$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323230303a3a2f34342d3438203d3e20313937383036.roa File: 326131333a633863343a323230303a3a2f34342d3438203d3e20313937383036.roa (raw, json) Hash identifier: AfgwqGMO9CVHdwQKzdsRfhf5hmoXRPoKOMuiQAxIyuk= Subject key identifier: 57:91:F8:FC:63:BF:97:9D:98:E4:9A:CB:EF:BA:06:19:13:2B:78:0B Certificate issuer: /CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Certificate serial: 7A9ECB65736A52563F65241125C68011AEBC80E6 Authority key identifier: 30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323230303a3a2f34342d3438203d3e20313937383036.roa Signing time: Wed 01 Jul 2026 13:10:31 +0000 ROA not before: Wed 01 Jul 2026 13:05:31 +0000 ROA not after: Wed 30 Jun 2027 13:10:31 +0000 asID: 197806 IP address blocks: 2a13:c8c4:2200::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9e:cb:65:73:6a:52:56:3f:65:24:11:25:c6:80:11:ae:bc:80:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300F87E44E24C2FEED9780E2A0ABF022DCB56C58 Validity Not Before: Jul 1 13:05:31 2026 GMT Not After : Jun 30 13:10:31 2027 GMT Subject: CN=5791F8FC63BF979D98E49ACBEFBA0619132B780B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:9c:e7:82:1a:ae:b5:0d:4e:c4:86:95:e0: e3:58:fa:d6:d7:65:50:b5:c2:80:bf:48:c6:25:7f: cf:8a:bd:90:38:a7:ac:d6:53:04:0c:d3:c9:d8:3c: 00:42:f7:d5:ab:55:44:e1:97:33:95:7c:62:94:34: 7f:2c:ff:2b:1c:ff:29:90:7a:b6:a1:71:b4:c0:70: f5:a9:78:66:f1:8f:1a:41:30:86:4f:dd:71:54:5f: 5e:47:fa:4c:94:78:80:10:dc:74:de:3e:2e:89:70: d7:fd:a5:d7:55:8e:06:00:c9:59:56:56:8a:9e:0f: 3b:bc:cb:66:1e:35:d4:fc:28:42:c3:f9:b9:66:25: 61:4e:4b:cd:d2:16:06:52:73:10:6f:21:39:6d:38: 2a:d0:4a:1e:58:39:d7:a3:88:80:79:10:55:c0:9c: ba:3b:98:37:f2:04:71:de:72:5b:ac:76:cd:ee:a4: 16:c0:77:96:14:7d:9c:d6:aa:5d:15:d6:ad:2e:02: f8:cc:2a:53:39:44:73:a7:9d:47:64:7f:f7:6c:d9: f7:48:eb:56:3f:8a:fc:f5:04:43:0f:c2:5a:c9:1d: 01:19:cb:0d:56:d2:ad:c1:fe:29:63:0d:d7:97:57: 9e:ee:0c:b2:71:a4:62:56:44:e5:ba:ba:8a:cc:8b: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:91:F8:FC:63:BF:97:9D:98:E4:9A:CB:EF:BA:06:19:13:2B:78:0B X509v3 Authority Key Identifier: keyid:30:0F:87:E4:4E:24:C2:FE:ED:97:80:E2:A0:AB:F0:22:DC:B5:6C:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6782d38b-4016-496a-8298-e3e97bee97bd/1/326131333a633863343a323230303a3a2f34342d3438203d3e20313937383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:2200::/44 Signature Algorithm: sha256WithRSAEncryption 0c:5c:ab:21:2a:dc:3a:ef:ae:62:09:ce:9a:00:5f:99:cd:48: ac:22:09:d2:a4:fc:38:78:d4:71:90:95:ee:47:ff:ca:e1:82: bf:a1:d2:a5:59:98:a5:9f:f8:6d:35:e1:21:b6:39:65:c3:85: 2a:0d:d9:9a:1c:64:10:8d:03:80:04:73:51:0f:aa:98:7a:85: 51:9c:ae:88:c9:a0:c5:5a:e2:de:5e:df:e4:20:0b:73:a9:ac: 75:aa:3c:65:94:77:3f:a1:34:c0:a9:eb:69:b9:39:03:e9:95: 00:40:70:c8:65:38:17:c3:5a:3b:e1:05:7b:13:c0:66:07:88: 17:0d:cc:dd:2a:a1:23:ac:ec:d3:cc:b5:9b:13:9d:e3:86:bd: ab:78:d8:d8:bd:89:70:5e:f6:7c:6f:a6:17:ff:61:7f:6d:e1: 44:d2:f2:40:ef:c0:70:52:40:cd:ac:ff:b7:a6:73:21:fe:bb: 5e:ea:d5:82:2d:00:23:82:ab:54:e1:3a:04:b9:50:0b:3f:b7: 00:5d:a1:58:bb:92:7a:c8:df:9c:88:7b:09:64:34:0c:e5:a6: 59:32:5e:01:65:5d:5e:48:56:37:16:5a:8c:b2:d0:43:ab:c0: 48:2e:cd:83:1f:0b:e1:26:e6:c7:a8:8c:58:aa:ce:b5:46:b3: 20:5e:7e:07 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUep7LZXNqUlY/ZSQRJcaAEa68gOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJE Q0I1NkM1ODAeFw0yNjA3MDExMzA1MzFaFw0yNzA2MzAxMzEwMzFaMDMxMTAvBgNV BAMTKDU3OTFGOEZDNjNCRjk3OUQ5OEU0OUFDQkVGQkEwNjE5MTMyQjc4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClJznghqutQ1OxIaV4ONY+tbX ZVC1woC/SMYlf8+KvZA4p6zWUwQM08nYPABC99WrVUThlzOVfGKUNH8s/ysc/ymQ erahcbTAcPWpeGbxjxpBMIZP3XFUX15H+kyUeIAQ3HTePi6JcNf9pddVjgYAyVlW VoqeDzu8y2YeNdT8KELD+blmJWFOS83SFgZScxBvITltOCrQSh5YOdejiIB5EFXA nLo7mDfyBHHeclusds3upBbAd5YUfZzWql0V1q0uAvjMKlM5RHOnnUdkf/ds2fdI 61Y/ivz1BEMPwlrJHQEZyw1W0q3B/iljDdeXV57uDLJxpGJWROW6uorMi/UNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUV5H4/GO/l52Y5JrL77oGGRMreAswHwYDVR0j BBgwFoAUMA+H5E4kwv7tl4DioKvwIty1bFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjc4MmQzOGItNDAxNi00OTZhLTgyOTgtZTNlOTdiZWU5 N2JkLzEvMzAwRjg3RTQ0RTI0QzJGRUVEOTc4MEUyQTBBQkYwMjJEQ0I1NkM1OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMDBGODdFNDRFMjRDMkZFRUQ5NzgwRTJB MEFCRjAyMkRDQjU2QzU4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82NzgyZDM4Yi00MDE2LTQ5NmEtODI5OC1lM2U5N2JlZTk3YmQvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTMyMzIzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz OTM3MzgzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhPIxCIAMA0GCSqGSIb3DQEBCwUAA4IBAQAM XKshKtw6765iCc6aAF+ZzUisIgnSpPw4eNRxkJXuR//K4YK/odKlWZiln/htNeEh tjllw4UqDdmaHGQQjQOABHNRD6qYeoVRnK6IyaDFWuLeXt/kIAtzqax1qjxllHc/ oTTAqetpuTkD6ZUAQHDIZTgXw1o74QV7E8BmB4gXDczdKqEjrOzTzLWbE53jhr2r eNjYvYlwXvZ8b6YX/2F/beFE0vJA78BwUkDNrP+3pnMh/rte6tWCLQAjgqtU4ToE uVALP7cAXaFYu5J6yN+ciHsJZDQM5aZZMl4BZV1eSFY3FlqMstBDq8BILs2DHwvh JubHqIxYqs61RrMgXn4H -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:52 2026 by rpki-client