$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa File: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (raw, json) Hash identifier: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk= Subject key identifier: F0:A2:81:70:F1:5B:08:56:E3:DC:11:72:DF:69:54:FE:D2:99:E0:72 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 663E7895B208C9C7FA1A461728A62FF52B1FD7FB Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa Signing time: Sat 04 Jul 2026 10:56:41 +0000 ROA not before: Sat 04 Jul 2026 10:51:41 +0000 ROA not after: Sat 03 Jul 2027 10:56:41 +0000 asID: 219289 IP address blocks: 2a0f:1cc6:b240::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3e:78:95:b2:08:c9:c7:fa:1a:46:17:28:a6:2f:f5:2b:1f:d7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Jul 4 10:51:41 2026 GMT Not After : Jul 3 10:56:41 2027 GMT Subject: CN=F0A28170F15B0856E3DC1172DF6954FED299E072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:43:90:dd:5f:31:c2:04:18:8e:cb:2d:fa: 3a:b6:f4:ef:23:5a:fe:83:4d:15:f6:68:52:4d:b5: e0:be:80:80:c7:89:94:20:e4:61:4e:93:92:c2:0d: dc:07:e4:03:81:2d:b2:ed:b6:7b:94:57:5a:17:b2: 58:5c:25:ef:c5:17:44:50:0e:c3:25:43:f7:a7:b4: e8:06:55:50:7c:29:4b:c8:66:40:04:d9:8b:64:9c: cf:96:59:8d:3d:2a:48:03:e2:97:96:8f:c8:2b:10: 8d:f2:af:07:ba:d5:7e:ac:7a:6e:ff:b4:39:45:df: f5:15:d0:72:d5:28:3e:2b:e6:e2:3d:bc:48:b8:73: 27:bb:28:88:b2:84:40:66:6d:81:ef:20:d6:67:f2: 2c:e9:77:74:97:65:53:fb:f7:84:22:a9:8f:c3:90: 2a:00:6e:ad:3a:56:1a:a4:e1:42:b0:0b:ce:07:ea: a8:6c:ac:ad:bf:d8:50:70:f9:98:c8:24:3c:60:ec: d0:89:c0:07:1c:27:c5:0b:89:a1:28:d6:43:21:7a: 0d:41:ab:e9:5b:b1:ca:3f:03:33:7a:bd:ab:27:73: 52:75:9c:c1:f4:eb:38:53:72:f9:35:11:15:6d:5d: fe:ec:b2:98:d0:83:8d:03:ff:49:2a:11:ce:67:3b: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:81:70:F1:5B:08:56:E3:DC:11:72:DF:69:54:FE:D2:99:E0:72 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:b240::/44 Signature Algorithm: sha256WithRSAEncryption bd:6e:0c:2c:7a:38:79:be:3f:9b:bd:b2:75:88:a4:c2:1c:0e: a2:4d:4e:00:db:2f:4f:e3:b3:13:6f:55:89:45:b1:53:ec:f1: c0:3d:e5:30:e9:7d:6b:a8:47:3e:f5:9f:9c:39:71:ec:10:7d: 55:78:d6:d6:f3:b6:eb:9e:dc:df:62:37:46:5e:38:9a:4c:a5: c0:dc:26:de:a3:ca:93:00:59:8a:f3:3d:c8:aa:b6:4a:c2:63: dc:2c:76:49:2f:4c:1b:1e:ba:ca:fc:7e:4b:69:c8:66:7a:cd: 86:0e:3b:8a:97:4b:3d:13:42:ac:8b:e0:aa:43:fe:95:fb:e6: a2:42:61:6f:c8:e1:76:f5:92:f7:96:03:56:69:0a:40:f5:36: 7f:d2:d1:c2:81:b6:59:75:ef:e3:9c:fa:85:ad:f5:aa:04:c9: f3:9f:a4:91:88:82:a8:3a:46:e0:4d:08:a6:d7:6e:7a:79:bd: a2:fb:b9:f4:99:de:ee:d0:25:24:b9:fa:c4:4c:5d:2c:64:cc: 0c:f7:b3:e6:86:87:2d:8a:26:23:03:f9:f1:70:ed:5f:f0:1f: 08:39:c7:c3:54:03:e9:00:61:ee:85:bf:06:e6:62:3b:65:a1: 7d:f2:97:0c:f2:3a:17:6a:0a:23:48:6f:bd:ec:a7:62:8f:40: 82:a6:e0:7f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZj54lbIIycf6GkYXKKYv9Ssf1/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA3MDQxMDUxNDFaFw0yNzA3MDMxMDU2NDFaMDMxMTAvBgNV BAMTKEYwQTI4MTcwRjE1QjA4NTZFM0RDMTE3MkRGNjk1NEZFRDI5OUUwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkV0OQ3V8xwgQYjsst+jq29O8j Wv6DTRX2aFJNteC+gIDHiZQg5GFOk5LCDdwH5AOBLbLttnuUV1oXslhcJe/FF0RQ DsMlQ/entOgGVVB8KUvIZkAE2YtknM+WWY09KkgD4peWj8grEI3yrwe61X6sem7/ tDlF3/UV0HLVKD4r5uI9vEi4cye7KIiyhEBmbYHvINZn8izpd3SXZVP794QiqY/D kCoAbq06Vhqk4UKwC84H6qhsrK2/2FBw+ZjIJDxg7NCJwAccJ8ULiaEo1kMheg1B q+lbsco/AzN6vasnc1J1nMH06zhTcvk1ERVtXf7sspjQg40D/0kqEc5nO77JAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU8KKBcPFbCFbj3BFy32lU/tKZ4HIwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTYyMzIzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM5MzIzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKg8cxrJAMA0GCSqGSIb3DQEBCwUAA4IBAQC9 bgwsejh5vj+bvbJ1iKTCHA6iTU4A2y9P47MTb1WJRbFT7PHAPeUw6X1rqEc+9Z+c OXHsEH1VeNbW87brntzfYjdGXjiaTKXA3Cbeo8qTAFmK8z3IqrZKwmPcLHZJL0wb HrrK/H5Lachmes2GDjuKl0s9E0Ksi+CqQ/6V++aiQmFvyOF29ZL3lgNWaQpA9TZ/ 0tHCgbZZde/jnPqFrfWqBMnzn6SRiIKoOkbgTQim1256eb2i+7n0md7u0CUkufrE TF0sZMwM97PmhoctiiYjA/nxcO1f8B8IOcfDVAPpAGHuhb8G5mI7ZaF98pcM8joX agojSG+97Kdij0CCpuB/ -----END CERTIFICATE-----Generated at Tue Jul 21 23:09:14 2026 by rpki-client