$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d3430203d3e2030.roa File: 326131333a633863343a666530303a3a2f34302d3430203d3e2030.roa (raw, json) Hash identifier: lRwRWYrxiGTqXR9JW+d3Dce/wBwgk0miE3YSYcNIgOA= Subject key identifier: 64:E0:6E:26:9B:9F:46:64:56:C2:19:14:28:62:81:F0:6C:9F:52:C6 Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 09E876CF84A5CFD7FF0F8BDAA87C6DEF5CA47B78 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d3430203d3e2030.roa Signing time: Sun 06 Sep 2026 21:26:09 +0000 ROA not before: Sun 06 Sep 2026 21:21:09 +0000 ROA not after: Sun 05 Sep 2027 21:26:09 +0000 asID: 0 IP address blocks: 2a13:c8c4:fe00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e8:76:cf:84:a5:cf:d7:ff:0f:8b:da:a8:7c:6d:ef:5c:a4:7b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: Sep 6 21:21:09 2026 GMT Not After : Sep 5 21:26:09 2027 GMT Subject: CN=64E06E269B9F466456C21914286281F06C9F52C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:43:9d:18:45:ea:01:16:58:49:99:c7:fb: fe:d2:67:95:cf:da:76:ee:f2:17:07:47:f6:e3:42: 65:6a:b7:57:e3:4d:6a:42:c9:4d:47:1e:8a:eb:fd: e0:da:a4:03:47:05:0b:b1:1c:99:1a:53:58:93:dc: b5:ed:95:d1:80:a7:8a:b7:62:81:70:fe:a2:a6:05: ed:36:1c:c8:0d:36:48:6c:ff:70:b0:35:77:c2:a7: ab:fa:78:f4:59:20:fd:ca:3c:db:f9:19:26:2d:77: 6e:44:44:4c:e3:51:0f:f2:cd:44:87:61:a6:f5:a8: 01:5e:81:76:22:09:8f:f5:ae:95:c0:52:5f:32:d7: 0f:aa:5c:07:20:0e:54:28:8f:fb:1a:ed:76:d8:42: 51:db:5a:f5:e2:20:9c:bb:10:9a:f8:c0:f8:4e:e2: 05:53:e4:89:3a:58:b2:c6:15:cb:d6:0f:bd:e1:45: 7d:25:22:aa:ec:05:5f:10:cd:06:d9:ee:5f:2a:bb: 05:65:04:1b:b7:78:d0:d0:54:3d:6d:08:c4:dc:ad: 40:7c:d5:b5:fa:2d:67:ea:6b:6c:d6:1f:1d:52:8e: ed:dc:b9:ae:29:b1:35:ab:04:79:7a:66:e6:bf:c9: ac:03:6e:8b:7d:9a:52:6c:83:98:b4:9c:9e:4b:7c: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E0:6E:26:9B:9F:46:64:56:C2:19:14:28:62:81:F0:6C:9F:52:C6 X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666530303a3a2f34302d3430203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:fe00::/40 Signature Algorithm: sha256WithRSAEncryption a9:c6:74:3a:92:60:b3:fb:5b:b2:e7:26:ea:25:54:af:d7:79: b0:df:77:9c:8a:27:67:ee:12:6f:b0:5f:e3:c6:1d:b1:0f:e3: 39:1f:2a:3b:55:62:de:09:98:f6:a0:56:aa:57:9e:77:b7:bf: 5f:0a:bb:f5:8d:d1:41:db:e4:03:ac:73:3d:c3:4c:43:ad:5d: 5b:55:19:6c:5d:d8:12:28:11:a9:08:6c:f0:79:5f:51:e0:75: 57:06:48:08:30:6c:3d:18:83:c1:d3:a1:ff:50:d1:e7:04:b5: b5:9e:c7:1b:56:02:3d:c4:76:eb:4c:1b:3e:ba:3d:75:eb:fc: 35:4f:62:ab:27:27:b0:79:a5:bd:17:84:68:89:79:01:44:6e: 2b:d4:55:7f:ad:1d:6c:2a:16:d0:82:32:6e:88:34:10:99:25: 25:ea:29:65:cb:37:cf:40:d8:a3:3a:1a:e9:c0:d9:f4:b5:8a: fe:3e:23:3c:fc:3b:2a:f2:bc:01:ce:0e:d4:fd:21:3a:d5:6c: 62:18:49:55:15:07:f6:91:02:ee:71:cb:4c:2f:32:35:30:2d: b4:79:71:ac:f4:d2:04:3d:0e:bd:6e:2e:2f:dd:2f:30:44:ed: b8:d8:45:31:e0:1b:f7:3e:d1:f0:08:71:c6:e8:48:c0:a0:ac: 04:52:c0:00 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUCeh2z4Slz9f/D4vaqHxt71yke3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA5MDYyMTIxMDlaFw0yNzA5MDUyMTI2MDlaMDMxMTAvBgNV BAMTKDY0RTA2RTI2OUI5RjQ2NjQ1NkMyMTkxNDI4NjI4MUYwNkM5RjUyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozkOdGEXqARZYSZnH+/7SZ5XP 2nbu8hcHR/bjQmVqt1fjTWpCyU1HHorr/eDapANHBQuxHJkaU1iT3LXtldGAp4q3 YoFw/qKmBe02HMgNNkhs/3CwNXfCp6v6ePRZIP3KPNv5GSYtd25EREzjUQ/yzUSH Yab1qAFegXYiCY/1rpXAUl8y1w+qXAcgDlQoj/sa7XbYQlHbWvXiIJy7EJr4wPhO 4gVT5Ik6WLLGFcvWD73hRX0lIqrsBV8QzQbZ7l8quwVlBBu3eNDQVD1tCMTcrUB8 1bX6LWfqa2zWHx1Sju3cua4psTWrBHl6Zua/yawDbot9mlJsg5i0nJ5LfIqbAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUZOBuJpufRmRWwhkUKGKB8GyfUsYwHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2NjUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzAu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgAqE8jE/jANBgkqhkiG9w0BAQsFAAOCAQEAqcZ0OpJgs/tbsucm 6iVUr9d5sN93nIonZ+4Sb7Bf48YdsQ/jOR8qO1Vi3gmY9qBWqleed7e/Xwq79Y3R QdvkA6xzPcNMQ61dW1UZbF3YEigRqQhs8HlfUeB1VwZICDBsPRiDwdOh/1DR5wS1 tZ7HG1YCPcR260wbPro9dev8NU9iqycnsHmlvReEaIl5AURuK9RVf60dbCoW0IIy bog0EJklJeopZcs3z0DYozoa6cDZ9LWK/j4jPPw7KvK8Ac4O1P0hOtVsYhhJVRUH 9pEC7nHLTC8yNTAttHlxrPTSBD0OvW4uL90vMETtuNhFMeAb9z7R8AhxxuhIwKCs BFLAAA== -----END CERTIFICATE-----Generated at Mon Sep 21 02:25:47 2026 by rpki-client