$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa File: 326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa (raw, json) Hash identifier: NbDxV9qrS6TiSjVCZUDuT8o/FjbSqGztLjVZ8dbtZec= Subject key identifier: 1F:F5:96:49:28:8B:86:FE:B5:37:E8:4D:CE:97:53:CE:CB:20:98:94 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 7C127E9CBCCBE151714848C6213D62F3500EF5C9 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa Signing time: Mon 03 Aug 2026 12:41:15 +0000 ROA not before: Mon 03 Aug 2026 12:36:15 +0000 ROA not after: Mon 02 Aug 2027 12:41:15 +0000 asID: 215085 IP address blocks: 2a06:9f41:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 14:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:12:7e:9c:bc:cb:e1:51:71:48:48:c6:21:3d:62:f3:50:0e:f5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Aug 3 12:36:15 2026 GMT Not After : Aug 2 12:41:15 2027 GMT Subject: CN=1FF59649288B86FEB537E84DCE9753CECB209894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:ea:86:93:91:c9:ba:a9:5f:c1:c3:71:fc: d8:a4:e3:67:96:fd:09:93:9d:76:77:5c:3e:df:1b: c0:5b:4e:1a:59:56:fa:d7:23:4b:22:d3:c4:9f:2a: 9c:97:55:86:10:a8:61:99:e1:89:9d:8d:7d:0e:17: ff:4b:bb:05:fb:34:92:56:cb:92:70:d0:cf:5f:8b: c5:84:69:ca:cf:a0:85:57:81:bc:c3:53:80:ee:58: 0c:fe:9b:c7:58:82:01:50:83:71:29:73:40:8c:93: 3a:1e:f5:66:0c:e4:22:60:4c:e3:e6:2f:a1:a8:92: 13:99:fd:d2:4e:f6:71:d5:dc:53:5c:75:88:92:fb: f3:10:b2:2c:cb:b1:03:28:68:24:38:fa:7e:67:78: cd:24:ef:52:ef:91:5d:27:72:5c:0f:c2:d8:91:5d: bb:8e:b3:36:45:b4:60:c7:3a:a1:bc:3c:4d:d2:0d: f2:c3:cd:a0:74:55:d2:da:6b:f6:5c:f5:7d:6b:dc: 20:24:ed:91:2a:1f:dd:06:f5:60:2d:81:f5:7d:0c: 12:fe:4d:06:73:67:ef:01:55:dc:72:9f:d7:ac:98: 55:7a:30:90:53:82:1d:c1:e0:06:be:67:3d:77:78: 2b:47:27:d7:19:8a:b8:59:4d:0a:aa:b0:3c:72:dd: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:96:49:28:8B:86:FE:B5:37:E8:4D:CE:97:53:CE:CB:20:98:94 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:a::/48 Signature Algorithm: sha256WithRSAEncryption 15:a9:72:ec:a1:52:01:32:69:7c:f0:58:c3:67:fa:2a:46:f8: 09:df:c4:c5:6d:17:09:2c:35:cb:70:91:ed:0e:0c:7f:bc:6d: 76:0c:3e:1d:e6:0f:b5:13:35:da:2f:89:9c:f7:8e:51:4a:4c: be:30:d4:c4:b0:24:2a:d9:1d:6f:cf:93:42:df:12:4a:b3:f0: 29:c8:79:d6:c8:7f:0a:52:f4:88:c2:55:43:d3:de:ef:d6:8b: e8:08:52:f3:be:db:8e:c8:0d:69:63:3b:c1:6d:0d:2b:68:b7: f0:a7:41:5a:3f:62:32:64:6b:98:a9:d2:b2:76:d0:60:6b:51: f2:c2:91:a5:1e:45:7c:8d:fb:fd:d5:60:07:f2:97:1c:50:8a: 00:00:cd:5e:88:4d:95:e9:01:cc:03:4b:ce:ef:47:0a:f2:2e: bb:b8:7e:73:98:68:da:13:b7:c4:96:4b:6d:ab:cc:5a:52:16: 79:86:5c:dd:a3:63:a4:8e:5f:05:08:4b:2d:20:32:fb:ad:84: ff:a4:b1:25:b2:9a:6c:0c:e4:ff:27:9f:69:22:19:31:49:6e: a0:a3:21:66:75:c0:e4:aa:85:05:51:8e:84:eb:21:98:c0:d8: a5:be:c6:42:a5:7e:9e:5c:da:cd:fb:4d:e8:88:aa:84:b1:2b: e0:eb:4b:d6 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUfBJ+nLzL4VFxSEjGIT1i81AO9ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA4MDMxMjM2MTVaFw0yNzA4MDIxMjQxMTVaMDMxMTAvBgNV BAMTKDFGRjU5NjQ5Mjg4Qjg2RkVCNTM3RTg0RENFOTc1M0NFQ0IyMDk4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5eqGk5HJuqlfwcNx/Nik42eW /QmTnXZ3XD7fG8BbThpZVvrXI0si08SfKpyXVYYQqGGZ4YmdjX0OF/9LuwX7NJJW y5Jw0M9fi8WEacrPoIVXgbzDU4DuWAz+m8dYggFQg3Epc0CMkzoe9WYM5CJgTOPm L6GokhOZ/dJO9nHV3FNcdYiS+/MQsizLsQMoaCQ4+n5neM0k71LvkV0nclwPwtiR XbuOszZFtGDHOqG8PE3SDfLDzaB0VdLaa/Zc9X1r3CAk7ZEqH90G9WAtgfV9DBL+ TQZzZ+8BVdxyn9esmFV6MJBTgh3B4Aa+Zz13eCtHJ9cZirhZTQqqsDxy3c41AgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUH/WWSSiLhv61N+hNzpdTzssgmJQwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2E2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMwMzgzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACoGn0EACjANBgkqhkiG9w0BAQsFAAOCAQEAFaly7KFSATJpfPBYw2f6Kkb4 Cd/ExW0XCSw1y3CR7Q4Mf7xtdgw+HeYPtRM12i+JnPeOUUpMvjDUxLAkKtkdb8+T Qt8SSrPwKch51sh/ClL0iMJVQ9Pe79aL6AhS877bjsgNaWM7wW0NK2i38KdBWj9i MmRrmKnSsnbQYGtR8sKRpR5FfI37/dVgB/KXHFCKAADNXohNlekBzANLzu9HCvIu u7h+c5ho2hO3xJZLbavMWlIWeYZc3aNjpI5fBQhLLSAy+62E/6SxJbKabAzk/yef aSIZMUluoKMhZnXA5KqFBVGOhOshmMDYpb7GQqV+nlzazftN6IiqhLEr4OtL1g== -----END CERTIFICATE-----Generated at Tue Aug 4 20:04:38 2026 by rpki-client