$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20323034323131.roa File: 326130613a643638353a3166643a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: mRQ9Wvw7RquChlSk4KS6y3F9cazB20zeuVq3yeejZnA= Subject key identifier: F9:24:83:AD:8C:38:4E:51:97:99:68:54:B2:F6:E2:EA:6C:09:D5:0C Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 73EE2F006CC9E59453A4811F4120B1590E760792 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20323034323131.roa Signing time: Fri 31 Jul 2026 03:29:53 +0000 ROA not before: Fri 31 Jul 2026 03:24:53 +0000 ROA not after: Fri 30 Jul 2027 03:29:53 +0000 asID: 204211 IP address blocks: 2a0a:d685:1fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ee:2f:00:6c:c9:e5:94:53:a4:81:1f:41:20:b1:59:0e:76:07:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 31 03:24:53 2026 GMT Not After : Jul 30 03:29:53 2027 GMT Subject: CN=F92483AD8C384E5197996854B2F6E2EA6C09D50C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:f0:ce:4a:4f:57:8e:46:84:dc:5b:57:d9: 4f:4d:1c:d0:d5:1b:50:3c:82:fd:03:f0:ef:b8:8a: 30:46:89:98:93:fd:8b:c0:73:8c:65:ea:a0:a1:6f: 2d:68:91:b7:0c:b7:34:fa:b9:8d:46:b4:de:cf:e6: 97:bd:5b:c5:28:a8:30:37:e4:ec:9e:de:27:a2:f5: 64:00:90:a3:6b:cf:17:be:11:90:92:64:d6:af:45: b7:4f:6d:e3:38:7d:f7:a4:0c:78:5b:71:52:d7:48: 0f:aa:e5:4d:61:ff:7f:45:01:00:4b:6a:80:f5:dd: 40:37:be:73:dc:2d:45:64:1b:5f:dc:57:17:e7:d8: c9:7c:8d:2f:10:66:25:16:f3:7d:38:a4:8b:b2:27: 76:fa:0c:90:db:57:e6:31:83:d9:c5:d2:4a:32:9a: 6a:db:bc:91:7c:dd:fc:09:85:0c:62:86:58:00:9c: 1d:e8:9d:81:d7:63:13:5a:a8:ef:21:45:c3:3d:fa: af:8c:f8:3a:af:32:ea:0a:d8:14:2d:f5:b4:e6:7c: 80:ca:1e:f3:4a:cd:7f:bd:b8:5c:d0:3e:38:48:86: e2:2d:c6:32:40:20:d2:55:11:fb:7f:da:b3:f6:64: 98:68:ac:b9:02:a1:0e:a8:c4:a1:80:00:51:e9:c3: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:24:83:AD:8C:38:4E:51:97:99:68:54:B2:F6:E2:EA:6C:09:D5:0C X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fd::/48 Signature Algorithm: sha256WithRSAEncryption 4a:74:6b:79:ce:fc:32:14:d5:8d:31:2a:0c:fa:8f:87:19:c4: 1a:ca:c0:fb:6d:3a:1c:13:bc:dd:01:4c:71:89:f1:e3:04:1e: 03:b9:0c:af:9b:c6:d4:f7:49:c0:a8:4e:9c:29:dc:59:ab:d5: ec:e0:b0:0b:91:04:22:b0:56:82:68:b3:ce:95:d1:aa:53:1b: 2b:70:0e:ba:20:f6:75:e1:2d:78:88:66:80:fb:3c:b2:15:ae: f4:c3:ee:51:a5:73:b3:19:1d:89:c0:00:4b:d2:40:b0:9d:e0: d5:dd:8d:42:05:00:47:55:f9:49:96:53:cd:44:9e:23:f8:b0: a5:3d:41:e9:9e:29:03:c9:21:36:72:80:cd:71:b4:d2:35:8c: 8f:19:f7:56:91:11:7f:aa:df:0d:4d:35:5c:b2:9e:3a:08:4f: 69:bd:79:df:62:24:40:69:22:dd:24:c3:37:2b:c1:36:1f:da: 1f:7c:82:2f:97:96:8e:2e:da:44:57:74:9b:68:77:2f:33:f6: d4:3c:17:fc:84:2a:32:d0:ae:01:2b:71:67:db:a1:0b:a5:9b: 6f:26:ef:e2:95:07:96:43:b0:3c:6e:18:da:2c:f7:53:07:ad: af:d3:af:3e:7c:9c:8b:2f:d1:1c:f1:71:cd:1e:78:6c:9e:3e: 56:28:93:71 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUc+4vAGzJ5ZRTpIEfQSCxWQ52B5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MzEwMzI0NTNaFw0yNzA3MzAwMzI5NTNaMDMxMTAvBgNV BAMTKEY5MjQ4M0FEOEMzODRFNTE5Nzk5Njg1NEIyRjZFMkVBNkMwOUQ1MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe/DOSk9XjkaE3FtX2U9NHNDV G1A8gv0D8O+4ijBGiZiT/YvAc4xl6qChby1okbcMtzT6uY1GtN7P5pe9W8UoqDA3 5Oye3iei9WQAkKNrzxe+EZCSZNavRbdPbeM4ffekDHhbcVLXSA+q5U1h/39FAQBL aoD13UA3vnPcLUVkG1/cVxfn2Ml8jS8QZiUW8304pIuyJ3b6DJDbV+Yxg9nF0koy mmrbvJF83fwJhQxihlgAnB3onYHXYxNaqO8hRcM9+q+M+DqvMuoK2BQt9bTmfIDK HvNKzX+9uFzQPjhIhuItxjJAINJVEft/2rP2ZJhorLkCoQ6oxKGAAFHpwynfAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU+SSDrYw4TlGXmWhUsvbi6mwJ1QwwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDMyMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB/TANBgkqhkiG9w0BAQsFAAOCAQEASnRr ec78MhTVjTEqDPqPhxnEGsrA+206HBO83QFMcYnx4wQeA7kMr5vG1PdJwKhOnCnc WavV7OCwC5EEIrBWgmizzpXRqlMbK3AOuiD2deEteIhmgPs8shWu9MPuUaVzsxkd icAAS9JAsJ3g1d2NQgUAR1X5SZZTzUSeI/iwpT1B6Z4pA8khNnKAzXG00jWMjxn3 VpERf6rfDU01XLKeOghPab1532IkQGki3STDNyvBNh/aH3yCL5eWji7aRFd0m2h3 LzP21DwX/IQqMtCuAStxZ9uhC6Wbbybv4pUHlkOwPG4Y2iz3Uwetr9OvPnyciy/R HPFxzR54bJ4+ViiTcQ== -----END CERTIFICATE-----Generated at Wed Aug 26 23:05:00 2026 by rpki-client