$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230313a3a2f34382d3438203d3e20323136333838.roa File: 326130623a346530373a326230313a3a2f34382d3438203d3e20323136333838.roa (raw, json) Hash identifier: loyhwL3pSNC/lKJ6tVn3vsv+juNVKmavfgHP3HNEMhE= Subject key identifier: 22:61:7F:66:42:08:07:7C:A4:7B:86:58:CD:E2:4F:3E:37:B9:4F:0B Certificate issuer: /CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Certificate serial: 3C8B947E52986463670BC4EB4D226F9DAC09274B Authority key identifier: 37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230313a3a2f34382d3438203d3e20323136333838.roa Signing time: Wed 02 Sep 2026 21:36:38 +0000 ROA not before: Wed 02 Sep 2026 21:31:38 +0000 ROA not after: Wed 01 Sep 2027 21:36:38 +0000 asID: 216388 IP address blocks: 2a0b:4e07:2b01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 11:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8b:94:7e:52:98:64:63:67:0b:c4:eb:4d:22:6f:9d:ac:09:27:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379234C5E71F2624C3A35F324BC6732473DEF7D4 Validity Not Before: Sep 2 21:31:38 2026 GMT Not After : Sep 1 21:36:38 2027 GMT Subject: CN=22617F664208077CA47B8658CDE24F3E37B94F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:de:86:52:53:c8:74:cb:de:33:9e:aa:9e: 78:e3:41:7d:fa:84:56:ea:10:53:fa:d2:c0:58:c0: e1:13:32:4b:bb:b0:aa:64:6b:94:35:d4:51:eb:4c: 26:d0:d0:e9:92:65:72:50:71:94:9d:e9:e8:09:33: e4:09:07:86:76:82:f4:ec:54:9d:f2:e9:4a:49:c4: c6:7a:93:23:5c:44:42:bf:93:d9:80:a8:11:23:99: 2a:ea:41:cc:57:08:1b:f7:8a:d0:c1:7a:39:b4:85: c0:8b:0f:64:b0:eb:fb:8c:13:d0:1d:ba:05:06:86: 3a:a9:28:79:fa:e0:3d:b4:e9:d1:52:a4:9d:6c:9a: 67:26:b6:6a:b9:43:95:e1:d9:ba:fd:03:39:31:61: f1:c5:a9:49:45:87:67:b9:1c:de:fc:52:d5:a0:b3: a3:2d:65:ea:ff:62:96:0e:c9:16:b2:85:b3:2e:69: 14:b5:16:f8:b4:38:2e:38:12:1f:c9:08:d9:35:bf: 6e:ac:c9:e2:ac:fc:b5:75:63:40:bf:b9:22:38:91: 9c:bb:5a:55:72:1e:64:73:6c:d3:80:a2:86:8b:51: f0:35:19:32:1c:0a:15:d7:d5:d9:d3:08:f2:96:d2: f7:8c:81:5c:a0:2b:fc:ad:00:f8:03:4c:a7:c1:c8: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:61:7F:66:42:08:07:7C:A4:7B:86:58:CD:E2:4F:3E:37:B9:4F:0B X509v3 Authority Key Identifier: keyid:37:92:34:C5:E7:1F:26:24:C3:A3:5F:32:4B:C6:73:24:73:DE:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/379234C5E71F2624C3A35F324BC6732473DEF7D4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df9003ec-fa35-4979-9ac8-e30be0052163/1/326130623a346530373a326230313a3a2f34382d3438203d3e20323136333838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2b01::/48 Signature Algorithm: sha256WithRSAEncryption 4b:2b:8a:db:38:3d:96:de:a7:fe:9d:ef:60:5b:ad:44:72:6e: 4c:5e:09:78:fc:fb:4c:8a:e6:bc:81:30:e1:ec:94:16:6b:68: e3:f6:66:6c:ff:90:26:e9:d3:66:64:13:40:bd:ed:5c:cc:00: 8a:7b:7b:36:d5:a4:0d:96:cc:6b:5f:72:2a:3e:f9:37:3a:23: e2:9e:2c:e5:99:35:40:da:0c:02:47:b0:f1:ee:18:48:e5:3c: 80:65:d9:de:e9:ef:f1:32:90:7b:ba:f5:96:d0:92:51:9a:8b: 60:20:9d:18:60:4e:25:df:44:9c:82:88:9d:a1:02:56:b8:d5: f4:4d:b6:cb:e0:25:1f:0d:ae:6b:16:0a:46:86:c0:b9:91:07: 49:fe:d1:84:be:11:ed:a4:21:73:9f:7e:0f:7c:bc:86:26:e5: e3:1b:e3:32:ef:5c:ee:0f:c6:32:9c:e2:42:3c:46:14:36:53: c9:06:8d:f5:41:82:7d:50:1a:88:f9:44:5d:71:6e:c1:a2:4d: 19:6a:bf:f0:f5:2d:b2:17:3a:20:c7:a7:c3:d2:52:41:d1:88: fb:d0:0c:18:a7:98:2e:92:88:9f:bc:9c:ed:0a:15:24:4e:3a: 7f:2d:50:74:25:49:71:8e:c9:d7:31:31:8f:6d:af:18:42:88: c5:ee:bc:7f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUPIuUflKYZGNnC8TrTSJvnawJJ0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3 M0RFRjdENDAeFw0yNjA5MDIyMTMxMzhaFw0yNzA5MDEyMTM2MzhaMDMxMTAvBgNV BAMTKDIyNjE3RjY2NDIwODA3N0NBNDdCODY1OENERTI0RjNFMzdCOTRGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/N6GUlPIdMveM56qnnjjQX36 hFbqEFP60sBYwOETMku7sKpka5Q11FHrTCbQ0OmSZXJQcZSd6egJM+QJB4Z2gvTs VJ3y6UpJxMZ6kyNcREK/k9mAqBEjmSrqQcxXCBv3itDBejm0hcCLD2Sw6/uME9Ad ugUGhjqpKHn64D206dFSpJ1smmcmtmq5Q5Xh2br9AzkxYfHFqUlFh2e5HN78UtWg s6MtZer/YpYOyRayhbMuaRS1Fvi0OC44Eh/JCNk1v26syeKs/LV1Y0C/uSI4kZy7 WlVyHmRzbNOAooaLUfA1GTIcChXX1dnTCPKW0veMgVygK/ytAPgDTKfByCErAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUImF/ZkIIB3yke4ZYzeJPPje5TwswHwYDVR0j BBgwFoAUN5I0xecfJiTDo18yS8ZzJHPe99QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMtZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUy MTYzLzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RFRjdENC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMzc5MjM0QzVFNzFGMjYyNEMzQTM1RjMyNEJDNjczMjQ3M0RF RjdENC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGY5MDAzZWMt ZmEzNS00OTc5LTlhYzgtZTMwYmUwMDUyMTYzLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjYyMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMzMzgzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgcrATANBgkqhkiG9w0BAQsFAAOCAQEASyuK2zg9lt6n/p3v YFutRHJuTF4JePz7TIrmvIEw4eyUFmto4/ZmbP+QJunTZmQTQL3tXMwAint7NtWk DZbMa19yKj75Nzoj4p4s5Zk1QNoMAkew8e4YSOU8gGXZ3unv8TKQe7r1ltCSUZqL YCCdGGBOJd9EnIKInaECVrjV9E22y+AlHw2uaxYKRobAuZEHSf7RhL4R7aQhc59+ D3y8hibl4xvjMu9c7g/GMpziQjxGFDZTyQaN9UGCfVAaiPlEXXFuwaJNGWq/8PUt shc6IMenw9JSQdGI+9AMGKeYLpKIn7yc7QoVJE46fy1QdCVJcY7J1zExj22vGEKI xe68fw== -----END CERTIFICATE-----Generated at Fri Sep 4 23:06:44 2026 by rpki-client