$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563303a3a2f33322d3332203d3e2030.roa File: 326131343a316563303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU= Subject key identifier: 69:1D:D8:2C:25:1D:C0:F4:20:44:3A:A7:B6:76:FB:D2:74:65:94:34 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 642D08C142E05485FF40234449E685BB7854243B Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563303a3a2f33322d3332203d3e2030.roa Signing time: Mon 06 Jul 2026 13:55:51 +0000 ROA not before: Mon 06 Jul 2026 13:50:51 +0000 ROA not after: Mon 05 Jul 2027 13:55:51 +0000 asID: 0 IP address blocks: 2a14:1ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 Jul 2026 16:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2d:08:c1:42:e0:54:85:ff:40:23:44:49:e6:85:bb:78:54:24:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jul 6 13:50:51 2026 GMT Not After : Jul 5 13:55:51 2027 GMT Subject: CN=691DD82C251DC0F420443AA7B676FBD274659434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:5d:a6:7c:5f:5e:8d:29:ec:b2:43:f5:8d: a7:90:26:82:b1:23:c4:5c:5d:46:76:bf:ec:ab:85: eb:b1:a2:39:58:9c:f4:e3:01:01:9d:79:64:27:2c: 40:05:f3:b3:15:08:92:c9:9c:a1:bb:2e:bd:0b:85: 58:4a:8a:9f:ca:43:ea:12:80:50:eb:5b:ec:3c:1f: 83:85:24:67:28:24:ca:bd:b2:de:69:77:bd:e7:67: 73:87:a3:e3:e3:43:d1:73:80:dd:b9:a6:25:29:f8: 58:aa:e7:c8:e9:93:1a:56:10:e1:ac:85:5b:7b:35: ed:c1:4d:fc:17:2a:bc:3c:16:fb:2a:78:17:19:d6: 67:06:3f:81:12:55:57:bd:69:f2:f2:07:16:0f:3b: 31:93:60:67:55:a8:43:8b:f9:91:82:49:94:d0:5a: 90:06:af:5a:21:79:33:b4:20:5c:e5:c1:da:3c:3e: a1:96:97:76:4b:c3:68:8f:d3:75:51:65:9b:ac:a0: 4f:4a:72:40:07:d7:01:1d:57:a8:4f:19:a0:b1:f8: c2:89:57:c8:03:b8:6b:ee:5b:12:3d:9e:4d:f7:90: 20:b0:a1:39:09:50:c0:3c:5b:5c:87:2d:f3:75:31: 05:cf:b6:c2:2f:c8:cd:f3:22:ed:0e:49:5a:54:49: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1D:D8:2C:25:1D:C0:F4:20:44:3A:A7:B6:76:FB:D2:74:65:94:34 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec0::/32 Signature Algorithm: sha256WithRSAEncryption 94:59:02:20:d1:f9:4c:9a:9c:ca:26:42:00:44:91:24:c5:d4: 7d:a6:5b:17:4b:dd:49:5b:b9:2d:a9:5f:7c:a6:c1:9e:07:3f: 17:2c:fb:4c:6d:fd:c2:41:b0:f4:98:8a:d8:63:a5:a4:f0:97: d1:8e:52:64:00:47:df:88:90:18:ef:51:ad:8d:82:49:ec:0f: 62:a6:57:9b:91:3d:f0:95:fb:8b:39:1b:b8:74:54:4c:6a:13: 5b:99:9d:d7:a8:d8:69:3f:3c:8d:65:85:bd:b8:13:8b:0f:72: e2:b8:26:32:8e:85:07:b0:46:cf:3d:11:7d:b3:30:63:9d:39: 91:5e:c6:cb:17:ac:f2:ad:c0:f0:34:14:90:84:d3:3e:b0:6b: fe:05:0b:aa:a0:48:c8:90:3f:ec:b3:c6:8c:f7:51:43:de:40: 1d:2e:42:10:00:16:d0:c7:eb:f6:bb:43:29:e5:e1:8e:93:3e: a5:a6:d8:cb:59:87:f0:08:b5:ed:9d:06:62:0a:93:94:37:0f: 09:68:32:ab:9c:57:ea:3e:3f:a5:68:d2:5c:f9:42:5d:c4:9f: 3a:9f:31:6b:9d:ca:77:9f:57:bf:2c:f5:a7:a6:50:13:f3:99: c5:f7:17:bf:fb:62:32:db:b7:83:6f:87:f1:5e:b6:3c:c0:56: 99:96:f2:6c -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUZC0IwULgVIX/QCNESeaFu3hUJDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA3MDYxMzUwNTFaFw0yNzA3MDUxMzU1NTFaMDMxMTAvBgNV BAMTKDY5MUREODJDMjUxREMwRjQyMDQ0M0FBN0I2NzZGQkQyNzQ2NTk0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOF2mfF9ejSnsskP1jaeQJoKx I8RcXUZ2v+yrheuxojlYnPTjAQGdeWQnLEAF87MVCJLJnKG7Lr0LhVhKip/KQ+oS gFDrW+w8H4OFJGcoJMq9st5pd73nZ3OHo+PjQ9FzgN25piUp+Fiq58jpkxpWEOGs hVt7Ne3BTfwXKrw8FvsqeBcZ1mcGP4ESVVe9afLyBxYPOzGTYGdVqEOL+ZGCSZTQ WpAGr1oheTO0IFzlwdo8PqGWl3ZLw2iP03VRZZusoE9KckAH1wEdV6hPGaCx+MKJ V8gDuGvuWxI9nk33kCCwoTkJUMA8W1yHLfN1MQXPtsIvyM3zIu0OSVpUSeAHAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUaR3YLCUdwPQgRDqntnb70nRllDQwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUF BzALhoGDcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzAzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACoUHsAwDQYJKoZIhvcNAQELBQADggEBAJRZAiDR+UyanMomQgBEkSTF1H2mWxdL 3UlbuS2pX3ymwZ4HPxcs+0xt/cJBsPSYithjpaTwl9GOUmQAR9+IkBjvUa2Ngkns D2KmV5uRPfCV+4s5G7h0VExqE1uZndeo2Gk/PI1lhb24E4sPcuK4JjKOhQewRs89 EX2zMGOdOZFexssXrPKtwPA0FJCE0z6wa/4FC6qgSMiQP+yzxoz3UUPeQB0uQhAA FtDH6/a7Qynl4Y6TPqWm2MtZh/AIte2dBmIKk5Q3DwloMqucV+o+P6Vo0lz5Ql3E nzqfMWudynefV78s9aemUBPzmcX3F7/7YjLbt4Nvh/FetjzAVpmW8mw= -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:26 2026 by rpki-client