$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa File: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (raw, json) Hash identifier: iVfsjGUvTt7XJSqNB1gfJbq7PcNxzcp6mUdRwbAEvfI= Subject key identifier: 8C:F6:DB:2E:3A:C3:1D:E3:B8:C1:0C:34:5E:30:B2:36:5E:DD:0D:36 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 23FBA0B714148CA418D29506F1AAA2E363DCEB0E Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa Signing time: Sun 02 Aug 2026 09:46:33 +0000 ROA not before: Sun 02 Aug 2026 09:41:33 +0000 ROA not after: Sun 01 Aug 2027 09:46:33 +0000 asID: 214929 IP address blocks: 2a06:9f41:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 14:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fb:a0:b7:14:14:8c:a4:18:d2:95:06:f1:aa:a2:e3:63:dc:eb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Aug 2 09:41:33 2026 GMT Not After : Aug 1 09:46:33 2027 GMT Subject: CN=8CF6DB2E3AC31DE3B8C10C345E30B2365EDD0D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:ef:3f:59:e5:71:01:81:a0:7d:6f:db:75: 1b:42:7c:df:32:9e:94:57:ce:ef:ed:91:27:68:f0: 8c:90:b3:cb:25:d2:6b:1d:f9:c8:96:02:7c:fa:4f: 14:6c:76:a1:b6:f3:d1:32:f5:fc:3c:cd:2e:09:fe: 89:eb:7e:0f:83:99:33:a2:19:22:74:1e:09:02:61: 46:0c:fa:41:27:a6:c3:ab:c4:fd:cf:9e:a3:3e:d7: 74:f5:c8:96:7d:19:94:5c:37:28:01:ed:35:dd:d0: 10:33:3d:ad:42:76:f3:45:9a:a1:5d:7d:5a:23:14: 23:86:4f:ce:ad:6c:0b:8f:55:66:1a:3e:a3:23:a4: 89:54:9e:d0:14:6d:da:d4:2b:f6:c7:75:de:5f:15: 6e:aa:55:c6:f0:fa:cb:71:61:07:c9:08:89:e7:b3: f8:eb:f6:d1:69:fc:48:2b:97:b1:bd:c2:0d:3f:dd: 53:58:1f:6b:bb:93:4e:e6:c2:6a:9e:76:81:60:2c: 22:5e:a7:16:53:92:7b:db:f0:4e:c1:8c:61:56:e8: ac:3b:fd:3b:ad:94:a3:41:60:ec:7d:77:8a:bb:03: a8:88:a4:9c:57:65:11:e9:5f:e0:fd:48:ea:a5:89: 13:dc:f2:eb:2b:45:af:08:30:54:d6:4a:68:dc:ea: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F6:DB:2E:3A:C3:1D:E3:B8:C1:0C:34:5E:30:B2:36:5E:DD:0D:36 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:300::/40 Signature Algorithm: sha256WithRSAEncryption 82:74:52:19:44:b7:5c:54:2b:8d:54:d1:21:22:f9:a7:3e:dc: ed:d3:8f:d6:98:a6:b9:07:85:58:3d:b7:dc:51:13:96:74:51: e0:57:f4:2c:08:36:3b:ea:2b:a5:07:7e:78:db:f0:a9:16:3e: 13:5f:46:f5:a1:09:ac:d8:dc:16:ab:c7:73:92:89:f4:2e:71: 4a:7f:24:e3:d7:4a:13:7a:16:d4:9d:7e:1c:6a:58:75:59:7e: 3c:92:6b:dd:d0:1d:96:86:7b:1f:df:ea:85:35:46:af:2c:57: 90:61:5c:05:7a:c0:b1:bf:ea:2b:76:0e:a5:50:24:ff:1e:0d: 30:ea:d6:66:db:8b:4e:e6:5f:a4:39:4f:ea:ab:89:7a:3b:5c: 4f:eb:57:bb:24:0c:70:bf:60:1f:0f:ef:a8:c3:80:c3:f8:19: 9c:28:94:a9:5f:4c:9d:b8:d8:e7:78:78:77:da:ea:fd:e3:7c: 5a:29:f8:af:94:1f:99:ae:06:50:7f:ff:f2:6f:ff:d6:b1:21: cb:b0:39:5a:df:5d:a8:6e:60:f5:b2:c9:2f:e2:2d:d6:27:70: 40:3a:23:3c:aa:73:1f:79:89:25:40:50:ac:7d:af:7e:c7:e6: 2c:21:b9:da:fa:9f:15:d1:43:ff:25:a7:7a:de:85:0b:29:a9: 21:a9:bb:7c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUI/ugtxQUjKQY0pUG8aqi42Pc6w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA4MDIwOTQxMzNaFw0yNzA4MDEwOTQ2MzNaMDMxMTAvBgNV BAMTKDhDRjZEQjJFM0FDMzFERTNCOEMxMEMzNDVFMzBCMjM2NUVERDBEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCScu8/WeVxAYGgfW/bdRtCfN8y npRXzu/tkSdo8IyQs8sl0msd+ciWAnz6TxRsdqG289Ey9fw8zS4J/onrfg+DmTOi GSJ0HgkCYUYM+kEnpsOrxP3PnqM+13T1yJZ9GZRcNygB7TXd0BAzPa1CdvNFmqFd fVojFCOGT86tbAuPVWYaPqMjpIlUntAUbdrUK/bHdd5fFW6qVcbw+stxYQfJCInn s/jr9tFp/Egrl7G9wg0/3VNYH2u7k07mwmqedoFgLCJepxZTknvb8E7BjGFW6Kw7 /TutlKNBYOx9d4q7A6iIpJxXZRHpX+D9SOqliRPc8usrRa8IMFTWSmjc6lcBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUjPbbLjrDHeO4wQw0XjCyNl7dDTYwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2EzMzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzQzOTMyMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqBp9BAzANBgkqhkiG9w0BAQsFAAOCAQEAgnRSGUS3XFQrjVTRISL5 pz7c7dOP1pimuQeFWD233FETlnRR4Ff0LAg2O+orpQd+eNvwqRY+E19G9aEJrNjc FqvHc5KJ9C5xSn8k49dKE3oW1J1+HGpYdVl+PJJr3dAdloZ7H9/qhTVGryxXkGFc BXrAsb/qK3YOpVAk/x4NMOrWZtuLTuZfpDlP6quJejtcT+tXuyQMcL9gHw/vqMOA w/gZnCiUqV9MnbjY53h4d9rq/eN8Win4r5Qfma4GUH//8m//1rEhy7A5Wt9dqG5g 9bLJL+It1idwQDojPKpzH3mJJUBQrH2vfsfmLCG52vqfFdFD/yWnet6FCympIam7 fA== -----END CERTIFICATE-----Generated at Tue Aug 4 20:13:37 2026 by rpki-client