$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/326131343a366634343a636133303a3a2f34342d3434203d3e20323030333738.roa File: 326131343a366634343a636133303a3a2f34342d3434203d3e20323030333738.roa (raw, json) Hash identifier: rzHDd6pYyAUkDzdpOl9T5hbLCMrrfqWTOBS2icxWnVc= Subject key identifier: 74:45:85:57:13:78:77:8F:97:EE:7D:EC:30:81:E6:F7:DE:0D:1C:85 Certificate issuer: /CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E Certificate serial: 11AFCD4FC45CF60E7E16869C66A5E361654FEFCD Authority key identifier: 0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/326131343a366634343a636133303a3a2f34342d3434203d3e20323030333738.roa Signing time: Tue 12 May 2026 21:24:40 +0000 ROA not before: Tue 12 May 2026 21:19:40 +0000 ROA not after: Tue 11 May 2027 21:24:40 +0000 asID: 200378 IP address blocks: 2a14:6f44:ca30::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:cd:4f:c4:5c:f6:0e:7e:16:86:9c:66:a5:e3:61:65:4f:ef:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E Validity Not Before: May 12 21:19:40 2026 GMT Not After : May 11 21:24:40 2027 GMT Subject: CN=744585571378778F97EE7DEC3081E6F7DE0D1C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:e4:58:81:76:0b:64:5d:88:6f:b5:a8:04: 2c:14:c1:2e:98:16:13:a8:01:ee:d4:d7:59:c2:7a: 5d:0e:15:f6:12:34:be:ab:a2:a5:de:c4:3c:f2:3b: a5:b0:3a:a8:42:3e:1a:b6:d7:6e:b1:9d:5d:62:df: 9d:52:19:77:c4:a3:d9:9f:2f:84:24:43:7f:1f:43: 96:fb:d8:1f:98:ea:bd:fb:41:2a:a3:8f:9e:c9:95: 13:36:e2:8f:70:cd:34:1f:cb:25:21:ae:a9:47:2b: 90:54:23:0b:ff:c9:b4:f7:35:13:2b:e9:e0:1b:74: 4b:17:e5:06:ee:03:a9:c4:03:67:27:cf:e0:89:80: d8:2b:4b:46:0d:bd:e2:77:6e:32:c6:59:26:17:be: 54:77:b3:f0:d6:b5:da:a2:57:56:2e:bb:39:57:2f: 6d:e2:8d:d4:ed:c7:ca:35:71:dd:4b:81:cb:e7:bd: 34:7b:af:3e:c4:03:d0:4c:cf:46:67:87:56:d9:d8: da:56:23:b3:53:eb:6b:64:a5:f2:2f:b0:fc:d7:af: 39:fe:78:e0:1f:21:39:da:70:5c:c2:8d:25:6d:b2: 32:4c:d4:2d:47:82:40:81:db:03:5f:c1:40:ee:21: d2:d5:cf:5a:44:4f:af:0f:e0:ef:be:e6:15:11:47: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:85:57:13:78:77:8F:97:EE:7D:EC:30:81:E6:F7:DE:0D:1C:85 X509v3 Authority Key Identifier: keyid:0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/326131343a366634343a636133303a3a2f34342d3434203d3e20323030333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6f44:ca30::/44 Signature Algorithm: sha256WithRSAEncryption 98:86:53:09:cf:f6:1c:90:70:11:75:9c:17:ff:de:4e:a1:97: 46:13:21:11:2d:7c:4a:06:d0:23:fd:0a:81:85:8c:64:c0:48: d9:90:9b:7f:ed:1d:4e:7e:25:c2:7c:f0:ca:47:71:b9:c5:90: 3d:e1:11:8a:a9:61:ad:78:2b:fc:42:73:56:e9:a3:8d:b5:3f: 85:7c:cc:fe:fb:62:e2:4b:f5:0a:87:1b:56:5e:cd:2b:ef:6e: 4d:77:fb:5c:a1:49:16:6e:96:9c:5b:f5:40:93:c9:02:aa:61: dd:fe:ee:db:aa:ff:66:86:81:23:f5:3a:16:ce:42:b2:c9:5b: 26:3e:3f:00:f3:66:59:3a:b2:74:f4:1f:ec:52:21:b3:f2:5a: 58:16:48:39:b5:51:da:89:64:a2:b3:47:d0:6a:84:cd:3c:14: af:18:d1:4f:41:f4:a6:4f:6d:3a:18:d2:a8:80:25:92:af:73: 84:5e:8d:81:22:88:aa:5b:ed:b0:e3:b8:9b:3f:98:82:54:c9: 7f:8b:32:6b:0c:24:d5:8b:f6:a7:f5:73:6b:e2:db:9e:e5:37: e7:12:95:8b:a6:63:06:c4:90:b4:cd:3a:4a:74:90:8b:80:5f: d8:84:e8:9d:b9:b7:b1:ee:47:3b:4b:5a:91:22:62:e8:93:14: 17:b1:e0:30 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEa/NT8Rc9g5+FoacZqXjYWVP780wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFFRjBDMjNFRUEyNTg0Qjc3RjdFNzRGM0M2RkExOTUw N0EyNUQ2RTAeFw0yNjA1MTIyMTE5NDBaFw0yNzA1MTEyMTI0NDBaMDMxMTAvBgNV BAMTKDc0NDU4NTU3MTM3ODc3OEY5N0VFN0RFQzMwODFFNkY3REUwRDFDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssuRYgXYLZF2Ib7WoBCwUwS6Y FhOoAe7U11nCel0OFfYSNL6roqXexDzyO6WwOqhCPhq2126xnV1i351SGXfEo9mf L4QkQ38fQ5b72B+Y6r37QSqjj57JlRM24o9wzTQfyyUhrqlHK5BUIwv/ybT3NRMr 6eAbdEsX5QbuA6nEA2cnz+CJgNgrS0YNveJ3bjLGWSYXvlR3s/DWtdqiV1YuuzlX L23ijdTtx8o1cd1LgcvnvTR7rz7EA9BMz0Znh1bZ2NpWI7NT62tkpfIvsPzXrzn+ eOAfITnacFzCjSVtsjJM1C1HgkCB2wNfwUDuIdLVz1pET68P4O++5hURR7sHAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdEWFVxN4d4+X7n3sMIHm994NHIUwHwYDVR0j BBgwFoAUCu8MI+6iWEt39+dPPG+hlQeiXW4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWIyMzVhNjAtYzc1Ni00M2Y5LTlmNGEtYjJlM2UwZGIx OWZjLzEvMEFFRjBDMjNFRUEyNTg0Qjc3RjdFNzRGM0M2RkExOTUwN0EyNUQ2RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC8wQUVGMEMyM0VFQTI1ODRCNzdGN0U3NEYz QzZGQTE5NTA3QTI1RDZFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81YjIzNWE2MC1jNzU2LTQzZjktOWY0YS1iMmUzZTBkYjE5ZmMvMS8zMjYxMzEz NDNhMzY2NjM0MzQzYTYzNjEzMzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MDMwMzMzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhRvRMowMA0GCSqGSIb3DQEBCwUAA4IBAQCY hlMJz/YckHARdZwX/95OoZdGEyERLXxKBtAj/QqBhYxkwEjZkJt/7R1OfiXCfPDK R3G5xZA94RGKqWGteCv8QnNW6aONtT+FfMz++2LiS/UKhxtWXs0r725Nd/tcoUkW bpacW/VAk8kCqmHd/u7bqv9mhoEj9ToWzkKyyVsmPj8A82ZZOrJ09B/sUiGz8lpY Fkg5tVHaiWSis0fQaoTNPBSvGNFPQfSmT206GNKogCWSr3OEXo2BIoiqW+2w47ib P5iCVMl/izJrDCTVi/an9XNr4tue5TfnEpWLpmMGxJC0zTpKdJCLgF/YhOidubex 7kc7S1qRImLokxQXseAw -----END CERTIFICATE-----Generated at Wed May 13 13:31:08 2026 by rpki-client