$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/326130613a643638353a3a2f34302d3438203d3e20323034323131.roa File: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (raw, json) Hash identifier: XNORQmyv4cfPM5H0Kk051iHyUovOT9YKU3T8ljTmEOg= Subject key identifier: 36:45:1E:A7:68:9E:E7:EB:3F:EC:0D:15:A0:A8:91:C7:2A:48:9F:76 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 4B38F2D74B48AF0856D5AA42CB06FA23A8AB1D70 Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/326130613a643638353a3a2f34302d3438203d3e20323034323131.roa Signing time: Mon 07 Sep 2026 13:17:25 +0000 ROA not before: Mon 07 Sep 2026 13:12:25 +0000 ROA not after: Mon 06 Sep 2027 13:17:25 +0000 asID: 204211 IP address blocks: 2a0a:d685::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:38:f2:d7:4b:48:af:08:56:d5:aa:42:cb:06:fa:23:a8:ab:1d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Sep 7 13:12:25 2026 GMT Not After : Sep 6 13:17:25 2027 GMT Subject: CN=36451EA7689EE7EB3FEC0D15A0A891C72A489F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:89:44:57:0e:0e:44:75:e0:58:e3:cf:c1: 49:fc:9c:6d:e4:5b:46:64:ef:f0:be:9b:9c:47:69: 6a:12:2e:4c:52:8f:2c:7a:1a:30:27:10:05:15:94: 61:67:ca:0c:cf:d4:56:bd:9d:e4:d9:f8:3e:4c:c7: 58:69:ea:35:01:45:b0:2b:71:18:7f:b8:cd:7a:43: a4:36:b4:1c:48:9d:0a:d2:a1:05:91:02:90:96:4b: a4:82:00:c8:b5:d3:99:42:e4:a4:76:46:10:0a:e0: 81:ee:41:b4:a5:8c:fb:78:ee:f8:2d:50:dd:51:bc: 6c:93:ac:40:dd:79:be:a8:95:74:91:cd:45:a9:4f: 7d:c3:b2:55:0f:ea:a3:78:fb:7f:c5:3a:41:4f:1b: 7c:dd:b7:a9:21:8a:14:56:00:6a:cd:32:10:68:44: 35:0b:cf:ed:ca:e9:c9:fd:bb:31:15:40:f9:e4:62: 8d:c9:40:94:bc:69:86:83:f6:f6:a0:d2:26:b6:2d: 82:54:ca:44:b7:e8:7b:70:31:a3:83:c2:0a:68:db: dc:d3:a4:09:c7:ab:bd:a0:39:cf:64:d4:d3:fe:72: a6:ac:ed:13:95:94:9a:6c:71:c8:93:61:33:28:49: 3d:2c:f0:66:dd:6f:bb:ee:e5:d5:42:8b:ca:14:dd: 5a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:1E:A7:68:9E:E7:EB:3F:EC:0D:15:A0:A8:91:C7:2A:48:9F:76 X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/326130613a643638353a3a2f34302d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685::/40 Signature Algorithm: sha256WithRSAEncryption 4a:42:14:23:8a:17:90:d5:e4:2a:22:7a:f9:e7:9f:03:b9:a0: 26:ce:4f:31:12:4a:5b:7d:0e:97:13:e1:fd:2b:e0:d0:71:7d: 44:02:9a:34:30:b9:04:cc:7c:f6:1e:54:f5:a0:88:71:ce:35: 2c:51:64:4a:ea:14:b7:02:c4:0e:5c:04:bb:11:ac:ed:af:f9: 2c:d2:b9:d8:44:4d:74:06:24:4f:1e:b4:23:5a:94:e7:78:83: 66:c8:82:8b:f3:82:b3:f8:15:a8:ba:82:17:16:3c:b1:b0:66: e6:fd:4c:7a:a0:87:94:83:c4:4b:5d:d2:91:5e:66:31:56:51: de:61:fd:fa:ab:aa:a0:34:12:64:82:28:7f:51:af:50:7b:47: 6d:cc:9e:06:d0:3e:21:10:45:e5:35:1a:9a:27:d8:c6:cd:62: ac:71:55:af:64:e0:c1:e3:c3:20:13:b3:4e:55:55:bf:e1:61: 3d:e9:3b:cc:a3:6d:e6:f7:13:f6:20:96:29:c5:fc:db:fc:44: 7a:05:55:19:5c:7a:ac:3b:4a:03:03:c5:c1:88:eb:6b:23:37: d3:72:ae:f0:d6:32:fd:6a:6b:ea:2a:13:5c:89:c6:36:44:17: b0:b4:d8:cd:fd:87:d2:9b:a6:c3:06:25:84:25:27:db:ac:c6: 0d:12:22:8b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUSzjy10tIrwhW1apCywb6I6irHXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjA5MDcxMzEyMjVaFw0yNzA5MDYxMzE3MjVaMDMxMTAvBgNV BAMTKDM2NDUxRUE3Njg5RUU3RUIzRkVDMEQxNUEwQTg5MUM3MkE0ODlGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCln4lEVw4ORHXgWOPPwUn8nG3k W0Zk7/C+m5xHaWoSLkxSjyx6GjAnEAUVlGFnygzP1Fa9neTZ+D5Mx1hp6jUBRbAr cRh/uM16Q6Q2tBxInQrSoQWRApCWS6SCAMi105lC5KR2RhAK4IHuQbSljPt47vgt UN1RvGyTrEDdeb6olXSRzUWpT33DslUP6qN4+3/FOkFPG3zdt6khihRWAGrNMhBo RDULz+3K6cn9uzEVQPnkYo3JQJS8aYaD9vag0ia2LYJUykS36HtwMaODwgpo29zT pAnHq72gOc9k1NP+cqas7ROVlJpscciTYTMoST0s8Gbdb7vu5dVCi8oU3VpPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUNkUep2ie5+s/7A0VoKiRxypIn3YwHwYDVR0j BBgwFoAUI4oRriRTV+cv6zl4XHvAOpc6ROEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2 ZWZlLzUvMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5NzNBNDRFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzQzMjMxMzEu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgAqCtaFADANBgkqhkiG9w0BAQsFAAOCAQEASkIUI4oXkNXkKiJ6 +eefA7mgJs5PMRJKW30OlxPh/Svg0HF9RAKaNDC5BMx89h5U9aCIcc41LFFkSuoU twLEDlwEuxGs7a/5LNK52ERNdAYkTx60I1qU53iDZsiCi/OCs/gVqLqCFxY8sbBm 5v1MeqCHlIPES13SkV5mMVZR3mH9+quqoDQSZIIof1GvUHtHbcyeBtA+IRBF5TUa mifYxs1irHFVr2TgwePDIBOzTlVVv+FhPek7zKNt5vcT9iCWKcX82/xEegVVGVx6 rDtKAwPFwYjrayM303Ku8NYy/Wpr6ioTXInGNkQXsLTYzf2H0pumwwYlhCUn26zG DRIiiw== -----END CERTIFICATE-----Generated at Mon Sep 21 22:13:13 2026 by rpki-client