cc:a2:8b:f0:a8:cd:41:79:6e:57:21:c0:e0:00:c9:0d:8f:2c: fa:a9:70:5d:11:2e:fb:0a:62:08:d1:3a:bb:03:ac:bd:be:89: 20:2f:0f:80:fe:0e:46:40:04:48:e1:9f:9d:b7:66:af:6c:b7: 1c:b0:56:f0:ca:77:28:22:96:db:3b:ef:bb:d0:52:cf:20:c7: b8:2c:f2:f1:22:94:ab:52:84:26:4e:d3:a3:f2:99:bd:b1:7a: 64:09:09:3b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUIql9qst5cckwqPCGUKqbZ7xNvLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA4MTYwMTIwNTFaFw0yNzA4MTUwMTI1NTFaMDMxMTAvBgNV BAMTKDI1NUJGMDc5OTQxQURFOUQyMTAyOTU0RDVBQTc0M0QyNDVFMkY2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJW4Otj8WDAyOJyUnwHwpQMAL8 LHdncD1+7y28ex7GjPARtv2GOY0aFkV73IuZlTLwwfLZvMP6DPWdr4eLm7LkgAP4 6qsgWPlB9KNQrkMwsk+zG/CMOd9TP16Mz6JujVbNgFk9IYfYW7uc3Ew7wLiQY69o nQrB1+JwVnmP29qCaCLkSYMQ1PIHp+8pqVcZGuPFR1pwAu6OlbMf3j2MO7HxHOMP ilv/PmM/XKISiHL+4AtO0X9pAtmylEjIzDtYNp4n9jC7mV9VAbgb/9k/kbqZjNHk A8r1raGMRxBAnQVpcesShfvVOB2RcfWYzw6Sl6mkjJm5ecGEhgKGL8bezCiRAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUJVvweZQa3p0hApVNWqdD0kXi9mIwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCtaFAfswDQYJKoZIhvcNAQELBQADggEBABtUsYRH k9xsWI+YRWgzdVMt2MyW6zaz9/mnFj90JgKomNN8t+pGUo8/S7bBTCR7UajPgxwo rgOkmVGX3yhQOdxQPVC1Jxmrgi3Xh18Rooy5buJjk6hiD7oeDRtDWkpglOl8XDqe 5G8+pQC+kf/HWd1oMGkTSv5zk8uFyFrriDp/XVOZkBq9ZwDCZ3OfTLv0wj2ErF6I 3WJAjyPEe5AxU3eI88yii/CozUF5blchwOAAyQ2PLPqpcF0RLvsKYgjROrsDrL2+ iSAvD4D+DkZABEjhn523Zq9stxywVvDKdygilts777vQUs8gx7gs8vEilKtShCZO 06Pymb2xemQJCTs= -----END CERTIFICATE-----Generated at Thu Aug 27 02:04:40 2026 by rpki-client