$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa File: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (raw, json) Hash identifier: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw= Subject key identifier: 94:4A:FB:F9:CE:72:35:BB:5F:C1:53:91:70:06:B4:75:F6:8C:87:02 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 0C6156E7B6F1F3CE14F484C11CFF7C28D3059E01 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa Signing time: Tue 02 Jun 2026 18:39:11 +0000 ROA not before: Tue 02 Jun 2026 18:34:11 +0000 ROA not after: Tue 01 Jun 2027 18:39:11 +0000 asID: 215136 IP address blocks: 2a14:1ec1:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 07:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:61:56:e7:b6:f1:f3:ce:14:f4:84:c1:1c:ff:7c:28:d3:05:9e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jun 2 18:34:11 2026 GMT Not After : Jun 1 18:39:11 2027 GMT Subject: CN=944AFBF9CE7235BB5FC153917006B475F68C8702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:c7:5c:81:98:91:fc:e6:d9:2d:f1:da:c0: fc:17:b6:38:68:fc:49:f3:5d:ed:b9:6b:ed:b9:54: 16:89:51:1e:21:de:23:c2:22:7c:14:ab:65:3f:31: d0:66:08:21:ba:e9:2f:14:87:e5:a6:4d:db:07:a2: 67:54:d5:70:87:72:c7:2e:40:49:85:ec:58:fa:a7: dd:cc:de:80:06:47:05:39:27:54:89:00:39:12:63: c7:99:8c:23:7c:24:2a:f6:75:36:34:46:5c:3a:dd: de:46:c4:ab:33:5e:09:47:e4:58:60:3f:7b:81:81: 6c:fc:78:5e:6d:a1:08:4d:03:c6:38:49:b7:1b:5d: 10:dd:55:5a:b2:dd:86:c0:50:b6:69:bb:6e:59:b4: 0c:38:3d:18:6f:90:41:db:2c:53:b7:42:d8:d0:b9: ef:f0:fd:49:04:e5:42:cd:ad:17:93:e5:1c:f6:0c: f7:c2:46:8e:a3:45:b5:64:9f:88:ad:74:a4:0a:52: 01:2d:85:b0:47:92:b2:b7:df:1b:c9:59:0f:49:41: 3b:a1:02:b9:4a:c6:39:1a:4e:ad:97:3d:d1:17:d2: c1:31:87:8f:a1:1f:77:95:58:9f:ad:4c:c3:ba:44: a9:bc:84:cd:3e:e9:a1:fd:ec:b9:c7:cb:ef:e6:95: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4A:FB:F9:CE:72:35:BB:5F:C1:53:91:70:06:B4:75:F6:8C:87:02 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec1:1000::/36 Signature Algorithm: sha256WithRSAEncryption 64:d6:ae:95:12:90:7a:24:cc:f8:13:78:1a:70:79:5b:3d:3a: 0d:38:36:d6:63:8d:8a:7a:eb:58:4b:51:e3:f2:c2:74:fc:50: d4:5b:31:f5:88:eb:3b:f7:92:09:a3:42:3b:a8:8a:1c:54:dd: 93:ca:4c:03:43:5b:78:28:57:d3:d7:c2:c7:89:63:90:7e:3d: 17:ef:44:d8:83:41:9c:5d:aa:3f:28:77:4a:77:55:51:b9:19: b7:82:16:e7:00:65:2a:93:74:8a:fd:12:5c:4c:ac:cc:8d:7e: 01:34:3d:29:85:6d:05:76:f6:ce:c3:9a:0c:e3:a5:cf:9f:6a: 92:fe:00:1e:cb:d7:72:c7:a4:88:20:bf:9e:5e:e1:2d:4e:53: 6f:f7:43:a7:18:31:cd:82:29:10:79:dd:59:3b:51:58:d7:a0: 6c:cc:fd:a1:dc:1c:40:02:1b:bd:a3:74:86:e6:38:07:11:b9: 9e:32:89:0b:49:27:3b:74:81:81:c0:f3:fe:cb:37:4c:6f:68: 38:18:96:ab:1b:7a:ce:62:0a:c2:dc:22:1e:66:24:5d:eb:3f: 1d:07:1b:00:a9:1f:2f:2a:58:aa:84:9a:b6:7f:f6:c9:c5:73: dd:63:fd:78:2b:76:95:44:a9:3b:0f:89:27:f2:b2:c6:63:02: 7e:96:e8:dd -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUDGFW57bx884U9ITBHP98KNMFngEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjA2MDIxODM0MTFaFw0yNzA2MDExODM5MTFaMDMxMTAvBgNV BAMTKDk0NEFGQkY5Q0U3MjM1QkI1RkMxNTM5MTcwMDZCNDc1RjY4Qzg3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BcdcgZiR/ObZLfHawPwXtjho /EnzXe25a+25VBaJUR4h3iPCInwUq2U/MdBmCCG66S8Uh+WmTdsHomdU1XCHcscu QEmF7Fj6p93M3oAGRwU5J1SJADkSY8eZjCN8JCr2dTY0Rlw63d5GxKszXglH5Fhg P3uBgWz8eF5toQhNA8Y4SbcbXRDdVVqy3YbAULZpu25ZtAw4PRhvkEHbLFO3QtjQ ue/w/UkE5ULNrReT5Rz2DPfCRo6jRbVkn4itdKQKUgEthbBHkrK33xvJWQ9JQTuh ArlKxjkaTq2XPdEX0sExh4+hH3eVWJ+tTMO6RKm8hM0+6aH97LnHy+/mlbofAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUlEr7+c5yNbtfwVORcAa0dfaMhwIwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzEzYTMxMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzEzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhQewRAwDQYJKoZIhvcNAQELBQADggEBAGTW rpUSkHokzPgTeBpweVs9Og04NtZjjYp661hLUePywnT8UNRbMfWI6zv3kgmjQjuo ihxU3ZPKTANDW3goV9PXwseJY5B+PRfvRNiDQZxdqj8od0p3VVG5GbeCFucAZSqT dIr9ElxMrMyNfgE0PSmFbQV29s7Dmgzjpc+fapL+AB7L13LHpIggv55e4S1OU2/3 Q6cYMc2CKRB53Vk7UVjXoGzM/aHcHEACG72jdIbmOAcRuZ4yiQtJJzt0gYHA8/7L N0xvaDgYlqsbes5iCsLcIh5mJF3rPx0HGwCpHy8qWKqEmrZ/9snFc91j/XgrdpVE qTsPiSfyssZjAn6W6N0= -----END CERTIFICATE-----Generated at Thu Jun 4 12:00:47 2026 by rpki-client