$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861313a3a2f34382d3438203d3e20323135313437.roa File: 326130393a353463333a663861313a3a2f34382d3438203d3e20323135313437.roa (raw, json) Hash identifier: vdYaCCtgPvzHggm+xAvgQesIV8pCi3M20XJn1rpJsKc= Subject key identifier: 79:40:8E:55:EF:DB:AC:8B:FF:F9:15:93:29:0C:AF:66:81:4C:25:60 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 5E021867F9405440E207321A2BA083CC835BC131 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861313a3a2f34382d3438203d3e20323135313437.roa Signing time: Thu 23 Apr 2026 21:25:03 +0000 ROA not before: Thu 23 Apr 2026 21:20:03 +0000 ROA not after: Thu 22 Apr 2027 21:25:03 +0000 asID: 215147 IP address blocks: 2a09:54c3:f8a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 07:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:02:18:67:f9:40:54:40:e2:07:32:1a:2b:a0:83:cc:83:5b:c1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Apr 23 21:20:03 2026 GMT Not After : Apr 22 21:25:03 2027 GMT Subject: CN=79408E55EFDBAC8BFFF91593290CAF66814C2560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:f5:fd:bf:d0:39:72:e6:22:ef:bd:6f:34: 5c:e9:61:9d:09:60:e2:7e:61:3b:0b:fd:40:bc:47: e3:96:f5:00:bf:a6:ff:10:41:0f:95:3b:ee:25:5c: 03:20:1e:1d:e1:3c:ac:ce:f4:5b:66:ba:e2:b3:2b: c5:9e:53:33:91:e1:42:1f:39:ca:12:e3:f3:c1:a6: f1:8f:2f:4b:3c:f0:82:66:38:a6:73:6f:e2:75:34: 89:42:00:38:0b:5f:50:d4:ed:13:12:d5:54:b7:a3: ac:ce:33:e0:e3:57:9e:9d:35:ae:93:51:5a:db:22: 2b:6d:08:2b:00:e4:ec:a5:b7:40:f0:18:5d:c4:79: 6d:f1:3c:54:42:3e:e9:13:ab:63:46:4b:01:51:68: d5:6d:76:32:48:6b:1f:50:1e:e1:68:04:a7:95:fb: 62:62:b8:7f:d2:a7:17:27:62:da:ac:ec:96:9e:5d: 9c:7d:0e:6d:f9:bc:01:19:e1:6d:9a:55:02:c1:e0: 21:0f:28:d8:f1:de:9d:d3:59:27:a2:02:3a:27:54: 09:9d:96:b3:df:2d:97:6b:28:26:29:98:9c:ff:e2: b2:00:cc:6f:1c:39:02:c0:93:fd:32:d3:f4:39:2f: 76:90:6b:69:ca:62:94:05:da:71:88:fd:ea:64:03: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:40:8E:55:EF:DB:AC:8B:FF:F9:15:93:29:0C:AF:66:81:4C:25:60 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861313a3a2f34382d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:f8a1::/48 Signature Algorithm: sha256WithRSAEncryption a1:c5:dc:91:e1:b1:50:81:75:7d:cd:a5:a3:5a:a9:3c:89:0e: 67:dc:91:22:39:5e:ad:26:93:4c:c4:df:25:43:8f:cf:f3:cb: 62:64:96:14:a2:a3:14:1f:44:11:62:09:6f:0b:ca:dd:ae:fd: 4f:25:05:6b:4d:ac:e8:3c:c5:4b:04:06:f5:39:27:19:2b:f0: 29:24:46:91:fe:29:53:66:b5:57:f8:02:a3:3f:b8:d9:1f:a9: a6:f5:0d:65:48:ae:8f:89:29:34:b8:13:aa:05:1e:41:36:f6: 1f:c5:2c:9f:bf:c3:17:be:e9:13:e0:63:26:40:a2:7f:4d:3b: ab:e2:97:70:6b:cf:df:a1:46:28:43:ac:21:5d:c0:62:fa:fc: a6:4d:fd:9d:14:0c:f9:57:2e:87:da:fa:88:da:b9:f8:f9:8e: 82:bf:84:74:84:de:9f:ff:9d:0e:7e:7d:52:50:d5:7a:da:a3: 93:c5:d6:bb:88:44:1b:6d:5d:ef:02:76:13:92:02:0e:0d:30: a6:81:c8:e4:e5:29:4e:77:11:67:e8:84:b6:2e:49:7a:76:af: 04:78:ed:e3:0e:6b:30:43:3a:f3:17:4a:ea:90:9c:90:00:0a: 8b:39:ac:d3:18:fc:fb:04:de:20:5d:05:db:73:ba:11:fb:c4: bc:de:66:7d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUXgIYZ/lAVEDiBzIaK6CDzINbwTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA0MjMyMTIwMDNaFw0yNzA0MjIyMTI1MDNaMDMxMTAvBgNV BAMTKDc5NDA4RTU1RUZEQkFDOEJGRkY5MTU5MzI5MENBRjY2ODE0QzI1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+/X9v9A5cuYi771vNFzpYZ0J YOJ+YTsL/UC8R+OW9QC/pv8QQQ+VO+4lXAMgHh3hPKzO9FtmuuKzK8WeUzOR4UIf OcoS4/PBpvGPL0s88IJmOKZzb+J1NIlCADgLX1DU7RMS1VS3o6zOM+DjV56dNa6T UVrbIittCCsA5Oylt0DwGF3EeW3xPFRCPukTq2NGSwFRaNVtdjJIax9QHuFoBKeV +2JiuH/SpxcnYtqs7JaeXZx9Dm35vAEZ4W2aVQLB4CEPKNjx3p3TWSeiAjonVAmd lrPfLZdrKCYpmJz/4rIAzG8cOQLAk/0y0/Q5L3aQa2nKYpQF2nGI/epkAwnBAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUeUCOVe/brIv/+RWTKQyvZoFMJWAwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2NjM4NjEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMxMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMP4oTANBgkqhkiG9w0BAQsFAAOCAQEAocXckeGxUIF1fc2l o1qpPIkOZ9yRIjlerSaTTMTfJUOPz/PLYmSWFKKjFB9EEWIJbwvK3a79TyUFa02s 6DzFSwQG9TknGSvwKSRGkf4pU2a1V/gCoz+42R+ppvUNZUiuj4kpNLgTqgUeQTb2 H8Usn7/DF77pE+BjJkCif007q+KXcGvP36FGKEOsIV3AYvr8pk39nRQM+Vcuh9r6 iNq5+PmOgr+EdITen/+dDn59UlDVetqjk8XWu4hEG21d7wJ2E5ICDg0wpoHI5OUp TncRZ+iEti5JenavBHjt4w5rMEM68xdK6pCckAAKizms0xj8+wTeIF0F23O6EfvE vN5mfQ== -----END CERTIFICATE-----Generated at Tue May 12 21:31:55 2026 by rpki-client