$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa File: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (raw, json) Hash identifier: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4= Subject key identifier: 78:98:7A:6A:21:C8:E8:03:1C:58:20:3D:59:8A:B0:DA:93:EE:20:57 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 2201BDF430EE24A39EA79EF2D93B9FD28BCBEC99 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa Signing time: Sat 14 Mar 2026 13:44:12 +0000 ROA not before: Sat 14 Mar 2026 13:39:12 +0000 ROA not after: Sat 13 Mar 2027 13:44:12 +0000 asID: 207682 IP address blocks: 2a06:9f41:a899::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 09:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:01:bd:f4:30:ee:24:a3:9e:a7:9e:f2:d9:3b:9f:d2:8b:cb:ec:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Mar 14 13:39:12 2026 GMT Not After : Mar 13 13:44:12 2027 GMT Subject: CN=78987A6A21C8E8031C58203D598AB0DA93EE2057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:2d:1f:9b:0d:fd:6b:09:0c:7e:63:a8:cb: 19:4d:ec:c1:57:ec:c8:68:de:75:df:47:46:88:5d: 93:2c:00:f1:74:58:36:c3:13:3f:49:46:64:a7:b2: 82:01:73:c8:91:a0:bb:69:39:a4:6f:33:f9:17:fb: 1a:b5:46:2c:2e:8e:00:d8:1a:32:11:98:9b:1d:9e: 16:6e:c4:31:02:ac:31:15:df:12:18:a5:39:2d:58: dd:c0:bf:e9:b9:62:07:b9:19:d9:09:d2:3e:7b:69: 57:4c:72:fb:7f:92:fb:4a:f5:27:ef:aa:1a:f6:8b: 62:62:e9:52:e3:06:00:69:3c:cd:f1:70:8b:3d:e3: 7f:d7:db:4c:f6:8f:be:62:63:67:ff:0e:8d:a7:0d: b6:5d:2b:07:5f:74:2c:b5:41:64:69:cc:c6:80:25: dd:6b:a4:ad:12:48:69:ee:15:c8:6d:c6:a4:d9:1b: ea:8b:21:da:2f:4a:1a:a7:dc:12:db:b0:1c:ab:a6: f0:67:34:f8:58:1c:a4:36:23:de:f1:f6:79:fb:8b: df:5a:7a:21:3b:5a:44:15:97:76:f6:25:d0:a8:c2: fc:17:d8:c2:bb:5c:5c:15:48:26:f8:cf:46:2e:8f: 22:dc:41:f4:b0:0a:c8:5b:3d:4d:c0:b7:d1:a7:f9: 97:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:98:7A:6A:21:C8:E8:03:1C:58:20:3D:59:8A:B0:DA:93:EE:20:57 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:a899::/48 Signature Algorithm: sha256WithRSAEncryption 5e:f6:d1:49:72:fb:a9:ac:e2:88:03:ff:6e:d5:a4:01:8c:dc: cf:a4:dd:15:1a:9d:58:df:bc:ac:0f:63:b1:19:26:4b:74:c5: f6:d8:d7:29:ea:f5:9e:9d:12:1a:3a:8c:95:a8:7f:ab:bd:27: 46:cd:6d:6c:2f:14:3b:64:05:d3:71:cf:12:b7:de:df:12:83: 8a:a8:be:04:e9:29:14:4d:03:86:db:e6:f5:09:49:72:83:c5: 02:8e:51:f7:0b:6e:44:f7:45:f9:2e:f2:be:cb:0b:46:e3:bc: b9:24:df:9f:6f:59:1c:33:17:19:e7:d8:87:9a:43:1d:e5:d2: f0:8c:4a:b3:67:45:75:37:b0:22:97:8b:a6:24:c9:78:99:20: f7:ca:f7:05:9f:3b:3b:19:e5:5e:a2:b7:e2:ed:07:b4:08:00: 25:4d:82:0f:23:60:b3:fa:58:9f:17:bd:85:90:f6:8a:88:a1: d5:a0:23:58:15:c5:88:08:e2:f4:57:3c:39:4b:0e:3f:1b:60: a0:83:4f:48:26:c2:73:36:bf:53:dc:83:5f:77:8f:82:9f:73: bc:aa:7b:40:64:d2:3b:54:de:2e:84:3f:75:f0:3c:b4:79:6f: ae:86:fb:bf:7e:f6:5c:3f:24:1b:84:fe:52:0f:36:72:55:72: 02:3e:8b:cf -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUIgG99DDuJKOep57y2Tuf0ovL7JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjAzMTQxMzM5MTJaFw0yNzAzMTMxMzQ0MTJaMDMxMTAvBgNV BAMTKDc4OTg3QTZBMjFDOEU4MDMxQzU4MjAzRDU5OEFCMERBOTNFRTIwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreC0fmw39awkMfmOoyxlN7MFX 7Mho3nXfR0aIXZMsAPF0WDbDEz9JRmSnsoIBc8iRoLtpOaRvM/kX+xq1RiwujgDY GjIRmJsdnhZuxDECrDEV3xIYpTktWN3Av+m5Yge5GdkJ0j57aVdMcvt/kvtK9Sfv qhr2i2Ji6VLjBgBpPM3xcIs943/X20z2j75iY2f/Do2nDbZdKwdfdCy1QWRpzMaA Jd1rpK0SSGnuFchtxqTZG+qLIdovShqn3BLbsByrpvBnNPhYHKQ2I97x9nn7i99a eiE7WkQVl3b2JdCowvwX2MK7XFwVSCb4z0YujyLcQfSwCshbPU3At9Gn+Zd7AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUeJh6aiHI6AMcWCA9WYqw2pPuIFcwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2E2MTM4MzkzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzM2MzgzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGn0GomTANBgkqhkiG9w0BAQsFAAOCAQEAXvbRSXL7qaziiAP/ btWkAYzcz6TdFRqdWN+8rA9jsRkmS3TF9tjXKer1np0SGjqMlah/q70nRs1tbC8U O2QF03HPErfe3xKDiqi+BOkpFE0Dhtvm9QlJcoPFAo5R9wtuRPdF+S7yvssLRuO8 uSTfn29ZHDMXGefYh5pDHeXS8IxKs2dFdTewIpeLpiTJeJkg98r3BZ87OxnlXqK3 4u0HtAgAJU2CDyNgs/pYnxe9hZD2ioih1aAjWBXFiAji9Fc8OUsOPxtgoINPSCbC cza/U9yDX3ePgp9zvKp7QGTSO1TeLoQ/dfA8tHlvrob7v372XD8kG4T+Ug82clVy Aj6Lzw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:10:38 2026 by rpki-client