$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/323430363a3834303a653630303a3a2f34342d3438203d3e20313533333736.roa File: 323430363a3834303a653630303a3a2f34342d3438203d3e20313533333736.roa (raw, json) Hash identifier: T+DNXjQMMXpH68tGwE1BkA1mNFVvRXhA5dKMe9sTdUg= Subject key identifier: DD:8A:4E:04:DC:53:85:DC:48:8E:FB:86:11:14:43:A7:F1:80:89:81 Certificate issuer: /CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A Certificate serial: 4DECF383B41C51A451220B93244CB9843E60F0BC Authority key identifier: AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/323430363a3834303a653630303a3a2f34342d3438203d3e20313533333736.roa Signing time: Wed 22 Jul 2026 12:20:52 +0000 ROA not before: Wed 22 Jul 2026 12:15:52 +0000 ROA not after: Wed 21 Jul 2027 12:20:52 +0000 asID: 153376 IP address blocks: 2406:840:e600::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 05:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ec:f3:83:b4:1c:51:a4:51:22:0b:93:24:4c:b9:84:3e:60:f0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABEF0C2BE1BCA726596C21ED132649A7A343041A Validity Not Before: Jul 22 12:15:52 2026 GMT Not After : Jul 21 12:20:52 2027 GMT Subject: CN=DD8A4E04DC5385DC488EFB86111443A7F1808981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:9c:6b:3f:3a:da:0c:eb:75:d8:24:09:ab: 32:a7:18:24:0d:74:78:27:9a:b2:6d:a8:88:38:cc: 8f:4a:41:c7:78:c2:41:c2:66:25:91:65:4d:85:2a: 58:8f:9b:1d:0c:9e:20:47:eb:09:64:ca:09:2b:16: b9:79:5a:2b:67:ec:01:ee:0f:0e:4f:1f:81:58:1a: 6c:db:7e:64:8c:27:1f:42:71:b4:4e:28:9e:25:79: 45:ec:2f:46:66:bd:cd:35:17:cf:cd:5f:c9:d9:1e: 19:ea:a9:1c:10:a5:0c:14:8e:75:eb:16:1d:dd:9a: f6:b6:4a:10:77:b5:60:ab:fa:bd:e6:d9:cb:31:64: 01:39:cb:82:2d:86:37:b0:d1:86:9b:5c:11:82:b6: e8:e2:d7:80:83:b9:14:73:dc:2e:51:c3:a5:44:9b: 15:50:d5:f1:dd:dd:54:12:2e:db:21:6e:11:a3:c1: 05:69:fd:f9:e7:2b:99:e1:7d:45:31:2c:84:77:a3: a8:56:0c:bc:1c:ce:ca:78:55:ac:1a:73:56:95:94: 1e:57:c2:47:e0:8c:17:25:91:fc:d3:84:c9:92:a6: 1a:78:24:7e:99:5c:aa:e0:c9:77:15:e0:be:fb:06: 0b:29:35:df:ff:53:4f:c0:d7:0a:94:0b:9d:3b:6a: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:4E:04:DC:53:85:DC:48:8E:FB:86:11:14:43:A7:F1:80:89:81 X509v3 Authority Key Identifier: keyid:AB:EF:0C:2B:E1:BC:A7:26:59:6C:21:ED:13:26:49:A7:A3:43:04:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/ABEF0C2BE1BCA726596C21ED132649A7A343041A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/ABEF0C2BE1BCA726596C21ED132649A7A343041A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/3/323430363a3834303a653630303a3a2f34342d3438203d3e20313533333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:e600::/44 Signature Algorithm: sha256WithRSAEncryption 18:43:fe:c3:1f:95:ac:ec:af:c5:59:04:de:78:ea:cd:98:38: 7f:ed:0d:df:9e:41:1a:13:82:79:fb:cd:73:c2:0a:c7:2d:4f: de:1a:9d:4f:4a:4d:b4:28:e7:b9:ab:8b:01:0f:79:56:d6:8e: fd:36:58:9f:2b:72:45:bf:a7:af:db:d9:a9:a6:36:30:00:2e: 6f:23:e8:d1:5f:3c:d1:74:e8:7e:a4:0a:1c:c5:86:38:53:17: 63:63:3c:ec:ca:68:8a:76:ec:3e:76:c4:39:0d:40:a4:df:23: a1:28:60:17:de:27:52:6a:c6:e7:dc:13:5d:50:79:1b:fa:60: 15:0f:4a:40:45:b3:2d:9a:d9:34:1a:1e:21:9e:bb:86:92:3c: 64:30:fa:b5:06:58:8e:83:f8:7d:98:9f:68:37:49:d6:40:a7: f1:a2:8c:49:44:05:d3:0d:90:df:05:be:f2:38:73:5d:03:9a: 05:cb:39:f3:ed:6b:c3:d4:a2:fd:d3:9d:48:47:89:a8:45:85: 2f:fd:2f:1a:d7:3b:03:00:d3:ea:0b:86:02:44:58:3a:ea:14: b3:25:aa:94:92:01:1d:7e:2d:3d:a6:c2:ce:cb:07:69:37:30: 7d:ea:fd:8e:d7:01:b4:a7:3c:0a:88:36:8c:1e:ca:34:50:95: 1c:d2:60:e4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUTezzg7QcUaRRIguTJEy5hD5g8LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdB MzQzMDQxQTAeFw0yNjA3MjIxMjE1NTJaFw0yNzA3MjExMjIwNTJaMDMxMTAvBgNV BAMTKEREOEE0RTA0REM1Mzg1REM0ODhFRkI4NjExMTQ0M0E3RjE4MDg5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gJxrPzraDOt12CQJqzKnGCQN dHgnmrJtqIg4zI9KQcd4wkHCZiWRZU2FKliPmx0MniBH6wlkygkrFrl5Witn7AHu Dw5PH4FYGmzbfmSMJx9CcbROKJ4leUXsL0Zmvc01F8/NX8nZHhnqqRwQpQwUjnXr Fh3dmva2ShB3tWCr+r3m2csxZAE5y4Ithjew0YabXBGCtuji14CDuRRz3C5Rw6VE mxVQ1fHd3VQSLtshbhGjwQVp/fnnK5nhfUUxLIR3o6hWDLwczsp4Vawac1aVlB5X wkfgjBclkfzThMmSphp4JH6ZXKrgyXcV4L77BgspNd//U0/A1wqUC507aomrAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU3YpOBNxThdxIjvuGERRDp/GAiYEwHwYDVR0j BBgwFoAUq+8MK+G8pyZZbCHtEyZJp6NDBBowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzMvQUJFRjBDMkJFMUJDQTcyNjU5NkMyMUVEMTMyNjQ5QTdBMzQzMDQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMS9BQkVGMEMyQkUxQkNBNzI2NTk2QzIxRUQx MzI2NDlBN0EzNDMwNDFBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jZjg0ZjJmMi00NjczLTQ0ZTYtYWMyMy03ZmY5NTRhMTAzZjgvMy8zMjM0MzAz NjNhMzgzNDMwM2E2NTM2MzAzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzUz MzMzMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCQGCEDmADANBgkqhkiG9w0BAQsFAAOCAQEAGEP+ wx+VrOyvxVkE3njqzZg4f+0N355BGhOCefvNc8IKxy1P3hqdT0pNtCjnuauLAQ95 VtaO/TZYnytyRb+nr9vZqaY2MAAubyPo0V880XTofqQKHMWGOFMXY2M87Mpoinbs PnbEOQ1ApN8joShgF94nUmrG59wTXVB5G/pgFQ9KQEWzLZrZNBoeIZ67hpI8ZDD6 tQZYjoP4fZifaDdJ1kCn8aKMSUQF0w2Q3wW+8jhzXQOaBcs58+1rw9Si/dOdSEeJ qEWFL/0vGtc7AwDT6guGAkRYOuoUsyWqlJIBHX4tPabCzssHaTcwfer9jtcBtKc8 Cog2jB7KNFCVHNJg5A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:08:11 2026 by rpki-client