$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa File: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (raw, json) Hash identifier: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY= Subject key identifier: D9:1B:78:F8:D5:54:02:F7:6D:F0:AD:23:2B:77:17:81:9A:2F:86:58 Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Certificate serial: 62DA6112F985991181F0CBBEC8565EAD41B5ED3A Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa Signing time: Mon 29 Jun 2026 10:02:38 +0000 ROA not before: Mon 29 Jun 2026 09:57:38 +0000 ROA not after: Mon 28 Jun 2027 10:02:38 +0000 asID: 199794 IP address blocks: 2a0f:1cc6:fd00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:da:61:12:f9:85:99:11:81:f0:cb:be:c8:56:5e:ad:41:b5:ed:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F Validity Not Before: Jun 29 09:57:38 2026 GMT Not After : Jun 28 10:02:38 2027 GMT Subject: CN=D91B78F8D55402F76DF0AD232B7717819A2F8658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:9a:a2:57:10:2f:05:13:04:35:c9:3e:2c: c6:e9:ba:5b:e7:79:6d:70:90:34:9c:9c:fa:37:6a: 06:b2:61:3c:cb:ac:4e:cb:64:f7:07:95:5d:f5:81: 36:08:c5:c9:eb:dd:ca:82:ac:88:c5:c6:3d:16:36: e8:77:89:3d:ce:cd:15:ac:b8:06:79:68:9c:ab:f9: 11:1c:91:48:40:e7:cd:46:18:2f:cd:36:9b:ce:1b: 04:08:9e:3e:eb:fe:00:af:35:8e:eb:d3:cd:0f:82: ee:94:f0:99:00:31:80:ca:80:70:2a:0b:ce:50:38: 92:8e:c7:c4:b7:58:ab:38:b0:84:ca:1f:c2:9a:9e: 88:61:cd:c3:64:f4:93:7c:e2:2e:96:9a:66:da:6a: 26:9d:c5:cd:6a:2e:58:37:23:fe:6c:0f:cf:1c:02: d8:3a:c0:1d:b3:7e:6f:e2:58:1f:7a:64:39:7a:30: 08:48:fc:4a:d7:f8:bf:a9:a1:ca:54:53:67:ed:01: 72:9f:49:60:df:23:e5:da:15:89:e9:83:17:2b:08: 87:20:7b:f1:8a:01:90:be:aa:01:8c:20:b1:98:c3: bb:bf:3d:ca:db:f4:7d:3e:46:0f:91:a8:ff:c8:40: 0f:48:a3:b1:cd:f7:67:7e:33:0a:a6:a4:1b:aa:a1: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1B:78:F8:D5:54:02:F7:6D:F0:AD:23:2B:77:17:81:9A:2F:86:58 X509v3 Authority Key Identifier: keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc6:fd00::/40 Signature Algorithm: sha256WithRSAEncryption 21:f0:47:13:61:25:6f:09:9e:17:60:cd:e4:af:57:4c:df:77: 8c:aa:30:80:e3:93:26:62:42:11:44:59:6c:81:91:93:d7:2d: 52:df:c6:08:9a:88:41:65:2d:27:e8:7c:81:42:14:75:e1:32: 6f:ef:40:b2:59:1c:c7:a4:22:1f:e3:1e:d0:3f:97:d4:f2:ed: 8a:26:95:cd:c0:11:fb:6e:a4:a4:d1:3b:29:a1:80:d4:35:0b: 28:e7:a1:ff:33:ec:ea:83:83:0f:7a:a8:73:45:1c:4c:c5:0c: 00:67:cd:b7:52:e6:78:cb:f1:f1:d4:cd:15:ab:2a:0f:46:96: 85:71:f0:0f:b3:9c:e7:bc:1a:ff:61:83:e8:38:d8:c5:67:dc: 31:0b:3f:58:53:89:20:d2:c3:d2:a3:24:e0:41:61:00:46:67: d9:fc:58:7f:c8:ed:a6:77:53:b5:ed:4a:50:94:3e:95:63:9a: 53:48:89:09:c3:8b:44:4a:13:a4:bf:ca:da:f2:ae:5b:5c:e1: 7a:6e:9b:86:8e:bb:14:ed:c6:9a:1c:cd:42:59:9b:fa:02:30: d3:66:5c:17:2e:56:ba:ff:7c:84:90:18:4f:22:cd:da:a0:0b: ee:8e:3f:65:96:cd:bc:4b:66:a6:e7:de:5e:5a:04:4d:16:69: 60:4f:81:7b -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUYtphEvmFmRGB8Mu+yFZerUG17TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRD QUE1RDMzRjAeFw0yNjA2MjkwOTU3MzhaFw0yNzA2MjgxMDAyMzhaMDMxMTAvBgNV BAMTKEQ5MUI3OEY4RDU1NDAyRjc2REYwQUQyMzJCNzcxNzgxOUEyRjg2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdJqiVxAvBRMENck+LMbpulvn eW1wkDScnPo3agayYTzLrE7LZPcHlV31gTYIxcnr3cqCrIjFxj0WNuh3iT3OzRWs uAZ5aJyr+REckUhA581GGC/NNpvOGwQInj7r/gCvNY7r080Pgu6U8JkAMYDKgHAq C85QOJKOx8S3WKs4sITKH8KanohhzcNk9JN84i6Wmmbaaiadxc1qLlg3I/5sD88c Atg6wB2zfm/iWB96ZDl6MAhI/ErX+L+pocpUU2ftAXKfSWDfI+XaFYnpgxcrCIcg e/GKAZC+qgGMILGYw7u/Pcrb9H0+Rg+RqP/IQA9Io7HN92d+MwqmpBuqoQXLAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU2Rt4+NVUAvdt8K0jK3cXgZovhlgwHwYDVR0j BBgwFoAUUpv8bdMGssSWKaps6zExlMql0z8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx MTA2LzIvNTI5QkZDNkREMzA2QjJDNDk2MjlBQTZDRUIzMTMxOTRDQUE1RDMzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNF QjMxMzE5NENBQTVEMzNGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMi8zMjYxMzA2 NjNhMzE2MzYzMzYzYTY2NjQzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzEz OTM5MzczOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKg8cxv0wDQYJKoZIhvcNAQELBQADggEBACHw RxNhJW8JnhdgzeSvV0zfd4yqMIDjkyZiQhFEWWyBkZPXLVLfxgiaiEFlLSfofIFC FHXhMm/vQLJZHMekIh/jHtA/l9Ty7Yomlc3AEftupKTROymhgNQ1Cyjnof8z7OqD gw96qHNFHEzFDABnzbdS5njL8fHUzRWrKg9GloVx8A+znOe8Gv9hg+g42MVn3DEL P1hTiSDSw9KjJOBBYQBGZ9n8WH/I7aZ3U7XtSlCUPpVjmlNIiQnDi0RKE6S/ytry rltc4Xpum4aOuxTtxpoczUJZm/oCMNNmXBcuVrr/fISQGE8izdqgC+6OP2WWzbxL Zqbn3l5aBE0WaWBPgXs= -----END CERTIFICATE-----Generated at Tue Jul 21 23:09:14 2026 by rpki-client