$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa File: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (raw, json) Hash identifier: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E= Subject key identifier: 65:D5:92:9A:0A:C9:05:74:38:D0:6F:35:34:E3:6B:17:AD:39:62:5C Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 3A6FEAA2A71FB2C7C929D198DECCB852A9772B02 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa Signing time: Mon 16 Feb 2026 19:51:01 +0000 ROA not before: Mon 16 Feb 2026 19:46:01 +0000 ROA not after: Mon 15 Feb 2027 19:51:01 +0000 asID: 215242 IP address blocks: 2a0f:85c1:700::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6f:ea:a2:a7:1f:b2:c7:c9:29:d1:98:de:cc:b8:52:a9:77:2b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Feb 16 19:46:01 2026 GMT Not After : Feb 15 19:51:01 2027 GMT Subject: CN=65D5929A0AC9057438D06F3534E36B17AD39625C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:30:bb:35:b5:40:79:ee:2e:d4:31:3b:85: 44:33:1b:10:6e:8a:ec:11:17:8c:8c:36:c6:0e:f2: d6:4b:a6:d5:63:e3:f0:f9:a1:11:53:78:69:70:72: 2c:f7:92:86:e0:ca:8a:68:c2:e6:74:38:b8:0d:33: 1d:5b:60:56:57:01:b7:f4:8a:92:ae:c6:26:4c:80: be:d4:13:b1:93:f8:1d:a3:26:7d:98:ad:92:1c:58: 73:d0:1a:62:05:2e:3e:96:1c:a0:b1:03:5e:bc:f3: 58:99:6b:57:eb:c8:ff:ca:3b:af:ad:39:a2:23:3f: e6:c0:de:45:21:25:63:6c:e6:99:ee:ac:8a:38:1b: 81:91:1a:0d:86:cc:5e:b7:17:ba:8a:55:61:02:dd: fc:ef:45:4d:20:e7:c9:f4:dc:e4:8d:7b:93:db:9b: 20:dc:8a:0c:ad:37:4f:25:99:3b:e8:9c:d1:3b:fa: ca:af:43:91:77:2b:10:df:65:ba:45:50:89:41:00: 67:58:34:3f:72:b6:46:59:4a:9a:d1:1d:ac:a4:0d: fe:2d:15:9b:7d:e0:1f:df:83:19:e7:f2:34:75:c0: f0:53:8f:7f:42:d0:ce:91:7c:dc:62:62:2e:ce:1e: 99:01:15:8b:b7:a0:bc:77:e7:f7:91:03:34:43:81: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:92:9A:0A:C9:05:74:38:D0:6F:35:34:E3:6B:17:AD:39:62:5C X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:700::/40 Signature Algorithm: sha256WithRSAEncryption 19:51:23:51:fb:e6:f7:77:12:46:d3:16:1a:c5:16:33:64:31: d3:d4:6b:ed:0c:1e:63:03:29:fc:2c:16:32:67:63:4b:5e:82: b9:f2:60:e8:2a:2c:ac:a1:66:8a:3c:a8:a9:5b:84:a5:31:54: 7e:79:c1:29:b1:9b:3a:47:9b:51:8d:f6:86:51:ed:73:18:b7: 07:a5:bb:7e:79:42:39:4c:20:b0:6e:7a:70:fe:33:11:62:8c: f3:ff:75:59:ea:bb:4c:14:31:fd:bd:19:49:51:0c:44:c1:3a: 8c:68:b2:5e:4d:56:c3:9a:34:ee:e7:7c:26:ac:39:2c:1c:e2: e1:74:dc:b0:7c:89:5b:12:84:7d:c9:c3:62:f6:2b:13:fd:fe: 8a:a9:a1:f4:57:7a:01:b0:19:64:8d:78:76:f6:93:fd:3a:f6: d1:1c:b0:03:a0:72:97:6c:cb:1d:e1:8d:60:c4:84:d9:cc:47: 45:8e:2c:5b:35:b7:92:e8:14:dd:5b:fb:66:6e:9f:fa:da:8c: f4:cd:de:c4:71:02:ab:73:26:71:91:a0:b3:36:80:81:41:26: 00:43:d9:52:92:3b:f2:6c:6b:96:b3:c8:a8:2b:28:84:f4:10: 3f:0f:88:71:0d:26:38:07:a4:64:64:e6:3d:61:1a:82:8d:bc: 72:da:d0:c0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOm/qoqcfssfJKdGY3sy4Uql3KwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAyMTYxOTQ2MDFaFw0yNzAyMTUxOTUxMDFaMDMxMTAvBgNV BAMTKDY1RDU5MjlBMEFDOTA1NzQzOEQwNkYzNTM0RTM2QjE3QUQzOTYyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtTC7NbVAee4u1DE7hUQzGxBu iuwRF4yMNsYO8tZLptVj4/D5oRFTeGlwciz3kobgyopowuZ0OLgNMx1bYFZXAbf0 ipKuxiZMgL7UE7GT+B2jJn2YrZIcWHPQGmIFLj6WHKCxA16881iZa1fryP/KO6+t OaIjP+bA3kUhJWNs5pnurIo4G4GRGg2GzF63F7qKVWEC3fzvRU0g58n03OSNe5Pb myDcigytN08lmTvonNE7+sqvQ5F3KxDfZbpFUIlBAGdYND9ytkZZSprRHaykDf4t FZt94B/fgxnn8jR1wPBTj39C0M6RfNxiYi7OHpkBFYu3oLx35/eRAzRDgUBhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZdWSmgrJBXQ40G81NONrF605YlwwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoPhcEHMA0GCSqGSIb3DQEBCwUAA4IBAQAZUSNR ++b3dxJG0xYaxRYzZDHT1GvtDB5jAyn8LBYyZ2NLXoK58mDoKiysoWaKPKipW4Sl MVR+ecEpsZs6R5tRjfaGUe1zGLcHpbt+eUI5TCCwbnpw/jMRYozz/3VZ6rtMFDH9 vRlJUQxEwTqMaLJeTVbDmjTu53wmrDksHOLhdNywfIlbEoR9ycNi9isT/f6KqaH0 V3oBsBlkjXh29pP9OvbRHLADoHKXbMsd4Y1gxITZzEdFjixbNbeS6BTdW/tmbp/6 2oz0zd7EcQKrcyZxkaCzNoCBQSYAQ9lSkjvybGuWs8ioKyiE9BA/D4hxDSY4B6Rk ZOY9YRqCjbxy2tDA -----END CERTIFICATE-----Generated at Mon Mar 2 03:12:12 2026 by rpki-client