$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323138383332.roa File: 326130353a646663363a3a2f33322d3438203d3e20323138383332.roa (raw, json) Hash identifier: vkwaYaeWMNC1Ys7GO0AXyPEzVmDAxeBd8udglsBO7ZU= Subject key identifier: CC:D5:A3:3A:E0:ED:99:8C:C8:D2:E5:02:87:46:7D:32:0B:04:AD:C1 Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 2CB16ADDC4EB95E5F54EEAB4FD8F8CC40216BD1A Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323138383332.roa Signing time: Fri 11 Sep 2026 02:44:23 +0000 ROA not before: Fri 11 Sep 2026 02:39:23 +0000 ROA not after: Fri 10 Sep 2027 02:44:23 +0000 asID: 218832 IP address blocks: 2a05:dfc6::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b1:6a:dd:c4:eb:95:e5:f5:4e:ea:b4:fd:8f:8c:c4:02:16:bd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 11 02:39:23 2026 GMT Not After : Sep 10 02:44:23 2027 GMT Subject: CN=CCD5A33AE0ED998CC8D2E50287467D320B04ADC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:17:1c:2c:da:91:77:49:a7:1f:09:d4:21: 6d:75:52:bf:65:88:13:b0:40:2e:14:5a:07:b3:de: 84:79:83:ea:15:31:05:d4:cf:34:e5:79:6a:a3:01: 3c:eb:2d:90:d3:9e:54:9e:9d:21:cf:8a:ad:21:d1: 13:a4:0e:c5:14:53:ff:7f:61:69:87:ad:85:35:c7: e4:2b:29:0b:bd:c1:9d:28:a7:5b:f8:a9:f4:f4:da: 6d:37:4f:ec:5e:fc:89:dd:38:50:d2:b2:b2:1d:74: d2:ee:e5:f1:30:6f:e2:65:18:84:8f:cc:89:5d:0d: 37:18:ee:c9:d4:a1:aa:52:b3:e8:d5:66:2c:14:c8: c1:8d:0d:c5:7a:70:86:cb:a0:30:5b:7c:90:d2:9c: 23:89:c5:01:95:b9:72:95:35:ac:e4:d5:4d:b0:75: 24:df:87:eb:1e:c2:54:93:ae:60:13:ff:26:dd:a2: 64:7f:ca:ce:e9:ba:1d:a8:1b:5e:2d:c1:3c:0a:09: 83:fd:a2:30:f4:c3:9b:7c:b5:20:4e:95:0b:b4:43: 08:14:83:1e:a3:fe:39:f5:52:8f:dc:8f:5e:ca:30: 2b:0c:86:f0:aa:dc:b3:88:7a:7d:21:ad:5a:a0:b7: 4b:4d:24:6f:15:32:36:be:21:75:f4:04:7b:78:c8: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D5:A3:3A:E0:ED:99:8C:C8:D2:E5:02:87:46:7D:32:0B:04:AD:C1 X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323138383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc6::/32 Signature Algorithm: sha256WithRSAEncryption 38:d0:5f:53:fa:7d:d9:2c:96:d0:e2:f6:3d:9c:0f:e8:7b:ed: b3:cb:a6:2c:36:72:c3:cc:2b:13:df:13:af:cb:43:9a:77:d6: 96:b0:7e:f4:97:d3:30:f0:0b:5e:19:2e:bb:74:5a:7a:3b:06: 74:82:99:4e:06:f5:73:88:e3:34:a4:6b:f5:7e:24:2d:23:5e: 17:71:d9:a9:7e:50:6f:2b:77:c0:9c:99:8c:ac:8b:6b:5a:bf: 1a:c8:90:40:26:65:91:8f:11:3b:f5:2c:e0:fc:aa:19:e7:fa: 75:bd:9c:9e:11:7a:ce:00:bf:4d:32:02:1f:7d:57:59:bf:c5: 2c:ff:c9:d8:73:f6:b4:92:54:f4:ae:80:3c:09:49:39:5e:fe: c8:26:71:0b:ad:77:8c:7d:9f:ad:99:a7:e8:d9:e8:09:75:e7: c5:df:a2:73:4a:a2:f8:1f:11:74:74:3f:03:ea:c2:aa:ca:ac: 65:8f:3a:f6:fa:2e:3c:57:fa:1e:2d:be:28:f7:bd:1a:24:7e: 47:0f:c1:b0:2b:4b:46:8e:13:4a:85:bf:6e:59:a4:34:51:ef: c4:d8:56:55:69:11:a1:7b:3f:6f:19:c7:75:d8:7d:dc:07:c1: 69:36:86:fb:5c:6d:76:c6:dd:fe:f7:80:d1:82:02:9e:aa:2b: db:26:da:57 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIULLFq3cTrleX1Tuq0/Y+MxAIWvRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MTEwMjM5MjNaFw0yNzA5MTAwMjQ0MjNaMDMxMTAvBgNV BAMTKENDRDVBMzNBRTBFRDk5OENDOEQyRTUwMjg3NDY3RDMyMEIwNEFEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXxccLNqRd0mnHwnUIW11Ur9l iBOwQC4UWgez3oR5g+oVMQXUzzTleWqjATzrLZDTnlSenSHPiq0h0ROkDsUUU/9/ YWmHrYU1x+QrKQu9wZ0op1v4qfT02m03T+xe/IndOFDSsrIddNLu5fEwb+JlGISP zIldDTcY7snUoapSs+jVZiwUyMGNDcV6cIbLoDBbfJDSnCOJxQGVuXKVNazk1U2w dSTfh+sewlSTrmAT/ybdomR/ys7puh2oG14twTwKCYP9ojD0w5t8tSBOlQu0QwgU gx6j/jn1Uo/cj17KMCsMhvCq3LOIen0hrVqgt0tNJG8VMja+IXX0BHt4yCS3AgMB AAGjggJuMIICajAdBgNVHQ4EFgQUzNWjOuDtmYzI0uUCh0Z9MgsErcEwHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzI2MTMwMzUzYTY0NjY2MzM2 M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMTM4MzgzMzMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA KgXfxjANBgkqhkiG9w0BAQsFAAOCAQEAONBfU/p92SyW0OL2PZwP6Hvts8umLDZy w8wrE98Tr8tDmnfWlrB+9JfTMPALXhkuu3RaejsGdIKZTgb1c4jjNKRr9X4kLSNe F3HZqX5Qbyt3wJyZjKyLa1q/GsiQQCZlkY8RO/Us4PyqGef6db2cnhF6zgC/TTIC H31XWb/FLP/J2HP2tJJU9K6APAlJOV7+yCZxC613jH2frZmn6NnoCXXnxd+ic0qi +B8RdHQ/A+rCqsqsZY869vouPFf6Hi2+KPe9GiR+Rw/BsCtLRo4TSoW/blmkNFHv xNhWVWkRoXs/bxnHddh93AfBaTaG+1xtdsbd/veA0YICnqor2ybaVw== -----END CERTIFICATE-----Generated at Tue Sep 22 20:37:11 2026 by rpki-client