$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa File: 326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa (raw, json) Hash identifier: VEluBfu+UVgZrxSe1UipoTLy1fiGHxv2QDcCVFCjUkc= Subject key identifier: 54:94:93:64:38:0D:A7:60:76:74:C0:9F:E1:CE:91:41:B8:21:44:B8 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 0D1D0CFE9F6483CDFD5D00C36BACF468DA9882E6 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa Signing time: Mon 16 Feb 2026 23:04:06 +0000 ROA not before: Mon 16 Feb 2026 22:59:06 +0000 ROA not after: Mon 15 Feb 2027 23:04:06 +0000 asID: 204464 IP address blocks: 2a06:1283:8915::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 20:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1d:0c:fe:9f:64:83:cd:fd:5d:00:c3:6b:ac:f4:68:da:98:82:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Feb 16 22:59:06 2026 GMT Not After : Feb 15 23:04:06 2027 GMT Subject: CN=54949364380DA7607674C09FE1CE9141B82144B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:6d:88:77:6e:92:7b:44:37:d0:24:f5:45: d8:6a:61:1f:aa:54:2f:11:53:76:0e:4c:e4:a6:6b: 63:8c:1b:3f:74:39:54:50:1f:d7:8e:cb:97:56:cd: 8b:ee:33:98:89:f1:d9:25:a5:fa:03:17:87:f0:c3: 28:d5:23:f1:5c:3d:f7:ec:77:63:71:3c:73:63:d3: 6a:f2:4b:2e:a3:52:8a:39:1e:86:5a:88:d0:f2:0f: 66:bf:67:dd:89:4e:a3:33:ff:c2:d5:d5:2c:23:d1: 01:4a:1d:7f:8b:c5:45:6a:39:8a:3b:4e:5a:03:74: ed:85:12:ca:db:96:a6:14:b4:cc:7f:51:8f:63:94: d7:47:55:3b:5f:ef:3d:ad:f9:94:9a:14:31:ae:f9: 20:de:0b:20:49:c6:e6:71:a6:57:a1:c7:54:06:bf: 05:00:ff:15:84:94:02:e9:91:b4:27:b9:1c:23:cb: f4:0b:04:20:28:38:fc:b8:a2:a1:3e:b6:ea:2f:28: ab:37:e1:b2:ef:2d:38:cc:a5:50:fe:b6:07:b7:fe: 5f:6f:67:ae:25:0c:a4:df:e9:7d:6a:5e:3e:8e:68: 75:f6:3f:c7:c3:16:a8:1c:c9:c5:04:12:5e:be:ac: 12:64:79:18:2a:71:a6:1b:4a:aa:5f:55:14:83:fe: 9f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:93:64:38:0D:A7:60:76:74:C0:9F:E1:CE:91:41:B8:21:44:B8 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8915::/48 Signature Algorithm: sha256WithRSAEncryption 42:8a:c1:03:93:e6:a6:34:18:71:82:61:e0:cb:2b:73:9d:68: 5b:a3:c3:76:07:7b:fa:f0:25:b2:09:a4:da:21:92:10:c4:59: 8d:cf:16:04:78:25:6e:64:3f:16:d2:59:4b:ab:e8:e7:aa:42: 71:d4:3a:a7:32:a5:f5:69:da:6c:a3:8a:7d:c7:ee:87:9c:8f: 17:ca:a7:37:38:7c:c5:2d:04:f8:0d:ea:2e:30:6b:cb:a9:70: be:95:ab:7a:83:74:18:4f:b2:1b:b8:c6:d5:77:00:e8:48:a7: 63:04:21:d3:52:ab:01:d3:2c:d5:ce:95:e4:92:ac:be:af:d1: 65:65:67:99:57:b1:c2:39:b3:17:f6:11:50:20:98:f8:38:eb: c8:5d:08:7d:31:d4:1d:cf:76:93:4a:17:2d:d9:50:4e:df:7d: 78:0f:20:e5:01:ea:07:36:91:23:fc:f9:31:09:2a:ed:25:b8: 1b:dd:b2:8f:77:c5:43:fb:c4:0a:ba:d9:d6:5a:20:e4:9d:f7: dc:80:70:e8:7e:81:09:92:4c:29:c7:ee:29:e6:9b:37:1f:a5: 7c:c7:79:fa:ce:6c:fa:1c:eb:eb:59:1d:7b:aa:24:ce:1f:59: 93:4b:be:50:a1:80:05:d5:54:58:12:66:64:b3:c3:8b:f1:20: e3:ff:1a:c0 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDR0M/p9kg839XQDDa6z0aNqYguYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjAyMTYyMjU5MDZaFw0yNzAyMTUyMzA0MDZaMDMxMTAvBgNV BAMTKDU0OTQ5MzY0MzgwREE3NjA3Njc0QzA5RkUxQ0U5MTQxQjgyMTQ0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqG2Id26Se0Q30CT1RdhqYR+q VC8RU3YOTOSma2OMGz90OVRQH9eOy5dWzYvuM5iJ8dklpfoDF4fwwyjVI/FcPffs d2NxPHNj02rySy6jUoo5HoZaiNDyD2a/Z92JTqMz/8LV1Swj0QFKHX+LxUVqOYo7 TloDdO2FEsrblqYUtMx/UY9jlNdHVTtf7z2t+ZSaFDGu+SDeCyBJxuZxplehx1QG vwUA/xWElALpkbQnuRwjy/QLBCAoOPy4oqE+tuovKKs34bLvLTjMpVD+tge3/l9v Z64lDKTf6X1qXj6OaHX2P8fDFqgcycUEEl6+rBJkeRgqcaYbSqpfVRSD/p+JAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUVJSTZDgNp2B2dMCf4c6RQbghRLgwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzQzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kVMA0GCSqGSIb3DQEBCwUAA4IBAQBC isEDk+amNBhxgmHgyytznWhbo8N2B3v68CWyCaTaIZIQxFmNzxYEeCVuZD8W0llL q+jnqkJx1DqnMqX1adpso4p9x+6HnI8Xyqc3OHzFLQT4DeouMGvLqXC+lat6g3QY T7IbuMbVdwDoSKdjBCHTUqsB0yzVzpXkkqy+r9FlZWeZV7HCObMX9hFQIJj4OOvI XQh9MdQdz3aTShct2VBO3314DyDlAeoHNpEj/PkxCSrtJbgb3bKPd8VD+8QKutnW WiDknffcgHDofoEJkkwpx+4p5ps3H6V8x3n6zmz6HOvrWR17qiTOH1mTS75QoYAF 1VRYEmZks8OL8SDj/xrA -----END CERTIFICATE-----Generated at Mon Mar 2 07:41:46 2026 by rpki-client