$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20323139333332.roa File: 326130613a643638353a3166643a3a2f34382d3438203d3e20323139333332.roa (raw, json) Hash identifier: Gnn4/NA/NGNqZlXN1P9CBPUC0f7ywVy+TuLKIHQPkDg= Subject key identifier: E8:AD:53:10:03:F6:37:49:4B:90:E3:D4:13:42:1C:B0:7B:2D:31:4F Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 2EFE6E63AEA6C0E2F64163420576E7BE7EB5BA36 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20323139333332.roa Signing time: Fri 31 Jul 2026 03:30:23 +0000 ROA not before: Fri 31 Jul 2026 03:25:23 +0000 ROA not after: Fri 30 Jul 2027 03:30:23 +0000 asID: 219332 IP address blocks: 2a0a:d685:1fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 11:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:fe:6e:63:ae:a6:c0:e2:f6:41:63:42:05:76:e7:be:7e:b5:ba:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 31 03:25:23 2026 GMT Not After : Jul 30 03:30:23 2027 GMT Subject: CN=E8AD531003F637494B90E3D413421CB07B2D314F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:83:2c:61:93:21:4e:58:bc:75:1f:ba:dc: de:33:e5:46:f3:b1:5a:73:66:df:5f:0a:bf:0b:2e: 08:7f:b1:1b:14:be:9e:30:82:43:71:22:8e:f4:d9: 2c:8e:03:2a:1d:67:e2:76:19:1c:16:bd:c5:ed:80: 22:7e:80:09:c5:e1:d6:18:97:b4:42:29:1d:21:4c: 89:ca:b2:c2:f7:d9:91:2b:59:a3:b5:40:83:a9:25: b3:48:70:5e:04:76:49:1b:56:ee:40:f2:af:66:53: 38:a9:2f:00:33:3a:fa:0e:a2:be:11:d6:90:81:71: 46:24:8d:bc:06:f8:4e:b0:a6:be:f8:2c:25:22:0b: 5c:d8:e4:34:49:fb:06:f1:3e:67:8c:b9:ee:8e:b8: 9d:e4:91:ed:6d:e5:0d:61:cd:f2:10:51:7c:82:81: 2f:c1:d7:1d:b5:d4:e3:ee:60:80:02:58:f2:21:79: 1d:c1:f6:14:31:45:4a:e6:c8:6a:fd:c8:b0:5f:ee: 22:71:31:48:5b:9c:ad:99:5c:2e:fb:5f:70:a3:80: b4:f6:5b:71:2e:62:66:e0:50:e9:ed:f5:51:9d:25: ca:40:01:0e:c6:8a:46:10:d2:05:4f:7c:f0:63:85: 2d:6c:ae:80:b3:e5:66:16:4c:09:23:54:54:91:00: b3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:53:10:03:F6:37:49:4B:90:E3:D4:13:42:1C:B0:7B:2D:31:4F X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e20323139333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fd::/48 Signature Algorithm: sha256WithRSAEncryption 37:9b:59:5b:cc:98:ab:05:e3:eb:6e:63:c9:b9:91:04:0f:f5: ec:1f:c6:b2:5e:c9:a8:d9:60:9d:84:8d:94:d6:04:02:71:6d: 65:5c:c7:db:9e:a4:0d:e7:13:ba:9f:ea:43:04:39:5d:44:4f: 80:39:21:5f:46:9c:4a:88:e4:53:ed:2b:6d:33:ee:82:99:f1: 77:25:86:3b:9c:0a:3c:f4:a2:5e:24:37:06:d4:e3:4d:f4:14: 3a:6c:7e:54:46:ea:d9:2a:78:1e:08:98:73:e2:3a:55:a8:0b: 60:c4:75:69:50:26:67:dc:c6:b1:d2:ba:40:6e:05:f0:3b:c3: 51:6e:03:4d:66:d3:7e:13:d4:c6:4d:5d:06:dd:d0:ad:65:49: bf:7e:c1:79:17:6a:46:df:cb:cc:c1:49:67:3c:d4:d4:a4:98: 33:18:c2:85:93:65:c2:9f:ac:4f:f6:f1:42:45:45:96:95:3c: 0e:29:93:b1:4e:08:f4:c9:6c:06:30:31:9d:26:58:87:79:ff: 24:20:e2:da:37:fe:85:ac:d4:1a:d7:b6:db:41:9d:70:0c:e7: 9a:94:47:ae:6b:0c:d2:b1:20:ce:be:3e:dd:f8:33:e5:af:88: 93:5b:a2:8d:bd:0a:79:6b:9a:c2:5c:88:d1:b4:ba:9a:b6:b1: a9:00:5a:a7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIULv5uY66mwOL2QWNCBXbnvn61ujYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MzEwMzI1MjNaFw0yNzA3MzAwMzMwMjNaMDMxMTAvBgNV BAMTKEU4QUQ1MzEwMDNGNjM3NDk0QjkwRTNENDEzNDIxQ0IwN0IyRDMxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVOYMsYZMhTli8dR+63N4z5Ubz sVpzZt9fCr8LLgh/sRsUvp4wgkNxIo702SyOAyodZ+J2GRwWvcXtgCJ+gAnF4dYY l7RCKR0hTInKssL32ZErWaO1QIOpJbNIcF4EdkkbVu5A8q9mUzipLwAzOvoOor4R 1pCBcUYkjbwG+E6wpr74LCUiC1zY5DRJ+wbxPmeMue6OuJ3kke1t5Q1hzfIQUXyC gS/B1x211OPuYIACWPIheR3B9hQxRUrmyGr9yLBf7iJxMUhbnK2ZXC77X3CjgLT2 W3EuYmbgUOnt9VGdJcpAAQ7GikYQ0gVPfPBjhS1sroCz5WYWTAkjVFSRALP/AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU6K1TEAP2N0lLkOPUE0IcsHstMU8wHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz OTMzMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB/TANBgkqhkiG9w0BAQsFAAOCAQEAN5tZ W8yYqwXj625jybmRBA/17B/Gsl7JqNlgnYSNlNYEAnFtZVzH256kDecTup/qQwQ5 XURPgDkhX0acSojkU+0rbTPugpnxdyWGO5wKPPSiXiQ3BtTjTfQUOmx+VEbq2Sp4 HgiYc+I6VagLYMR1aVAmZ9zGsdK6QG4F8DvDUW4DTWbTfhPUxk1dBt3QrWVJv37B eRdqRt/LzMFJZzzU1KSYMxjChZNlwp+sT/bxQkVFlpU8DimTsU4I9MlsBjAxnSZY h3n/JCDi2jf+hazUGte220GdcAznmpRHrmsM0rEgzr4+3fgz5a+Ik1uijb0KeWua wlyI0bS6mraxqQBapw== -----END CERTIFICATE-----Generated at Thu Aug 27 02:04:37 2026 by rpki-client