$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323130303a3a2f34302d3536203d3e20313937383036.roa File: 326131333a633863343a323130303a3a2f34302d3536203d3e20313937383036.roa (raw, json) Hash identifier: 2ZmhaFBQ0V4dJSXyRSyc++rk/qANEJwxFFR6aJ/nMXQ= Subject key identifier: 31:9D:15:F8:99:5A:B9:F0:03:18:BF:84:FC:2E:14:F6:BF:9C:ED:E3 Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Certificate serial: 3A7CAFB2CB1A503C23DCCCD0E2F860DE72406FBD Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323130303a3a2f34302d3536203d3e20313937383036.roa Signing time: Wed 08 Jul 2026 14:06:40 +0000 ROA not before: Wed 08 Jul 2026 14:01:40 +0000 ROA not after: Wed 07 Jul 2027 14:06:40 +0000 asID: 197806 IP address blocks: 2a13:c8c4:2100::/40 maxlen: 56 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 04:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7c:af:b2:cb:1a:50:3c:23:dc:cc:d0:e2:f8:60:de:72:40:6f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Validity Not Before: Jul 8 14:01:40 2026 GMT Not After : Jul 7 14:06:40 2027 GMT Subject: CN=319D15F8995AB9F00318BF84FC2E14F6BF9CEDE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:7e:c5:94:da:99:79:7f:66:3d:0a:c0:d8: f9:03:44:2b:a8:16:44:e9:52:81:8c:e5:49:ce:7d: 33:8f:de:2d:ba:b0:25:ba:c2:99:79:f3:34:84:63: a8:9c:73:4c:8d:7d:86:ce:bd:b3:99:b1:86:09:3c: ab:35:74:34:de:8f:2f:a4:c1:21:4b:fd:74:ed:92: 90:e2:53:e2:73:c4:fb:b5:f6:d8:ef:4f:ad:4e:57: 7a:11:a2:37:af:98:dd:60:62:30:de:e3:55:95:aa: 8d:a5:e7:19:ec:dc:f0:32:07:6e:9d:93:a6:d9:b8: 28:27:2a:dd:ac:0f:f9:8d:a9:e6:fc:51:d7:79:e8: 62:fd:ba:ff:1b:14:17:c2:1d:95:ad:bf:30:1c:3d: ef:a7:b9:03:18:df:0c:c7:08:6a:79:ef:6c:58:f6: e7:64:3e:30:ce:89:1f:a0:4c:8d:75:7b:fe:ac:d7: f8:19:01:6e:54:fa:9f:3a:6b:6c:ce:31:e4:d3:41: 3b:2f:27:bb:52:37:0b:7f:9c:27:f0:ec:af:59:24: 30:8b:ee:d4:2a:fa:7e:26:98:9c:84:b8:54:76:63: d0:3f:e4:6f:b6:e2:e3:a8:31:5a:41:93:a0:76:3b: e7:6c:51:d2:e1:29:af:e8:90:7c:b3:1a:e3:ce:fe: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9D:15:F8:99:5A:B9:F0:03:18:BF:84:FC:2E:14:F6:BF:9C:ED:E3 X509v3 Authority Key Identifier: keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323130303a3a2f34302d3536203d3e20313937383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:2100::/40 Signature Algorithm: sha256WithRSAEncryption 3b:51:93:5c:1e:59:82:2f:82:2c:72:71:84:a7:12:c6:0c:36: 7c:a1:a8:5b:71:8f:aa:79:b5:e8:9b:dd:fa:49:ac:d1:99:d2: 3d:12:ff:ac:40:1d:10:66:9e:f8:32:63:98:c2:fd:f5:10:0f: 06:f6:65:9b:a1:b7:aa:ec:bd:3c:c0:bc:48:e7:af:17:09:25: 89:83:ae:ac:46:d7:58:54:e4:1f:75:b2:94:cd:ca:83:ee:9d: 08:2c:6b:f5:33:1d:65:ee:c5:7c:37:05:ec:d7:8b:2d:4a:0f: 6e:18:f3:e0:4b:bb:52:d0:3d:92:a7:8e:93:21:f9:fd:0b:8e: 72:27:5d:7e:1a:61:dd:bb:11:6c:ff:d7:e3:41:d5:e3:41:f3: dc:80:e5:32:77:50:4d:ee:7c:f1:e2:d9:14:b4:d1:58:47:0f: da:57:f7:fb:a7:a0:1a:a6:06:91:b7:86:57:a6:ff:1d:6f:ff: de:65:d4:62:18:7a:a2:70:b4:48:a4:6e:40:26:98:83:d8:6a: 5a:95:a9:77:d3:76:0f:e9:19:d2:5a:3d:43:55:bf:fd:cd:d9: 38:9e:aa:31:27:3f:74:d6:76:f9:13:74:68:20:f6:90:2b:69: 82:f7:c6:89:ba:b6:db:b5:21:72:21:5f:77:26:53:b8:79:91: 90:43:03:5f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUOnyvsssaUDwj3MzQ4vhg3nJAb70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE Q0I1NkM1ODAeFw0yNjA3MDgxNDAxNDBaFw0yNzA3MDcxNDA2NDBaMDMxMTAvBgNV BAMTKDMxOUQxNUY4OTk1QUI5RjAwMzE4QkY4NEZDMkUxNEY2QkY5Q0VERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDft37FlNqZeX9mPQrA2PkDRCuo FkTpUoGM5UnOfTOP3i26sCW6wpl58zSEY6icc0yNfYbOvbOZsYYJPKs1dDTejy+k wSFL/XTtkpDiU+JzxPu19tjvT61OV3oRojevmN1gYjDe41WVqo2l5xns3PAyB26d k6bZuCgnKt2sD/mNqeb8Udd56GL9uv8bFBfCHZWtvzAcPe+nuQMY3wzHCGp572xY 9udkPjDOiR+gTI11e/6s1/gZAW5U+p86a2zOMeTTQTsvJ7tSNwt/nCfw7K9ZJDCL 7tQq+n4mmJyEuFR2Y9A/5G+24uOoMVpBk6B2O+dsUdLhKa/okHyzGuPO/sfdAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUMZ0V+JlaufADGL+E/C4U9r+c7eMwHwYDVR0j BBgwFoAUMA+H5E4kwv7tl4DioKvwIty1bFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5 N2JkLzEvMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJEQ0I1NkM1OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB MEFCRjAyMkRDQjU2QzU4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82NzgyZDM4Yi00MDE2LTQ5NmEtODI5OC1lM2U5N2JlZTk3YmQvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTMyMzEzMDMwM2EzYTJmMzQzMDJkMzUzNjIwM2QzZTIwMzEz OTM3MzgzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhPIxCEwDQYJKoZIhvcNAQELBQADggEBADtR k1weWYIvgixycYSnEsYMNnyhqFtxj6p5teib3fpJrNGZ0j0S/6xAHRBmnvgyY5jC /fUQDwb2ZZuht6rsvTzAvEjnrxcJJYmDrqxG11hU5B91spTNyoPunQgsa/UzHWXu xXw3BezXiy1KD24Y8+BLu1LQPZKnjpMh+f0LjnInXX4aYd27EWz/1+NB1eNB89yA 5TJ3UE3ufPHi2RS00VhHD9pX9/unoBqmBpG3hlem/x1v/95l1GIYeqJwtEikbkAm mIPYalqVqXfTdg/pGdJaPUNVv/3N2TieqjEnP3TWdvkTdGgg9pAraYL3xom6ttu1 IXIhX3cmU7h5kZBDA18= -----END CERTIFICATE-----Generated at Fri Jul 24 13:45:27 2026 by rpki-client