$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa File: 326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa (raw, json) Hash identifier: My6Ab96b5F0+JldNWozhK3m+60cIdrnbbGOkb8nRtmc= Subject key identifier: E0:90:B2:E8:35:64:53:C3:8E:44:19:E5:77:B5:AC:F4:B5:2A:D1:E5 Certificate issuer: /CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5 Certificate serial: 6ECFA5C0A05EF3113DEF6072A251E8800B65D491 Authority key identifier: 09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa Signing time: Wed 15 Jul 2026 22:57:51 +0000 ROA not before: Wed 15 Jul 2026 22:52:51 +0000 ROA not after: Wed 14 Jul 2027 22:57:51 +0000 asID: 214556 IP address blocks: 2a13:c8c4:bf00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cf:a5:c0:a0:5e:f3:11:3d:ef:60:72:a2:51:e8:80:0b:65:d4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09FD34FF6836F9DD01AC7FDF357840C752BB91A5 Validity Not Before: Jul 15 22:52:51 2026 GMT Not After : Jul 14 22:57:51 2027 GMT Subject: CN=E090B2E8356453C38E4419E577B5ACF4B52AD1E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:a5:16:cc:e0:3a:a2:27:09:ab:c8:c4:70: d1:20:ce:cf:2b:f5:51:49:d4:87:99:9a:cb:ef:2a: e4:05:60:c8:4e:47:8a:65:d1:ec:64:95:28:9e:9b: 20:3c:0c:be:13:a2:77:5e:6d:5f:5e:0e:b2:92:7f: 4a:72:cb:a3:5b:25:65:43:f7:0e:e5:e6:29:a2:3f: 38:4c:f9:17:bd:48:40:33:dd:4c:d1:7a:29:1b:42: 78:dd:56:d3:58:02:28:8b:05:72:47:cd:45:74:9e: 71:9d:38:fe:06:76:9f:6f:3e:37:a4:0a:a6:7a:b7: d0:c4:5f:cf:67:3c:64:3f:4c:ed:68:03:94:71:34: 58:47:1a:7e:31:b7:ca:7a:28:8c:bb:3e:d6:e1:79: bd:3f:e5:62:36:60:f3:2a:2b:72:87:7c:8e:76:03: 68:88:7e:81:18:5b:72:9a:10:a0:15:71:74:23:c7: 90:fa:76:99:df:7b:cb:cd:45:85:7d:26:48:2d:6f: 0e:cd:e8:4d:d5:5e:ac:7e:4f:e9:29:c2:d4:98:9a: 42:8f:0e:94:27:cb:84:60:1e:19:5c:67:00:ab:13: 4c:10:a5:7e:b8:04:96:c9:3e:81:4d:bd:2c:9c:9a: ae:ef:93:c7:49:e2:18:31:bc:79:d3:8e:76:0f:d0: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:90:B2:E8:35:64:53:C3:8E:44:19:E5:77:B5:AC:F4:B5:2A:D1:E5 X509v3 Authority Key Identifier: keyid:09:FD:34:FF:68:36:F9:DD:01:AC:7F:DF:35:78:40:C7:52:BB:91:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/09FD34FF6836F9DD01AC7FDF357840C752BB91A5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/2/326131333a633863343a626630303a3a2f34302d3430203d3e20323134353536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:bf00::/40 Signature Algorithm: sha256WithRSAEncryption 9f:46:e3:60:af:f9:c5:5f:f8:4b:c4:40:c9:ee:53:b5:43:dd: d7:81:06:9c:9d:7a:fe:2e:64:ec:97:90:15:a1:aa:15:c9:b9: 4a:bf:20:40:9f:d1:6d:1f:78:b8:23:b6:84:77:bf:99:8f:cb: a8:70:1f:89:e0:30:4a:a3:ca:60:41:09:79:4e:ee:8b:b2:a1: 1e:5c:4e:99:ed:17:e9:23:ea:f7:63:15:80:43:4b:4f:20:2e: 0c:32:d4:4b:76:90:07:cb:1e:d3:ce:bf:1b:a0:09:62:4b:8d: a8:ee:5b:47:f5:6f:65:1b:91:c5:c9:67:47:3b:8e:9a:27:5e: 49:b8:c3:0c:1f:11:0b:eb:53:a4:71:5a:d4:b6:65:f2:d3:65: 3c:cd:db:68:09:55:d9:d5:ec:47:4c:9f:fc:f4:8e:9a:17:f1: c6:da:57:2d:47:c6:7d:81:f1:87:c8:bf:6e:31:f5:b6:f6:40: 4c:07:b5:f5:ac:1e:0b:d6:80:63:8f:03:2c:a6:3b:53:ee:b7: 07:96:68:61:9b:cd:4a:26:e9:ce:8f:55:e6:e4:28:5b:38:9a: fe:69:1e:2e:f4:1b:0b:d0:e8:8e:6f:36:40:6a:21:bc:9a:59: d0:1a:5f:93:41:73:2e:b3:29:38:af:fb:9c:03:cd:75:35:25: bd:95:a4:95 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUbs+lwKBe8xE972ByolHogAtl1JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1 MkJCOTFBNTAeFw0yNjA3MTUyMjUyNTFaFw0yNzA3MTQyMjU3NTFaMDMxMTAvBgNV BAMTKEUwOTBCMkU4MzU2NDUzQzM4RTQ0MTlFNTc3QjVBQ0Y0QjUyQUQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX6UWzOA6oicJq8jEcNEgzs8r 9VFJ1IeZmsvvKuQFYMhOR4pl0exklSiemyA8DL4TondebV9eDrKSf0pyy6NbJWVD 9w7l5imiPzhM+Re9SEAz3UzReikbQnjdVtNYAiiLBXJHzUV0nnGdOP4Gdp9vPjek CqZ6t9DEX89nPGQ/TO1oA5RxNFhHGn4xt8p6KIy7Ptbheb0/5WI2YPMqK3KHfI52 A2iIfoEYW3KaEKAVcXQjx5D6dpnfe8vNRYV9Jkgtbw7N6E3VXqx+T+kpwtSYmkKP DpQny4RgHhlcZwCrE0wQpX64BJbJPoFNvSycmq7vk8dJ4hgxvHnTjnYP0FgdAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU4JCy6DVkU8OORBnld7Ws9LUq0eUwHwYDVR0j BBgwFoAUCf00/2g2+d0BrH/fNXhAx1K7kaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2JhNTAxZmEtNTlmMC00MDI3LWFlNDAtZmQ1MjU2Mzg5 YzI4LzIvMDlGRDM0RkY2ODM2RjlERDAxQUM3RkRGMzU3ODQwQzc1MkJCOTFBNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8wOUZEMzRGRjY4MzZGOUREMDFBQzdGREYz NTc4NDBDNzUyQkI5MUE1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jYmE1MDFmYS01OWYwLTQwMjctYWU0MC1mZDUyNTYzODljMjgvMi8zMjYxMzEz MzNhNjMzODYzMzQzYTYyNjYzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MTM0MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhPIxL8wDQYJKoZIhvcNAQELBQADggEBAJ9G 42Cv+cVf+EvEQMnuU7VD3deBBpydev4uZOyXkBWhqhXJuUq/IECf0W0feLgjtoR3 v5mPy6hwH4ngMEqjymBBCXlO7ouyoR5cTpntF+kj6vdjFYBDS08gLgwy1Et2kAfL HtPOvxugCWJLjajuW0f1b2UbkcXJZ0c7jponXkm4wwwfEQvrU6RxWtS2ZfLTZTzN 22gJVdnV7EdMn/z0jpoX8cbaVy1Hxn2B8YfIv24x9bb2QEwHtfWsHgvWgGOPAyym O1PutweWaGGbzUom6c6PVebkKFs4mv5pHi70GwvQ6I5vNkBqIbyaWdAaX5NBcy6z KTiv+5wDzXU1Jb2VpJU= -----END CERTIFICATE-----Generated at Fri Jul 24 12:56:26 2026 by rpki-client