$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa File: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (raw, json) Hash identifier: b5Idj5t7tuqn2ddvsBcRUBrXdLrx0alL1vLbTdmfpO0= Subject key identifier: 1C:CA:22:11:81:B4:6F:11:B8:25:6F:9D:6C:68:AC:3C:2C:9E:F8:62 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 6D1257693CC4A83BDD68912F920076CFFBA78907 Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 219332 IP address blocks: 2a0a:d685:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 21:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:12:57:69:3c:c4:a8:3b:dd:68:91:2f:92:00:76:cf:fb:a7:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=1CCA221181B46F11B8256F9D6C68AC3C2C9EF862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:73:4d:60:1d:57:05:3b:07:8a:26:3c:33: 75:19:38:4c:06:69:3c:f9:5a:6d:78:c2:2b:d2:0d: f5:13:83:1e:32:60:1b:87:c5:62:45:30:dd:12:08: 88:a6:2d:7d:25:7c:43:3f:59:55:47:b9:71:e4:17: bd:52:d5:3f:00:47:7f:f0:2a:19:0a:12:bf:02:d0: cf:7a:a0:e6:e5:8d:06:e6:02:e5:18:c6:85:48:24: 97:43:01:65:be:c9:40:62:d9:a4:2a:cb:30:b4:a4: 01:22:89:65:d2:8e:02:5b:f2:b3:1e:26:08:2f:67: 96:04:07:f2:bf:b1:f8:a1:67:5a:b0:d2:25:ef:ad: 10:5b:bd:46:48:53:98:e3:f4:be:41:64:39:93:89: 92:5a:5b:b7:f0:ef:19:db:e7:6d:94:ba:b2:a1:95: 13:09:86:41:c6:17:97:6b:36:be:75:f0:d8:1b:06: 2c:9a:0e:7e:91:df:37:6e:95:b7:9f:00:4b:05:31: 42:b4:9e:c8:bb:5f:1e:fd:91:eb:d2:aa:02:63:ca: b3:f4:91:7d:2c:36:dd:f1:17:1a:4e:66:ca:6f:8e: 71:4e:46:7d:3a:8f:07:eb:1d:e8:a8:3c:0f:2a:3a: ce:60:c2:2f:ec:7e:57:46:71:1c:cd:07:e2:cd:3a: 67:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CA:22:11:81:B4:6F:11:B8:25:6F:9D:6C:68:AC:3C:2C:9E:F8:62 X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:300::/40 Signature Algorithm: sha256WithRSAEncryption 70:ed:04:f0:c6:ec:26:91:3e:47:3e:34:5a:db:de:ec:a1:a7: b2:e7:25:ab:e9:e8:ec:bc:8e:e0:8c:df:61:48:1d:f8:61:b9: 11:8d:b7:b9:01:d6:18:58:40:5e:04:fd:92:7b:81:ac:c9:dc: a0:65:e0:f9:8d:d9:a4:1b:3f:09:13:99:41:84:b9:82:03:34: 16:3c:f6:96:55:d9:74:66:c4:56:98:8b:ef:e2:50:2a:1e:e4: 84:46:97:c8:eb:d4:ef:74:75:9e:0d:d2:65:c2:43:ce:21:02: e2:e8:a2:4c:3b:56:25:9c:02:d0:33:71:09:66:f3:17:39:cb: 17:34:35:77:52:8b:8a:fd:50:af:33:31:f4:a4:3f:95:9b:35: a8:69:37:4a:93:cc:a5:3f:ac:ad:4a:a4:55:bb:d2:3c:4d:fa: 84:a2:cc:74:47:fb:27:c4:a1:4c:4f:94:00:04:4a:af:77:ce: ee:3f:94:a3:f7:2f:d7:f4:91:75:5e:f1:a1:1e:66:a4:d1:ea: cc:4f:c0:0f:1d:da:01:10:77:f4:7d:5a:59:44:11:ac:83:e1: ac:70:da:c2:e3:6b:b4:e2:a1:a2:ef:03:1d:56:39:24:56:21: 24:66:0a:38:04:59:d7:7b:a5:1b:33:d9:88:0d:15:0e:66:88: 02:4b:48:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbRJXaTzEqDvdaJEvkgB2z/uniQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDFDQ0EyMjExODFCNDZGMTFCODI1NkY5RDZDNjhBQzNDMkM5RUY4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSe3NNYB1XBTsHiiY8M3UZOEwG aTz5Wm14wivSDfUTgx4yYBuHxWJFMN0SCIimLX0lfEM/WVVHuXHkF71S1T8AR3/w KhkKEr8C0M96oObljQbmAuUYxoVIJJdDAWW+yUBi2aQqyzC0pAEiiWXSjgJb8rMe JggvZ5YEB/K/sfihZ1qw0iXvrRBbvUZIU5jj9L5BZDmTiZJaW7fw7xnb522UurKh lRMJhkHGF5drNr518NgbBiyaDn6R3zdulbefAEsFMUK0nsi7Xx79kevSqgJjyrP0 kX0sNt3xFxpOZspvjnFORn06jwfrHeioPA8qOs5gwi/sfldGcRzNB+LNOmfvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHMoiEYG0bxG4JW+dbGisPCye+GIwHwYDVR0j BBgwFoAUI4oRriRTV+cv6zl4XHvAOpc6ROEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzUvMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5NzNBNDRFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEz OTMzMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoK1oUDMA0GCSqGSIb3DQEBCwUAA4IBAQBw7QTw xuwmkT5HPjRa297soaey5yWr6ejsvI7gjN9hSB34YbkRjbe5AdYYWEBeBP2Se4Gs ydygZeD5jdmkGz8JE5lBhLmCAzQWPPaWVdl0ZsRWmIvv4lAqHuSERpfI69TvdHWe DdJlwkPOIQLi6KJMO1YlnALQM3EJZvMXOcsXNDV3UouK/VCvMzH0pD+VmzWoaTdK k8ylP6ytSqRVu9I8TfqEosx0R/snxKFMT5QABEqvd87uP5Sj9y/X9JF1XvGhHmak 0erMT8APHdoBEHf0fVpZRBGsg+GscNrC42u04qGi7wMdVjkkViEkZgo4BFnXe6Ub M9mIDRUOZogCS0hb -----END CERTIFICATE-----Generated at Tue Sep 22 08:04:10 2026 by rpki-client