$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa File: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (raw, json) Hash identifier: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE= Subject key identifier: 09:DD:AA:B3:5D:EC:A8:1D:E0:B1:91:E3:7C:CF:7E:81:14:00:C2:31 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 7062E260C293C2F59AAAF73736C5DE2766A1BAE6 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa Signing time: Thu 28 May 2026 10:54:04 +0000 ROA not before: Thu 28 May 2026 10:49:04 +0000 ROA not after: Thu 27 May 2027 10:54:04 +0000 asID: 197196 IP address blocks: 2a0f:1cc6:b220::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:62:e2:60:c2:93:c2:f5:9a:aa:f7:37:36:c5:de:27:66:a1:ba:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: May 28 10:49:04 2026 GMT Not After : May 27 10:54:04 2027 GMT Subject: CN=09DDAAB35DECA81DE0B191E37CCF7E811400C231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:d6:08:1d:c2:ab:3c:88:56:c2:b7:5c:82: 40:9b:36:a8:f4:17:6e:53:0b:94:1c:12:8e:4b:03: d2:b0:9f:52:60:8c:6c:d1:1f:0d:c7:17:78:c9:72: eb:78:0a:2e:d9:2e:85:94:8b:c9:a9:1c:0f:1b:24: 52:16:39:2e:15:77:a0:8e:94:89:49:75:2c:1b:25: 15:9b:bc:b7:5c:03:d1:15:9e:da:98:15:9f:11:9d: 56:28:30:90:fc:38:0b:53:e5:64:e4:f5:d9:a4:c4: 77:08:96:8b:d9:9e:94:4e:8c:ac:07:d9:3c:e3:43: b1:78:fc:c5:e9:95:4f:9a:62:b3:60:b8:83:46:b3: b0:7c:e0:c8:ef:93:88:f8:db:f1:9f:a0:b9:20:43: a4:87:3a:49:6d:61:b2:33:63:d6:54:cb:3f:48:5d: 0b:27:18:b5:de:2b:47:f0:40:1a:b1:0d:42:21:c9: 43:6a:a7:c1:5a:27:79:cb:f9:b2:97:09:06:df:66: 4c:87:37:e0:00:69:29:30:da:89:34:49:6d:af:59: 80:2f:8d:ed:06:94:40:31:e9:ae:ba:15:e9:a3:55: de:fc:46:6e:76:c1:0a:25:d0:36:51:5a:20:3a:80: b5:a0:f0:7a:50:f4:23:9f:21:53:31:5d:d0:f2:30: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DD:AA:B3:5D:EC:A8:1D:E0:B1:91:E3:7C:CF:7E:81:14:00:C2:31 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b220::/44 Signature Algorithm: sha256WithRSAEncryption 5e:1d:1c:81:2e:dd:9c:4d:df:1e:27:33:c2:b8:a9:47:cd:c7: 94:2d:c4:85:ca:4c:3e:f4:61:0f:e5:b1:2c:0e:8a:9a:84:9d: a6:4f:c7:87:7a:72:ea:10:aa:7a:9b:b3:25:03:a9:7e:08:9e: 86:4e:e1:b7:b0:19:de:26:7a:1c:2d:52:98:d2:65:1c:de:0a: 56:b9:99:d5:4f:e2:1e:32:3d:e4:72:ce:90:db:6e:dd:20:36: b5:8c:c9:df:63:4d:83:3f:97:db:a5:c5:41:9c:6e:5e:64:0f: a8:1d:d4:56:fd:2b:11:ba:7d:2c:70:5d:5d:c3:4b:a8:2f:43: 45:9c:66:5e:8d:e9:47:09:db:57:cd:d1:75:2d:de:36:1a:e2: 98:ae:cc:c2:ce:1e:88:d7:f2:ef:62:ce:84:79:aa:33:7f:d7: 48:4f:13:97:d2:75:dc:95:ea:bd:ab:96:ae:87:93:e3:1b:60: a4:a7:9a:4b:77:27:5d:67:89:a6:2e:ae:15:32:74:33:be:a6: 19:cc:fc:71:e1:d8:69:ee:69:7a:54:23:5b:7a:84:47:f3:ec: 4b:8a:96:62:73:f3:ed:81:f7:d6:59:19:c1:e1:a8:42:ac:cf: 62:a7:cc:fe:e9:24:6d:cb:ce:2a:5b:01:69:d9:8c:f9:a3:05: 77:cc:9d:8f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcGLiYMKTwvWaqvc3NsXeJ2ahuuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA1MjgxMDQ5MDRaFw0yNzA1MjcxMDU0MDRaMDMxMTAvBgNV BAMTKDA5RERBQUIzNURFQ0E4MURFMEIxOTFFMzdDQ0Y3RTgxMTQwMEMyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitNYIHcKrPIhWwrdcgkCbNqj0 F25TC5QcEo5LA9Kwn1JgjGzRHw3HF3jJcut4Ci7ZLoWUi8mpHA8bJFIWOS4Vd6CO lIlJdSwbJRWbvLdcA9EVntqYFZ8RnVYoMJD8OAtT5WTk9dmkxHcIlovZnpROjKwH 2TzjQ7F4/MXplU+aYrNguINGs7B84Mjvk4j42/GfoLkgQ6SHOkltYbIzY9ZUyz9I XQsnGLXeK0fwQBqxDUIhyUNqp8FaJ3nL+bKXCQbfZkyHN+AAaSkw2ok0SW2vWYAv je0GlEAx6a66FemjVd78Rm52wQol0DZRWiA6gLWg8HpQ9COfIVMxXdDyMOmRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUCd2qs13sqB3gsZHjfM9+gRQAwjEwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzIzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz OTM3MzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrIgMA0GCSqGSIb3DQEBCwUAA4IBAQBe HRyBLt2cTd8eJzPCuKlHzceULcSFykw+9GEP5bEsDoqahJ2mT8eHenLqEKp6m7Ml A6l+CJ6GTuG3sBneJnocLVKY0mUc3gpWuZnVT+IeMj3kcs6Q227dIDa1jMnfY02D P5fbpcVBnG5eZA+oHdRW/SsRun0scF1dw0uoL0NFnGZejelHCdtXzdF1Ld42GuKY rszCzh6I1/LvYs6Eeaozf9dITxOX0nXcleq9q5auh5PjG2Ckp5pLdyddZ4mmLq4V MnQzvqYZzPxx4dhp7ml6VCNbeoRH8+xLipZic/PtgffWWRnB4ahCrM9ip8z+6SRt y84qWwFp2Yz5owV3zJ2P -----END CERTIFICATE-----Generated at Sat Jun 6 12:04:05 2026 by rpki-client