$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e203230343733.roa File: 326130613a643638353a3166643a3a2f34382d3438203d3e203230343733.roa (raw, json) Hash identifier: suEMvsRkOdgU7KXcZY6xsLsXfy/ps3v5egW1Mfg9jJg= Subject key identifier: 3E:F3:AB:B4:5E:90:36:A5:B8:90:9F:CC:F7:58:64:3E:40:56:87:A0 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 0876538564A3CF655203DC80034122CEE649646F Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e203230343733.roa Signing time: Tue 28 Jul 2026 16:19:56 +0000 ROA not before: Tue 28 Jul 2026 16:14:56 +0000 ROA not after: Tue 27 Jul 2027 16:19:56 +0000 asID: 20473 IP address blocks: 2a0a:d685:1fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:76:53:85:64:a3:cf:65:52:03:dc:80:03:41:22:ce:e6:49:64:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 28 16:14:56 2026 GMT Not After : Jul 27 16:19:56 2027 GMT Subject: CN=3EF3ABB45E9036A5B8909FCCF758643E405687A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:0b:6d:3f:0d:86:2c:96:8c:03:74:da:01: 60:d5:ad:77:6f:c2:10:78:5b:6b:47:67:34:16:1d: e0:96:7e:4b:51:f9:02:24:a8:ef:06:7d:ee:65:40: 11:44:10:1c:95:b7:26:0d:15:e6:a2:84:05:e2:2b: 48:78:8b:1d:5a:1e:30:5a:40:0b:44:52:a3:65:22: 32:cf:23:7d:ef:13:4b:7c:eb:6b:77:f5:f4:16:4d: 24:1c:f2:68:40:55:23:5b:3a:b1:ba:9f:1e:fd:12: 63:7f:22:2a:0f:96:33:8c:df:ac:70:2e:b5:fc:5b: e5:ef:2e:05:62:f2:8d:5b:a0:82:b5:95:e1:52:79: 25:99:d4:f7:ad:62:22:d4:76:91:72:00:d4:ff:21: d2:cb:51:44:af:a2:92:25:18:60:6d:0d:3a:9d:aa: 86:c3:f8:81:c1:c4:a5:a0:f8:91:9a:d5:de:cd:60: 6b:62:68:93:e3:bb:35:27:f3:b9:64:07:cb:bc:f4: c3:92:53:5f:50:c5:89:4c:41:5d:21:b7:9b:96:de: 53:c5:21:f9:56:2b:cc:b9:9d:2b:48:fa:f3:8c:f9: e6:74:66:18:81:96:5e:33:b6:9e:a7:cc:c0:da:8d: 3a:b1:86:f6:55:51:c1:cc:82:5f:36:3c:b7:78:40: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:AB:B4:5E:90:36:A5:B8:90:9F:CC:F7:58:64:3E:40:56:87:A0 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166643a3a2f34382d3438203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fd::/48 Signature Algorithm: sha256WithRSAEncryption a7:36:e4:52:bf:a9:f7:e4:c0:cc:2e:fb:a6:dc:f0:6d:ba:21: aa:88:c1:14:f1:b3:f0:41:d4:f4:d5:85:85:50:68:fc:cf:04: 1f:f7:28:d3:10:c3:6d:93:44:3a:ad:50:87:0c:f2:8d:10:b3: 9b:9f:6e:f4:77:cc:30:4f:88:b2:b2:8f:2e:20:bd:5b:0e:36: 26:f6:d2:90:ab:c1:1a:c8:61:d7:d3:ee:15:1d:c6:e4:85:8f: b5:62:fe:ea:0f:f5:f4:d7:7f:cf:54:89:d5:df:49:26:cb:19: 91:6f:88:ac:c8:8a:5e:53:4c:c9:7c:ca:5b:1c:b3:36:67:3f: f4:96:e4:d8:2d:cc:e7:da:9d:48:7a:fc:b7:b5:54:10:10:96: 96:45:51:2d:f7:42:6b:f6:91:84:a0:83:46:76:93:87:7f:aa: c8:26:ca:80:58:3f:94:22:b7:56:2a:b0:64:85:a3:45:24:85: dc:27:4a:1b:be:cf:6a:79:dc:e0:4a:fa:ae:70:a5:03:2f:97: 99:f5:39:3e:36:6e:c6:ee:57:25:76:ee:e1:3f:84:cc:ae:0e: 97:74:ca:0f:7b:ab:eb:31:63:b9:22:86:f3:48:a5:33:4b:bc: 14:5e:06:e1:57:a0:06:00:40:80:43:de:44:10:b5:32:b1:42: 00:b4:2b:9b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUCHZThWSjz2VSA9yAA0EizuZJZG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MjgxNjE0NTZaFw0yNzA3MjcxNjE5NTZaMDMxMTAvBgNV BAMTKDNFRjNBQkI0NUU5MDM2QTVCODkwOUZDQ0Y3NTg2NDNFNDA1Njg3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVQttPw2GLJaMA3TaAWDVrXdv whB4W2tHZzQWHeCWfktR+QIkqO8Gfe5lQBFEEByVtyYNFeaihAXiK0h4ix1aHjBa QAtEUqNlIjLPI33vE0t862t39fQWTSQc8mhAVSNbOrG6nx79EmN/IioPljOM36xw LrX8W+XvLgVi8o1boIK1leFSeSWZ1PetYiLUdpFyANT/IdLLUUSvopIlGGBtDTqd qobD+IHBxKWg+JGa1d7NYGtiaJPjuzUn87lkB8u89MOSU19QxYlMQV0ht5uW3lPF IflWK8y5nStI+vOM+eZ0ZhiBll4ztp6nzMDajTqxhvZVUcHMgl82PLd4QBXJAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQUPvOrtF6QNqW4kJ/M91hkPkBWh6AwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCtaFAf0wDQYJKoZIhvcNAQELBQADggEBAKc25FK/ qffkwMwu+6bc8G26IaqIwRTxs/BB1PTVhYVQaPzPBB/3KNMQw22TRDqtUIcM8o0Q s5ufbvR3zDBPiLKyjy4gvVsONib20pCrwRrIYdfT7hUdxuSFj7Vi/uoP9fTXf89U idXfSSbLGZFviKzIil5TTMl8ylscszZnP/SW5NgtzOfanUh6/Le1VBAQlpZFUS33 Qmv2kYSgg0Z2k4d/qsgmyoBYP5Qit1YqsGSFo0UkhdwnShu+z2p53OBK+q5wpQMv l5n1OT42bsbuVyV27uE/hMyuDpd0yg97q+sxY7kihvNIpTNLvBReBuFXoAYAQIBD 3kQQtTKxQgC0K5s= -----END CERTIFICATE-----Generated at Tue Jul 28 21:04:12 2026 by rpki-client