$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa File: 326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa (raw, json) Hash identifier: OUt+1oKNkT4q09Fbf5w3L2mK025o9AopYE3nSbhRFR0= Subject key identifier: 55:55:0C:2E:42:B2:01:53:CF:65:49:75:8E:CC:D1:8C:AB:5F:03:59 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 10AC60B6C7EF337D9C26C9983386D74CEB97EB03 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa Signing time: Thu 05 Feb 2026 09:30:16 +0000 ROA not before: Thu 05 Feb 2026 09:25:16 +0000 ROA not after: Thu 04 Feb 2027 09:30:16 +0000 asID: 215085 IP address blocks: 2a06:9f41:a100::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 03:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ac:60:b6:c7:ef:33:7d:9c:26:c9:98:33:86:d7:4c:eb:97:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Feb 5 09:25:16 2026 GMT Not After : Feb 4 09:30:16 2027 GMT Subject: CN=55550C2E42B20153CF6549758ECCD18CAB5F0359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2a:18:fd:29:57:8c:ba:16:d5:f4:27:17:cd: a7:b1:dd:51:96:6a:bc:5d:24:32:57:1d:c4:a4:b1: 13:03:3c:4f:c1:a0:91:ef:d0:c1:d7:6e:66:f2:b4: da:0f:31:32:a8:f7:a6:0f:6e:6b:0a:e6:a5:9e:77: b6:1f:87:6d:f4:2a:83:ab:2e:6e:5f:d0:3d:d6:a9: f9:e2:30:72:88:a9:24:b9:b0:85:b7:bf:c8:13:ca: 85:45:85:c5:42:40:7f:99:6e:b9:35:ae:da:7d:e3: 8b:2d:36:49:6a:63:81:bb:11:4d:17:b4:57:1a:60: 5c:30:b2:77:02:52:4b:4d:70:4e:0d:90:51:2d:e2: 43:3b:1d:f0:8a:04:7c:13:41:b5:05:f1:89:c9:f2: 96:0c:bd:ad:47:31:45:e8:83:c4:92:9d:39:5d:18: bf:b5:cd:9f:14:5f:89:35:f1:be:fd:db:99:95:90: 32:70:42:67:5e:74:71:c3:b0:22:99:e2:1f:f8:70: 32:88:b3:ea:af:79:0f:fd:9c:9b:7c:56:08:6b:56: 6a:a5:12:ae:8b:c3:03:39:64:1e:07:66:45:e4:5f: d6:e8:19:97:c0:87:dc:58:95:4a:9d:87:eb:a4:eb: 98:43:12:06:c7:65:53:f2:01:5e:85:c8:67:1e:7d: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:55:0C:2E:42:B2:01:53:CF:65:49:75:8E:CC:D1:8C:AB:5F:03:59 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:a100::/40 Signature Algorithm: sha256WithRSAEncryption 90:a7:12:9c:5b:b1:e2:11:4f:30:5f:0f:8c:a6:98:64:ef:fa: 81:14:95:f1:1b:a8:31:37:57:a1:68:74:69:9e:ef:00:09:e6: 23:ae:4e:9d:c5:b4:0a:75:cd:b7:a9:8a:f3:ce:14:f0:19:cd: 91:ce:21:6a:65:89:40:65:4e:09:42:05:66:c9:19:6a:b2:38: bc:c6:15:ca:70:eb:49:6a:0b:9e:65:bc:98:ba:c6:70:a2:d2: 15:b4:f5:f7:e8:1d:28:58:69:75:39:ba:f3:ea:2d:b6:b2:e0: d3:3d:b2:c1:2e:ec:dc:66:d2:4e:2a:aa:b3:62:18:ab:e7:6b: 0b:bc:ea:6f:51:5c:87:e7:63:9e:c5:fb:49:a5:06:02:e2:d2: a4:7c:f4:2f:1a:65:0d:76:23:45:47:bf:1b:87:34:66:cb:97: ab:80:a2:da:64:c8:c4:16:bf:c1:87:4e:0d:67:38:71:b3:28: 3b:f6:02:32:19:4c:46:6d:23:89:57:50:47:8b:9a:1a:93:af: 25:ef:ab:7d:12:79:7c:cf:b0:21:cc:62:c8:5d:f5:70:d0:14: 3b:0e:23:5e:8d:57:4e:1c:ef:3a:8d:ea:4c:2b:f7:87:c6:a0: 97:bf:19:db:00:70:15:f3:dc:ce:ef:90:3e:0b:cb:5e:8b:53: 4d:51:1a:16 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUEKxgtsfvM32cJsmYM4bXTOuX6wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjAyMDUwOTI1MTZaFw0yNzAyMDQwOTMwMTZaMDMxMTAvBgNV BAMTKDU1NTUwQzJFNDJCMjAxNTNDRjY1NDk3NThFQ0NEMThDQUI1RjAzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJKhj9KVeMuhbV9CcXzaex3VGW arxdJDJXHcSksRMDPE/BoJHv0MHXbmbytNoPMTKo96YPbmsK5qWed7Yfh230KoOr Lm5f0D3WqfniMHKIqSS5sIW3v8gTyoVFhcVCQH+Zbrk1rtp944stNklqY4G7EU0X tFcaYFwwsncCUktNcE4NkFEt4kM7HfCKBHwTQbUF8YnJ8pYMva1HMUXog8SSnTld GL+1zZ8UX4k18b7925mVkDJwQmdedHHDsCKZ4h/4cDKIs+qveQ/9nJt8VghrVmql Eq6LwwM5ZB4HZkXkX9boGZfAh9xYlUqdh+uk65hDEgbHZVPyAV6FyGcefRVRAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUVVUMLkKyAVPPZUl1jszRjKtfA1kwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2E2MTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNTMwMzgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoGn0GhMA0GCSqGSIb3DQEBCwUAA4IBAQCQpxKcW7HiEU8wXw+M pphk7/qBFJXxG6gxN1ehaHRpnu8ACeYjrk6dxbQKdc23qYrzzhTwGc2RziFqZYlA ZU4JQgVmyRlqsji8xhXKcOtJagueZbyYusZwotIVtPX36B0oWGl1Obrz6i22suDT PbLBLuzcZtJOKqqzYhir52sLvOpvUVyH52OexftJpQYC4tKkfPQvGmUNdiNFR78b hzRmy5ergKLaZMjEFr/Bh04NZzhxsyg79gIyGUxGbSOJV1BHi5oak68l76t9Enl8 z7AhzGLIXfVw0BQ7DiNejVdOHO86jepMK/eHxqCXvxnbAHAV89zO75A+C8tei1NN URoW -----END CERTIFICATE-----Generated at Sun Mar 1 14:55:15 2026 by rpki-client