$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3136372e3130342e3232302e302f32342d3234203d3e20313938393131.roa File: 3136372e3130342e3232302e302f32342d3234203d3e20313938393131.roa (raw, json) Hash identifier: IpAtKezkRghn3VCZbQVfMWwXIwgAeuupI6Is+vdHmX4= Subject key identifier: 96:FB:51:EF:41:A6:0C:A5:2F:14:51:1D:CD:FF:E8:5D:C4:EB:69:3D Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 7912AECB3B9CA8E725FBB732BEE4F7CD67636CDC Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3136372e3130342e3232302e302f32342d3234203d3e20313938393131.roa Signing time: Thu 14 May 2026 11:45:14 +0000 ROA not before: Thu 14 May 2026 11:40:14 +0000 ROA not after: Thu 13 May 2027 11:45:14 +0000 asID: 198911 IP address blocks: 167.104.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Jun 2026 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:12:ae:cb:3b:9c:a8:e7:25:fb:b7:32:be:e4:f7:cd:67:63:6c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: May 14 11:40:14 2026 GMT Not After : May 13 11:45:14 2027 GMT Subject: CN=96FB51EF41A60CA52F14511DCDFFE85DC4EB693D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:25:af:cf:3c:11:fc:13:e2:a5:f4:c7:e0:01: 9e:96:e4:33:74:91:71:62:8e:99:79:06:57:7e:4d: 2c:f2:46:c4:99:04:ac:00:f8:d8:67:ed:6b:6c:2f: 27:92:eb:b3:55:1b:9a:60:d1:04:7c:f4:bf:2c:92: c3:f8:55:3e:d8:15:ae:13:01:3e:fe:bc:39:b2:7b: aa:1e:ee:bb:ad:9e:79:dc:dd:4a:53:ec:69:37:f6: 35:a3:8f:f3:ba:53:95:8f:08:ce:da:48:ab:cc:d9: 37:21:73:3f:a8:dc:71:5a:b2:54:68:dc:c5:a7:b3: e4:77:00:1e:8c:19:db:3e:b6:22:93:95:e0:00:f4: a7:59:9b:7e:a3:05:65:9c:7a:09:8b:67:82:93:c8: 71:20:a0:45:9b:a9:67:26:be:42:7e:2f:01:dd:0b: 90:46:45:aa:c0:92:ff:94:6d:57:65:77:f5:f8:98: 21:fe:f6:16:26:73:9f:52:8e:5c:d5:1c:e6:e7:14: ab:bf:29:f4:39:96:a5:a2:f9:dc:e2:90:66:e0:65: c2:ce:1c:e8:8a:f0:13:dd:ce:b5:ae:9f:41:12:f9: 91:9b:7c:06:8a:be:b0:87:4f:03:8c:ca:97:2e:bc: ec:46:e7:78:c3:0b:c0:cd:02:6d:4a:63:3c:c9:86: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:51:EF:41:A6:0C:A5:2F:14:51:1D:CD:FF:E8:5D:C4:EB:69:3D X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3136372e3130342e3232302e302f32342d3234203d3e20313938393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.104.220.0/24 Signature Algorithm: sha256WithRSAEncryption 45:9a:9d:36:a5:92:3e:a4:2d:89:96:d8:83:0a:f8:64:5d:a3: af:09:c2:d5:14:57:5c:3d:a7:87:1a:f2:e2:49:2c:5b:2d:4a: 8a:97:c3:b8:c0:21:9a:4d:e7:83:47:08:a6:da:08:1e:0e:5b: 52:b3:dc:2a:8d:73:ce:c1:2c:35:3e:c3:65:4b:ac:ab:f0:7a: 35:e2:cd:29:59:e9:ce:14:a4:8e:6f:30:12:59:99:dd:8d:7a: 2d:fc:02:97:66:7e:9c:c8:8d:5d:34:66:09:1e:dd:dc:a3:76: b7:96:d4:51:74:3e:2e:b1:38:d9:a0:7e:b2:8d:02:98:9e:1d: 17:67:79:f1:ad:ce:21:da:7b:e1:2c:96:9d:be:35:c6:40:72: 74:74:58:1c:fa:50:93:56:ac:83:b6:f1:79:f2:2c:b3:0a:d0: d6:c2:b1:56:4b:f6:85:84:9b:9a:f4:6e:d6:37:6b:64:dc:2a: 4a:24:2c:ca:22:f5:23:65:b4:30:55:14:24:12:68:62:44:0e: 05:08:b7:3b:87:45:27:3d:39:8f:f7:80:01:eb:21:f7:a6:94: e3:81:00:12:34:f8:ea:ba:71:60:b5:70:9f:c9:7c:51:59:44: 48:15:c3:5e:df:78:1a:e0:e2:2c:5a:2b:37:ab:0a:cf:b5:8a: ee:75:a1:aa -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUeRKuyzucqOcl+7cyvuT3zWdjbNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA1MTQxMTQwMTRaFw0yNzA1MTMxMTQ1MTRaMDMxMTAvBgNV BAMTKDk2RkI1MUVGNDFBNjBDQTUyRjE0NTExRENERkZFODVEQzRFQjY5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMJa/PPBH8E+Kl9MfgAZ6W5DN0 kXFijpl5Bld+TSzyRsSZBKwA+Nhn7WtsLyeS67NVG5pg0QR89L8sksP4VT7YFa4T AT7+vDmye6oe7rutnnnc3UpT7Gk39jWjj/O6U5WPCM7aSKvM2Tchcz+o3HFaslRo 3MWns+R3AB6MGds+tiKTleAA9KdZm36jBWWcegmLZ4KTyHEgoEWbqWcmvkJ+LwHd C5BGRarAkv+UbVdld/X4mCH+9hYmc59SjlzVHObnFKu/KfQ5lqWi+dzikGbgZcLO HOiK8BPdzrWun0ES+ZGbfAaKvrCHTwOMypcuvOxG53jDC8DNAm1KYzzJhkm/AgMB AAGjggJxMIICbTAdBgNVHQ4EFgQUlvtR70GmDKUvFFEdzf/oXcTraT0wHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzEzNjM3MmUzMTMwMzQyZTMy MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM5MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKdo3DANBgkqhkiG9w0BAQsFAAOCAQEARZqdNqWSPqQtiZbYgwr4ZF2jrwnC 1RRXXD2nhxry4kksWy1KipfDuMAhmk3ng0cIptoIHg5bUrPcKo1zzsEsNT7DZUus q/B6NeLNKVnpzhSkjm8wElmZ3Y16LfwCl2Z+nMiNXTRmCR7d3KN2t5bUUXQ+LrE4 2aB+so0CmJ4dF2d58a3OIdp74SyWnb41xkBydHRYHPpQk1asg7bxefIsswrQ1sKx Vkv2hYSbmvRu1jdrZNwqSiQsyiL1I2W0MFUUJBJoYkQOBQi3O4dFJz05j/eAAesh 96aU44EAEjT46rpxYLVwn8l8UVlESBXDXt94GuDiLForN6sKz7WK7nWhqg== -----END CERTIFICATE-----Generated at Sun May 31 11:17:16 2026 by rpki-client