$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa File: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (raw, json) Hash identifier: 9BHpytc7pXx6aIvZB3fYpuWzlGukQUf0KjUB6iLDphc= Subject key identifier: A2:0A:41:72:7A:49:F7:31:04:9A:D0:3D:60:55:98:3C:9B:E2:A0:C7 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 7B3EEC1AF47B0B7DCC9FEBCEBE0FAF1222A363AF Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa Signing time: Wed 24 Jun 2026 20:08:00 +0000 ROA not before: Wed 24 Jun 2026 20:03:00 +0000 ROA not after: Wed 23 Jun 2027 20:08:00 +0000 asID: 151704 IP address blocks: 2a0b:4e07:1c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3e:ec:1a:f4:7b:0b:7d:cc:9f:eb:ce:be:0f:af:12:22:a3:63:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jun 24 20:03:00 2026 GMT Not After : Jun 23 20:08:00 2027 GMT Subject: CN=A20A41727A49F731049AD03D6055983C9BE2A0C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:01:d2:8e:47:14:4c:b9:7c:46:0a:d7:9c:db: 33:f8:0d:28:91:62:2a:6e:51:0a:00:86:82:e6:02: 15:48:86:45:3e:44:b2:05:06:0e:0c:62:f5:94:de: fd:4d:af:86:ab:c9:31:e1:f2:f7:ec:d0:d0:3b:49: 9d:e8:51:36:76:ab:e1:c2:50:55:40:17:4f:a6:2f: 70:4e:82:8f:65:e9:ad:49:6c:46:34:03:4d:42:ad: df:ad:31:da:78:68:52:4a:6f:1d:1e:8c:db:80:e1: f0:d7:66:18:af:82:b8:d0:12:93:bb:6d:bc:1e:bc: 35:ef:a2:15:aa:65:33:6b:8a:c2:50:7a:b1:4b:12: 2d:58:36:d5:a5:63:1f:57:b8:f6:2b:7d:e7:b9:25: d2:60:c4:2c:95:75:64:2e:f5:06:8f:22:ba:74:cf: 78:e6:11:2f:6c:db:b6:ed:63:47:d5:ee:c6:de:38: f2:67:a2:f0:03:66:20:2d:72:5e:83:87:2a:57:45: f5:51:fb:82:3c:f3:17:1a:53:d5:1d:d4:97:92:14: 12:b5:aa:85:e9:6c:bf:a8:7a:bc:77:ec:8a:99:ab: 22:44:81:99:71:85:27:c1:c4:61:33:ff:f1:24:31: 9a:e7:51:eb:a0:8b:c8:fa:78:7a:a9:6e:f9:23:66: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0A:41:72:7A:49:F7:31:04:9A:D0:3D:60:55:98:3C:9B:E2:A0:C7 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c00::/48 Signature Algorithm: sha256WithRSAEncryption bb:e5:f8:6d:8c:db:92:ad:dc:2c:bd:f9:3a:71:10:a3:68:a1: 60:df:53:cf:db:06:10:65:a7:12:62:d7:aa:95:82:7d:cf:33: 73:3b:2e:d1:b9:49:1b:0c:26:13:38:dd:fa:de:0e:82:59:02: 41:db:50:97:6e:34:15:f4:9c:16:77:00:30:66:41:62:4e:6f: 1b:ef:0b:10:17:af:54:20:57:f1:19:0f:0f:fa:2b:2b:55:5f: 62:6d:d7:3a:60:b0:ef:a6:06:d0:d3:71:d2:9e:c7:1a:38:92: 23:ea:27:98:81:7c:d9:c2:90:8c:51:ef:9e:cf:b9:00:aa:ec: f5:ae:48:74:4f:78:89:33:60:8e:08:0f:11:a5:d7:03:6b:16: 75:02:ae:0d:fc:90:93:36:cf:78:d3:2b:b9:ed:a4:9e:21:31: b3:bd:ab:98:17:af:fd:01:50:72:ad:ed:89:2c:43:48:bb:5e: 77:a8:33:ad:cd:ad:08:60:d1:7d:c9:17:9c:25:bd:dd:f6:1f: 80:95:8d:00:c8:27:b8:48:ef:5c:d8:fd:29:71:5d:20:1f:c0: 6a:84:1d:fa:81:f9:f3:09:f3:5e:50:62:cd:cd:88:df:fe:05: 77:85:7d:92:b9:d4:37:a5:36:33:23:27:72:04:14:5c:6b:61: 4d:67:9e:8e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUez7sGvR7C33Mn+vOvg+vEiKjY68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA2MjQyMDAzMDBaFw0yNzA2MjMyMDA4MDBaMDMxMTAvBgNV BAMTKEEyMEE0MTcyN0E0OUY3MzEwNDlBRDAzRDYwNTU5ODNDOUJFMkEwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwAdKORxRMuXxGCtec2zP4DSiR YipuUQoAhoLmAhVIhkU+RLIFBg4MYvWU3v1Nr4aryTHh8vfs0NA7SZ3oUTZ2q+HC UFVAF0+mL3BOgo9l6a1JbEY0A01Crd+tMdp4aFJKbx0ejNuA4fDXZhivgrjQEpO7 bbwevDXvohWqZTNrisJQerFLEi1YNtWlYx9XuPYrfee5JdJgxCyVdWQu9QaPIrp0 z3jmES9s27btY0fV7sbeOPJnovADZiAtcl6DhypXRfVR+4I88xcaU9Ud1JeSFBK1 qoXpbL+oerx37IqZqyJEgZlxhSfBxGEz//EkMZrnUeugi8j6eHqpbvkjZmcZAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUogpBcnpJ9zEEmtA9YFWYPJvioMcwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAt MGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMTYzMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTM3MzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgccADANBgkqhkiG9w0BAQsFAAOCAQEAu+X4bYzbkq3cLL35 OnEQo2ihYN9Tz9sGEGWnEmLXqpWCfc8zczsu0blJGwwmEzjd+t4OglkCQdtQl240 FfScFncAMGZBYk5vG+8LEBevVCBX8RkPD/orK1VfYm3XOmCw76YG0NNx0p7HGjiS I+onmIF82cKQjFHvns+5AKrs9a5IdE94iTNgjggPEaXXA2sWdQKuDfyQkzbPeNMr ue2kniExs72rmBev/QFQcq3tiSxDSLted6gzrc2tCGDRfckXnCW93fYfgJWNAMgn uEjvXNj9KXFdIB/AaoQd+oH58wnzXlBizc2I3/4Fd4V9krnUN6U2MyMncgQUXGth TWeejg== -----END CERTIFICATE-----Generated at Tue Jul 21 18:22:05 2026 by rpki-client