$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa File: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (raw, json) Hash identifier: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts= Subject key identifier: CA:C5:7A:C1:C8:CE:27:81:04:21:99:5F:5A:6F:AA:56:1A:44:DC:DB Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 53EF36BDBC7D2C191AB1004C5C80199902BDF85B Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa Signing time: Tue 03 Feb 2026 19:51:09 +0000 ROA not before: Tue 03 Feb 2026 19:46:09 +0000 ROA not after: Tue 02 Feb 2027 19:51:09 +0000 asID: 213428 IP address blocks: 2a0f:85c1:b4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 20:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ef:36:bd:bc:7d:2c:19:1a:b1:00:4c:5c:80:19:99:02:bd:f8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Feb 3 19:46:09 2026 GMT Not After : Feb 2 19:51:09 2027 GMT Subject: CN=CAC57AC1C8CE27810421995F5A6FAA561A44DCDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f1:10:34:31:0e:ed:9a:dc:03:f4:3a:02:3a: 2f:d9:9a:7b:80:bf:52:67:a7:4d:57:07:7d:aa:82: 0d:66:cb:90:a1:a1:eb:22:32:b7:53:aa:24:2e:b4: 4d:33:14:71:f3:91:d9:d3:2d:0f:c8:89:f3:94:83: 6e:da:4e:22:92:1f:16:10:51:ff:ad:9e:c9:08:6a: bb:69:8f:ea:8b:38:08:5f:4c:44:77:02:bf:c0:e8: de:b2:3c:be:52:af:dd:56:0b:e2:e0:3e:96:db:51: d9:70:dd:bd:83:cf:86:12:a8:65:87:61:37:9f:83: 2b:8e:3f:33:31:b5:69:ee:df:0b:b2:19:af:3a:98: 04:5d:ee:af:7a:37:fb:cc:4d:c9:86:4c:ab:41:d9: 25:8f:fe:29:b6:3e:8d:4f:ab:91:21:ec:10:9c:a2: 5d:c1:8a:09:a4:4e:29:6e:a1:d0:f8:16:17:68:f6: d9:c0:de:11:37:47:06:34:5f:d5:1a:7f:7a:f3:73: 90:4f:e7:e1:48:98:5b:39:b2:5b:63:3d:24:00:ee: d1:73:85:a3:40:2f:72:71:10:1b:bb:64:a2:bb:ec: d9:8f:76:76:63:fe:1b:a0:a1:ff:00:7b:8c:50:23: 9e:9b:a3:d8:dc:91:43:d3:a0:0a:d2:90:5c:d4:b3: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C5:7A:C1:C8:CE:27:81:04:21:99:5F:5A:6F:AA:56:1A:44:DC:DB X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b4d::/48 Signature Algorithm: sha256WithRSAEncryption 70:2b:03:2f:46:a5:12:0d:ec:41:f6:11:cc:8e:5c:ca:5c:c8: 43:44:5c:70:6e:f2:06:86:09:f8:79:e8:0c:4c:56:27:6c:45: 2b:6c:d3:4c:4e:e8:6f:ae:c8:7f:b4:02:8e:a3:d2:f4:c6:25: f3:8b:f6:90:33:73:4c:ad:06:97:fc:5a:0b:9d:ca:6c:3b:76: da:bc:eb:64:09:de:e7:2e:09:4b:98:6d:41:82:dd:89:bd:d2: 18:ac:65:1f:fd:88:6e:bb:e6:de:55:92:70:46:73:88:4a:64: 21:b3:51:4e:66:2f:ef:7a:0a:34:26:da:34:bf:d7:11:02:17: c2:12:52:17:a2:b0:06:20:06:2e:ba:e0:2f:f1:95:f7:e8:87: 36:6f:21:25:26:65:66:54:95:aa:f3:50:c9:be:d7:b2:83:76: 2a:74:ef:0c:de:80:52:c4:74:b6:bb:1d:f8:9b:b5:2e:06:af: a9:60:6e:f6:5d:4c:e9:86:c3:fb:a2:55:c7:63:ac:ea:33:03: 80:22:f2:cf:da:7f:61:3f:f4:87:67:85:d7:6e:b8:8b:f5:4f: bc:90:2d:7a:1d:3b:26:21:2c:57:7e:7f:ba:73:57:4d:e5:e7: e7:fa:5c:68:a0:c4:62:ef:57:7e:83:7a:6c:ad:cc:0f:00:41: 4e:e1:b5:7a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUU+82vbx9LBkasQBMXIAZmQK9+FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNjAyMDMxOTQ2MDlaFw0yNzAyMDIxOTUxMDlaMDMxMTAvBgNV BAMTKENBQzU3QUMxQzhDRTI3ODEwNDIxOTk1RjVBNkZBQTU2MUE0NERDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8RA0MQ7tmtwD9DoCOi/ZmnuA v1Jnp01XB32qgg1my5ChoesiMrdTqiQutE0zFHHzkdnTLQ/IifOUg27aTiKSHxYQ Uf+tnskIartpj+qLOAhfTER3Ar/A6N6yPL5Sr91WC+LgPpbbUdlw3b2Dz4YSqGWH YTefgyuOPzMxtWnu3wuyGa86mARd7q96N/vMTcmGTKtB2SWP/im2Po1Pq5Eh7BCc ol3BigmkTiluodD4Fhdo9tnA3hE3RwY0X9Uaf3rzc5BP5+FImFs5sltjPSQA7tFz haNAL3JxEBu7ZKK77NmPdnZj/hugof8Ae4xQI56bo9jckUPToArSkFzUswnbAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUysV6wcjOJ4EEIZlfWm+qVhpE3NswHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTYyMzQ2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz MzM0MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcELTTANBgkqhkiG9w0BAQsFAAOCAQEAcCsD L0alEg3sQfYRzI5cylzIQ0RccG7yBoYJ+HnoDExWJ2xFK2zTTE7ob67If7QCjqPS 9MYl84v2kDNzTK0Gl/xaC53KbDt22rzrZAne5y4JS5htQYLdib3SGKxlH/2Ibrvm 3lWScEZziEpkIbNRTmYv73oKNCbaNL/XEQIXwhJSF6KwBiAGLrrgL/GV9+iHNm8h JSZlZlSVqvNQyb7XsoN2KnTvDN6AUsR0trsd+Ju1LgavqWBu9l1M6YbD+6JVx2Os 6jMDgCLyz9p/YT/0h2eF1264i/VPvJAteh07JiEsV35/unNXTeXn5/pcaKDEYu9X foN6bK3MDwBBTuG1eg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:03 2026 by rpki-client