$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa File: 326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa (raw, json) Hash identifier: GO8mnQP4gfk1ikcBeh6/RtdaKW3uVE4SI3LybDTZHAk= Subject key identifier: 46:2C:19:00:07:A3:93:27:CF:1A:D4:D2:48:02:63:E9:E6:A2:1A:24 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 208377744C92F37C6A58F5917DC7638DFBFDFE1C Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa Signing time: Fri 05 Jun 2026 16:35:05 +0000 ROA not before: Fri 05 Jun 2026 16:30:05 +0000 ROA not after: Fri 04 Jun 2027 16:35:05 +0000 asID: 212049 IP address blocks: 2a06:1283:b334::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 14:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:83:77:74:4c:92:f3:7c:6a:58:f5:91:7d:c7:63:8d:fb:fd:fe:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jun 5 16:30:05 2026 GMT Not After : Jun 4 16:35:05 2027 GMT Subject: CN=462C190007A39327CF1AD4D2480263E9E6A21A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:89:3b:79:b0:c7:af:e5:7d:8d:f2:a2:e0: f1:b0:0b:e2:db:fc:55:d5:f6:18:17:52:f8:f2:ff: fe:3c:4d:1b:63:30:b8:ee:b0:6d:8b:8c:2c:23:bd: ed:4f:32:52:83:71:e8:aa:c7:7a:2f:ac:cd:44:14: 03:97:c5:b9:bb:4b:16:14:d0:49:06:b0:ee:93:26: 13:d2:0c:60:66:21:54:c1:fe:c2:d6:b1:2b:3a:10: b7:e8:04:d8:db:73:6d:c7:f2:11:65:c4:71:47:44: ff:2b:6b:ed:a4:7e:4a:49:65:42:27:63:c8:dc:a5: 75:32:44:05:27:b9:ca:9e:b5:96:4b:98:ce:f7:92: 40:58:08:fe:24:44:6b:19:00:d5:91:fc:6e:13:6a: d8:18:50:72:36:c4:98:b4:43:bc:f0:30:36:97:89: 3a:ce:e2:21:17:b0:e9:19:d7:44:16:a7:14:a5:b2: e6:92:71:3d:de:34:f7:08:18:b5:16:66:32:e9:d0: c3:3b:28:e0:f6:95:8f:e7:49:f6:af:d5:2b:78:a1: 61:1e:44:1c:6d:db:ab:34:36:56:96:42:bd:01:a3: fe:9b:90:41:f8:7e:99:62:0a:53:36:12:f2:9b:f0: 71:15:1a:a3:99:64:97:d6:b5:05:37:7d:e4:3e:6f: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:19:00:07:A3:93:27:CF:1A:D4:D2:48:02:63:E9:E6:A2:1A:24 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623333343a3a2f34382d3438203d3e20323132303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b334::/48 Signature Algorithm: sha256WithRSAEncryption 01:95:71:1c:24:b6:f0:c6:e7:3a:51:69:d0:69:d9:af:95:31: d4:cf:28:ad:5a:8b:c1:aa:22:2d:bb:bd:c5:f6:1b:cd:7c:60: 88:55:b0:8a:45:fb:c8:4a:04:eb:8b:85:d4:fd:75:71:bb:ef: f5:14:62:e8:af:2f:66:9b:e3:86:01:b7:e7:cd:52:c4:86:e4: 37:35:ba:bf:d7:e6:f7:d1:0a:ca:6e:30:18:13:88:ff:fd:83: ca:d7:bc:c6:7b:b4:87:4d:8d:05:5f:5c:6f:05:b9:bc:d9:1d: ab:bd:49:86:23:e3:4e:c2:e1:a2:e0:c4:2b:2e:2d:73:1d:7f: e8:73:69:72:2a:e0:61:24:12:62:f7:aa:ce:86:f9:36:2c:62: 9c:bb:c0:51:40:7e:f9:b6:83:5f:db:31:50:2a:ae:61:09:01: f9:c6:1d:fd:99:dd:55:e7:c3:2e:36:f9:b0:ec:e8:ea:30:ef: 7f:79:0b:68:11:1c:9b:4e:bf:9f:87:ee:47:3e:ac:95:be:fe: b0:c0:11:93:3e:97:43:77:d5:1f:82:9f:c5:a7:47:42:d1:f0: b0:2c:b4:6b:89:a7:44:46:eb:21:47:6c:2d:25:5c:b9:6f:20: c5:f2:4d:34:52:4a:85:8e:17:59:26:e0:59:56:0e:6d:54:bb: b6:61:95:e7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUIIN3dEyS83xqWPWRfcdjjfv9/hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDVaFw0yNzA2MDQxNjM1MDVaMDMxMTAvBgNV BAMTKDQ2MkMxOTAwMDdBMzkzMjdDRjFBRDREMjQ4MDI2M0U5RTZBMjFBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFH4k7ebDHr+V9jfKi4PGwC+Lb /FXV9hgXUvjy//48TRtjMLjusG2LjCwjve1PMlKDceiqx3ovrM1EFAOXxbm7SxYU 0EkGsO6TJhPSDGBmIVTB/sLWsSs6ELfoBNjbc23H8hFlxHFHRP8ra+2kfkpJZUIn Y8jcpXUyRAUnucqetZZLmM73kkBYCP4kRGsZANWR/G4TatgYUHI2xJi0Q7zwMDaX iTrO4iEXsOkZ10QWpxSlsuaScT3eNPcIGLUWZjLp0MM7KOD2lY/nSfav1St4oWEe RBxt26s0NlaWQr0Bo/6bkEH4fpliClM2EvKb8HEVGqOZZJfWtQU3feQ+b+mPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQURiwZAAejkyfPGtTSSAJj6eaiGiQwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjMzMzMzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMjMwMzQzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoOzNDANBgkqhkiG9w0BAQsFAAOCAQEAAZVxHCS28MbnOlFp 0GnZr5Ux1M8orVqLwaoiLbu9xfYbzXxgiFWwikX7yEoE64uF1P11cbvv9RRi6K8v ZpvjhgG3581SxIbkNzW6v9fm99EKym4wGBOI//2Dyte8xnu0h02NBV9cbwW5vNkd q71JhiPjTsLhouDEKy4tcx1/6HNpcirgYSQSYveqzob5NixinLvAUUB++baDX9sx UCquYQkB+cYd/ZndVefDLjb5sOzo6jDvf3kLaBEcm06/n4fuRz6slb7+sMARkz6X Q3fVH4KfxadHQtHwsCy0a4mnREbrIUdsLSVcuW8gxfJNNFJKhY4XWSbgWVYObVS7 tmGV5w== -----END CERTIFICATE-----Generated at Thu Jun 11 23:57:29 2026 by rpki-client