$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386236303a3a2f34342d313238203d3e20323031353431.roa File: 326130363a313238333a386236303a3a2f34342d313238203d3e20323031353431.roa (raw, json) Hash identifier: oAnm/5jnLHCdmiAAO1AvOmf4J6TOGv96yA8zLHnJsn8= Subject key identifier: 9E:32:B6:AE:57:A9:74:D1:31:A3:9D:0F:E6:92:07:09:AD:3E:A5:63 Certificate issuer: /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Certificate serial: 75428A9F1AC82A5091A02092FD796C516776BE2C Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386236303a3a2f34342d313238203d3e20323031353431.roa Signing time: Fri 06 Feb 2026 21:08:17 +0000 ROA not before: Fri 06 Feb 2026 21:03:17 +0000 ROA not after: Fri 05 Feb 2027 21:08:17 +0000 asID: 201541 IP address blocks: 2a06:1283:8b60::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:42:8a:9f:1a:c8:2a:50:91:a0:20:92:fd:79:6c:51:67:76:be:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Validity Not Before: Feb 6 21:03:17 2026 GMT Not After : Feb 5 21:08:17 2027 GMT Subject: CN=9E32B6AE57A974D131A39D0FE6920709AD3EA563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:50:55:27:b8:0e:84:f5:3e:27:28:40:51: 8b:39:bc:01:6a:ab:1f:2e:00:87:d7:d6:c8:dd:f0: 7c:ef:3a:1b:76:95:55:e5:00:aa:e0:ea:e7:75:1a: fb:8d:36:ba:e2:07:88:bd:77:5f:9b:d6:e5:36:1d: d5:0d:21:3a:29:38:3e:bd:41:15:fe:ce:14:60:c8: 5f:02:52:05:33:34:dc:5d:5b:9c:be:cc:85:13:60: 7c:f0:38:87:29:0c:20:76:49:d2:22:4d:f9:7a:e1: 27:5a:40:d4:1e:a1:e7:4d:c5:12:f2:1f:45:18:7a: 6c:6a:ba:7e:45:f4:b4:24:35:eb:e0:43:99:f0:2d: 03:c6:0b:b2:fe:45:27:71:77:46:ef:9d:3d:cc:2a: 8f:76:3e:93:b5:d2:b5:59:64:59:94:cc:b2:05:7c: 22:da:4b:cd:1c:4d:a2:75:62:61:8a:2b:9a:82:e5: 6d:91:89:ac:52:96:2c:70:33:57:c3:2c:9a:84:75: 9e:bd:d6:ff:1f:bb:69:dc:76:ae:a4:1c:53:df:75: 2a:e2:95:cb:60:11:92:1e:c2:f7:ee:23:4d:f4:a3: 8a:1c:4e:ac:64:a2:a5:36:87:40:ea:66:7a:75:e4: c1:bb:8e:9e:df:34:42:f9:99:2e:a2:8f:fe:cf:9a: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:32:B6:AE:57:A9:74:D1:31:A3:9D:0F:E6:92:07:09:AD:3E:A5:63 X509v3 Authority Key Identifier: keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386236303a3a2f34342d313238203d3e20323031353431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b60::/44 Signature Algorithm: sha256WithRSAEncryption 11:14:5d:cd:d6:3c:e1:74:f7:4c:bf:04:39:b3:fd:90:14:c1: f2:69:31:d5:a2:1d:74:e1:a5:95:d8:de:16:b0:ce:0c:37:83: 06:53:ca:9b:6c:6c:ef:c4:66:f5:8d:9e:61:68:a1:e2:1a:5e: 7b:55:24:ca:8d:e8:b4:a4:f1:85:cd:f8:ab:2b:48:fb:69:e2: f0:6c:5c:2f:15:28:51:8c:85:91:07:5f:43:bc:95:8a:3e:1a: 9b:01:f0:eb:ec:90:8a:8f:d2:0c:0e:79:be:9e:16:90:9c:fb: f7:ff:4d:5d:41:41:d9:42:2f:a0:cb:6a:8d:42:a9:a6:bc:66: 69:2a:50:65:32:1d:c3:fc:e5:8e:47:56:3e:99:64:fa:2b:e0: d0:15:8e:2f:13:a1:74:68:d8:dd:4e:f5:11:d5:15:41:83:07: 7d:3a:be:f8:f6:3c:99:3b:45:a8:63:40:89:88:4a:a2:20:86: 8e:b4:25:74:77:e3:16:98:2e:e7:86:a7:dd:8a:f0:f0:04:1d: e2:d9:14:1d:f1:85:41:2c:6b:0b:7a:26:db:f4:46:43:5e:3b: 95:61:64:00:c6:9f:34:e2:a1:d2:01:7e:6a:c2:5f:b3:03:97: 6e:b4:d5:b6:8d:37:ce:3a:d2:eb:6a:de:56:f7:39:e9:22:84: 47:0a:19:b6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUdUKKnxrIKlCRoCCS/XlsUWd2viwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVC QTgzMEUwNzAeFw0yNjAyMDYyMTAzMTdaFw0yNzAyMDUyMTA4MTdaMDMxMTAvBgNV BAMTKDlFMzJCNkFFNTdBOTc0RDEzMUEzOUQwRkU2OTIwNzA5QUQzRUE1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ1BVJ7gOhPU+JyhAUYs5vAFq qx8uAIfX1sjd8HzvOht2lVXlAKrg6ud1GvuNNrriB4i9d1+b1uU2HdUNITopOD69 QRX+zhRgyF8CUgUzNNxdW5y+zIUTYHzwOIcpDCB2SdIiTfl64SdaQNQeoedNxRLy H0UYemxqun5F9LQkNevgQ5nwLQPGC7L+RSdxd0bvnT3MKo92PpO10rVZZFmUzLIF fCLaS80cTaJ1YmGKK5qC5W2RiaxSlixwM1fDLJqEdZ691v8fu2ncdq6kHFPfdSri lctgEZIewvfuI030o4ocTqxkoqU2h0DqZnp15MG7jp7fNEL5mS6ij/7PmonrAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUnjK2rlepdNExo50P5pIHCa0+pWMwHwYDVR0j BBgwFoAUsROzHp8BovQYcOjHdJKxjrqDDgcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzIvQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVCQTgzMEUwNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9CMTEzQjMxRTlGMDFBMkY0MTg3MEU4Qzc3 NDkyQjE4RUJBODMwRTA3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83NzlhNzkwMy0yZWRiLTQ4YWQtYWJlYi1lZTM5YTc5Zjg1MDcvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzNjMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAz MjMwMzEzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBhKDi2AwDQYJKoZIhvcNAQELBQADggEB ABEUXc3WPOF090y/BDmz/ZAUwfJpMdWiHXThpZXY3hawzgw3gwZTyptsbO/EZvWN nmFooeIaXntVJMqN6LSk8YXN+KsrSPtp4vBsXC8VKFGMhZEHX0O8lYo+GpsB8Ovs kIqP0gwOeb6eFpCc+/f/TV1BQdlCL6DLao1Cqaa8ZmkqUGUyHcP85Y5HVj6ZZPor 4NAVji8ToXRo2N1O9RHVFUGDB306vvj2PJk7RahjQImISqIgho60JXR34xaYLueG p92K8PAEHeLZFB3xhUEsawt6Jtv0RkNeO5VhZADGnzTiodIBfmrCX7MDl2601baN N8460utq3lb3OekihEcKGbY= -----END CERTIFICATE-----Generated at Sun Mar 1 18:19:49 2026 by rpki-client