$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386235303a3a2f34342d313238203d3e20323031353431.roa File: 326130363a313238333a386235303a3a2f34342d313238203d3e20323031353431.roa (raw, json) Hash identifier: UHIz9fhrRcH7CAaA2644ZVmryOKbRIVbxPo/svheRCo= Subject key identifier: FB:CD:F9:B5:19:C3:16:D2:81:80:0E:DF:A9:57:B9:61:16:00:AE:65 Certificate issuer: /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Certificate serial: 2A5E6F5CB729CFC7515EE2FDD46A4CEBBB7E3351 Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386235303a3a2f34342d313238203d3e20323031353431.roa Signing time: Fri 06 Feb 2026 21:07:51 +0000 ROA not before: Fri 06 Feb 2026 21:02:51 +0000 ROA not after: Fri 05 Feb 2027 21:07:51 +0000 asID: 201541 IP address blocks: 2a06:1283:8b50::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 22:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5e:6f:5c:b7:29:cf:c7:51:5e:e2:fd:d4:6a:4c:eb:bb:7e:33:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Validity Not Before: Feb 6 21:02:51 2026 GMT Not After : Feb 5 21:07:51 2027 GMT Subject: CN=FBCDF9B519C316D281800EDFA957B9611600AE65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:75:c6:10:64:d9:dc:f5:53:92:b9:4f:3f: b8:8a:09:84:63:e3:af:2f:b9:42:f1:0f:8e:0c:79: cd:e9:7a:11:e6:3d:4c:be:7b:c0:ff:0d:2c:5c:79: 8b:59:a1:64:fe:7f:7d:f8:97:32:90:9c:92:a7:b8: 6a:1a:d5:9a:17:3a:5e:09:61:ff:b4:0e:be:60:2a: 85:2f:d9:6c:c7:b4:9d:3a:ca:1b:32:f6:ee:43:13: 7a:cd:3b:54:da:13:3a:1f:a8:47:25:6c:53:6c:78: 47:19:e4:ac:33:00:18:76:32:e4:a9:9f:5e:28:c8: d1:73:a6:30:88:5e:82:a7:e4:c9:06:68:ba:dd:72: 7d:b3:6c:6d:f2:d9:32:39:fd:11:7b:c1:2a:ea:8b: 6d:09:7a:9d:13:1d:4f:48:50:78:06:ff:df:8e:0c: f2:85:16:75:ea:d6:40:fb:0d:2e:21:dd:b4:d4:d8: de:a0:3e:d8:b5:a3:b5:dc:f9:3e:5a:af:fb:50:07: 46:3b:98:ae:02:19:67:dd:3e:63:a9:97:82:f5:a5: 30:b4:36:40:34:f1:2c:5e:10:3a:73:ac:ba:ab:1c: 48:b7:b2:40:b4:a1:bd:d5:38:2b:ca:5a:0d:ec:9e: 90:b9:38:c4:64:e7:6c:e2:11:41:8c:5d:ef:92:3e: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CD:F9:B5:19:C3:16:D2:81:80:0E:DF:A9:57:B9:61:16:00:AE:65 X509v3 Authority Key Identifier: keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386235303a3a2f34342d313238203d3e20323031353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b50::/44 Signature Algorithm: sha256WithRSAEncryption 32:b9:89:f6:e6:14:d2:f4:28:d4:0e:b1:ff:b1:85:46:24:57: b1:1b:4a:0a:4a:a0:a3:b8:f3:8d:df:14:59:cf:db:56:35:55: 90:cc:43:4f:b0:dd:fa:f8:e6:49:17:61:c4:de:c3:7a:86:ab: b5:e2:07:9c:56:a5:d4:c8:d8:09:c3:08:1f:8b:1d:63:ab:ac: 42:4e:81:7e:8f:b1:42:31:63:5b:4e:7b:01:d5:c6:cd:a8:e4: 20:ec:a2:3e:cb:93:29:89:57:3f:25:4b:4c:1f:32:78:61:84: 66:f7:36:13:3e:39:eb:6d:77:8a:b1:6a:23:4d:5f:70:39:76: 8e:58:cc:cf:b1:07:25:63:31:e6:8b:59:96:c2:e4:6c:a2:e5: 7b:9c:db:68:09:76:67:a6:42:c0:27:f1:8f:73:2f:7b:18:05: 39:77:1c:e3:5a:5d:54:b1:59:33:1e:6f:83:fb:fc:12:3d:d8: bf:01:2a:9a:b1:bb:5c:da:99:7f:0d:fc:42:01:f5:4c:06:cf: 57:54:90:a4:42:17:f3:a9:8f:68:ec:c2:94:13:c3:8d:3c:42: 90:d8:45:2c:96:37:02:e2:96:15:81:e4:13:62:57:5f:9e:ac: 47:13:60:26:4a:76:45:8b:d5:fa:7c:41:a9:b8:01:54:a1:95: ff:ad:8d:cf -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUKl5vXLcpz8dRXuL91GpM67t+M1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVC QTgzMEUwNzAeFw0yNjAyMDYyMTAyNTFaFw0yNzAyMDUyMTA3NTFaMDMxMTAvBgNV BAMTKEZCQ0RGOUI1MTlDMzE2RDI4MTgwMEVERkE5NTdCOTYxMTYwMEFFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlXXGEGTZ3PVTkrlPP7iKCYRj 468vuULxD44Mec3pehHmPUy+e8D/DSxceYtZoWT+f334lzKQnJKnuGoa1ZoXOl4J Yf+0Dr5gKoUv2WzHtJ06yhsy9u5DE3rNO1TaEzofqEclbFNseEcZ5KwzABh2MuSp n14oyNFzpjCIXoKn5MkGaLrdcn2zbG3y2TI5/RF7wSrqi20Jep0THU9IUHgG/9+O DPKFFnXq1kD7DS4h3bTU2N6gPti1o7Xc+T5ar/tQB0Y7mK4CGWfdPmOpl4L1pTC0 NkA08SxeEDpzrLqrHEi3skC0ob3VOCvKWg3snpC5OMRk52ziEUGMXe+SPl77AgMB AAGjggKHMIICgzAdBgNVHQ4EFgQU+835tRnDFtKBgA7fqVe5YRYArmUwHwYDVR0j BBgwFoAUsROzHp8BovQYcOjHdJKxjrqDDgcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzIvQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVCQTgzMEUwNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9CMTEzQjMxRTlGMDFBMkY0MTg3MEU4Qzc3 NDkyQjE4RUJBODMwRTA3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83NzlhNzkwMy0yZWRiLTQ4YWQtYWJlYi1lZTM5YTc5Zjg1MDcvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzNTMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAz MjMwMzEzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBhKDi1AwDQYJKoZIhvcNAQELBQADggEB ADK5ifbmFNL0KNQOsf+xhUYkV7EbSgpKoKO4843fFFnP21Y1VZDMQ0+w3fr45kkX YcTew3qGq7XiB5xWpdTI2AnDCB+LHWOrrEJOgX6PsUIxY1tOewHVxs2o5CDsoj7L kymJVz8lS0wfMnhhhGb3NhM+Oettd4qxaiNNX3A5do5YzM+xByVjMeaLWZbC5Gyi 5Xuc22gJdmemQsAn8Y9zL3sYBTl3HONaXVSxWTMeb4P7/BI92L8BKpqxu1zamX8N /EIB9UwGz1dUkKRCF/Opj2jswpQTw408QpDYRSyWNwLilhWB5BNiV1+erEcTYCZK dkWL1fp8Qam4AVShlf+tjc8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:41:24 2026 by rpki-client