$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa File: 326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa (raw, json) Hash identifier: G/4jdjbh7Wuw66TzHcBPXMhU+Mo/dAtvkGMxRidXyzg= Subject key identifier: 10:F7:89:C8:B6:DB:30:CE:3B:40:76:41:1B:3D:32:86:1C:AD:76:CB Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 2FCDBF57CDF9490321A81824F0E4826A5C5B59D4 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa Signing time: Thu 18 Jun 2026 17:35:06 +0000 ROA not before: Thu 18 Jun 2026 17:30:06 +0000 ROA not after: Thu 17 Jun 2027 17:35:06 +0000 asID: 206444 IP address blocks: 2a06:1283:bc00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cd:bf:57:cd:f9:49:03:21:a8:18:24:f0:e4:82:6a:5c:5b:59:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jun 18 17:30:06 2026 GMT Not After : Jun 17 17:35:06 2027 GMT Subject: CN=10F789C8B6DB30CE3B4076411B3D32861CAD76CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:be:3e:9d:18:8d:68:c7:5c:9a:38:6e:35: 2b:98:63:de:17:ab:78:d0:02:e7:dc:f6:82:5a:60: 3e:e4:49:1a:c1:ca:05:47:02:10:6d:af:da:a1:3b: d8:81:03:5d:ab:84:3e:13:cc:bf:26:bf:b4:ff:ee: a4:fd:56:a3:cf:44:2d:cb:b4:63:ad:37:27:3e:c8: f9:5b:25:2b:bf:fc:55:0b:1e:2e:e4:03:28:0b:0f: 06:5f:84:8c:a1:3e:7b:4f:e6:af:08:e3:38:e3:1c: 06:9a:a6:1e:42:5f:b1:f0:7e:e7:92:9a:b6:d3:38: f1:bd:fd:ee:31:f8:5d:ba:c5:7e:f8:e8:92:b0:1c: 4b:fc:26:2a:e4:bb:c5:91:c7:54:3b:2a:0d:aa:b7: e2:7a:88:37:88:0d:5a:1c:21:ba:9b:3d:10:d7:ed: f8:c9:eb:c6:99:dd:5c:4f:e2:74:f7:3c:80:d4:27: 2b:95:4a:92:45:41:36:c9:9a:ad:d7:de:63:08:c7: aa:ae:81:ab:8f:c1:35:bc:ad:21:8f:88:76:fc:b0: c8:19:68:78:c1:c5:1f:86:9a:c4:c4:23:9b:50:92: 27:79:04:7b:a8:8a:87:45:81:56:2f:46:4d:17:97: 10:c7:ae:83:3f:2e:89:78:be:a7:0c:d3:cb:46:ec: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F7:89:C8:B6:DB:30:CE:3B:40:76:41:1B:3D:32:86:1C:AD:76:CB X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:bc00::/40 Signature Algorithm: sha256WithRSAEncryption 81:ff:8d:09:8d:b1:27:7c:81:a8:e0:3e:eb:ce:c1:c5:92:af: d9:50:df:6e:fb:4f:2f:d8:a2:55:74:8b:d1:ab:3e:1c:f5:a1: 2f:ee:9b:d5:b9:6b:8d:f0:81:7a:1d:39:51:ae:ca:a7:30:d6: 0e:3b:2e:e5:05:f9:ea:60:c5:c4:2e:0d:df:5e:2a:af:fe:32: a9:22:b7:dc:84:d8:d3:8d:2d:1d:6a:08:45:be:63:58:85:3f: 01:f0:2e:cd:32:9a:8a:99:d9:55:e1:0f:7d:d0:86:f4:d1:3d: c1:b3:84:45:d6:a4:72:ee:38:04:03:9a:75:3b:ea:a7:d6:d9: 3f:b2:a7:22:a7:f4:5c:5c:2d:2e:94:1d:f5:7f:98:a7:eb:dc: 87:3b:c3:cd:27:84:c3:1a:69:b3:ee:c1:88:86:80:1c:73:d1: 33:dd:27:33:6b:b2:8d:6f:32:9d:22:3e:e5:55:7c:3f:cd:50: c8:a9:31:ee:62:a1:aa:7d:ce:17:7d:b1:ac:4a:a5:be:7e:90: 08:d9:b7:ac:d0:f1:25:f9:94:d8:fd:c3:c5:75:9a:bc:37:94: 65:60:ef:2f:0d:d1:4c:3c:2f:67:0c:9f:1f:87:4c:d1:cd:17: 4c:92:d3:8a:d8:fa:d4:d5:9a:1c:44:33:97:1d:78:57:2c:f1: bb:18:46:e7 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUL82/V835SQMhqBgk8OSCalxbWdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA2MTgxNzMwMDZaFw0yNzA2MTcxNzM1MDZaMDMxMTAvBgNV BAMTKDEwRjc4OUM4QjZEQjMwQ0UzQjQwNzY0MTFCM0QzMjg2MUNBRDc2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPhb4+nRiNaMdcmjhuNSuYY94X q3jQAufc9oJaYD7kSRrBygVHAhBtr9qhO9iBA12rhD4TzL8mv7T/7qT9VqPPRC3L tGOtNyc+yPlbJSu//FULHi7kAygLDwZfhIyhPntP5q8I4zjjHAaaph5CX7HwfueS mrbTOPG9/e4x+F26xX746JKwHEv8Jirku8WRx1Q7Kg2qt+J6iDeIDVocIbqbPRDX 7fjJ68aZ3VxP4nT3PIDUJyuVSpJFQTbJmq3X3mMIx6qugauPwTW8rSGPiHb8sMgZ aHjBxR+GmsTEI5tQkid5BHuoiodFgVYvRk0XlxDHroM/Lol4vqcM08tG7B4PAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUEPeJyLbbMM47QHZBGz0yhhytdsswHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzAzNjM0MzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoGEoO8MA0GCSqGSIb3DQEBCwUAA4IBAQCB/40JjbEnfIGo4D7r zsHFkq/ZUN9u+08v2KJVdIvRqz4c9aEv7pvVuWuN8IF6HTlRrsqnMNYOOy7lBfnq YMXELg3fXiqv/jKpIrfchNjTjS0daghFvmNYhT8B8C7NMpqKmdlV4Q990Ib00T3B s4RF1qRy7jgEA5p1O+qn1tk/sqcip/RcXC0ulB31f5in69yHO8PNJ4TDGmmz7sGI hoAcc9Ez3Scza7KNbzKdIj7lVXw/zVDIqTHuYqGqfc4XfbGsSqW+fpAI2bes0PEl +ZTY/cPFdZq8N5RlYO8vDdFMPC9nDJ8fh0zRzRdMktOK2PrU1ZocRDOXHXhXLPG7 GEbn -----END CERTIFICATE-----Generated at Tue Jul 21 20:43:47 2026 by rpki-client