$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa File: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (raw, json) Hash identifier: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0= Subject key identifier: C6:33:78:03:03:92:74:9E:E2:E8:F7:E4:29:43:30:18:A7:47:4E:F3 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 1D36432A6A6AD44A007F108CB23FEA1149C4A596 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa Signing time: Tue 02 Jun 2026 18:40:47 +0000 ROA not before: Tue 02 Jun 2026 18:35:47 +0000 ROA not after: Tue 01 Jun 2027 18:40:47 +0000 asID: 211066 IP address blocks: 2a14:1ec1:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 07:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:36:43:2a:6a:6a:d4:4a:00:7f:10:8c:b2:3f:ea:11:49:c4:a5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jun 2 18:35:47 2026 GMT Not After : Jun 1 18:40:47 2027 GMT Subject: CN=C63378030392749EE2E8F7E429433018A7474EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:33:12:09:2a:2d:34:82:66:7e:55:58:0a: 79:49:07:f6:70:02:0f:a0:0b:b6:83:78:f7:e9:27: ca:47:5a:6f:96:8c:62:66:79:84:ac:26:c9:5a:ca: b7:ac:34:d9:9b:20:d7:3a:ef:73:52:07:ea:9f:91: c3:78:3b:f3:52:a8:0a:f4:0f:52:b9:f5:06:a7:68: 99:9b:de:69:40:27:a7:1f:07:70:dd:29:f2:0e:5f: ad:25:13:3c:ea:1c:18:a8:50:5e:42:d7:01:ab:09: 44:08:18:a3:4c:1c:79:10:57:f0:0a:e4:aa:66:0f: b8:6a:dc:2f:57:4b:7a:77:a3:d0:aa:e4:c8:02:6d: fd:73:fa:02:53:90:a6:7f:49:56:04:41:7a:c2:7b: c0:83:e7:c5:b1:76:8a:64:94:cd:87:45:f1:15:2b: 1c:5f:b8:39:c7:a7:2e:45:1b:34:5b:98:14:ba:5d: 95:fb:4d:b2:0c:44:e8:51:5b:33:ed:ba:15:e6:ec: 11:34:ce:e3:85:53:c0:59:a1:9d:63:98:e1:eb:fd: 5a:83:cf:14:6b:79:3c:cc:11:47:32:3e:73:b8:2f: e5:12:27:11:76:7e:cf:3b:aa:86:d2:a3:f4:e3:6a: 9f:ce:19:7f:df:0d:ce:e7:9b:0d:95:15:90:0a:fb: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:33:78:03:03:92:74:9E:E2:E8:F7:E4:29:43:30:18:A7:47:4E:F3 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec1:1000::/36 Signature Algorithm: sha256WithRSAEncryption 80:80:7c:3f:07:55:aa:e6:ca:32:89:18:29:c1:c1:45:40:0d: 62:a8:7c:5c:da:3c:0c:d9:9e:83:35:5e:ad:36:3a:93:22:eb: 10:fc:b6:29:83:11:64:fa:97:71:7e:25:ea:b8:fb:cc:19:8c: f7:b6:60:a9:aa:ba:21:70:6c:e3:af:bb:e6:ae:f2:48:44:9f: 80:1f:e7:78:36:aa:21:e4:c1:0b:9d:9e:12:db:e4:5e:0a:f2: 81:00:0e:bd:0d:a0:33:24:bf:ad:d8:3e:32:d0:70:22:08:c4: 10:6f:1c:2b:66:8c:66:6a:2c:32:4a:03:b8:7e:fe:5f:e1:1d: 6c:e4:9e:1a:22:d6:a3:87:85:3b:36:bb:df:d8:61:18:0c:96: fd:c7:f3:fd:db:20:4c:b4:40:48:4a:91:e3:93:33:71:65:68: 55:45:7c:91:a0:d6:e5:91:18:a7:ee:dc:ef:2e:5c:e3:a4:49: b0:22:30:ae:5b:e7:8f:ad:85:35:a4:a1:08:2f:42:81:18:86: 91:bf:a6:71:0f:46:f4:81:4d:0d:d8:d1:a4:ee:ea:3f:01:3b: 02:3e:f8:46:86:e5:fe:ff:c4:f2:6b:61:f8:0e:3b:7a:ee:b7: 41:15:ce:d8:35:0d:6c:71:7e:4e:41:cc:a0:0e:ff:5a:91:d0: 18:65:f7:18 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUHTZDKmpq1EoAfxCMsj/qEUnEpZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA2MDIxODM1NDdaFw0yNzA2MDExODQwNDdaMDMxMTAvBgNV BAMTKEM2MzM3ODAzMDM5Mjc0OUVFMkU4RjdFNDI5NDMzMDE4QTc0NzRFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtzMSCSotNIJmflVYCnlJB/Zw Ag+gC7aDePfpJ8pHWm+WjGJmeYSsJslayresNNmbINc673NSB+qfkcN4O/NSqAr0 D1K59QanaJmb3mlAJ6cfB3DdKfIOX60lEzzqHBioUF5C1wGrCUQIGKNMHHkQV/AK 5KpmD7hq3C9XS3p3o9Cq5MgCbf1z+gJTkKZ/SVYEQXrCe8CD58WxdopklM2HRfEV KxxfuDnHpy5FGzRbmBS6XZX7TbIMROhRWzPtuhXm7BE0zuOFU8BZoZ1jmOHr/VqD zxRreTzMEUcyPnO4L+USJxF2fs87qobSo/Tjap/OGX/fDc7nmw2VFZAK+zr5AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUxjN4AwOSdJ7i6PfkKUMwGKdHTvMwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzEzYTMxMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTMxMzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhQewRAwDQYJKoZIhvcNAQELBQADggEBAICA fD8HVarmyjKJGCnBwUVADWKofFzaPAzZnoM1Xq02OpMi6xD8timDEWT6l3F+Jeq4 +8wZjPe2YKmquiFwbOOvu+au8khEn4Af53g2qiHkwQudnhLb5F4K8oEADr0NoDMk v63YPjLQcCIIxBBvHCtmjGZqLDJKA7h+/l/hHWzknhoi1qOHhTs2u9/YYRgMlv3H 8/3bIEy0QEhKkeOTM3FlaFVFfJGg1uWRGKfu3O8uXOOkSbAiMK5b54+thTWkoQgv QoEYhpG/pnEPRvSBTQ3Y0aTu6j8BOwI++EaG5f7/xPJrYfgOO3rut0EVztg1DWxx fk5BzKAO/1qR0Bhl9xg= -----END CERTIFICATE-----Generated at Thu Jun 4 12:00:48 2026 by rpki-client