$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa File: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (raw, json) Hash identifier: MmaYp4AMuyMNWUPfLzf8mLrB0E5J2DqYInzxDabnxFs= Subject key identifier: 8A:70:07:13:3F:9A:70:30:A6:C6:7E:E8:30:CB:78:F2:21:47:BF:6A Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 4A15A8D15F6C89F3EA1DBF6530052BFB842F7D7E Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa Signing time: Sat 20 Jun 2026 16:00:31 +0000 ROA not before: Sat 20 Jun 2026 15:55:31 +0000 ROA not after: Sat 19 Jun 2027 16:00:31 +0000 asID: 209874 IP address blocks: 2a09:54c3:a000::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:15:a8:d1:5f:6c:89:f3:ea:1d:bf:65:30:05:2b:fb:84:2f:7d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jun 20 15:55:31 2026 GMT Not After : Jun 19 16:00:31 2027 GMT Subject: CN=8A7007133F9A7030A6C67EE830CB78F22147BF6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:69:4a:ac:0f:83:0c:24:eb:81:9e:0a:54: e3:9c:6d:ef:ae:f8:9d:e4:5a:02:8b:da:44:47:f8: ab:81:38:60:77:e5:75:60:f9:78:54:15:18:a7:bf: df:ec:b5:b4:52:8b:23:42:b6:71:1b:8d:df:00:a0: b7:fb:57:53:eb:9c:be:f7:03:54:07:bd:90:f9:f2: e8:38:33:de:0b:4d:b7:80:08:5b:59:c5:89:cc:8f: 93:35:64:83:b5:5f:b1:12:24:35:39:47:d9:0d:a8: ed:a8:70:61:1d:49:1b:07:67:25:e3:22:4c:a5:98: fd:9a:2c:12:30:26:99:4b:50:fb:50:f6:ae:13:1f: 4c:a8:dc:e9:79:b5:ec:07:81:35:77:1b:d4:5a:49: 44:0f:5c:c1:68:4b:dc:9c:d0:0b:8b:a4:99:73:d6: 5b:d5:4b:10:cb:6a:81:9b:40:75:fd:ac:87:94:8e: ef:50:35:67:97:a5:0a:57:ac:c2:e6:08:9c:16:2f: db:03:06:79:ad:2d:66:70:bd:9c:96:1d:1e:82:44: e7:41:77:d3:33:87:4b:39:45:06:64:aa:20:5b:ac: 25:ab:eb:b1:7d:72:3c:a7:57:46:0a:a5:44:ed:f9: c8:43:0a:60:e8:1a:c2:8a:d8:8b:54:c4:b1:1f:18: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:70:07:13:3F:9A:70:30:A6:C6:7E:E8:30:CB:78:F2:21:47:BF:6A X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a000::/40 Signature Algorithm: sha256WithRSAEncryption 8e:ef:6d:63:fd:a6:60:6b:cd:13:d7:1c:cb:25:23:9c:79:e9: a9:00:15:d0:df:4e:75:0e:c9:da:0d:ef:0c:b3:c2:7e:94:97: ba:63:e6:35:05:ec:bc:37:ce:5c:b9:b6:48:52:fa:c0:e4:b8: 7d:93:d3:29:69:c5:0a:15:c7:c4:36:fa:02:a6:5d:ca:7a:8a: fe:4c:f1:d4:9f:3f:d8:c1:9b:57:05:97:e4:5b:4a:97:34:4d: 5e:27:2d:21:8b:20:42:14:24:92:cb:bb:1f:ad:d9:ab:37:5f: ed:ca:4b:cf:64:ab:09:a1:80:1b:e4:8e:54:89:df:72:4e:0e: 86:29:21:18:d7:0e:f1:9f:2d:b2:fb:0a:57:10:b1:68:4e:29: 4f:48:2b:de:85:78:bf:04:70:9c:c1:04:ce:c4:ac:25:61:4a: 72:68:fd:a4:97:f2:5d:d9:8d:d4:99:ba:a3:b0:b1:8d:1e:94: 7b:34:45:87:29:76:75:62:19:97:25:1a:df:12:53:9f:7a:20: 68:7c:e1:5c:86:68:72:83:70:39:dd:04:51:25:e7:5a:44:99: a7:df:7d:af:b4:0c:57:f0:72:09:51:4b:13:8d:31:d5:ad:b9: e7:8d:77:77:49:2b:d5:c9:5c:e6:56:90:39:c6:18:d6:28:c5: cf:a4:76:4d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUShWo0V9sifPqHb9lMAUr+4QvfX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA2MjAxNTU1MzFaFw0yNzA2MTkxNjAwMzFaMDMxMTAvBgNV BAMTKDhBNzAwNzEzM0Y5QTcwMzBBNkM2N0VFODMwQ0I3OEYyMjE0N0JGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq62lKrA+DDCTrgZ4KVOOcbe+u +J3kWgKL2kRH+KuBOGB35XVg+XhUFRinv9/stbRSiyNCtnEbjd8AoLf7V1PrnL73 A1QHvZD58ug4M94LTbeACFtZxYnMj5M1ZIO1X7ESJDU5R9kNqO2ocGEdSRsHZyXj IkylmP2aLBIwJplLUPtQ9q4TH0yo3Ol5tewHgTV3G9RaSUQPXMFoS9yc0AuLpJlz 1lvVSxDLaoGbQHX9rIeUju9QNWeXpQpXrMLmCJwWL9sDBnmtLWZwvZyWHR6CROdB d9Mzh0s5RQZkqiBbrCWr67F9cjynV0YKpUTt+chDCmDoGsKK2ItUxLEfGPrDAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUinAHEz+acDCmxn7oMMt48iFHv2owHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMwMzAzMDNhM2EyZjM0MzAyZDMxMzIzODIwM2QzZTIwMzIzMDM5MzgzNzM0 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAOBAIAAjAIAwYAKglUw6AwDQYJKoZIhvcNAQELBQADggEBAI7vbWP9pmBrzRPX HMslI5x56akAFdDfTnUOydoN7wyzwn6Ul7pj5jUF7Lw3zly5tkhS+sDkuH2T0ylp xQoVx8Q2+gKmXcp6iv5M8dSfP9jBm1cFl+RbSpc0TV4nLSGLIEIUJJLLux+t2as3 X+3KS89kqwmhgBvkjlSJ33JODoYpIRjXDvGfLbL7ClcQsWhOKU9IK96FeL8EcJzB BM7ErCVhSnJo/aSX8l3ZjdSZuqOwsY0elHs0RYcpdnViGZclGt8SU596IGh84VyG aHKDcDndBFEl51pEmafffa+0DFfwcglRSxONMdWtueeNd3dJK9XJXOZWkDnGGNYo xc+kdk0= -----END CERTIFICATE-----Generated at Thu Jul 23 22:04:30 2026 by rpki-client