$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa File: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (raw, json) Hash identifier: L8Uw37dvp3Z9x8NXJrGGnSNmByuPo6gjafPTmXfheNc= Subject key identifier: 67:28:71:C1:87:35:F5:53:07:26:38:D1:CB:C0:58:87:68:27:EB:5A Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 46D75471E4A7BE244944BE042846ECC785EE6331 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa Signing time: Mon 07 Sep 2026 22:00:42 +0000 ROA not before: Mon 07 Sep 2026 21:55:42 +0000 ROA not after: Mon 06 Sep 2027 22:00:42 +0000 asID: 214205 IP address blocks: 2a06:1283:8901::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 02:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d7:54:71:e4:a7:be:24:49:44:be:04:28:46:ec:c7:85:ee:63:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Sep 7 21:55:42 2026 GMT Not After : Sep 6 22:00:42 2027 GMT Subject: CN=672871C18735F553072638D1CBC058876827EB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:56:d9:1d:c2:1d:dd:47:b4:20:bf:4f:72: 94:79:94:99:56:c0:74:f3:1c:c7:2a:61:31:c1:f4: a1:97:f1:94:1d:fd:ca:51:6c:54:aa:d3:9b:a6:d6: fb:76:b3:65:9a:ed:4e:0a:2c:8e:91:e7:32:54:bf: a0:fa:d8:e0:cf:db:8c:69:16:2a:06:0d:c4:fc:57: d5:8e:8b:ab:7b:ce:90:6e:94:1f:07:96:26:8f:d1: 0b:5e:d2:38:08:d4:f2:32:59:84:ea:e7:2b:ae:74: b9:fa:cf:d1:f0:cd:45:7b:5f:93:be:9c:0b:e4:19: d3:8e:95:49:dd:84:51:40:fe:22:f7:30:ca:50:39: e6:86:90:58:e4:03:c8:a2:ff:5f:d6:1c:20:30:01: f1:35:d1:0b:ed:3f:90:e5:ef:56:2d:db:1a:16:5d: 27:bb:4e:98:6e:41:7b:74:75:d1:0f:f6:7d:53:26: 50:fd:17:48:c5:d3:d5:6a:62:0f:10:e4:cb:ac:1c: be:2b:11:2b:e1:8b:3f:82:c8:6b:26:cc:43:a8:6c: ac:f3:67:aa:b7:de:d6:8f:52:ce:d1:6b:25:b3:d2: 1a:67:a9:bb:1a:89:06:b8:82:05:ed:73:63:2b:9c: 83:aa:8f:d0:25:1e:ef:fe:a6:3b:09:5f:c1:61:37: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:71:C1:87:35:F5:53:07:26:38:D1:CB:C0:58:87:68:27:EB:5A X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8901::/48 Signature Algorithm: sha256WithRSAEncryption b6:3e:80:e0:15:95:58:a9:d5:fe:29:bd:d8:da:f5:82:70:a0: e0:2c:dd:56:62:c5:03:62:ea:08:86:28:60:ec:69:f7:bc:51: f3:a3:69:0b:d3:63:1c:17:d3:1c:cc:c5:ac:65:c6:b5:92:5b: 2c:f3:ce:b0:2b:32:e1:85:2e:fd:32:92:39:0d:38:ec:78:87: 07:24:ba:bd:f5:9d:85:46:ee:06:6d:0a:15:0f:5b:b4:d0:68: a6:d5:43:2d:26:8a:ce:fa:61:04:d2:7a:ed:20:4f:cd:79:8d: a5:ef:0e:17:00:46:89:f7:5f:69:1a:3d:d0:e6:e0:d8:11:6a: 06:7a:d6:de:b8:cb:3a:a3:eb:d4:9a:df:0a:6a:5a:ae:4c:18: 0c:09:6d:24:f4:dd:c4:2c:e2:40:40:9c:be:15:cb:c8:22:3d: 32:43:36:20:17:55:3f:0b:c4:5f:8a:3e:05:71:b9:02:f1:da: aa:6f:cd:60:9e:b1:8f:3a:cd:38:6b:c7:16:e9:3c:e0:95:e4: ab:09:61:a5:b5:bb:91:9f:74:a7:ce:ee:a2:06:a9:19:ef:6a: b6:1f:67:2c:66:9d:00:f9:5c:f7:8d:c0:40:14:18:fe:f5:2d: f3:a2:98:ed:35:0e:a6:ce:2e:90:fe:f0:80:2e:1f:92:9c:31: a6:f2:4b:86 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIURtdUceSnviRJRL4EKEbsx4XuYzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA5MDcyMTU1NDJaFw0yNzA5MDYyMjAwNDJaMDMxMTAvBgNV BAMTKDY3Mjg3MUMxODczNUY1NTMwNzI2MzhEMUNCQzA1ODg3NjgyN0VCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5FbZHcId3Ue0IL9PcpR5lJlW wHTzHMcqYTHB9KGX8ZQd/cpRbFSq05um1vt2s2Wa7U4KLI6R5zJUv6D62ODP24xp FioGDcT8V9WOi6t7zpBulB8HliaP0Qte0jgI1PIyWYTq5yuudLn6z9HwzUV7X5O+ nAvkGdOOlUndhFFA/iL3MMpQOeaGkFjkA8ii/1/WHCAwAfE10QvtP5Dl71Yt2xoW XSe7TphuQXt0ddEP9n1TJlD9F0jF09VqYg8Q5MusHL4rESvhiz+CyGsmzEOobKzz Z6q33taPUs7RayWz0hpnqbsaiQa4ggXtc2MrnIOqj9AlHu/+pjsJX8FhN0V3AgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUZyhxwYc19VMHJjjRy8BYh2gn61owHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDMxM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzQzMjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiQEwDQYJKoZIhvcNAQELBQADggEB ALY+gOAVlVip1f4pvdja9YJwoOAs3VZixQNi6giGKGDsafe8UfOjaQvTYxwX0xzM xaxlxrWSWyzzzrArMuGFLv0ykjkNOOx4hwckur31nYVG7gZtChUPW7TQaKbVQy0m is76YQTSeu0gT815jaXvDhcARon3X2kaPdDm4NgRagZ61t64yzqj69Sa3wpqWq5M GAwJbST03cQs4kBAnL4Vy8giPTJDNiAXVT8LxF+KPgVxuQLx2qpvzWCesY86zThr xxbpPOCV5KsJYaW1u5GfdKfO7qIGqRnvarYfZyxmnQD5XPeNwEAUGP71LfOimO01 DqbOLpD+8IAuH5KcMabyS4Y= -----END CERTIFICATE-----Generated at Sun Sep 20 11:12:18 2026 by rpki-client