$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634363a3a2f33322d3332203d3e20323135303835.roa File: 326130363a396634363a3a2f33322d3332203d3e20323135303835.roa (raw, json) Hash identifier: KHPMWVPXSNE5MeO2seajbhD7um8es2E6kpPLcpx4Rh4= Subject key identifier: BD:8B:9F:2D:75:64:F7:05:A7:72:77:98:5B:B7:3D:78:B1:45:D4:8A Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 1165FFC15B89126843D449D5412A57C5AC8B1CA2 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634363a3a2f33322d3332203d3e20323135303835.roa Signing time: Sun 02 Aug 2026 09:56:32 +0000 ROA not before: Sun 02 Aug 2026 09:51:32 +0000 ROA not after: Sun 01 Aug 2027 09:56:32 +0000 asID: 215085 IP address blocks: 2a06:9f46::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 14:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:65:ff:c1:5b:89:12:68:43:d4:49:d5:41:2a:57:c5:ac:8b:1c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Aug 2 09:51:32 2026 GMT Not After : Aug 1 09:56:32 2027 GMT Subject: CN=BD8B9F2D7564F705A77277985BB73D78B145D48A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:28:bf:3d:92:de:25:35:65:04:0c:5f:c2:3e: d2:76:28:74:60:2d:c4:d5:77:71:d1:e5:ee:e3:30: c8:9d:b5:c2:ac:84:24:17:97:f8:02:eb:b0:66:7b: a2:fb:39:20:73:3c:7e:3b:2b:50:7b:3d:3c:e8:90: d6:98:82:6a:e5:99:1b:44:22:04:a9:17:0a:31:76: 85:46:b8:36:62:3f:07:6e:e7:8c:2f:55:2b:1f:ae: 06:00:e0:38:26:4a:51:8d:9a:0b:7d:32:4f:1a:71: 21:a9:ec:ed:8b:6f:42:c6:9f:7f:dc:78:2f:31:6f: 63:25:98:2b:18:0a:0d:d5:c4:c7:dc:db:46:ea:b8: c6:5b:6f:9d:32:84:8b:c3:79:9b:f3:b8:8a:0d:5d: e9:86:7f:38:6c:27:3d:3f:ce:d6:3d:d3:dc:8f:7d: 27:a3:30:74:c7:fb:cf:80:09:d6:cd:fd:fd:40:bf: 63:3b:05:05:50:77:aa:9a:15:35:13:69:de:d9:98: af:14:3c:1c:11:2f:61:df:ad:d1:0f:f8:6b:8f:ca: d9:c8:70:88:17:7d:59:dc:a4:a1:54:02:c1:3a:ed: cf:a6:ac:ae:cb:a6:83:0f:2b:4d:81:f9:a9:2f:9b: 8e:88:fd:f7:4d:63:9b:94:4d:da:12:8a:0c:34:67: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8B:9F:2D:75:64:F7:05:A7:72:77:98:5B:B7:3D:78:B1:45:D4:8A X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634363a3a2f33322d3332203d3e20323135303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f46::/32 Signature Algorithm: sha256WithRSAEncryption 48:a5:71:bd:b7:d0:7d:b5:79:5a:81:5e:d9:93:e9:2f:95:f8: 4c:36:94:44:8d:39:66:c5:b5:d3:f2:8f:f9:70:dc:ea:75:7d: 52:dc:9e:3a:4e:88:ef:a4:ec:15:99:18:3d:a1:9a:9b:ba:1b: 1c:8f:dc:57:97:04:bb:a0:71:45:b6:89:a5:89:d8:ea:8a:64: 23:d2:d2:8f:e4:f2:39:15:5f:e8:4e:37:49:1d:51:55:01:c7: d1:93:94:c5:1f:69:c1:1a:e6:46:6f:06:eb:08:f8:c7:1c:82: af:90:d3:2d:ae:66:4b:53:79:80:1f:19:9f:b9:2e:88:63:ec: 22:a6:44:8e:7a:6e:e9:45:dc:6d:34:5c:db:5d:96:41:bd:f3: 8b:fb:6d:5d:3f:01:78:05:1d:d1:6c:72:a8:d4:31:4c:c2:de: be:be:f4:14:af:c0:b6:78:b0:22:89:33:27:e2:2c:db:ec:1c: 30:1d:29:1f:33:e5:04:15:04:57:f8:f8:a0:0c:a9:9a:bc:37: 06:a3:6f:06:b3:4a:3f:20:d4:ab:9c:8f:3b:c5:ba:38:51:94: c5:e8:0a:65:7c:70:29:71:a5:a4:0e:e3:3e:dc:c9:88:b7:81: 4d:68:1b:c5:83:df:13:ea:05:2d:a1:f4:5d:e0:51:aa:9f:0f: e1:9a:9f:29 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUEWX/wVuJEmhD1EnVQSpXxayLHKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA4MDIwOTUxMzJaFw0yNzA4MDEwOTU2MzJaMDMxMTAvBgNV BAMTKEJEOEI5RjJENzU2NEY3MDVBNzcyNzc5ODVCQjczRDc4QjE0NUQ0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeKL89kt4lNWUEDF/CPtJ2KHRg LcTVd3HR5e7jMMidtcKshCQXl/gC67Bme6L7OSBzPH47K1B7PTzokNaYgmrlmRtE IgSpFwoxdoVGuDZiPwdu54wvVSsfrgYA4DgmSlGNmgt9Mk8acSGp7O2Lb0LGn3/c eC8xb2MlmCsYCg3VxMfc20bquMZbb50yhIvDeZvzuIoNXemGfzhsJz0/ztY909yP fSejMHTH+8+ACdbN/f1Av2M7BQVQd6qaFTUTad7ZmK8UPBwRL2HfrdEP+GuPytnI cIgXfVncpKFUAsE67c+mrK7LpoMPK02B+akvm46I/fdNY5uUTdoSigw0Z0UHAgMB AAGjggJuMIICajAdBgNVHQ4EFgQUvYufLXVk9wWncneYW7c9eLFF1IowHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDM2 M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMTM1MzAzODM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA KgafRjANBgkqhkiG9w0BAQsFAAOCAQEASKVxvbfQfbV5WoFe2ZPpL5X4TDaURI05 ZsW10/KP+XDc6nV9UtyeOk6I76TsFZkYPaGam7obHI/cV5cEu6BxRbaJpYnY6opk I9LSj+TyORVf6E43SR1RVQHH0ZOUxR9pwRrmRm8G6wj4xxyCr5DTLa5mS1N5gB8Z n7kuiGPsIqZEjnpu6UXcbTRc212WQb3zi/ttXT8BeAUd0WxyqNQxTMLevr70FK/A tniwIokzJ+Is2+wcMB0pHzPlBBUEV/j4oAypmrw3BqNvBrNKPyDUq5yPO8W6OFGU xegKZXxwKXGlpA7jPtzJiLeBTWgbxYPfE+oFLaH0XeBRqp8P4ZqfKQ== -----END CERTIFICATE-----Generated at Tue Aug 4 20:05:02 2026 by rpki-client