$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: n+Ls1jXfWmBHifONKmtp9H1RDvGnEsrCqesBPgQc1ow= Subject key identifier: 9C:6A:93:AA:79:EF:AF:08:13:76:2C:7B:B4:5A:E0:25:03:CD:DF:07 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 3C13B32AD1E8287CB1F654434DC73BB2FFF97D24 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa Signing time: Fri 03 Jul 2026 11:36:13 +0000 ROA not before: Fri 03 Jul 2026 11:31:13 +0000 ROA not after: Fri 02 Jul 2027 11:36:13 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:13:b3:2a:d1:e8:28:7c:b1:f6:54:43:4d:c7:3b:b2:ff:f9:7d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jul 3 11:31:13 2026 GMT Not After : Jul 2 11:36:13 2027 GMT Subject: CN=9C6A93AA79EFAF0813762C7BB45AE02503CDDF07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:ed:75:37:a7:da:a5:55:77:c0:6e:4c:64: bf:05:7b:c2:03:25:a3:a8:b6:e6:47:4b:56:12:ec: da:01:01:66:2c:13:56:8e:c6:30:44:38:a3:cd:b9: 53:9f:67:74:03:19:f5:b2:ea:05:f9:df:f6:c7:85: b5:6a:b3:73:f2:70:12:3d:b4:d6:b2:aa:9a:88:a0: ec:47:da:23:2f:30:43:08:f2:db:80:86:d7:59:93: 05:3c:f0:1f:2b:b2:8b:5a:12:44:48:4b:ab:31:95: a5:55:b1:63:4e:5f:d2:8d:7e:d1:65:7c:94:3e:4c: ca:84:35:04:e4:21:80:c4:ae:8c:29:e4:c7:f2:0e: 05:a4:91:e0:a3:d0:35:e1:5c:ea:ab:2e:95:d8:b0: 8d:65:86:57:3c:9b:9f:7b:83:c5:34:8c:be:20:0a: 51:7e:28:dd:d6:10:6a:2b:e5:0c:c8:34:71:ea:98: 11:b6:58:8b:f0:ac:18:78:df:86:89:51:11:f8:42: 83:53:01:33:f3:2f:71:c1:73:55:24:f6:54:c0:9c: c7:ba:c3:af:d8:d7:6f:90:d9:64:a3:c6:e6:d9:39: 6e:22:12:8f:5a:d1:8a:0d:3b:50:a2:17:16:5b:f6: 63:a9:a8:02:d4:73:d9:d4:01:58:40:71:f8:c0:74: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6A:93:AA:79:EF:AF:08:13:76:2C:7B:B4:5A:E0:25:03:CD:DF:07 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f4::/48 Signature Algorithm: sha256WithRSAEncryption 72:64:0b:54:66:33:48:8a:5f:f2:19:0c:4e:b4:cb:c6:16:01: 41:3b:75:fb:23:fc:19:87:49:0e:15:18:dd:f8:b9:22:50:4d: e7:81:58:a3:ba:4b:b6:6c:2f:2a:5c:d3:02:2b:30:9f:d8:74: 65:92:b3:9d:22:98:01:ff:0c:8b:39:8d:2a:81:45:a5:e2:97: ec:12:1d:a1:bc:04:0e:90:ec:2f:14:32:b8:99:f9:a1:a5:2c: 6b:34:83:72:ef:df:04:fc:d1:e9:ec:38:db:5b:33:d5:56:9e: df:f7:9f:16:88:fd:22:b8:9d:b6:4a:f0:60:4c:5c:6e:ee:85: e5:61:cc:39:1c:e0:ee:66:77:80:f5:b1:c1:3d:92:8b:3a:c3: f8:9f:3e:83:93:4f:d1:78:34:4a:c1:1b:f9:90:1b:d9:a4:c6: c7:03:b3:bd:ec:9e:55:88:24:f4:0e:85:0c:25:ab:d3:c3:17: 05:3c:55:2f:43:93:1e:6e:dc:3a:d8:a4:b7:15:83:6f:45:a9: b7:41:22:4a:df:26:9a:0a:2c:37:d4:28:06:39:5e:8b:7c:79: 66:a6:07:42:b5:4a:9e:65:b0:16:af:69:4c:8f:29:94:7a:f0: 14:40:02:c9:c5:ec:ad:62:02:75:03:be:6b:bd:18:40:16:54: 53:01:73:8a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUPBOzKtHoKHyx9lRDTcc7sv/5fSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjA3MDMxMTMxMTNaFw0yNzA3MDIxMTM2MTNaMDMxMTAvBgNV BAMTKDlDNkE5M0FBNzlFRkFGMDgxMzc2MkM3QkI0NUFFMDI1MDNDRERGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+u11N6fapVV3wG5MZL8Fe8ID JaOotuZHS1YS7NoBAWYsE1aOxjBEOKPNuVOfZ3QDGfWy6gX53/bHhbVqs3PycBI9 tNayqpqIoOxH2iMvMEMI8tuAhtdZkwU88B8rsotaEkRIS6sxlaVVsWNOX9KNftFl fJQ+TMqENQTkIYDErowp5MfyDgWkkeCj0DXhXOqrLpXYsI1lhlc8m597g8U0jL4g ClF+KN3WEGor5QzINHHqmBG2WIvwrBh434aJURH4QoNTATPzL3HBc1Uk9lTAnMe6 w6/Y12+Q2WSjxubZOW4iEo9a0YoNO1CiFxZb9mOpqALUc9nUAVhAcfjAdDP1AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUnGqTqnnvrwgTdix7tFrgJQPN3wcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH9DANBgkqhkiG9w0BAQsFAAOCAQEAcmQL VGYzSIpf8hkMTrTLxhYBQTt1+yP8GYdJDhUY3fi5IlBN54FYo7pLtmwvKlzTAisw n9h0ZZKznSKYAf8MizmNKoFFpeKX7BIdobwEDpDsLxQyuJn5oaUsazSDcu/fBPzR 6ew421sz1Vae3/efFoj9IridtkrwYExcbu6F5WHMORzg7mZ3gPWxwT2SizrD+J8+ g5NP0Xg0SsEb+ZAb2aTGxwOzveyeVYgk9A6FDCWr08MXBTxVL0OTHm7cOtiktxWD b0Wpt0EiSt8mmgosN9QoBjlei3x5ZqYHQrVKnmWwFq9pTI8plHrwFEACycXsrWIC dQO+a70YQBZUUwFzig== -----END CERTIFICATE-----Generated at Fri Jul 24 05:54:57 2026 by rpki-client