$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323138393034.roa File: 326130353a646663363a3a2f33322d3438203d3e20323138393034.roa (raw, json) Hash identifier: 5lbNdPAV2OZdblVdouY1xQHsnMnrbWb9RU2Hlj23tiI= Subject key identifier: 87:CF:11:9B:B0:12:6A:20:6D:EC:33:C8:9C:97:CA:87:FD:3A:9D:AE Certificate issuer: /CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Certificate serial: 7E8438C54CE6EA7288A57F0F0EB1D127A613137B Authority key identifier: 53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323138393034.roa Signing time: Fri 11 Sep 2026 02:44:47 +0000 ROA not before: Fri 11 Sep 2026 02:39:47 +0000 ROA not after: Fri 10 Sep 2027 02:44:47 +0000 asID: 218904 IP address blocks: 2a05:dfc6::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:84:38:c5:4c:e6:ea:72:88:a5:7f:0f:0e:b1:d1:27:a6:13:13:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53715F0476EA19EB60DD0F38D92F84E8D40A0292 Validity Not Before: Sep 11 02:39:47 2026 GMT Not After : Sep 10 02:44:47 2027 GMT Subject: CN=87CF119BB0126A206DEC33C89C97CA87FD3A9DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:ca:42:4e:b4:6b:b2:88:c6:5a:ef:15:e4: 72:64:ae:9b:73:ff:cc:e7:c8:38:4e:34:4f:25:34: ab:df:2e:d4:4f:55:20:ba:4c:82:35:b7:fa:41:cc: 41:a1:cb:03:40:e4:8c:ae:c0:e8:29:d0:c4:95:5b: a7:12:44:8a:e3:81:8e:ca:22:b9:6a:81:a4:8c:17: 4d:1f:51:bd:b4:da:a2:89:60:f4:78:6b:5a:50:87: ba:88:ba:f2:46:a8:39:f4:7f:06:cc:3d:ca:a1:9f: 20:df:0f:6b:b1:35:35:87:e6:10:3e:01:39:e4:c6: 29:d3:b8:c3:62:01:d0:3c:13:f1:2f:d3:38:9d:e2: 3b:b1:10:18:7b:ae:9a:94:28:06:9d:d6:06:26:fa: c4:fb:7e:da:6a:6e:3c:84:c3:0e:6c:b3:7f:20:ba: 4c:93:ab:40:14:1e:26:79:26:79:73:cd:c2:8f:10: 9e:86:22:3a:f3:49:38:87:e2:dd:62:d3:36:f0:67: 82:ce:60:51:1d:69:86:96:3a:0c:1d:67:2c:bf:7b: 99:15:5e:2a:65:92:27:21:16:31:34:c1:60:2b:e1: 86:1c:2b:16:64:a5:fc:41:c1:77:cf:b6:7c:d8:06: 0e:d4:5d:fa:27:1d:01:c7:e4:70:0f:e6:a6:6e:37: bd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CF:11:9B:B0:12:6A:20:6D:EC:33:C8:9C:97:CA:87:FD:3A:9D:AE X509v3 Authority Key Identifier: keyid:53:71:5F:04:76:EA:19:EB:60:DD:0F:38:D9:2F:84:E8:D4:0A:02:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/53715F0476EA19EB60DD0F38D92F84E8D40A0292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/53715F0476EA19EB60DD0F38D92F84E8D40A0292.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/4/326130353a646663363a3a2f33322d3438203d3e20323138393034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc6::/32 Signature Algorithm: sha256WithRSAEncryption 0c:a1:22:63:57:d5:3a:48:66:e2:9f:9b:0f:4a:98:77:8d:ed: 2c:a7:fa:82:da:96:ad:1b:e7:a5:65:83:7c:8b:c8:2c:84:8c: 9f:e6:bd:d8:79:e3:cc:06:5b:ab:0a:d4:06:88:23:ac:f9:7f: 69:ca:e0:02:2e:10:0a:73:f8:85:64:a3:31:67:ec:45:fc:c1: ea:8a:f6:3d:b8:ce:bb:2b:20:c8:29:ae:56:24:1a:cb:d5:56: 78:40:64:a8:2b:cf:30:2d:ca:00:31:52:46:78:0e:60:9b:6c: 6e:59:33:19:25:9f:a2:d9:10:69:84:5c:0f:9a:8e:a9:ea:bb: 6b:32:81:4a:02:51:bb:24:e3:87:e6:a9:7f:b5:20:ad:16:7c: b5:88:b8:e6:21:45:21:22:6c:1f:b9:71:bc:c8:e8:34:fe:8c: 48:56:ea:4d:ed:d7:49:ea:83:ae:d5:b7:b9:28:8d:3b:6f:29: 21:4e:d6:89:18:bc:09:aa:46:ef:fa:b3:d0:18:3b:0f:b5:b9: 71:7c:d8:22:30:52:a2:fe:28:36:29:14:28:f4:25:d9:a5:30: 6c:6f:13:a5:ff:a7:8f:c8:f9:90:26:98:ae:2f:3d:ed:bc:50: 29:15:e9:d0:27:0f:ce:50:5e:51:da:07:92:38:84:b1:0a:8e: e4:c8:d7:ec -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUfoQ4xUzm6nKIpX8PDrHRJ6YTE3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThE NDBBMDI5MjAeFw0yNjA5MTEwMjM5NDdaFw0yNzA5MTAwMjQ0NDdaMDMxMTAvBgNV BAMTKDg3Q0YxMTlCQjAxMjZBMjA2REVDMzNDODlDOTdDQTg3RkQzQTlEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLMpCTrRrsojGWu8V5HJkrptz /8znyDhONE8lNKvfLtRPVSC6TII1t/pBzEGhywNA5IyuwOgp0MSVW6cSRIrjgY7K IrlqgaSMF00fUb202qKJYPR4a1pQh7qIuvJGqDn0fwbMPcqhnyDfD2uxNTWH5hA+ ATnkxinTuMNiAdA8E/Ev0zid4juxEBh7rpqUKAad1gYm+sT7ftpqbjyEww5ss38g ukyTq0AUHiZ5JnlzzcKPEJ6GIjrzSTiH4t1i0zbwZ4LOYFEdaYaWOgwdZyy/e5kV XiplkichFjE0wWAr4YYcKxZkpfxBwXfPtnzYBg7UXfonHQHH5HAP5qZuN72rAgMB AAGjggJuMIICajAdBgNVHQ4EFgQUh88Rm7ASaiBt7DPInJfKh/06na4wHwYDVR0j BBgwFoAUU3FfBHbqGetg3Q842S+E6NQKApIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi ZDQyLzQvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBBMDI5Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTM3MTVGMDQ3NkVBMTlFQjYwREQwRjM4RDkyRjg0RThENDBB MDI5Mi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYt Nzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNiZDQyLzQvMzI2MTMwMzUzYTY0NjY2MzM2 M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMTM4MzkzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA KgXfxjANBgkqhkiG9w0BAQsFAAOCAQEADKEiY1fVOkhm4p+bD0qYd43tLKf6gtqW rRvnpWWDfIvILISMn+a92HnjzAZbqwrUBogjrPl/acrgAi4QCnP4hWSjMWfsRfzB 6or2PbjOuysgyCmuViQay9VWeEBkqCvPMC3KADFSRngOYJtsblkzGSWfotkQaYRc D5qOqeq7azKBSgJRuyTjh+apf7UgrRZ8tYi45iFFISJsH7lxvMjoNP6MSFbqTe3X SeqDrtW3uSiNO28pIU7WiRi8CapG7/qz0Bg7D7W5cXzYIjBSov4oNikUKPQl2aUw bG8Tpf+nj8j5kCaYri897bxQKRXp0CcPzlBeUdoHkjiEsQqO5MjX7A== -----END CERTIFICATE-----Generated at Mon Sep 21 17:09:28 2026 by rpki-client