$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa File: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (raw, json) Hash identifier: e3h2ZTUNZXjv98ArysnYSYWhaEkUBmjS0VqOuj8+VAI= Subject key identifier: B8:DB:72:43:F4:62:8D:42:C4:A8:56:10:02:B1:B7:12:91:F5:70:93 Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 566AB6F50F66D5488DE5D77E92B48378D8F1E19A Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa Signing time: Thu 16 Jul 2026 13:08:57 +0000 ROA not before: Thu 16 Jul 2026 13:03:57 +0000 ROA not after: Thu 15 Jul 2027 13:08:57 +0000 asID: 212396 IP address blocks: 2a0b:9e47:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6a:b6:f5:0f:66:d5:48:8d:e5:d7:7e:92:b4:83:78:d8:f1:e1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Jul 16 13:03:57 2026 GMT Not After : Jul 15 13:08:57 2027 GMT Subject: CN=B8DB7243F4628D42C4A8561002B1B71291F57093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:82:f5:c2:a5:0b:b4:ac:85:7f:90:f3:a6: 6a:e0:50:47:28:7d:a0:a4:07:22:28:2b:12:be:f1: e4:89:88:94:d2:95:67:b9:86:bf:62:1d:0c:7c:1d: bc:86:94:32:0b:e2:e2:6a:fc:2f:a7:18:d5:50:f3: 58:50:23:6a:9b:b6:4d:a8:9d:8f:06:02:72:dd:2a: 0b:e1:05:b3:b6:76:c2:92:05:e5:8b:05:50:dd:00: 2e:0e:c1:40:57:25:36:34:ac:61:e0:35:06:6e:84: 23:a2:b0:3b:d4:18:59:e3:7b:4d:e6:2a:89:92:08: 18:5e:9e:f3:16:30:9f:da:c9:c7:95:e4:8a:e5:0a: 04:13:78:56:c2:b4:72:6b:45:ef:46:96:31:82:cf: 86:f4:84:06:10:ed:f2:1d:9d:1b:0f:f7:a2:34:eb: c5:7f:9c:4b:6f:61:6d:6f:7d:78:4a:8d:f7:55:0b: 15:d5:96:2b:42:a5:cf:53:92:80:0d:e2:f6:d8:28: e1:80:e7:bc:da:cb:93:31:b9:74:98:05:00:b9:73: b7:37:7d:cc:5c:e5:e5:23:6a:04:94:a6:91:f9:e1: 9d:40:5b:1a:bb:9a:c6:ca:25:fe:a5:84:44:01:85: bd:ba:07:d2:a2:8a:f7:b7:8d:d3:f8:3c:d8:3d:19: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:72:43:F4:62:8D:42:C4:A8:56:10:02:B1:B7:12:91:F5:70:93 X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:9e47:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 62:40:bc:fd:04:3b:14:67:dd:ee:92:83:9a:d2:e2:d2:99:c7: e2:e9:c2:b0:14:66:d5:da:37:9d:14:48:08:05:94:d3:b0:50: ef:26:4e:c1:87:e5:0b:16:f9:63:ca:03:a0:37:f9:2d:cd:39: ae:86:b8:4b:51:de:a4:9c:2d:6e:c7:4c:e9:c2:f3:84:ff:64: 93:6e:dc:36:4a:82:ad:b7:d3:d0:64:a9:55:02:e6:a8:e6:8a: 57:d8:37:f0:65:77:96:de:98:d3:6e:1a:32:e5:30:27:ae:12: aa:4a:df:49:9a:97:e2:ae:2d:bb:0c:38:bd:dc:2a:cf:72:4c: 2c:9e:d6:39:6a:0a:0b:d3:d9:43:ac:cc:c4:e2:89:1b:6d:88: 38:b7:9c:9e:6c:9a:5f:23:d4:f2:4c:43:43:90:07:de:09:60: c8:be:b4:9e:66:65:af:be:65:d1:fc:80:41:4a:78:3b:94:40: 28:ed:47:99:93:f5:46:9b:c3:bd:b6:71:22:03:8f:87:ff:8b: 89:f3:65:06:df:bd:f3:be:40:c6:55:26:e7:04:71:7a:21:3c: 29:59:cc:b0:f2:ac:2b:89:69:db:1a:2d:5f:cb:5a:8c:f8:3a: 7d:a1:22:75:43:9d:74:36:d2:db:9f:70:dd:2d:dd:3b:ac:ea: 51:9d:9b:20 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUVmq29Q9m1UiN5dd+krSDeNjx4ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNjA3MTYxMzAzNTdaFw0yNzA3MTUxMzA4NTdaMDMxMTAvBgNV BAMTKEI4REI3MjQzRjQ2MjhENDJDNEE4NTYxMDAyQjFCNzEyOTFGNTcwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRoL1wqULtKyFf5DzpmrgUEco faCkByIoKxK+8eSJiJTSlWe5hr9iHQx8HbyGlDIL4uJq/C+nGNVQ81hQI2qbtk2o nY8GAnLdKgvhBbO2dsKSBeWLBVDdAC4OwUBXJTY0rGHgNQZuhCOisDvUGFnje03m KomSCBhenvMWMJ/ayceV5IrlCgQTeFbCtHJrRe9GljGCz4b0hAYQ7fIdnRsP96I0 68V/nEtvYW1vfXhKjfdVCxXVlitCpc9TkoAN4vbYKOGA57zay5MxuXSYBQC5c7c3 fcxc5eUjagSUppH54Z1AWxq7msbKJf6lhEQBhb26B9Kiive3jdP4PNg9GePBAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUuNtyQ/RijULEqFYQArG3EpH1cJMwHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJjZjhiYTct Y2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdlOTUwLzUvMzI2MTMwNjIzYTM5NjUzNDM3 M2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjMzMzkzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLnkf//zANBgkqhkiG9w0BAQsFAAOCAQEAYkC8/QQ7FGfd7pKD mtLi0pnH4unCsBRm1do3nRRICAWU07BQ7yZOwYflCxb5Y8oDoDf5Lc05roa4S1He pJwtbsdM6cLzhP9kk27cNkqCrbfT0GSpVQLmqOaKV9g38GV3lt6Y024aMuUwJ64S qkrfSZqX4q4tuww4vdwqz3JMLJ7WOWoKC9PZQ6zMxOKJG22IOLecnmyaXyPU8kxD Q5AH3glgyL60nmZlr75l0fyAQUp4O5RAKO1HmZP1RpvDvbZxIgOPh/+LifNlBt+9 875AxlUm5wRxeiE8KVnMsPKsK4lp2xotX8tajPg6faEidUOddDbS259w3S3dO6zq UZ2bIA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:16:38 2026 by rpki-client