$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: h3VcKI8rQsN3JtAe6OwHMHeBRW3aUtosh0JU525Pq4c= Subject key identifier: B9:81:BE:FB:66:52:5B:41:C6:FC:FF:18:5B:F1:7E:F8:F5:99:5D:C5 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2F6FD6CC05C43D3D59ADE1A2B598D7A723C0FBCB Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa Signing time: Fri 03 Jul 2026 11:36:13 +0000 ROA not before: Fri 03 Jul 2026 11:31:13 +0000 ROA not after: Fri 02 Jul 2027 11:36:13 +0000 asID: 215242 IP address blocks: 2a0f:85c1:3a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6f:d6:cc:05:c4:3d:3d:59:ad:e1:a2:b5:98:d7:a7:23:c0:fb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jul 3 11:31:13 2026 GMT Not After : Jul 2 11:36:13 2027 GMT Subject: CN=B981BEFB66525B41C6FCFF185BF17EF8F5995DC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:e7:86:23:e8:c6:4e:7c:53:7e:61:4a:70: 44:89:20:60:d5:36:3f:81:32:d4:29:5a:8d:21:8e: e9:5d:c4:3c:6e:d1:43:0f:94:33:84:e0:c6:32:56: 93:c7:71:72:1e:95:a0:42:b3:ce:08:a7:99:c2:4b: b5:ac:7f:59:42:82:c0:50:d7:3e:c4:f5:e3:88:c9: a1:00:23:6b:19:06:c1:f4:ae:39:e2:a4:61:74:c9: d0:cd:38:f7:85:93:7a:90:2b:6d:f3:00:27:a4:a7: 95:af:83:4d:d4:03:28:d0:b1:46:73:08:39:68:b9: b6:0f:b9:5f:1c:d1:44:96:3a:b1:9e:bd:a3:1a:ed: 09:e5:f9:78:19:55:2e:10:6e:8c:dc:93:5c:85:c2: c8:25:c0:b6:33:36:b7:2d:23:7b:bc:df:75:58:66: 45:f1:8f:4c:96:e0:77:72:96:12:2b:db:3e:59:3c: ae:24:c3:15:9a:18:06:54:1e:cf:e7:5e:3d:bf:27: 2e:8e:59:82:79:ba:93:94:ae:6e:ac:25:72:51:98: d8:bb:ad:43:4a:9b:69:8e:60:eb:95:5b:29:31:de: 6d:df:c5:93:78:75:07:d0:b8:d2:ec:5a:1e:d5:c2: 15:35:87:9e:b9:bd:ce:4c:52:09:63:d0:31:67:ba: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:81:BE:FB:66:52:5B:41:C6:FC:FF:18:5B:F1:7E:F8:F5:99:5D:C5 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:3a2::/48 Signature Algorithm: sha256WithRSAEncryption 25:67:d1:b9:4b:a1:b2:49:c7:10:dc:8d:d0:15:5c:1e:56:cb: de:43:4c:99:c4:5e:74:e3:d0:4a:e4:9d:fd:e8:aa:38:0f:c8: 6b:de:08:aa:0c:2d:5a:cb:6a:86:c9:7f:ef:29:a6:84:86:d8: f3:c7:bb:e9:78:74:ff:9a:6d:ac:83:f3:52:f5:41:f4:54:d1: 27:90:c9:80:91:30:c7:c4:b8:c8:04:40:67:84:44:1e:2f:32: 72:1f:7e:3c:52:c5:e9:78:aa:24:03:f4:05:55:27:99:24:14: 8b:23:17:49:3a:59:d8:e9:f8:17:8f:4c:f3:fc:b6:cc:29:0d: 65:70:34:b8:56:8a:f8:2e:be:80:90:5c:d7:7f:a5:2e:2d:3a: ea:6b:ac:f6:f8:5b:95:6b:f3:b8:69:14:37:30:69:79:ac:7b: 18:c3:4a:99:1e:5b:18:23:84:8c:09:9a:e3:b2:ad:da:2f:f5: 9a:0e:b5:8f:4f:c5:6c:a5:a6:8c:16:b6:ca:c5:e7:bc:05:3a: 40:21:9b:be:4a:0c:25:bd:e1:66:80:c0:9c:52:17:68:36:7b: 3d:ba:91:44:d4:7b:1f:d6:98:c6:98:0f:4d:c5:de:dd:99:d1: 65:52:84:8d:af:40:a5:b5:5c:b9:c1:1f:4d:fa:cd:1e:63:7f: 77:c3:3c:a3 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUL2/WzAXEPT1ZreGitZjXpyPA+8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA3MDMxMTMxMTNaFw0yNzA3MDIxMTM2MTNaMDMxMTAvBgNV BAMTKEI5ODFCRUZCNjY1MjVCNDFDNkZDRkYxODVCRjE3RUY4RjU5OTVEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZ+eGI+jGTnxTfmFKcESJIGDV Nj+BMtQpWo0hjuldxDxu0UMPlDOE4MYyVpPHcXIelaBCs84Ip5nCS7Wsf1lCgsBQ 1z7E9eOIyaEAI2sZBsH0rjnipGF0ydDNOPeFk3qQK23zACekp5Wvg03UAyjQsUZz CDloubYPuV8c0USWOrGevaMa7Qnl+XgZVS4Qbozck1yFwsglwLYzNrctI3u833VY ZkXxj0yW4HdylhIr2z5ZPK4kwxWaGAZUHs/nXj2/Jy6OWYJ5upOUrm6sJXJRmNi7 rUNKm2mOYOuVWykx3m3fxZN4dQfQuNLsWh7VwhU1h565vc5MUglj0DFnuiExAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUuYG++2ZSW0HG/P8YW/F++PWZXcUwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzNjEzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDojANBgkqhkiG9w0BAQsFAAOCAQEAJWfR uUuhsknHENyN0BVcHlbL3kNMmcRedOPQSuSd/eiqOA/Ia94IqgwtWstqhsl/7ymm hIbY88e76Xh0/5ptrIPzUvVB9FTRJ5DJgJEwx8S4yARAZ4REHi8ych9+PFLF6Xiq JAP0BVUnmSQUiyMXSTpZ2On4F49M8/y2zCkNZXA0uFaK+C6+gJBc13+lLi066mus 9vhblWvzuGkUNzBpeax7GMNKmR5bGCOEjAma47Kt2i/1mg61j0/FbKWmjBa2ysXn vAU6QCGbvkoMJb3hZoDAnFIXaDZ7PbqRRNR7H9aYxpgPTcXe3ZnRZVKEja9ApbVc ucEfTfrNHmN/d8M8ow== -----END CERTIFICATE-----Generated at Fri Jul 24 10:08:11 2026 by rpki-client