$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa File: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (raw, json) Hash identifier: 4HEPjtIiPa97P9bGhpyLZGMoz0SO/cByiA91tlp90eY= Subject key identifier: 10:1C:AC:70:91:58:4D:84:0A:FE:61:7B:4A:FF:E4:9F:ED:1A:2C:C4 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 5AC70DBC0AA27F8DD042C1CDA250C4272446C4B7 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa Signing time: Tue 07 Jul 2026 12:25:49 +0000 ROA not before: Tue 07 Jul 2026 12:20:49 +0000 ROA not after: Tue 06 Jul 2027 12:25:49 +0000 asID: 205838 IP address blocks: 2a06:9f41:a901::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 06:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c7:0d:bc:0a:a2:7f:8d:d0:42:c1:cd:a2:50:c4:27:24:46:c4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Jul 7 12:20:49 2026 GMT Not After : Jul 6 12:25:49 2027 GMT Subject: CN=101CAC7091584D840AFE617B4AFFE49FED1A2CC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ee:ca:c4:ad:ef:5a:6c:b9:89:bc:e6:a5:22: e6:01:93:80:22:df:bc:4b:6c:41:84:fa:3d:86:8a: 51:c3:94:a6:93:aa:35:55:85:66:14:5d:60:f3:e7: 10:b3:4b:0a:0e:ec:39:d0:99:6a:06:87:60:bd:84: 5b:0b:58:ef:19:cc:25:bb:18:b2:6c:74:d1:98:96: 32:24:a7:f1:f1:ff:c5:8a:9f:a4:ac:33:11:70:9a: ce:32:11:84:25:43:ac:60:7b:bf:f9:5e:9a:c4:68: 91:6f:d9:bc:46:93:20:8e:11:80:ac:5d:93:b5:af: 39:86:1c:98:af:49:25:9b:ea:cd:61:4f:b5:d0:85: 5f:2a:2c:95:c7:e8:2a:cc:96:10:9f:7f:3f:1e:be: 0e:f4:5c:50:91:4c:ce:24:e4:98:c1:00:3e:7b:c9: 1f:3a:51:75:49:fb:c6:f8:a8:8c:d6:6b:3a:52:e4: 70:b1:b4:14:d8:ec:81:4c:19:88:78:8e:fb:a2:e1: ec:e0:76:19:bd:df:75:9c:ad:a6:4d:4c:7c:e7:d2: 93:2b:a2:5d:a7:bb:99:fb:d8:6b:bf:88:5c:3c:b1: 80:ef:44:24:92:e4:35:7a:57:29:a9:29:3a:7c:76: 0f:5a:43:32:db:60:2b:e9:74:6f:54:39:00:70:bd: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:AC:70:91:58:4D:84:0A:FE:61:7B:4A:FF:E4:9F:ED:1A:2C:C4 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:a901::/48 Signature Algorithm: sha256WithRSAEncryption 81:15:b2:a5:a6:1e:22:fd:56:cc:eb:01:6b:d5:87:f5:18:5d: 8c:3c:ac:52:5e:da:5c:7b:87:13:2f:51:96:bf:80:bb:6a:7f: 47:65:8a:23:07:fc:43:db:f3:d4:9f:b8:99:b6:ed:e4:f7:c9: 32:d1:fd:28:60:45:8e:9a:7b:e3:49:32:c3:20:90:09:29:88: 1a:a5:f4:2e:a2:60:42:9e:20:f9:c4:1d:7b:a0:2e:06:5b:9d: 4b:43:8f:93:74:85:cd:98:23:8c:38:69:0c:27:8f:d3:15:6e: d4:73:b4:6f:7d:9a:f0:6a:e9:70:52:ee:8c:db:a9:e9:f4:0c: b2:56:7a:06:de:57:b4:f3:c0:c0:99:04:a1:5c:c9:a6:c4:f4: 86:16:3b:c2:3b:b2:af:d0:98:e0:7f:02:b7:19:f1:7f:f0:06: 20:02:03:30:c5:b9:66:6a:ae:a9:12:1e:9e:56:26:63:1c:30: 5a:1e:f7:9c:3b:89:eb:d3:ce:62:d7:39:f1:80:20:8b:4d:54: ca:58:50:19:8b:fb:14:4e:92:50:9f:5a:db:83:80:dc:4d:8f: fe:3c:b7:83:b7:f9:c5:d8:f8:20:55:53:76:e7:cd:16:9c:23: 8e:01:92:0d:ae:b7:d1:75:1d:49:6b:c5:ef:27:d8:5c:fc:01: cb:6a:d5:8e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUWscNvAqif43QQsHNolDEJyRGxLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA3MDcxMjIwNDlaFw0yNzA3MDYxMjI1NDlaMDMxMTAvBgNV BAMTKDEwMUNBQzcwOTE1ODREODQwQUZFNjE3QjRBRkZFNDlGRUQxQTJDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ7srEre9abLmJvOalIuYBk4Ai 37xLbEGE+j2GilHDlKaTqjVVhWYUXWDz5xCzSwoO7DnQmWoGh2C9hFsLWO8ZzCW7 GLJsdNGYljIkp/Hx/8WKn6SsMxFwms4yEYQlQ6xge7/5XprEaJFv2bxGkyCOEYCs XZO1rzmGHJivSSWb6s1hT7XQhV8qLJXH6CrMlhCffz8evg70XFCRTM4k5JjBAD57 yR86UXVJ+8b4qIzWazpS5HCxtBTY7IFMGYh4jvui4ezgdhm933WcraZNTHzn0pMr ol2nu5n72Gu/iFw8sYDvRCSS5DV6VympKTp8dg9aQzLbYCvpdG9UOQBwvYo/AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUEByscJFYTYQK/mF7Sv/kn+0aLMQwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2E2MTM5MzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNTM4MzMzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGn0GpATANBgkqhkiG9w0BAQsFAAOCAQEAgRWypaYeIv1WzOsB a9WH9RhdjDysUl7aXHuHEy9Rlr+Au2p/R2WKIwf8Q9vz1J+4mbbt5PfJMtH9KGBF jpp740kywyCQCSmIGqX0LqJgQp4g+cQde6AuBludS0OPk3SFzZgjjDhpDCeP0xVu 1HO0b32a8GrpcFLujNup6fQMslZ6Bt5XtPPAwJkEoVzJpsT0hhY7wjuyr9CY4H8C txnxf/AGIAIDMMW5ZmquqRIenlYmYxwwWh73nDuJ69POYtc58YAgi01UylhQGYv7 FE6SUJ9a24OA3E2P/jy3g7f5xdj4IFVTdufNFpwjjgGSDa630XUdSWvF7yfYXPwB y2rVjg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:04:08 2026 by rpki-client