$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa File: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (raw, json) Hash identifier: ZhHRzDFs7fBtUGvR8pxFCEtpL9Hraol9iZdGLjWUEvI= Subject key identifier: B9:76:F1:BD:A6:D4:51:C6:F7:44:E6:04:CC:EA:C4:A9:8E:AB:E2:46 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 08553E0AA46E665C3C9688F97866AD3C9411A59B Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa Signing time: Fri 05 Jun 2026 11:06:55 +0000 ROA not before: Fri 05 Jun 2026 11:01:55 +0000 ROA not after: Fri 04 Jun 2027 11:06:55 +0000 asID: 50755 IP address blocks: 2a06:a003:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 12:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:55:3e:0a:a4:6e:66:5c:3c:96:88:f9:78:66:ad:3c:94:11:a5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Jun 5 11:01:55 2026 GMT Not After : Jun 4 11:06:55 2027 GMT Subject: CN=B976F1BDA6D451C6F744E604CCEAC4A98EABE246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:90:e5:87:4c:2b:e4:69:37:5e:9b:92:e6: c3:19:0b:15:cd:f3:f7:82:66:1f:89:e7:55:1c:b6: 92:53:b1:62:2b:cc:51:38:ac:54:f7:08:2a:ea:aa: 9b:dd:31:60:94:3a:5c:f2:42:7e:e3:b8:18:7f:97: 52:b8:3a:7c:22:09:be:d6:c2:95:d6:a2:c8:ac:27: 91:3e:a2:77:bc:81:67:f6:c8:e3:14:5b:35:7e:c5: 1b:0f:7c:ac:40:39:41:cc:af:e1:fb:34:95:12:c1: e4:9b:cb:d6:58:61:5a:4c:b6:fb:78:91:c0:a3:45: da:63:2d:02:27:bb:94:d9:b4:34:0b:72:a4:1d:46: 73:6f:9e:0f:8e:c5:62:b4:f8:f7:cb:b9:e3:25:34: de:f0:90:1d:44:23:25:77:ca:54:3d:9a:90:e1:db: 8d:bd:43:e0:78:25:bd:a3:74:48:ef:ec:b8:4a:7d: 50:9e:3d:73:f4:e6:6d:8d:89:03:d6:af:ae:82:67: 6c:6e:52:0b:bb:df:af:d2:0f:3b:e1:a2:71:5a:78: b0:46:97:07:79:43:38:26:0f:82:f9:cd:f0:fe:ce: 5a:6b:fb:e3:6d:55:27:2d:f6:60:f1:8a:88:a8:98: c4:c4:1e:8b:d2:87:3b:5f:cc:44:81:fb:40:80:ee: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:76:F1:BD:A6:D4:51:C6:F7:44:E6:04:CC:EA:C4:A9:8E:AB:E2:46 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a003:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 3a:e0:28:39:0c:bd:62:2a:e6:8d:fb:d2:33:8a:81:ab:7e:46: 92:1e:26:3f:59:3e:09:e6:44:c4:f7:9e:3e:b6:68:78:1a:98: 3f:59:e7:6b:c7:86:c2:dd:98:34:32:1b:c7:90:e4:45:d2:ae: 4a:b6:08:66:02:61:78:dd:e3:dd:fe:1e:3c:a2:cd:d7:59:88: ff:a0:2d:24:82:ae:ba:b8:34:dd:81:bc:5b:be:2d:96:19:33: 40:71:a3:d3:d6:df:0f:34:59:93:a8:60:41:b2:2a:f8:b6:c3: d0:44:82:fe:80:5a:be:b9:3c:ca:fc:af:99:fe:92:45:90:85: 1d:e2:2c:6b:0c:c4:5e:ff:29:8b:3c:51:0c:3c:63:21:28:51: a7:80:de:04:71:c1:6f:79:93:dc:34:ab:7b:55:2e:2f:9d:bb: 3f:2f:cc:60:c5:7e:85:d0:da:c4:c1:aa:4f:db:ff:ee:27:22: f8:fb:30:62:79:21:b4:24:c7:93:a1:9f:5b:9c:94:d5:33:1b: e4:25:31:eb:45:6b:a3:2d:22:64:95:1e:b3:b0:16:ae:0b:39: 05:6e:3e:af:80:81:0e:88:9b:79:3c:ea:f1:83:40:08:c8:28: 85:b6:b2:bd:fb:18:a8:22:16:5a:19:da:96:7b:ee:ce:e5:ea: 34:f8:a3:2e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCFU+CqRuZlw8loj5eGatPJQRpZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNjA2MDUxMTAxNTVaFw0yNzA2MDQxMTA2NTVaMDMxMTAvBgNV BAMTKEI5NzZGMUJEQTZENDUxQzZGNzQ0RTYwNENDRUFDNEE5OEVBQkUyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfJDlh0wr5Gk3XpuS5sMZCxXN 8/eCZh+J51UctpJTsWIrzFE4rFT3CCrqqpvdMWCUOlzyQn7juBh/l1K4OnwiCb7W wpXWosisJ5E+one8gWf2yOMUWzV+xRsPfKxAOUHMr+H7NJUSweSby9ZYYVpMtvt4 kcCjRdpjLQInu5TZtDQLcqQdRnNvng+OxWK0+PfLueMlNN7wkB1EIyV3ylQ9mpDh 2429Q+B4Jb2jdEjv7LhKfVCePXP05m2NiQPWr66CZ2xuUgu736/SDzvhonFaeLBG lwd5QzgmD4L5zfD+zlpr++NtVSct9mDxioiomMTEHovShztfzESB+0CA7vCDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUuXbxvabUUcb3ROYEzOrEqY6r4kYwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYt MzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3LzQvMzI2MTMwMzYzYTYxMzAzMDMz M2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzAzNzM1MzUucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqBqAD//8wDQYJKoZIhvcNAQELBQADggEBADrgKDkMvWIq5o370jOK gat+RpIeJj9ZPgnmRMT3nj62aHgamD9Z52vHhsLdmDQyG8eQ5EXSrkq2CGYCYXjd 493+HjyizddZiP+gLSSCrrq4NN2BvFu+LZYZM0Bxo9PW3w80WZOoYEGyKvi2w9BE gv6AWr65PMr8r5n+kkWQhR3iLGsMxF7/KYs8UQw8YyEoUaeA3gRxwW95k9w0q3tV Li+duz8vzGDFfoXQ2sTBqk/b/+4nIvj7MGJ5IbQkx5Ohn1uclNUzG+QlMetFa6Mt ImSVHrOwFq4LOQVuPq+AgQ6Im3k86vGDQAjIKIW2sr37GKgiFloZ2pZ77s7l6jT4 oy4= -----END CERTIFICATE-----Generated at Sat Jun 6 05:27:27 2026 by rpki-client