$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534323a3a2f34342d3434203d3e20323134343531.roa File: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (raw, json) Hash identifier: Zck6J2syHDIk/NrGxsNjciGhnmYGMCo7e0kQNyx+lQM= Subject key identifier: 63:8E:62:61:03:97:43:EE:E1:3F:42:2E:DC:2C:6A:AF:DD:AD:6C:CF Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 110FF7D0F963081260E58DFFF1D06C7081B8203F Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534323a3a2f34342d3434203d3e20323134343531.roa Signing time: Thu 25 Jun 2026 09:45:00 +0000 ROA not before: Thu 25 Jun 2026 09:40:00 +0000 ROA not after: Thu 24 Jun 2027 09:45:00 +0000 asID: 214451 IP address blocks: 2a0b:9e42::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 04:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0f:f7:d0:f9:63:08:12:60:e5:8d:ff:f1:d0:6c:70:81:b8:20:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Jun 25 09:40:00 2026 GMT Not After : Jun 24 09:45:00 2027 GMT Subject: CN=638E6261039743EEE13F422EDC2C6AAFDDAD6CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:2a:3c:38:15:20:b0:64:dc:19:ba:95:af: b8:32:53:f9:7f:60:0a:fd:42:08:09:2f:9e:7a:fe: 94:ec:16:08:10:9a:53:57:51:3b:82:fe:02:f2:41: a7:4a:a6:95:c3:4f:58:bc:bb:7e:45:5b:88:85:84: ae:ed:32:46:8a:b9:c3:23:41:ec:1e:ef:6d:67:fb: cb:ad:de:e6:c0:4b:fc:cb:f5:ce:4a:58:52:e1:a3: 14:98:9d:e7:22:f9:6f:15:d4:7d:ac:16:6a:16:1f: b6:be:21:12:85:0b:d5:bb:3f:5a:b3:35:b6:89:96: 93:b3:bf:f6:9f:e6:ca:bd:10:2d:a1:56:7d:9b:5b: 9a:aa:e9:c3:90:f3:67:a7:9e:c7:5b:38:77:d6:67: 2f:bd:4c:7f:41:6c:87:76:3d:b4:82:e8:46:5e:4a: f3:3c:39:93:4f:91:4b:75:87:51:ae:d9:02:a2:18: 27:c4:d9:eb:b7:c3:0e:b8:8b:bb:e5:0b:7d:e9:61: 8f:99:fd:e3:b5:fe:ca:04:f8:ed:7b:0c:4f:03:e2: bb:13:04:bd:7d:a1:f2:e7:c0:e9:50:9b:e4:cb:b2: 21:1b:5e:d9:82:ff:16:8d:e2:72:d1:ca:e6:6e:1a: be:d9:5b:8c:0e:34:c4:1d:20:0b:e3:7c:ed:6a:1c: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8E:62:61:03:97:43:EE:E1:3F:42:2E:DC:2C:6A:AF:DD:AD:6C:CF X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534323a3a2f34342d3434203d3e20323134343531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:9e42::/44 Signature Algorithm: sha256WithRSAEncryption 02:a1:9c:de:9a:48:92:b7:e4:de:cf:ff:49:bd:b3:6e:33:04: a5:41:4b:3a:df:af:f3:01:03:0b:38:9c:db:6e:fb:5b:1f:1b: b6:88:c2:fb:fb:01:08:e0:ee:43:e4:00:05:6f:97:ce:ae:85: 7a:e3:2a:d0:6f:cb:06:e9:2f:d5:bd:4a:6b:ed:3e:ab:51:56: 62:42:28:96:9b:9b:1f:fa:fb:94:56:9f:19:ef:5e:2d:0c:ff: 4c:2e:c6:90:0a:29:7d:ed:37:76:ba:0d:af:c6:93:2c:e8:c0: 84:6e:60:7d:bb:53:eb:df:44:21:1b:ac:90:a9:4f:f3:ed:d5: 82:5e:c8:f5:46:78:08:df:be:15:54:6b:9c:ff:89:14:bc:5c: 3e:3b:c9:90:c0:e6:a0:44:fd:84:bd:b5:a1:e4:7f:ee:7a:de: 75:f8:7a:e1:b2:dd:1d:ff:1f:fb:c2:db:ad:87:72:2d:3c:4f: d2:0c:59:6c:80:62:87:4e:5e:78:39:80:5d:50:7d:a2:13:a4: 9f:7d:52:c2:47:e0:c3:b1:85:61:c4:b9:51:4a:3d:91:46:a5: 28:e1:d0:56:5a:1f:f6:2f:3e:2c:06:8b:31:55:8f:24:66:9f: 12:94:a8:a7:90:7b:39:66:94:c2:cc:7e:35:3a:37:ec:b3:6b: 7e:a4:6c:fd -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIUEQ/30PljCBJg5Y3/8dBscIG4ID8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNjA2MjUwOTQwMDBaFw0yNzA2MjQwOTQ1MDBaMDMxMTAvBgNV BAMTKDYzOEU2MjYxMDM5NzQzRUVFMTNGNDIyRURDMkM2QUFGRERBRDZDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe1Co8OBUgsGTcGbqVr7gyU/l/ YAr9QggJL556/pTsFggQmlNXUTuC/gLyQadKppXDT1i8u35FW4iFhK7tMkaKucMj Qewe721n+8ut3ubAS/zL9c5KWFLhoxSYneci+W8V1H2sFmoWH7a+IRKFC9W7P1qz NbaJlpOzv/af5sq9EC2hVn2bW5qq6cOQ82ennsdbOHfWZy+9TH9BbId2PbSC6EZe SvM8OZNPkUt1h1Gu2QKiGCfE2eu3ww64i7vlC33pYY+Z/eO1/soE+O17DE8D4rsT BL19ofLnwOlQm+TLsiEbXtmC/xaN4nLRyuZuGr7ZW4wONMQdIAvjfO1qHMqVAgMB AAGjggJwMIICbDAdBgNVHQ4EFgQUY45iYQOXQ+7hP0Iu3Cxqr92tbM8wHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJjZjhiYTct Y2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdlOTUwLzUvMzI2MTMwNjIzYTM5NjUzNDMy M2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzMTM0MzQzNTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcE KgueQgAAMA0GCSqGSIb3DQEBCwUAA4IBAQACoZzemkiSt+Tez/9JvbNuMwSlQUs6 36/zAQMLOJzbbvtbHxu2iML7+wEI4O5D5AAFb5fOroV64yrQb8sG6S/VvUpr7T6r UVZiQiiWm5sf+vuUVp8Z714tDP9MLsaQCil97Td2ug2vxpMs6MCEbmB9u1Pr30Qh G6yQqU/z7dWCXsj1RngI374VVGuc/4kUvFw+O8mQwOagRP2EvbWh5H/uet51+Hrh st0d/x/7wtuth3ItPE/SDFlsgGKHTl54OYBdUH2iE6SffVLCR+DDsYVhxLlRSj2R RqUo4dBWWh/2Lz4sBosxVY8kZp8SlKinkHs5ZpTCzH41Ojfss2t+pGz9 -----END CERTIFICATE-----Generated at Tue Jul 21 20:03:26 2026 by rpki-client