$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa File: 326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa (raw, json) Hash identifier: IoCPHkitPh6npsPsb3Bqa9FNQf1sEQWU+tTBPtB15HE= Subject key identifier: 39:C8:76:11:78:3C:CD:60:61:B9:2E:CD:C3:2B:8B:BE:BF:87:6B:E0 Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Certificate serial: 50C1DDAE9AF5BFDFFFCDA5F1F6D0736C7FD2BF77 Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa Signing time: Mon 23 Feb 2026 09:19:12 +0000 ROA not before: Mon 23 Feb 2026 09:14:12 +0000 ROA not after: Mon 22 Feb 2027 09:19:12 +0000 asID: 210632 IP address blocks: 2a0b:4e07:6101::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c1:dd:ae:9a:f5:bf:df:ff:cd:a5:f1:f6:d0:73:6c:7f:d2:bf:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Validity Not Before: Feb 23 09:14:12 2026 GMT Not After : Feb 22 09:19:12 2027 GMT Subject: CN=39C87611783CCD6061B92ECDC32B8BBEBF876BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:25:9c:c3:9f:ca:46:7c:01:98:35:2c:80: 66:eb:80:11:49:b6:b6:28:62:04:79:41:48:e6:94: c1:1a:8a:dd:be:5a:69:2f:4c:03:66:fc:8f:24:2c: 02:02:ef:59:90:82:b5:4c:fc:c4:7c:03:07:4b:ec: 76:8b:90:9b:66:a8:78:51:31:f0:95:ab:91:c7:d9: c6:d3:a6:0b:e9:fd:ac:55:68:0b:28:71:b9:e6:6b: 0d:e2:de:09:fa:92:04:c8:05:70:c0:33:d5:25:2e: 58:cb:2e:74:c7:b3:97:bd:1c:91:13:94:4f:6c:ea: 2e:e2:db:2e:12:80:a2:98:60:fc:05:1b:f9:45:5f: 59:0e:05:84:ef:f3:4f:39:79:03:bf:bf:09:76:d7: a7:ec:aa:e6:dd:e7:1f:cc:2d:ed:a3:dd:2f:d6:40: b4:b6:28:14:79:44:a0:4e:f3:8f:2e:96:6e:0c:43: 51:98:a3:ee:f7:ac:6d:6e:30:2e:5a:7d:10:40:ba: 92:c7:20:86:1e:5c:ed:da:4d:a9:a6:e4:73:19:40: 5f:3f:d2:42:00:3a:94:53:f6:37:ef:ef:97:d0:4e: 2c:45:ab:a7:0c:30:5f:14:6a:79:03:dc:d2:a8:4e: 4f:29:ba:07:26:3c:3a:f1:8f:0d:29:0f:01:66:ac: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C8:76:11:78:3C:CD:60:61:B9:2E:CD:C3:2B:8B:BE:BF:87:6B:E0 X509v3 Authority Key Identifier: keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6101::/48 Signature Algorithm: sha256WithRSAEncryption a3:97:a6:e0:0c:74:8d:0e:f4:db:ce:f9:43:b9:48:3a:a1:6a: f7:94:44:0e:6f:91:ee:b7:95:d2:07:34:bd:e5:53:9f:af:68: 70:d4:fd:0e:6e:9c:67:3a:df:7d:bc:a4:a4:cb:36:5d:a9:45: d2:be:83:4a:3b:16:31:61:13:99:17:0e:92:80:a8:a6:08:64: fb:b4:17:45:b2:37:76:94:59:67:ce:be:2f:a8:9b:7e:71:bd: f3:76:27:a3:85:42:4a:36:4c:d2:69:93:ee:97:dc:14:51:10: 2d:ac:88:aa:52:3f:9e:54:f0:28:8a:0e:3e:fd:53:67:e4:3d: 78:20:c9:e4:b0:9f:0a:25:c6:77:5b:46:43:69:2a:30:39:6b: 68:f4:06:6d:26:4c:25:bc:b4:89:8a:be:b6:62:21:21:cc:b5: 35:d5:f4:3a:83:93:7f:92:44:35:26:03:18:36:75:a7:0c:e2: 53:8b:a7:ca:20:4c:a5:19:52:33:1f:06:53:8b:c3:75:b8:78: 59:98:6f:e7:3e:a8:b2:7a:54:51:72:2e:0e:db:16:a5:ee:ac: de:0a:34:d0:c2:a8:f5:0a:2e:84:0f:b2:05:51:1a:1d:e1:4a: 61:b7:8a:f3:4c:d2:a5:b7:48:aa:d6:ab:83:e5:80:89:9b:6e: 17:04:9f:04 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUUMHdrpr1v9//zaXx9tBzbH/Sv3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4 OEUxODQ4NDAeFw0yNjAyMjMwOTE0MTJaFw0yNzAyMjIwOTE5MTJaMDMxMTAvBgNV BAMTKDM5Qzg3NjExNzgzQ0NENjA2MUI5MkVDREMzMkI4QkJFQkY4NzZCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxSWcw5/KRnwBmDUsgGbrgBFJ trYoYgR5QUjmlMEait2+WmkvTANm/I8kLAIC71mQgrVM/MR8AwdL7HaLkJtmqHhR MfCVq5HH2cbTpgvp/axVaAsocbnmaw3i3gn6kgTIBXDAM9UlLljLLnTHs5e9HJET lE9s6i7i2y4SgKKYYPwFG/lFX1kOBYTv8085eQO/vwl216fsqubd5x/MLe2j3S/W QLS2KBR5RKBO848ulm4MQ1GYo+73rG1uMC5afRBAupLHIIYeXO3aTamm5HMZQF8/ 0kIAOpRT9jfv75fQTixFq6cMMF8UankD3NKoTk8pugcmPDrxjw0pDwFmrH4RAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUOch2EXg8zWBhuS7NwyuLvr+Ha+AwHwYDVR0j BBgwFoAUeaoSutfixQJ4iQ8t+czgK4jhhIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm MTM4LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUx ODQ4NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGYxNjlhN2Et ZTA0My00MzM3LWFlZWMtMjRkMmFiOTFmMTM4LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNjMxMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMDM2MzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgdhATANBgkqhkiG9w0BAQsFAAOCAQEAo5em4Ax0jQ702875 Q7lIOqFq95REDm+R7reV0gc0veVTn69ocNT9Dm6cZzrffbykpMs2XalF0r6DSjsW MWETmRcOkoCopghk+7QXRbI3dpRZZ86+L6ibfnG983Yno4VCSjZM0mmT7pfcFFEQ LayIqlI/nlTwKIoOPv1TZ+Q9eCDJ5LCfCiXGd1tGQ2kqMDlraPQGbSZMJby0iYq+ tmIhIcy1NdX0OoOTf5JENSYDGDZ1pwziU4unyiBMpRlSMx8GU4vDdbh4WZhv5z6o snpUUXIuDtsWpe6s3go00MKo9QouhA+yBVEaHeFKYbeK80zSpbdIqtarg+WAiZtu FwSfBA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:14:01 2026 by rpki-client