$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166633a3a2f34382d3438203d3e2038303735.roa File: 326130613a643638353a3166633a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: pzk6WrpU95NH3nDY1p6p+h+OtvnL7o8c4WwCtkG1BTk= Subject key identifier: 12:98:58:63:30:5D:D6:F1:EB:03:A9:09:0B:D2:83:EB:8C:D5:31:89 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 586DEE4D37B3DE0AC2E0E53D3273CD9677A49048 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166633a3a2f34382d3438203d3e2038303735.roa Signing time: Tue 04 Aug 2026 22:46:20 +0000 ROA not before: Tue 04 Aug 2026 22:41:20 +0000 ROA not after: Tue 03 Aug 2027 22:46:20 +0000 asID: 8075 IP address blocks: 2a0a:d685:1fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6d:ee:4d:37:b3:de:0a:c2:e0:e5:3d:32:73:cd:96:77:a4:90:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Aug 4 22:41:20 2026 GMT Not After : Aug 3 22:46:20 2027 GMT Subject: CN=12985863305DD6F1EB03A9090BD283EB8CD53189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:94:26:f7:55:e7:99:5b:c1:d0:e6:aa:5d: ae:99:1a:32:0e:e0:6f:68:d8:1a:63:53:a5:c9:35: 70:81:00:93:62:4d:34:71:3a:df:2d:1b:94:b3:80: 8d:5b:84:a2:01:15:8f:c7:93:e1:7d:32:52:bb:40: 2b:38:ec:79:50:95:a3:0b:80:24:59:7c:ba:4a:c1: 5c:21:9d:9e:82:38:f8:ca:95:5c:d7:10:08:4b:b9: eb:2d:90:9b:51:f5:89:7e:1a:44:39:54:14:37:ea: 80:cd:2f:d4:9e:b4:33:ca:56:91:aa:2e:b5:0a:82: 06:4c:bb:44:af:66:0b:13:2c:02:0a:8b:5c:f1:5c: 87:46:1c:4e:57:b4:be:11:a3:5a:4d:e6:67:0d:bd: 9d:88:7e:d6:ab:e2:cc:d0:a7:f5:75:6d:b0:5e:2b: c2:fc:09:1f:f5:cb:22:22:4f:60:62:8a:f0:74:31: 8b:70:d9:ae:e7:58:b9:34:39:7c:03:50:8c:ab:c0: b9:98:63:8d:f5:bd:dd:2d:68:5b:38:02:4e:ef:d8: e0:c1:b9:94:3b:86:38:0e:94:2c:ca:20:f9:09:21: 93:44:90:50:9c:c3:34:47:4f:43:fb:d0:fb:d7:4c: 31:62:12:35:31:3a:c9:73:78:ef:03:72:63:9b:68: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:98:58:63:30:5D:D6:F1:EB:03:A9:09:0B:D2:83:EB:8C:D5:31:89 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166633a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fc::/48 Signature Algorithm: sha256WithRSAEncryption 5c:a9:94:b2:fd:81:c6:01:51:c9:e0:5c:a0:04:93:7d:33:aa: f6:22:1c:ed:5c:ac:81:7b:46:db:0d:7c:5c:ef:df:9c:73:e9: d4:77:42:e9:70:5f:59:56:20:52:dc:10:98:b5:70:01:93:f2: a5:74:4f:d2:76:cc:30:6a:2f:35:18:77:01:1b:10:95:f3:47: 53:56:c5:46:8e:a4:75:0c:3f:b0:09:07:4e:ab:c6:af:0b:c0: 2a:48:68:82:09:57:c4:24:a8:a7:e8:7a:f3:1d:09:d2:a0:37: 73:9e:c7:9a:25:7f:1b:a6:be:c0:15:cb:21:bd:5e:e5:d4:64: b5:6e:f9:a0:14:6e:44:2e:04:cc:42:3a:ef:df:97:44:03:60: 6f:c7:95:dd:a1:70:06:97:af:b0:ce:9d:67:41:9c:71:f0:45: ff:b2:e5:e8:bd:f4:6c:f4:b8:41:61:d1:c4:5f:6b:c6:0a:e9: e0:b5:16:31:3f:1b:d5:c2:43:e1:02:4f:7a:b7:b6:12:6e:92: d3:4b:74:81:d7:d5:fa:74:93:ca:95:17:58:75:1d:0d:f8:9d: 0a:a7:8e:fc:07:2e:c5:43:c3:da:5f:6b:56:3d:c6:c8:7d:f5: e4:96:b1:cd:14:ef:da:95:e3:05:32:01:80:8d:d0:b6:9f:81: 27:4b:c1:b9 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUWG3uTTez3grC4OU9MnPNlnekkEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA4MDQyMjQxMjBaFw0yNzA4MDMyMjQ2MjBaMDMxMTAvBgNV BAMTKDEyOTg1ODYzMzA1REQ2RjFFQjAzQTkwOTBCRDI4M0VCOENENTMxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyepQm91XnmVvB0OaqXa6ZGjIO 4G9o2BpjU6XJNXCBAJNiTTRxOt8tG5SzgI1bhKIBFY/Hk+F9MlK7QCs47HlQlaML gCRZfLpKwVwhnZ6COPjKlVzXEAhLuestkJtR9Yl+GkQ5VBQ36oDNL9SetDPKVpGq LrUKggZMu0SvZgsTLAIKi1zxXIdGHE5XtL4Ro1pN5mcNvZ2Iftar4szQp/V1bbBe K8L8CR/1yyIiT2BiivB0MYtw2a7nWLk0OXwDUIyrwLmYY431vd0taFs4Ak7v2ODB uZQ7hjgOlCzKIPkJIZNEkFCcwzRHT0P70PvXTDFiEjUxOslzeO8DcmObaH+BAgMB AAGjggJ/MIICezAdBgNVHQ4EFgQUEphYYzBd1vHrA6kJC9KD64zVMYkwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM4MzAz NzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAKgrWhQH8MA0GCSqGSIb3DQEBCwUAA4IBAQBcqZSy/YHG AVHJ4FygBJN9M6r2IhztXKyBe0bbDXxc79+cc+nUd0LpcF9ZViBS3BCYtXABk/Kl dE/Sdswwai81GHcBGxCV80dTVsVGjqR1DD+wCQdOq8avC8AqSGiCCVfEJKin6Hrz HQnSoDdznseaJX8bpr7AFcshvV7l1GS1bvmgFG5ELgTMQjrv35dEA2Bvx5XdoXAG l6+wzp1nQZxx8EX/suXovfRs9LhBYdHEX2vGCungtRYxPxvVwkPhAk96t7YSbpLT S3SB19X6dJPKlRdYdR0N+J0Kp478By7FQ8PaX2tWPcbIffXklrHNFO/aleMFMgGA jdC2n4EnS8G5 -----END CERTIFICATE-----Generated at Thu Aug 27 01:23:24 2026 by rpki-client