$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa File: 326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa (raw, json) Hash identifier: kZt+v+XPycP4DQLvFhNN3zKIerdJLT8fmEhn3Kh8DJ8= Subject key identifier: 82:C9:9B:65:AA:1A:63:12:71:37:6E:E1:92:89:74:87:2D:29:2A:A2 Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Certificate serial: 6F75B58EC2AAEEB40C379467FCAC2A7619D31D5B Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa Signing time: Mon 23 Feb 2026 09:19:21 +0000 ROA not before: Mon 23 Feb 2026 09:14:21 +0000 ROA not after: Mon 22 Feb 2027 09:19:21 +0000 asID: 210632 IP address blocks: 2a0b:4e07:6102::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:75:b5:8e:c2:aa:ee:b4:0c:37:94:67:fc:ac:2a:76:19:d3:1d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Validity Not Before: Feb 23 09:14:21 2026 GMT Not After : Feb 22 09:19:21 2027 GMT Subject: CN=82C99B65AA1A631271376EE1928974872D292AA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:dd:d8:4a:78:3f:63:6d:c9:44:f8:26:49: f2:f4:7f:f8:af:75:7f:aa:4b:39:98:4d:64:39:54: 50:6d:f0:72:45:59:8c:c8:10:ad:c2:6a:42:ec:e6: 2f:33:fa:ba:a9:a9:b1:58:bd:2b:52:df:6b:b2:69: e5:15:ce:37:6c:e3:c6:26:60:f9:6e:50:e2:9c:03: 9c:3c:e0:99:bf:8e:0e:e9:dd:71:f3:6a:2b:28:25: 50:53:6f:21:4c:9b:0a:54:12:bf:37:d9:2e:44:a0: ce:6c:51:a5:3f:a8:75:9d:fe:0e:6b:0e:a7:6d:19: d2:17:b7:8d:aa:73:cd:4b:5f:ef:32:dd:62:48:c5: a6:d5:e6:de:5a:d4:f1:1f:c6:0b:16:1f:4e:69:8f: dd:57:5e:9e:a4:2d:24:7c:0b:db:53:c5:0f:a3:55: 12:dd:e7:27:39:ea:0d:cb:dd:46:af:40:9a:04:e3: c2:b6:1f:18:25:e6:51:c9:84:43:ad:89:fd:d8:67: b9:f6:3d:ed:fe:42:dd:f6:3d:38:7f:19:3e:da:9a: 4d:41:bf:1e:4a:d6:f2:92:d7:fa:e8:96:5b:05:ab: 30:04:8d:6a:19:53:cd:f7:c7:ba:f3:97:df:3c:8e: 09:e7:15:ba:46:33:8c:ee:4c:0e:6a:39:01:0e:7d: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C9:9B:65:AA:1A:63:12:71:37:6E:E1:92:89:74:87:2D:29:2A:A2 X509v3 Authority Key Identifier: keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6102::/48 Signature Algorithm: sha256WithRSAEncryption 82:1d:be:8d:db:32:17:9c:b7:37:d9:bf:e1:cd:23:11:f0:62: d6:e1:f5:df:09:41:b0:86:8a:8a:a8:5e:d7:5e:5c:16:b1:a3: f3:c0:af:fb:1d:d4:e3:35:cc:e4:b8:b9:af:d7:42:a0:db:34: 62:7a:85:5a:cf:6d:00:2e:e3:b9:3d:4a:b4:08:30:d2:31:a6: 1d:e0:1e:45:dc:98:67:7b:cd:c3:44:7f:a8:c3:49:58:e2:68: b1:61:dc:ca:a0:01:0f:79:41:24:fe:60:61:57:1a:42:9e:19: ee:8b:d4:75:5b:e0:7f:c0:ed:40:39:c8:95:d6:2b:8b:f1:11: 87:4a:74:0f:ba:00:19:64:d8:05:21:51:7b:a2:4c:a8:29:24: 1b:f0:49:86:2a:a6:d8:88:40:24:4c:7c:e2:d6:b6:1b:cf:ec: 1e:2e:0b:e4:2d:0d:ae:a1:4e:14:3c:a7:3d:bb:eb:c0:5c:dc: 5a:40:6e:2c:64:67:14:d6:fc:b4:da:50:52:08:eb:cb:db:d7: 37:6e:48:ca:b8:a7:08:e5:86:79:37:4d:d1:18:75:a0:75:cb: 34:ac:96:9c:3a:30:89:43:8c:f1:bc:b4:31:94:ad:09:6c:2c: b0:d8:7c:2b:47:a3:4c:19:78:da:af:13:51:91:eb:94:61:b2: 4d:09:82:fe -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUb3W1jsKq7rQMN5Rn/KwqdhnTHVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4 OEUxODQ4NDAeFw0yNjAyMjMwOTE0MjFaFw0yNzAyMjIwOTE5MjFaMDMxMTAvBgNV BAMTKDgyQzk5QjY1QUExQTYzMTI3MTM3NkVFMTkyODk3NDg3MkQyOTJBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTd3YSng/Y23JRPgmSfL0f/iv dX+qSzmYTWQ5VFBt8HJFWYzIEK3CakLs5i8z+rqpqbFYvStS32uyaeUVzjds48Ym YPluUOKcA5w84Jm/jg7p3XHzaisoJVBTbyFMmwpUEr832S5EoM5sUaU/qHWd/g5r DqdtGdIXt42qc81LX+8y3WJIxabV5t5a1PEfxgsWH05pj91XXp6kLSR8C9tTxQ+j VRLd5yc56g3L3UavQJoE48K2Hxgl5lHJhEOtif3YZ7n2Pe3+Qt32PTh/GT7amk1B vx5K1vKS1/rollsFqzAEjWoZU833x7rzl988jgnnFbpGM4zuTA5qOQEOfbwtAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUgsmbZaoaYxJxN27hkol0hy0pKqIwHwYDVR0j BBgwFoAUeaoSutfixQJ4iQ8t+czgK4jhhIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm MTM4LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUx ODQ4NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGYxNjlhN2Et ZTA0My00MzM3LWFlZWMtMjRkMmFiOTFmMTM4LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNjMxMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMDM2MzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgdhAjANBgkqhkiG9w0BAQsFAAOCAQEAgh2+jdsyF5y3N9m/ 4c0jEfBi1uH13wlBsIaKiqhe115cFrGj88Cv+x3U4zXM5Li5r9dCoNs0YnqFWs9t AC7juT1KtAgw0jGmHeAeRdyYZ3vNw0R/qMNJWOJosWHcyqABD3lBJP5gYVcaQp4Z 7ovUdVvgf8DtQDnIldYri/ERh0p0D7oAGWTYBSFRe6JMqCkkG/BJhiqm2IhAJEx8 4ta2G8/sHi4L5C0NrqFOFDynPbvrwFzcWkBuLGRnFNb8tNpQUgjry9vXN25Iyrin COWGeTdN0Rh1oHXLNKyWnDowiUOM8by0MZStCWwssNh8K0ejTBl42q8TUZHrlGGy TQmC/g== -----END CERTIFICATE-----Generated at Sun Mar 1 20:08:25 2026 by rpki-client