$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166633a3a2f34382d3438203d3e203230343733.roa File: 326130613a643638353a3166633a3a2f34382d3438203d3e203230343733.roa (raw, json) Hash identifier: mu1ltzvI51wLNOZTlkeYor816myfPua9YynZBcae/sc= Subject key identifier: A6:D4:DE:9A:1E:1F:8D:C5:28:DB:A7:45:04:0F:D5:3C:CF:09:72:FC Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 7D2DA2F550F1D1FAE597AF96AA3596032B011AF3 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166633a3a2f34382d3438203d3e203230343733.roa Signing time: Fri 02 Oct 2026 11:45:53 +0000 ROA not before: Fri 02 Oct 2026 11:40:53 +0000 ROA not after: Fri 01 Oct 2027 11:45:53 +0000 asID: 20473 IP address blocks: 2a0a:d685:1fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 22:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2d:a2:f5:50:f1:d1:fa:e5:97:af:96:aa:35:96:03:2b:01:1a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Oct 2 11:40:53 2026 GMT Not After : Oct 1 11:45:53 2027 GMT Subject: CN=A6D4DE9A1E1F8DC528DBA745040FD53CCF0972FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:63:a6:d5:47:dc:b8:33:b2:3e:37:87:af:df: 61:2a:19:ee:4f:ad:78:2d:dd:41:14:e1:a1:5d:1a: 5e:dc:ed:69:b3:83:d3:24:c0:a0:7f:ac:8a:b3:87: 7a:40:b1:51:5c:52:2a:d6:96:fe:de:bf:00:22:d9: 0c:be:b5:ff:a7:12:55:0c:d3:36:fd:d3:fe:80:aa: 95:5a:4c:f4:91:d6:74:4a:6a:49:1f:c6:58:7b:9a: aa:f1:dc:9a:63:b6:f4:66:87:4a:66:8c:02:d9:63: f2:08:60:8c:dd:ee:15:ec:d9:f7:f9:d4:58:9f:37: d9:15:67:1d:3f:b0:c5:fb:be:75:98:ec:cd:85:68: d4:3e:41:f7:83:14:0e:93:a0:28:fd:51:99:7e:0a: bf:a6:de:d3:7d:f2:b2:9a:bd:5d:01:44:f4:94:4f: 16:cb:65:8d:11:b2:cc:a0:16:40:91:c3:15:d3:85: 7f:f2:98:62:88:cf:e5:0e:3f:e2:c8:8c:76:aa:d4: 63:3b:f8:73:45:9a:fd:af:83:d8:ef:6c:01:69:de: 6f:63:be:a2:aa:04:3e:fc:6a:ac:71:02:7e:fe:50: a6:24:05:e8:85:ac:b2:49:25:51:60:7f:6e:48:34: 57:68:fe:e4:19:94:51:01:bd:7d:ee:4f:1b:71:94: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D4:DE:9A:1E:1F:8D:C5:28:DB:A7:45:04:0F:D5:3C:CF:09:72:FC X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166633a3a2f34382d3438203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fc::/48 Signature Algorithm: sha256WithRSAEncryption 76:65:6c:69:05:e1:ea:3b:27:44:1e:dc:15:d8:f7:db:b2:1d: 03:cf:25:84:ce:82:27:03:b7:80:39:42:09:4a:c0:f1:53:87: f4:c5:56:42:ff:28:25:a1:99:3e:0f:d4:e6:d7:36:35:0b:1d: 84:e1:13:e0:11:ce:4f:c0:4b:6e:90:06:2c:b5:92:b0:ae:28: fc:55:2f:0d:e5:af:2b:e6:7f:2b:92:25:91:39:fd:48:5e:3e: 32:cd:ee:7c:6e:a0:cb:eb:0c:ab:6a:ba:0a:09:96:ed:4a:12: be:7e:d6:1f:cb:96:54:59:5a:5e:aa:94:b4:70:92:19:44:6b: bd:ee:9e:b5:5c:2c:8e:d7:ce:0c:91:e8:1a:96:87:f3:55:29: 9e:a5:5c:b3:ca:42:ec:24:1a:e7:a1:f7:e0:f5:0d:80:e0:8b: 97:e5:7e:ac:e1:d3:c3:63:7d:5b:64:e0:cc:01:e4:26:39:2b: 15:98:c9:61:0b:e6:78:d6:1e:fe:54:94:72:6d:f3:ab:b7:99: 82:26:e1:26:fb:40:93:ec:b5:19:a0:4f:47:57:96:86:96:e0: 6a:e5:8a:e5:54:aa:b0:49:e1:7d:a0:69:5c:5b:0f:bc:27:20: d7:56:20:a5:77:4e:f7:85:c7:a6:20:75:ef:ca:53:5a:c9:49: 2b:e0:c8:c7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUfS2i9VDx0frll6+WqjWWAysBGvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjEwMDIxMTQwNTNaFw0yNzEwMDExMTQ1NTNaMDMxMTAvBgNV BAMTKEE2RDRERTlBMUUxRjhEQzUyOERCQTc0NTA0MEZENTNDQ0YwOTcyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUY6bVR9y4M7I+N4ev32EqGe5P rXgt3UEU4aFdGl7c7Wmzg9MkwKB/rIqzh3pAsVFcUirWlv7evwAi2Qy+tf+nElUM 0zb90/6AqpVaTPSR1nRKakkfxlh7mqrx3JpjtvRmh0pmjALZY/IIYIzd7hXs2ff5 1FifN9kVZx0/sMX7vnWY7M2FaNQ+QfeDFA6ToCj9UZl+Cr+m3tN98rKavV0BRPSU TxbLZY0RssygFkCRwxXThX/ymGKIz+UOP+LIjHaq1GM7+HNFmv2vg9jvbAFp3m9j vqKqBD78aqxxAn7+UKYkBeiFrLJJJVFgf25INFdo/uQZlFEBvX3uTxtxlGwPAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUptTemh4fjcUo26dFBA/VPM8JcvwwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCtaFAfwwDQYJKoZIhvcNAQELBQADggEBAHZlbGkF 4eo7J0Qe3BXY99uyHQPPJYTOgicDt4A5QglKwPFTh/TFVkL/KCWhmT4P1ObXNjUL HYThE+ARzk/AS26QBiy1krCuKPxVLw3lryvmfyuSJZE5/UhePjLN7nxuoMvrDKtq ugoJlu1KEr5+1h/LllRZWl6qlLRwkhlEa73unrVcLI7XzgyR6BqWh/NVKZ6lXLPK QuwkGueh9+D1DYDgi5flfqzh08NjfVtk4MwB5CY5KxWYyWEL5njWHv5UlHJt86u3 mYIm4Sb7QJPstRmgT0dXloaW4GrliuVUqrBJ4X2gaVxbD7wnINdWIKV3TveFx6Yg de/KU1rJSSvgyMc= -----END CERTIFICATE-----Generated at Mon Oct 12 16:31:18 2026 by rpki-client