$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa File: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (raw, json) Hash identifier: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8= Subject key identifier: E8:88:F7:4D:B5:D8:10:73:7D:49:7C:C5:12:8A:9E:68:EA:66:90:93 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 0625BE16D4A2299891AF92068EDF723C79311FF1 Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa Signing time: Mon 29 Jun 2026 10:04:10 +0000 ROA not before: Mon 29 Jun 2026 09:59:10 +0000 ROA not after: Mon 28 Jun 2027 10:04:10 +0000 asID: 219324 IP address blocks: 2a0f:1cc6:b230::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:25:be:16:d4:a2:29:98:91:af:92:06:8e:df:72:3c:79:31:1f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Jun 29 09:59:10 2026 GMT Not After : Jun 28 10:04:10 2027 GMT Subject: CN=E888F74DB5D810737D497CC5128A9E68EA669093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:c9:2a:76:a5:bb:e1:ee:83:36:e0:99:2a: 7e:1d:f2:85:fe:42:f7:41:50:3b:0a:fa:ee:69:90: aa:d2:a9:11:ab:88:69:9f:73:8c:ee:9f:95:61:92: fe:e2:36:cd:d5:9d:93:e9:e4:20:3f:b6:2b:26:a7: ef:57:f5:2e:8f:0e:4d:4a:13:31:40:e0:0a:3c:1b: 5f:10:de:50:25:73:68:61:ea:75:b4:33:52:5d:71: bf:5c:cf:ab:e6:71:1c:7b:bb:79:1a:01:46:9f:2e: e9:44:73:39:d9:3d:fa:5b:72:a3:fe:2d:58:e9:ad: 2b:d2:8c:96:98:7c:b1:a5:7e:12:c0:65:9b:ee:c6: 58:b1:98:24:2c:db:33:57:64:70:9d:91:b8:9f:7e: 71:8a:8e:a0:b6:24:91:95:36:bf:21:3d:13:a1:44: 9e:83:38:5e:0c:ea:6f:3a:b1:7a:31:d0:2b:bd:83: 34:59:3c:b5:2d:ed:00:89:5e:46:2c:e2:ca:5d:d2: 8d:3f:22:c0:01:ef:fc:4a:b9:88:9f:80:ab:52:20: 6d:db:40:d5:d2:1e:3c:97:3a:59:67:89:65:43:5e: 58:48:92:37:e5:38:6d:fc:1b:16:31:b2:14:78:02: 44:62:9d:2e:3e:82:7e:e6:6f:c9:ca:21:07:1e:4b: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:88:F7:4D:B5:D8:10:73:7D:49:7C:C5:12:8A:9E:68:EA:66:90:93 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b230::/44 Signature Algorithm: sha256WithRSAEncryption 8a:b1:a0:b6:39:d5:08:6c:7b:df:62:94:26:d1:ef:e9:00:8c: 69:a2:e1:14:1a:0f:b1:50:11:b9:1a:3d:19:43:fd:93:97:84: 1b:3b:ce:50:ae:a4:73:92:90:e2:2b:da:9c:b4:b1:a5:09:e5: cf:b0:13:74:c2:5f:9d:cb:10:4a:9f:02:37:4d:04:3a:6d:2b: 4b:e7:fb:79:73:03:d1:7a:b1:d0:fe:05:50:de:e6:ed:7e:eb: e1:0b:f1:f5:79:41:5c:8f:99:dd:5e:b5:cf:35:f4:c3:35:29: d8:26:10:2a:fe:f3:77:f3:2b:61:36:86:33:a1:be:3c:15:dd: 54:59:25:af:ad:47:47:ad:35:35:5b:3d:d2:56:74:7f:ce:31: f3:89:aa:25:94:ca:f7:a3:fc:a1:bc:81:c2:2c:41:f7:ed:57: 4e:89:04:d7:dc:0e:1e:82:9c:0f:2e:69:78:ee:a1:09:79:6b: 1a:fa:2c:1a:55:8e:13:78:94:e3:09:99:1a:80:6a:13:2d:c2: 63:47:5e:3e:6e:93:f0:36:07:70:fb:78:e8:d3:d2:82:55:12: a3:dd:d2:90:04:c5:87:22:87:63:e0:82:0d:25:e6:69:e8:97: c3:5c:2e:be:6d:83:78:b1:41:8a:63:6c:6a:75:03:e6:28:d5: 93:f9:5a:88 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUBiW+FtSiKZiRr5IGjt9yPHkxH/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA2MjkwOTU5MTBaFw0yNzA2MjgxMDA0MTBaMDMxMTAvBgNV BAMTKEU4ODhGNzREQjVEODEwNzM3RDQ5N0NDNTEyOEE5RTY4RUE2NjkwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFskqdqW74e6DNuCZKn4d8oX+ QvdBUDsK+u5pkKrSqRGriGmfc4zun5Vhkv7iNs3VnZPp5CA/tismp+9X9S6PDk1K EzFA4Ao8G18Q3lAlc2hh6nW0M1Jdcb9cz6vmcRx7u3kaAUafLulEcznZPfpbcqP+ LVjprSvSjJaYfLGlfhLAZZvuxlixmCQs2zNXZHCdkbiffnGKjqC2JJGVNr8hPROh RJ6DOF4M6m86sXox0Cu9gzRZPLUt7QCJXkYs4spd0o0/IsAB7/xKuYifgKtSIG3b QNXSHjyXOllniWVDXlhIkjflOG38GxYxshR4AkRinS4+gn7mb8nKIQceS2LfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6Ij3TbXYEHN9SXzFEoqeaOpmkJMwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzIzMzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM5MzMzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrIwMA0GCSqGSIb3DQEBCwUAA4IBAQCK saC2OdUIbHvfYpQm0e/pAIxpouEUGg+xUBG5Gj0ZQ/2Tl4QbO85QrqRzkpDiK9qc tLGlCeXPsBN0wl+dyxBKnwI3TQQ6bStL5/t5cwPRerHQ/gVQ3ubtfuvhC/H1eUFc j5ndXrXPNfTDNSnYJhAq/vN38ythNoYzob48Fd1UWSWvrUdHrTU1Wz3SVnR/zjHz iaollMr3o/yhvIHCLEH37VdOiQTX3A4egpwPLml47qEJeWsa+iwaVY4TeJTjCZka gGoTLcJjR14+bpPwNgdw+3jo09KCVRKj3dKQBMWHIodj4IINJeZp6JfDXC6+bYN4 sUGKY2xqdQPmKNWT+VqI -----END CERTIFICATE-----Generated at Tue Jul 21 23:09:14 2026 by rpki-client