$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa File: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (raw, json) Hash identifier: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000= Subject key identifier: 13:93:0D:89:F0:10:97:6F:7C:DE:9D:18:10:88:07:97:86:87:6A:41 Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 4595B8048C6EA13DC1198739317316A3C04466A2 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa Signing time: Fri 06 Feb 2026 02:33:33 +0000 ROA not before: Fri 06 Feb 2026 02:28:33 +0000 ROA not after: Fri 05 Feb 2027 02:33:33 +0000 asID: 216299 IP address blocks: 2a0f:1cc5:1030::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Mar 2026 23:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:95:b8:04:8c:6e:a1:3d:c1:19:87:39:31:73:16:a3:c0:44:66:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Feb 6 02:28:33 2026 GMT Not After : Feb 5 02:33:33 2027 GMT Subject: CN=13930D89F010976F7CDE9D181088079786876A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:7e:ea:9a:ff:c7:5a:d4:54:e7:c7:b2:bb: 26:bc:69:4d:03:35:68:27:98:59:a9:1b:f7:69:a0: 90:bc:bd:f9:86:5e:23:34:2a:6b:2c:de:5b:1c:3a: 72:08:c2:63:98:c5:7d:21:99:65:22:18:72:2b:a5: 88:a1:fa:22:7a:23:f5:c9:02:6d:42:11:c1:27:e9: 29:57:2b:1c:c4:71:85:f2:ef:a0:14:31:61:d6:d8: df:71:dc:2f:2b:3a:7f:a2:30:2a:b6:27:19:6c:5e: bd:a7:42:63:e7:7b:60:c2:d7:5b:76:a5:50:f9:05: 4a:79:e5:de:15:0e:9f:07:b3:36:f7:10:9b:8c:ec: 95:99:61:11:d9:14:b1:83:d6:33:3d:fe:a2:e8:40: db:67:61:79:82:eb:6d:f1:e6:b1:5a:a7:e5:fe:3d: fc:5d:00:75:9e:3e:15:e8:73:bb:dd:3a:5d:be:e3: e5:80:80:2c:6f:b8:1e:fd:a2:35:10:39:3c:1b:76: d4:06:15:33:ce:26:a4:56:61:94:c2:65:59:15:2c: c4:2f:8b:35:89:b9:f7:c9:e6:73:c6:1b:f9:35:e4: 3a:fc:2b:b7:07:a5:dc:6a:d5:6d:4a:11:18:c9:11: e3:c4:31:e6:b1:84:8a:b4:97:66:c0:80:48:c1:21: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:93:0D:89:F0:10:97:6F:7C:DE:9D:18:10:88:07:97:86:87:6A:41 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1030::/44 Signature Algorithm: sha256WithRSAEncryption 30:cb:40:68:f4:49:54:3d:65:2a:8e:5f:40:de:6a:f1:3c:35: 09:87:b1:8a:47:40:97:4d:99:10:45:03:6b:e3:31:dd:36:04: eb:c3:cb:b4:58:a9:0e:7c:35:5f:74:d6:89:d1:fe:1b:06:90: fc:b1:15:ac:33:ef:ef:df:73:dd:fe:0e:5c:ec:0a:f6:0c:3a: 60:8e:da:70:ef:2d:8f:ba:41:be:69:29:74:37:59:67:72:ce: 61:bb:d1:23:a4:ff:8b:0a:50:15:11:19:97:1b:17:4b:84:a5: 5c:77:dc:94:e1:3e:ea:26:b9:3c:28:70:d8:ce:bf:92:c8:d6: fb:61:7c:e6:87:bd:0a:77:cb:88:a0:e7:79:b4:47:6b:25:55: b8:4f:3b:00:12:eb:c5:38:96:1f:95:f4:58:ae:62:1c:fb:67: fb:f2:64:24:f9:03:c4:0f:37:34:a6:c7:ef:e3:11:c0:19:17: 60:5a:5a:d5:27:78:f3:62:14:ba:b6:9c:81:bd:95:96:39:c0: ac:4c:51:18:10:1e:4e:37:10:d0:37:14:bc:7b:7a:7a:f8:84: 28:a2:36:9d:bc:40:53:88:7b:cb:6f:eb:d0:f7:3d:33:96:e2: dc:c3:bb:03:59:5d:f1:ea:5f:38:13:74:e1:71:84:3f:11:5d: b8:f1:7b:ef -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIURZW4BIxuoT3BGYc5MXMWo8BEZqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjAyMDYwMjI4MzNaFw0yNzAyMDUwMjMzMzNaMDMxMTAvBgNV BAMTKDEzOTMwRDg5RjAxMDk3NkY3Q0RFOUQxODEwODgwNzk3ODY4NzZBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrX37qmv/HWtRU58eyuya8aU0D NWgnmFmpG/dpoJC8vfmGXiM0Kmss3lscOnIIwmOYxX0hmWUiGHIrpYih+iJ6I/XJ Am1CEcEn6SlXKxzEcYXy76AUMWHW2N9x3C8rOn+iMCq2JxlsXr2nQmPne2DC11t2 pVD5BUp55d4VDp8Hszb3EJuM7JWZYRHZFLGD1jM9/qLoQNtnYXmC623x5rFap+X+ PfxdAHWePhXoc7vdOl2+4+WAgCxvuB79ojUQOTwbdtQGFTPOJqRWYZTCZVkVLMQv izWJuffJ5nPGG/k15Dr8K7cHpdxq1W1KERjJEePEMeaxhIq0l2bAgEjBITjXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUE5MNifAQl2983p0YEIgHl4aHakEwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzAzMzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM2MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxRAwMA0GCSqGSIb3DQEBCwUAA4IBAQAw y0Bo9ElUPWUqjl9A3mrxPDUJh7GKR0CXTZkQRQNr4zHdNgTrw8u0WKkOfDVfdNaJ 0f4bBpD8sRWsM+/v33Pd/g5c7Ar2DDpgjtpw7y2PukG+aSl0N1lncs5hu9EjpP+L ClAVERmXGxdLhKVcd9yU4T7qJrk8KHDYzr+SyNb7YXzmh70Kd8uIoOd5tEdrJVW4 TzsAEuvFOJYflfRYrmIc+2f78mQk+QPEDzc0psfv4xHAGRdgWlrVJ3jzYhS6tpyB vZWWOcCsTFEYEB5ONxDQNxS8e3p6+IQoojadvEBTiHvLb+vQ9z0zluLcw7sDWV3x 6l84E3ThcYQ/EV248Xvv -----END CERTIFICATE-----Generated at Sun Mar 1 14:56:34 2026 by rpki-client