$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a653030303a3a2f33362d3336203d3e20323132373038.roa File: 326130363a313238333a653030303a3a2f33362d3336203d3e20323132373038.roa (raw, json) Hash identifier: 9Xzw3K0cI+w3az8W+UD+7cYMjFLHcZcUtEHeMS57PCI= Subject key identifier: 2F:9F:A2:F1:21:FB:2B:28:90:E4:F4:64:06:44:E6:7B:C6:C1:71:62 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 18CBE77FCC257AADEC0464C682B334B4A82DA4EA Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a653030303a3a2f33362d3336203d3e20323132373038.roa Signing time: Wed 29 Apr 2026 15:38:43 +0000 ROA not before: Wed 29 Apr 2026 15:33:43 +0000 ROA not after: Wed 28 Apr 2027 15:38:43 +0000 asID: 212708 IP address blocks: 2a06:1283:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cb:e7:7f:cc:25:7a:ad:ec:04:64:c6:82:b3:34:b4:a8:2d:a4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Apr 29 15:33:43 2026 GMT Not After : Apr 28 15:38:43 2027 GMT Subject: CN=2F9FA2F121FB2B2890E4F4640644E67BC6C17162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1d:0e:01:6a:50:1b:63:3b:50:83:15:20:4e: b2:62:09:13:da:23:dc:19:05:d2:7a:3f:df:20:90: 4e:9c:0b:c2:2c:ef:d7:c5:61:35:87:5a:62:13:93: fb:12:a3:4d:97:cf:61:e1:04:23:94:50:49:d8:a0: 55:29:fb:af:ab:2a:91:06:fc:e1:ce:06:07:db:d6: 62:20:ec:7e:6d:b2:99:93:83:97:f3:af:50:ed:f3: cc:3a:13:e6:af:fc:cd:da:52:a6:da:f3:c4:16:2d: fb:c5:3c:1a:ca:d0:8e:cd:6e:2a:cd:ae:5f:19:6c: e9:db:11:ce:4f:63:bf:a4:0a:99:81:df:d1:2f:6d: 87:d2:a4:10:ea:fb:8c:ba:d5:de:74:b0:f2:8e:b4: cc:d5:ca:6b:be:0e:24:6c:7f:89:bd:0e:ff:83:8d: 56:57:90:9d:51:b9:d0:d6:44:b8:6e:e7:18:ac:2e: e9:c8:5a:1a:da:63:d6:4f:69:fd:91:15:c0:f3:31: 11:a2:02:b4:06:7c:0d:6c:e8:08:74:9a:39:90:70: 85:27:8f:80:f5:69:31:2f:ee:11:dd:77:f7:a9:6c: 19:9b:30:91:c4:40:42:df:50:30:8b:ab:25:77:f8: 3f:be:f6:20:94:db:88:ca:ff:b3:d9:f6:5f:6f:61: 9c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9F:A2:F1:21:FB:2B:28:90:E4:F4:64:06:44:E6:7B:C6:C1:71:62 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a653030303a3a2f33362d3336203d3e20323132373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:e000::/36 Signature Algorithm: sha256WithRSAEncryption 53:9b:c4:81:79:4a:f7:0e:09:03:13:38:d3:d2:31:04:fa:ec: 86:c2:5a:f0:f3:5c:80:28:a5:c0:0b:a6:05:0b:41:ee:53:3a: 0f:e8:8c:7b:30:33:e8:95:af:ca:f1:a1:47:76:bf:ad:ef:6c: 69:e9:96:c8:2a:09:2e:cb:c8:84:2c:ab:9f:20:05:33:36:22: 5f:72:f0:bb:78:67:65:05:0b:87:df:63:12:60:db:34:92:b2: f6:75:b9:37:47:b3:6c:45:63:22:be:64:d7:51:37:62:b4:bd: 7e:22:56:77:09:39:a0:35:8a:05:60:1a:92:9e:31:bc:d5:f4: 03:64:23:a3:d0:c6:5b:1f:be:e2:c3:4d:7c:60:47:ba:5f:e2: 57:4b:25:ea:63:08:cc:b5:3a:aa:06:d2:57:de:a8:df:e3:99: 41:fa:5f:07:ad:d8:34:75:01:4a:3c:f9:85:67:b4:14:15:ad: 78:ad:e1:df:ac:73:7f:14:44:b4:11:3d:e7:ae:d1:93:31:ca: 22:bc:93:03:e2:83:26:24:96:ef:48:e0:d7:f6:c8:d3:9d:90: 65:23:1f:37:3e:11:2a:f6:f3:bd:69:79:54:11:3c:19:f2:06: a5:d7:49:45:87:21:37:6a:92:4f:f9:f1:94:df:4f:0a:5b:b5: fa:cb:af:77 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUGMvnf8wleq3sBGTGgrM0tKgtpOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA0MjkxNTMzNDNaFw0yNzA0MjgxNTM4NDNaMDMxMTAvBgNV BAMTKDJGOUZBMkYxMjFGQjJCMjg5MEU0RjQ2NDA2NDRFNjdCQzZDMTcxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnHQ4BalAbYztQgxUgTrJiCRPa I9wZBdJ6P98gkE6cC8Is79fFYTWHWmITk/sSo02Xz2HhBCOUUEnYoFUp+6+rKpEG /OHOBgfb1mIg7H5tspmTg5fzr1Dt88w6E+av/M3aUqba88QWLfvFPBrK0I7NbirN rl8ZbOnbEc5PY7+kCpmB39EvbYfSpBDq+4y61d50sPKOtMzVymu+DiRsf4m9Dv+D jVZXkJ1RudDWRLhu5xisLunIWhraY9ZPaf2RFcDzMRGiArQGfA1s6Ah0mjmQcIUn j4D1aTEv7hHdd/epbBmbMJHEQELfUDCLqyV3+D++9iCU24jK/7PZ9l9vYZw9AgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUL5+i8SH7KyiQ5PRkBkTme8bBcWIwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2NTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzEzMjM3MzAzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoGEoPgMA0GCSqGSIb3DQEBCwUAA4IBAQBTm8SBeUr3DgkDEzjT 0jEE+uyGwlrw81yAKKXAC6YFC0HuUzoP6Ix7MDPola/K8aFHdr+t72xp6ZbIKgku y8iELKufIAUzNiJfcvC7eGdlBQuH32MSYNs0krL2dbk3R7NsRWMivmTXUTditL1+ IlZ3CTmgNYoFYBqSnjG81fQDZCOj0MZbH77iw018YEe6X+JXSyXqYwjMtTqqBtJX 3qjf45lB+l8Hrdg0dQFKPPmFZ7QUFa14reHfrHN/FES0ET3nrtGTMcoivJMD4oMm JJbvSODX9sjTnZBlIx83PhEq9vO9aXlUETwZ8gal10lFhyE3apJP+fGU308KW7X6 y693 -----END CERTIFICATE-----Generated at Wed May 13 12:02:46 2026 by rpki-client