$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa File: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (raw, json) Hash identifier: PEhenAX2nlmj27r2UpmJddvn+0j+/ZFXnNAuKFs/Dpk= Subject key identifier: 4D:D1:F0:B5:BD:DC:72:40:E5:C3:3D:DE:35:81:7E:99:A5:96:95:E8 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 3AA1165CE871CB4AA2CF797B14AD2D114AE240B8 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa Signing time: Thu 17 Sep 2026 20:00:44 +0000 ROA not before: Thu 17 Sep 2026 19:55:44 +0000 ROA not after: Thu 16 Sep 2027 20:00:44 +0000 asID: 214762 IP address blocks: 2a06:1283:8904::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 02:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a1:16:5c:e8:71:cb:4a:a2:cf:79:7b:14:ad:2d:11:4a:e2:40:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Sep 17 19:55:44 2026 GMT Not After : Sep 16 20:00:44 2027 GMT Subject: CN=4DD1F0B5BDDC7240E5C33DDE35817E99A59695E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:33:84:ea:4d:6b:66:48:52:70:04:0e:4c: f8:0c:0d:07:04:22:e7:ab:9e:39:2a:8c:ee:8f:7e: 0a:b4:8d:1b:07:9f:5b:4f:f7:db:a6:34:30:fd:58: 0e:43:30:43:9c:0a:dd:e9:d7:c5:a7:2e:e7:50:e0: 82:f2:11:e6:da:63:6e:8e:ac:b9:5b:76:00:24:d7: 7a:06:4a:78:53:6e:a9:6f:51:0f:15:0a:18:3a:d7: 90:5b:a0:a8:47:55:ab:df:dc:01:a9:9f:6e:97:0d: 87:1c:3a:4b:b6:15:7b:1b:2d:d5:3c:6c:7a:4d:76: e7:c7:d1:4f:e5:ff:b8:65:08:62:05:00:c2:03:52: e6:5a:a5:1c:f8:3f:5a:63:8c:bb:3c:ee:31:9f:49: cc:b6:ab:05:e1:ee:5c:5d:5f:61:b9:d8:36:92:4d: a8:39:74:67:96:3a:03:57:45:67:46:66:4f:d9:e5: 23:c3:f6:0a:22:84:a8:af:4a:70:16:67:11:ab:6c: 79:ec:86:7a:1d:72:c5:b5:9b:f6:64:98:51:9e:bb: ec:3b:f9:5a:38:14:15:2b:5e:da:ff:f7:e4:e4:2e: 24:38:ae:4e:05:e4:ab:d1:53:cd:d9:71:c9:bb:6f: b5:1d:a0:8c:a5:19:f5:31:fd:15:29:2a:49:f5:17: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D1:F0:B5:BD:DC:72:40:E5:C3:3D:DE:35:81:7E:99:A5:96:95:E8 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8904::/48 Signature Algorithm: sha256WithRSAEncryption 7d:19:b9:fb:99:13:f8:c2:65:e1:52:e2:69:57:7e:a8:bd:fd: 0b:4d:e8:89:be:f9:e5:cf:df:36:18:3d:fa:17:97:7a:4d:aa: 91:80:41:62:67:44:26:6b:9f:0f:69:a4:7c:b0:7f:9e:9e:e5: df:6f:53:a8:9b:4e:71:b3:00:d3:c5:bc:59:ea:12:d0:df:18: 16:dc:fa:0f:bb:ce:23:7a:be:ef:42:a7:28:05:e8:5f:1c:45: b3:79:ac:f5:4b:f9:6e:cb:45:bb:ac:a0:a6:2b:fd:4e:e0:09: ff:98:cb:e0:ad:3a:2a:9f:b1:87:22:9e:e1:f6:8e:88:da:74: 8f:1a:4d:09:4e:94:b1:a5:ed:b0:79:d0:e5:22:93:1f:c4:e4: 43:45:83:9f:78:73:43:17:06:50:1c:05:a8:d4:a2:4b:d6:1b: 75:3e:09:7e:f8:d8:3c:ce:62:35:55:c7:61:02:57:7c:da:8e: d9:26:91:b2:f6:26:88:98:29:f5:fc:3a:be:46:fa:fd:28:07: cb:55:82:34:7e:25:62:67:32:3f:ff:26:30:3e:32:55:b5:4b: d4:1b:c1:e1:e7:b1:8a:ae:88:37:94:9a:1a:c0:ac:23:12:85: 86:05:09:68:28:51:89:9a:57:e6:d9:cd:5e:82:c9:05:de:b2: dd:89:9c:6a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUOqEWXOhxy0qiz3l7FK0tEUriQLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA5MTcxOTU1NDRaFw0yNzA5MTYyMDAwNDRaMDMxMTAvBgNV BAMTKDRERDFGMEI1QkREQzcyNDBFNUMzM0RERTM1ODE3RTk5QTU5Njk1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXjOE6k1rZkhScAQOTPgMDQcE IuernjkqjO6Pfgq0jRsHn1tP99umNDD9WA5DMEOcCt3p18WnLudQ4ILyEebaY26O rLlbdgAk13oGSnhTbqlvUQ8VChg615BboKhHVavf3AGpn26XDYccOku2FXsbLdU8 bHpNdufH0U/l/7hlCGIFAMIDUuZapRz4P1pjjLs87jGfScy2qwXh7lxdX2G52DaS Tag5dGeWOgNXRWdGZk/Z5SPD9goihKivSnAWZxGrbHnshnodcsW1m/ZkmFGeu+w7 +Vo4FBUrXtr/9+TkLiQ4rk4F5KvRU83Zccm7b7UdoIylGfUx/RUpKkn1F1+XAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUTdHwtb3cckDlwz3eNYF+maWWlegwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM0M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzQzNzM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiQQwDQYJKoZIhvcNAQELBQADggEB AH0ZufuZE/jCZeFS4mlXfqi9/QtN6Im++eXP3zYYPfoXl3pNqpGAQWJnRCZrnw9p pHywf56e5d9vU6ibTnGzANPFvFnqEtDfGBbc+g+7ziN6vu9CpygF6F8cRbN5rPVL +W7LRbusoKYr/U7gCf+Yy+CtOiqfsYcinuH2jojadI8aTQlOlLGl7bB50OUikx/E 5ENFg594c0MXBlAcBajUokvWG3U+CX742DzOYjVVx2ECV3zajtkmkbL2JoiYKfX8 Or5G+v0oB8tVgjR+JWJnMj//JjA+MlW1S9QbweHnsYquiDeUmhrArCMShYYFCWgo UYmaV+bZzV6CyQXest2JnGo= -----END CERTIFICATE-----Generated at Sun Oct 11 20:17:57 2026 by rpki-client