$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20313937383137.roa File: 326130613a643638353a3166643a3a2f34382d3438203d3e20313937383137.roa (raw, json) Hash identifier: mk1+QD98FZCmkzNl/od218+WYX6Y0yx2KqgewbP5fAM= Subject key identifier: 6C:AD:16:0A:30:BB:B0:CF:7A:A2:1B:06:A2:18:DC:EA:3B:1F:41:A1 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 066275899E86BB0BFDD5C0AF8D18D4243FC53DEE Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20313937383137.roa Signing time: Fri 31 Jul 2026 03:29:17 +0000 ROA not before: Fri 31 Jul 2026 03:24:17 +0000 ROA not after: Fri 30 Jul 2027 03:29:17 +0000 asID: 197817 IP address blocks: 2a0a:d685:1fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:62:75:89:9e:86:bb:0b:fd:d5:c0:af:8d:18:d4:24:3f:c5:3d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 31 03:24:17 2026 GMT Not After : Jul 30 03:29:17 2027 GMT Subject: CN=6CAD160A30BBB0CF7AA21B06A218DCEA3B1F41A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7d:2a:b4:01:0d:b1:db:cd:08:17:90:96:9a: 47:82:87:20:a9:19:00:ef:12:25:7b:59:3a:f6:80: 9d:25:77:c7:b0:12:62:c2:ab:54:b4:fc:88:2c:6e: 58:ba:52:d0:d7:b0:42:c4:4b:8b:ca:9f:5e:13:1c: 4a:b6:d7:1f:dc:26:46:bd:07:06:51:4f:a6:68:b7: bf:4b:38:d3:1f:ac:88:11:4c:10:85:ae:aa:47:36: f3:fa:81:7b:5e:e2:71:ff:4c:d6:28:ed:cb:e7:94: df:ff:83:a8:6a:91:6a:73:f8:6b:58:bf:6a:5f:a7: da:d0:3e:bf:f0:74:9c:e0:22:b5:fa:9a:6b:8e:00: 36:5f:cf:67:9a:45:62:e4:08:27:93:ae:e1:86:a9: c7:8f:c0:3b:6f:af:05:7f:02:11:e8:45:78:af:43: a7:a6:79:f0:44:11:e3:d5:c2:89:d8:a0:bd:45:86: b0:d5:a4:58:09:b6:2a:94:a4:c7:3b:75:2d:60:75: e8:54:e7:ba:64:81:69:71:75:90:6a:21:73:d7:15: 6f:18:f9:26:88:a4:dd:23:18:cc:9a:87:0e:55:7d: 14:a2:12:94:fc:94:88:1f:a3:d4:8c:9d:6a:8a:78: 87:6a:04:7f:bf:ee:3a:0a:70:5d:d7:c5:b6:e1:99: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AD:16:0A:30:BB:B0:CF:7A:A2:1B:06:A2:18:DC:EA:3B:1F:41:A1 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20313937383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fd::/48 Signature Algorithm: sha256WithRSAEncryption 2a:8f:93:48:94:5f:d5:ee:26:0f:2d:f9:c3:01:e6:5c:9e:68: fb:1b:0c:f3:06:fd:c6:07:d2:5f:7e:c6:e8:e0:b6:d3:43:39: 71:51:85:1f:71:7f:e0:a1:a4:50:ff:e3:22:0f:0b:bf:5d:11: 16:9c:9b:1c:6b:14:d9:64:c0:c9:a4:c7:7f:4f:28:02:05:29: ac:e5:6a:87:a1:c4:03:7e:52:b7:f3:ab:b2:06:93:02:c9:d6: 17:e8:52:8c:84:17:72:c1:38:9c:77:16:1e:ad:7c:84:8b:ea: 78:c0:25:53:ef:0f:e6:bc:48:0e:91:e0:b6:27:b3:6e:62:4e: e3:ee:9e:19:80:15:82:8a:25:56:5d:1e:f3:9a:f5:14:d8:43: 51:1e:26:1e:bb:22:b3:b1:70:01:bd:00:0c:f7:8f:c7:e0:c4: 8f:3c:38:2d:12:c8:bf:15:df:14:7e:25:bb:8d:9e:89:79:14: 03:d7:d4:cf:f9:8e:b2:86:ea:81:6e:cf:25:5b:55:d2:0d:90: 7a:1e:d1:f9:b7:02:cd:41:d0:2b:b6:79:bb:84:a7:5d:f9:53: 57:bb:6d:ef:40:2f:b4:7d:4c:bd:34:45:74:86:0f:ea:36:08: e7:ff:c9:a4:9c:85:13:bc:62:e6:7a:61:5d:5f:f6:56:0a:b1: 1c:f6:06:6a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUBmJ1iZ6Guwv91cCvjRjUJD/FPe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MzEwMzI0MTdaFw0yNzA3MzAwMzI5MTdaMDMxMTAvBgNV BAMTKDZDQUQxNjBBMzBCQkIwQ0Y3QUEyMUIwNkEyMThEQ0VBM0IxRjQxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifSq0AQ2x280IF5CWmkeChyCp GQDvEiV7WTr2gJ0ld8ewEmLCq1S0/Igsbli6UtDXsELES4vKn14THEq21x/cJka9 BwZRT6Zot79LONMfrIgRTBCFrqpHNvP6gXte4nH/TNYo7cvnlN//g6hqkWpz+GtY v2pfp9rQPr/wdJzgIrX6mmuOADZfz2eaRWLkCCeTruGGqcePwDtvrwV/AhHoRXiv Q6emefBEEePVwonYoL1FhrDVpFgJtiqUpMc7dS1gdehU57pkgWlxdZBqIXPXFW8Y +SaIpN0jGMyahw5VfRSiEpT8lIgfo9SMnWqKeIdqBH+/7joKcF3XxbbhmVsLAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUbK0WCjC7sM96ohsGohjc6jsfQaEwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz NzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB/TANBgkqhkiG9w0BAQsFAAOCAQEAKo+T SJRf1e4mDy35wwHmXJ5o+xsM8wb9xgfSX37G6OC200M5cVGFH3F/4KGkUP/jIg8L v10RFpybHGsU2WTAyaTHf08oAgUprOVqh6HEA35St/OrsgaTAsnWF+hSjIQXcsE4 nHcWHq18hIvqeMAlU+8P5rxIDpHgtiezbmJO4+6eGYAVgoolVl0e85r1FNhDUR4m Hrsis7FwAb0ADPePx+DEjzw4LRLIvxXfFH4lu42eiXkUA9fUz/mOsobqgW7PJVtV 0g2Qeh7R+bcCzUHQK7Z5u4SnXflTV7tt70AvtH1MvTRFdIYP6jYI5//JpJyFE7xi 5nphXV/2VgqxHPYGag== -----END CERTIFICATE-----Generated at Wed Aug 26 20:52:58 2026 by rpki-client