$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa File: 326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa (raw, json) Hash identifier: jkUpaqC40AVryws2M4l3hA6Beu5Hl97BKn2xwWx/2YU= Subject key identifier: C5:73:40:75:5A:4F:09:99:7C:59:F5:2A:3A:BA:B7:4D:F5:0A:AC:D0 Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 0B076110E5031D82E3BAF2D9E78F4E0393CAFEA4 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa Signing time: Wed 17 Jun 2026 15:27:07 +0000 ROA not before: Wed 17 Jun 2026 15:22:07 +0000 ROA not after: Wed 16 Jun 2027 15:27:07 +0000 asID: 216299 IP address blocks: 2a0f:1cc5:1040::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 08:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:07:61:10:e5:03:1d:82:e3:ba:f2:d9:e7:8f:4e:03:93:ca:fe:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jun 17 15:22:07 2026 GMT Not After : Jun 16 15:27:07 2027 GMT Subject: CN=C57340755A4F09997C59F52A3ABAB74DF50AACD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:b5:00:71:95:9e:bb:c5:d7:c5:f9:50:5f: 26:75:b3:53:65:43:bb:04:eb:d4:db:9e:e7:78:b0: c8:d3:9a:8c:0f:33:89:45:ae:6b:fe:1b:36:b3:28: b0:5e:9a:61:a9:87:b1:3f:dc:eb:5e:f0:ce:50:c1: 04:3b:fb:7b:7d:14:11:77:90:6c:93:99:10:58:6c: e2:0a:fa:56:d7:2b:e0:36:a8:b8:88:d9:8e:5a:bf: 4c:71:ad:27:d0:e6:f7:ef:d7:11:3d:3a:8f:c7:98: 77:58:f3:6d:2d:6c:31:27:a3:f7:29:7b:c5:e8:52: 70:25:2e:c7:85:5f:dd:01:5a:53:23:81:5f:0a:02: 76:eb:5d:a0:2c:e8:9e:9a:25:c1:b7:88:6c:1b:8e: 84:a8:bd:db:b9:0d:8e:eb:9c:b4:81:35:56:f4:b5: da:bd:59:bd:dc:64:4c:64:fa:1d:f7:cb:40:9a:a1: fb:01:be:fb:df:04:fb:e8:b7:3e:d4:5e:a6:48:a7: 19:24:1f:c4:ac:a6:96:b4:e3:24:26:09:1a:eb:b5: 1e:cb:27:12:cb:ab:ca:f8:4c:f4:4a:7e:63:f6:3c: 20:35:11:8e:c6:b8:d0:ff:2a:4c:f1:5d:18:86:67: f9:33:57:12:14:9d:ff:c2:d6:00:8c:67:6f:b3:40: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:73:40:75:5A:4F:09:99:7C:59:F5:2A:3A:BA:B7:4D:F5:0A:AC:D0 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:1040::/44 Signature Algorithm: sha256WithRSAEncryption 15:a4:59:0e:5b:cd:ca:57:45:df:c6:34:69:b1:51:c8:20:8c: ad:4c:0a:74:1d:33:ca:d3:6e:df:07:ca:a7:06:29:01:eb:93: 3c:e2:60:9e:f9:99:e6:0a:ef:1c:06:b9:4e:dc:0b:38:d4:cf: fb:02:79:64:45:8f:f8:9f:29:76:3e:93:3f:72:6c:9d:52:be: a4:ef:d4:9d:ca:4c:77:78:b8:9f:39:f0:1e:e5:81:1a:ab:04: 00:f7:bf:18:2e:d5:5c:6a:ac:75:24:ae:81:4c:34:5a:d0:46: 6b:20:f0:c9:81:45:fc:4e:d5:06:05:99:d4:d6:77:8b:b8:e3: a0:17:83:03:d4:96:50:d5:31:5e:62:be:e0:bc:c4:36:80:3a: 77:6d:f7:ec:4f:72:22:8e:f8:fa:92:c9:49:ea:b9:98:8c:e2: c7:3a:9c:c6:fd:74:f3:c2:00:ec:30:72:ff:9e:04:d0:70:76: ed:28:5b:3d:62:3a:81:d3:d2:2f:f9:0f:92:44:d0:4f:4b:b8: 08:f1:cd:0e:5c:c3:e4:61:97:2a:fb:b5:6b:95:e7:2f:3c:e1: 8a:2e:f7:0a:54:74:7e:d7:c7:46:3b:5e:b2:31:09:d5:71:46: b5:51:af:eb:fe:fa:35:8a:02:35:a3:b8:7b:5b:72:c9:ae:58: 96:b2:19:8d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCwdhEOUDHYLjuvLZ549OA5PK/qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjA2MTcxNTIyMDdaFw0yNzA2MTYxNTI3MDdaMDMxMTAvBgNV BAMTKEM1NzM0MDc1NUE0RjA5OTk3QzU5RjUyQTNBQkFCNzRERjUwQUFDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7a7UAcZWeu8XXxflQXyZ1s1Nl Q7sE69Tbnud4sMjTmowPM4lFrmv+GzazKLBemmGph7E/3Ote8M5QwQQ7+3t9FBF3 kGyTmRBYbOIK+lbXK+A2qLiI2Y5av0xxrSfQ5vfv1xE9Oo/HmHdY820tbDEno/cp e8XoUnAlLseFX90BWlMjgV8KAnbrXaAs6J6aJcG3iGwbjoSovdu5DY7rnLSBNVb0 tdq9Wb3cZExk+h33y0CaofsBvvvfBPvotz7UXqZIpxkkH8Ssppa04yQmCRrrtR7L JxLLq8r4TPRKfmP2PCA1EY7GuND/KkzxXRiGZ/kzVxIUnf/C1gCMZ2+zQCuBAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUxXNAdVpPCZl8WfUqOrq3TfUKrNAwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81MmI4NDE1Ni05NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMy8zMjYxMzA2 NjNhMzE2MzYzMzUzYTMxMzAzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM2MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxRBAMA0GCSqGSIb3DQEBCwUAA4IBAQAV pFkOW83KV0XfxjRpsVHIIIytTAp0HTPK027fB8qnBikB65M84mCe+ZnmCu8cBrlO 3As41M/7AnlkRY/4nyl2PpM/cmydUr6k79Sdykx3eLifOfAe5YEaqwQA978YLtVc aqx1JK6BTDRa0EZrIPDJgUX8TtUGBZnU1neLuOOgF4MD1JZQ1TFeYr7gvMQ2gDp3 bffsT3Iijvj6kslJ6rmYjOLHOpzG/XTzwgDsMHL/ngTQcHbtKFs9YjqB09Iv+Q+S RNBPS7gI8c0OXMPkYZcq+7VrlecvPOGKLvcKVHR+18dGO16yMQnVcUa1Ua/r/vo1 igI1o7h7W3LJrliWshmN -----END CERTIFICATE-----Generated at Thu Jul 23 20:10:04 2026 by rpki-client