$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a396330333a3a2f34382d3438203d3e20313938353930.roa File: 326130363a313238333a396330333a3a2f34382d3438203d3e20313938353930.roa (raw, json) Hash identifier: t6+JMBt13rpkS1pQRYNuP1Kg/Iq3ryS4pW4wCYFrKUM= Subject key identifier: B8:9F:F3:CE:FE:83:BD:CF:43:B4:35:BF:F9:14:D0:81:BA:8A:78:AB Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 0D15B27BADD5F4574FD9F0943DB624DE9D3AC1B4 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a396330333a3a2f34382d3438203d3e20313938353930.roa Signing time: Mon 27 Apr 2026 12:33:20 +0000 ROA not before: Mon 27 Apr 2026 12:28:20 +0000 ROA not after: Mon 26 Apr 2027 12:33:20 +0000 asID: 198590 IP address blocks: 2a06:1283:9c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:15:b2:7b:ad:d5:f4:57:4f:d9:f0:94:3d:b6:24:de:9d:3a:c1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Apr 27 12:28:20 2026 GMT Not After : Apr 26 12:33:20 2027 GMT Subject: CN=B89FF3CEFE83BDCF43B435BFF914D081BA8A78AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:77:61:3b:3b:50:18:ec:e1:ca:ad:b6:2a:5f: bf:6b:cc:cd:a8:19:9e:77:9a:f9:55:fe:33:19:36: 7a:25:f2:08:64:da:2e:d9:1b:9d:4a:8d:65:3d:7f: 43:be:cf:45:11:68:89:b8:d4:69:e6:d5:e2:79:f6: 90:36:43:68:9b:57:d5:9b:36:02:f0:ec:46:21:26: af:6c:99:8a:5c:9f:68:4f:7b:88:c7:37:10:31:c8: b8:aa:fb:43:33:16:c0:45:af:4a:7b:9b:de:49:3f: 63:d3:7f:87:7c:70:96:e1:62:2c:eb:ac:98:c0:18: cd:6e:9d:d3:53:50:5e:a3:5e:c0:21:3b:e2:2b:b6: 92:44:95:72:6b:c5:d9:8f:fd:9f:f2:2d:7d:28:c7: 05:eb:bf:0e:ea:b0:f2:d0:22:13:43:af:f0:22:c2: 32:78:4b:7b:81:e9:5d:99:1d:e4:bb:d6:b1:c3:31: 6c:4f:f1:25:09:57:be:25:1f:b0:9a:75:c7:1c:9c: 30:d4:6b:6e:09:98:f6:01:6e:f8:d6:a6:6c:77:c1: 3c:eb:98:ba:1c:62:2a:50:71:8a:4d:75:b8:06:65: de:36:c1:d7:48:a1:04:26:96:e5:68:fe:d0:22:98: a2:11:aa:2d:fb:9d:e5:48:80:1b:3e:96:4d:0a:f7: 70:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:F3:CE:FE:83:BD:CF:43:B4:35:BF:F9:14:D0:81:BA:8A:78:AB X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a396330333a3a2f34382d3438203d3e20313938353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:9c03::/48 Signature Algorithm: sha256WithRSAEncryption 82:a0:32:51:9d:ee:27:9a:41:e6:42:03:5b:1f:4d:85:01:a6: da:ab:81:ac:37:0d:42:ae:84:d5:e8:1b:29:a1:46:71:4f:3a: a7:47:68:86:7c:f6:f5:d0:ec:8f:eb:e0:d6:ff:04:79:42:fa: 88:7e:6e:b2:7b:3e:23:31:67:bb:12:ce:72:3f:20:22:a1:62: 52:37:ca:60:f6:60:f9:82:82:fd:4d:25:01:e4:9d:79:09:1a: cd:4d:f6:3a:03:c7:9a:98:3b:5a:3b:6f:6c:98:36:83:5a:71: 2b:91:03:82:8b:d0:bf:ad:d2:71:f2:61:67:ab:1b:58:4c:33: 30:18:29:b4:0c:28:d7:e6:51:09:7f:a5:3c:20:d1:17:c0:52: 90:5e:fd:f0:1b:e4:7c:e6:8e:9b:90:8c:ca:6e:01:47:ce:e4: 32:81:0a:71:81:f3:42:9d:52:f3:74:8e:e4:f1:41:d0:14:fb: 58:d2:85:0c:40:bc:86:ad:78:c5:91:66:4c:da:29:1d:07:4e: 83:20:c7:d0:3d:a7:0b:41:7d:bd:d1:5f:f2:aa:47:50:a6:55: 2c:cb:ff:53:37:46:7f:a7:ee:e6:71:db:53:d6:ed:3c:6b:d8: 69:cf:fe:b9:eb:8e:82:80:31:b1:cd:53:70:61:6f:84:61:a1: 84:a6:ff:d2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUDRWye63V9FdP2fCUPbYk3p06wbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA0MjcxMjI4MjBaFw0yNzA0MjYxMjMzMjBaMDMxMTAvBgNV BAMTKEI4OUZGM0NFRkU4M0JEQ0Y0M0I0MzVCRkY5MTREMDgxQkE4QTc4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhd2E7O1AY7OHKrbYqX79rzM2o GZ53mvlV/jMZNnol8ghk2i7ZG51KjWU9f0O+z0URaIm41Gnm1eJ59pA2Q2ibV9Wb NgLw7EYhJq9smYpcn2hPe4jHNxAxyLiq+0MzFsBFr0p7m95JP2PTf4d8cJbhYizr rJjAGM1undNTUF6jXsAhO+IrtpJElXJrxdmP/Z/yLX0oxwXrvw7qsPLQIhNDr/Ai wjJ4S3uB6V2ZHeS71rHDMWxP8SUJV74lH7CadcccnDDUa24JmPYBbvjWpmx3wTzr mLocYipQcYpNdbgGZd42wddIoQQmluVo/tAimKIRqi37neVIgBs+lk0K93DzAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUuJ/zzv6Dvc9DtDW/+RTQgbqKeKswHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2EzOTYzMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkzODM1MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoOcAzANBgkqhkiG9w0BAQsFAAOCAQEAgqAyUZ3uJ5pB5kID Wx9NhQGm2quBrDcNQq6E1egbKaFGcU86p0dohnz29dDsj+vg1v8EeUL6iH5usns+ IzFnuxLOcj8gIqFiUjfKYPZg+YKC/U0lAeSdeQkazU32OgPHmpg7WjtvbJg2g1px K5EDgovQv63ScfJhZ6sbWEwzMBgptAwo1+ZRCX+lPCDRF8BSkF798BvkfOaOm5CM ym4BR87kMoEKcYHzQp1S83SO5PFB0BT7WNKFDEC8hq14xZFmTNopHQdOgyDH0D2n C0F9vdFf8qpHUKZVLMv/UzdGf6fu5nHbU9btPGvYac/+ueuOgoAxsc1TcGFvhGGh hKb/0g== -----END CERTIFICATE-----Generated at Wed May 13 14:09:04 2026 by rpki-client