$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa File: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (raw, json) Hash identifier: SggrSd58rYWUnF7aoXbJS01Xsn0gasOjLa9BRU+eZog= Subject key identifier: 7F:88:ED:E3:3D:58:DC:E8:9D:D5:0F:E0:82:B2:6A:E7:9E:F1:82:89 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 3D4A8D88E8B0BB04DD6235E4225F2CFC314E3497 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa Signing time: Fri 03 Jul 2026 11:36:13 +0000 ROA not before: Fri 03 Jul 2026 11:31:13 +0000 ROA not after: Fri 02 Jul 2027 11:36:13 +0000 asID: 205463 IP address blocks: 2a0f:85c1:7f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4a:8d:88:e8:b0:bb:04:dd:62:35:e4:22:5f:2c:fc:31:4e:34:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jul 3 11:31:13 2026 GMT Not After : Jul 2 11:36:13 2027 GMT Subject: CN=7F88EDE33D58DCE89DD50FE082B26AE79EF18289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:9a:61:fc:9a:c8:58:cc:eb:46:22:7c:73: 07:8b:a1:67:69:7c:3b:19:95:dd:b9:7e:b6:8e:21: 27:c7:e0:88:88:ee:5f:6d:2b:b3:e5:1d:a9:6e:a3: a1:76:6f:73:ae:3f:2a:70:a4:f5:4b:8e:ba:39:ef: 18:6d:f8:db:78:a8:72:7c:94:fa:b4:36:6f:c4:04: 55:8d:6a:65:eb:34:fe:21:5a:32:70:af:81:fa:61: df:9c:24:aa:9f:bb:c8:3f:97:e6:0a:f1:5e:16:4f: 92:44:9c:b2:73:f4:4c:2b:02:67:63:be:48:03:fe: 23:e5:cf:07:32:19:b7:4a:a9:5a:be:27:5f:4e:52: 71:79:e6:c6:eb:fb:1f:b2:04:2d:47:76:7e:71:7d: dd:fe:c1:25:ee:1d:08:40:8b:ea:f4:67:77:34:8e: c4:00:e8:09:f3:dc:ca:ef:c7:21:50:e2:0c:c7:e0: 84:59:b6:c1:03:b5:65:40:9e:54:1f:be:b7:80:c5: c6:db:fa:2c:2e:ed:ea:20:ba:9e:e9:43:1b:30:8a: 4a:8d:c3:c0:9d:99:3f:e0:ae:00:d9:24:2b:cd:80: 7f:43:8c:2a:fc:b7:98:8e:11:09:47:b3:37:ff:42: 11:05:f0:07:ca:39:3a:55:8e:04:17:5c:cf:98:1b: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:88:ED:E3:3D:58:DC:E8:9D:D5:0F:E0:82:B2:6A:E7:9E:F1:82:89 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f1::/48 Signature Algorithm: sha256WithRSAEncryption 13:b5:56:6e:02:bd:0e:e2:e7:b9:2a:97:ec:21:d9:5a:ed:f8: a4:ce:5a:63:95:83:ec:3f:61:cb:7e:09:c8:80:7f:e6:6b:d4: 6f:57:3f:4c:cc:06:92:f3:5d:d9:fe:24:32:ac:ee:f6:ee:e3: 40:15:6f:ef:fa:e7:ba:8b:4d:5e:1e:3f:56:e6:3f:24:41:44: 7e:27:e0:c7:04:15:1f:3e:ba:19:42:4a:dd:9c:8a:47:13:0a: 76:2a:ef:44:26:75:ee:b5:37:c3:e0:1e:a5:c4:a3:53:d4:e2: d5:cb:d4:a4:09:f4:71:94:85:ba:4f:4a:cd:68:8e:6f:e3:d8: 94:26:88:56:56:e2:ea:da:a9:49:66:26:34:24:0b:34:cd:3b: 27:e8:87:16:ee:ae:11:de:e6:4e:26:f7:af:96:46:16:72:11: 85:c7:bb:59:06:66:7c:01:10:c2:93:5e:ac:e1:64:bf:d4:b4: 5f:a4:68:2d:79:6c:d5:0e:fc:b5:7b:10:20:66:cb:91:64:27: ef:a2:b7:e1:84:2f:e2:f4:a0:c3:38:22:ad:12:93:ab:13:8c: 28:3e:f5:cc:a2:0a:18:89:3d:0f:6f:b9:54:f6:0f:e6:07:56: 30:33:19:1e:3b:3d:b9:46:12:d1:7f:43:4c:4e:cf:85:aa:5c: 24:e4:c5:df -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUPUqNiOiwuwTdYjXkIl8s/DFONJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA3MDMxMTMxMTNaFw0yNzA3MDIxMTM2MTNaMDMxMTAvBgNV BAMTKDdGODhFREUzM0Q1OERDRTg5REQ1MEZFMDgyQjI2QUU3OUVGMTgyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtg5ph/JrIWMzrRiJ8cweLoWdp fDsZld25fraOISfH4IiI7l9tK7PlHaluo6F2b3OuPypwpPVLjro57xht+Nt4qHJ8 lPq0Nm/EBFWNamXrNP4hWjJwr4H6Yd+cJKqfu8g/l+YK8V4WT5JEnLJz9EwrAmdj vkgD/iPlzwcyGbdKqVq+J19OUnF55sbr+x+yBC1Hdn5xfd3+wSXuHQhAi+r0Z3c0 jsQA6Anz3MrvxyFQ4gzH4IRZtsEDtWVAnlQfvreAxcbb+iwu7eogup7pQxswikqN w8CdmT/grgDZJCvNgH9DjCr8t5iOEQlHszf/QhEF8AfKOTpVjgQXXM+YG6m3AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUf4jt4z1Y3Oid1Q/ggrJq557xgokwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NTM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH8TANBgkqhkiG9w0BAQsFAAOCAQEAE7VW bgK9DuLnuSqX7CHZWu34pM5aY5WD7D9hy34JyIB/5mvUb1c/TMwGkvNd2f4kMqzu 9u7jQBVv7/rnuotNXh4/VuY/JEFEfifgxwQVHz66GUJK3ZyKRxMKdirvRCZ17rU3 w+AepcSjU9Ti1cvUpAn0cZSFuk9KzWiOb+PYlCaIVlbi6tqpSWYmNCQLNM07J+iH Fu6uEd7mTib3r5ZGFnIRhce7WQZmfAEQwpNerOFkv9S0X6RoLXls1Q78tXsQIGbL kWQn76K34YQv4vSgwzgirRKTqxOMKD71zKIKGIk9D2+5VPYP5gdWMDMZHjs9uUYS 0X9DTE7PhapcJOTF3w== -----END CERTIFICATE-----Generated at Fri Jul 24 01:45:36 2026 by rpki-client