$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa File: 326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa (raw, json) Hash identifier: PxxBGQ7SipAzWoOzhhkRsumojkCUT+Er192+snUK4gs= Subject key identifier: 8A:38:DD:2F:01:0F:19:79:D7:9E:42:BA:63:D2:4C:90:0B:1E:5C:7D Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Certificate serial: 6328A5D1F339C4B01C7BFAF78C46FA2A86EEBDB9 Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa Signing time: Sat 23 May 2026 16:51:00 +0000 ROA not before: Sat 23 May 2026 16:46:00 +0000 ROA not after: Sat 22 May 2027 16:51:00 +0000 asID: 205941 IP address blocks: 2a13:c8c4:f500::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 12:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:28:a5:d1:f3:39:c4:b0:1c:7b:fa:f7:8c:46:fa:2a:86:ee:bd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411 Validity Not Before: May 23 16:46:00 2026 GMT Not After : May 22 16:51:00 2027 GMT Subject: CN=8A38DD2F010F1979D79E42BA63D24C900B1E5C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:21:a4:6b:ec:02:d3:88:eb:b7:04:19:13: e0:77:ab:ab:7b:2c:ad:18:ee:2d:2c:d3:fa:23:5a: 0e:e7:76:87:90:ef:fe:9b:0e:f1:8e:3a:12:0a:33: c1:ad:14:e8:b9:f3:b7:c8:ee:8a:59:96:00:88:d7: e7:09:0a:ba:c0:e3:1c:61:72:40:9d:1e:a3:2d:49: a3:9c:60:a9:12:d1:17:95:cc:17:d7:44:c0:e0:a0: a8:11:1d:d1:fb:20:f6:73:2e:34:45:cb:a8:7c:69: 8c:2b:26:60:06:70:51:c1:27:2f:65:49:17:55:91: c6:06:86:28:7e:86:1d:19:68:86:9d:c9:0b:2e:e2: 51:18:66:9a:66:30:64:4e:84:9d:e0:8c:d5:7a:1d: 63:a8:a9:59:79:3f:af:7e:85:2a:aa:70:d8:b0:5b: c7:2c:4f:48:f2:b9:a2:df:8b:00:e1:91:82:c8:f9: 8e:ed:02:7a:90:bf:f0:71:3d:0d:72:5f:eb:eb:4d: 53:87:97:83:27:42:ef:03:70:d0:f3:12:7c:80:e9: 97:f0:09:16:01:03:18:54:8c:d1:95:48:cf:cb:04: 79:fa:92:0f:7f:70:c4:71:15:3a:08:dc:35:ea:11: b4:ac:de:a7:2a:49:64:99:a1:e0:5c:55:6d:40:3d: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:38:DD:2F:01:0F:19:79:D7:9E:42:BA:63:D2:4C:90:0B:1E:5C:7D X509v3 Authority Key Identifier: keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:f500::/40 Signature Algorithm: sha256WithRSAEncryption b3:4a:b5:e0:e2:65:2e:70:5c:8b:b6:10:88:10:5e:e0:5a:74: 7d:18:58:38:32:f9:cb:cd:87:49:c8:62:40:6f:7a:84:01:b3: 09:27:a0:15:9e:ea:44:2e:a2:79:f2:97:4c:f2:72:98:14:e4: 39:47:5b:d3:80:00:8b:09:92:39:cd:c8:24:8a:57:87:a4:06: e6:25:38:e2:ee:e8:13:03:88:d5:5f:61:a2:9b:cc:39:02:c8: fd:65:94:dd:0d:30:64:1a:bf:c4:96:c5:f1:10:c0:6e:1b:32: 55:4a:e9:94:42:c5:c4:7a:e5:fd:95:fe:e7:dc:7a:bb:61:d3: 67:93:46:00:b4:73:ab:ca:34:04:4f:c6:d0:61:41:69:a7:a3: c7:f2:44:31:7e:68:4b:6f:21:c8:25:95:76:1d:1d:54:a3:c3: b7:6a:02:95:7c:98:16:ff:7b:fd:99:88:eb:cc:c5:d0:cb:63: 88:de:ef:52:82:fa:a4:1c:6c:2f:54:e0:9a:bd:3c:ee:64:5c: d7:c2:e9:30:d6:2f:af:48:31:c6:8f:1f:97:65:5f:31:73:e4: de:46:79:96:20:fc:cd:46:16:43:15:c7:62:8a:7e:ba:8f:a5: c5:82:9b:f3:1a:84:8e:06:0b:48:0f:bb:56:c1:2a:f6:45:e0: f4:d8:62:7d -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUYyil0fM5xLAce/r3jEb6KobuvbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB NTVGQTQxMTAeFw0yNjA1MjMxNjQ2MDBaFw0yNzA1MjIxNjUxMDBaMDMxMTAvBgNV BAMTKDhBMzhERDJGMDEwRjE5NzlENzlFNDJCQTYzRDI0QzkwMEIxRTVDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9siGka+wC04jrtwQZE+B3q6t7 LK0Y7i0s0/ojWg7ndoeQ7/6bDvGOOhIKM8GtFOi587fI7opZlgCI1+cJCrrA4xxh ckCdHqMtSaOcYKkS0ReVzBfXRMDgoKgRHdH7IPZzLjRFy6h8aYwrJmAGcFHBJy9l SRdVkcYGhih+hh0ZaIadyQsu4lEYZppmMGROhJ3gjNV6HWOoqVl5P69+hSqqcNiw W8csT0jyuaLfiwDhkYLI+Y7tAnqQv/BxPQ1yX+vrTVOHl4MnQu8DcNDzEnyA6Zfw CRYBAxhUjNGVSM/LBHn6kg9/cMRxFToI3DXqEbSs3qcqSWSZoeBcVW1APW4zAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUijjdLwEPGXnXnkK6Y9JMkAseXH0wHwYDVR0j BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5 NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1 NzM5MjhEMkE1NUZBNDExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMDJmOGVlNi1hYmU3LTRhZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS8zMjYxMzEz MzNhNjMzODYzMzQzYTY2MzUzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNlMjAz MjMwMzUzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8jE9TANBgkqhkiG9w0BAQsFAAOCAQEA s0q14OJlLnBci7YQiBBe4Fp0fRhYODL5y82HSchiQG96hAGzCSegFZ7qRC6iefKX TPJymBTkOUdb04AAiwmSOc3IJIpXh6QG5iU44u7oEwOI1V9hopvMOQLI/WWU3Q0w ZBq/xJbF8RDAbhsyVUrplELFxHrl/ZX+59x6u2HTZ5NGALRzq8o0BE/G0GFBaaej x/JEMX5oS28hyCWVdh0dVKPDt2oClXyYFv97/ZmI68zF0MtjiN7vUoL6pBxsL1Tg mr087mRc18LpMNYvr0gxxo8fl2VfMXPk3kZ5liD8zUYWQxXHYop+uo+lxYKb8xqE jgYLSA+7VsEq9kXg9NhifQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:25:00 2026 by rpki-client