$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa File: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (raw, json) Hash identifier: 0ULXldxk/0eSWpclGLE70Em7/bissXZuMoO5VQhOO28= Subject key identifier: 53:64:BF:81:90:09:F2:9F:F9:F4:B7:93:6C:DA:76:B7:E5:34:A7:6C Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 70C0A33D6B7370BD34F5D30C03C2D0011845AB9B Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa Signing time: Wed 24 Jun 2026 20:08:00 +0000 ROA not before: Wed 24 Jun 2026 20:03:00 +0000 ROA not after: Wed 23 Jun 2027 20:08:00 +0000 asID: 151704 IP address blocks: 2a0b:4e07:1c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c0:a3:3d:6b:73:70:bd:34:f5:d3:0c:03:c2:d0:01:18:45:ab:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jun 24 20:03:00 2026 GMT Not After : Jun 23 20:08:00 2027 GMT Subject: CN=5364BF819009F29FF9F4B7936CDA76B7E534A76C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:5f:2a:5e:2f:55:d7:31:78:00:e2:c4:1d: f7:c0:52:35:d7:3e:bf:a2:0e:1d:e5:e3:73:c9:8f: bd:f1:17:3e:55:64:16:fb:c3:f4:92:be:5c:13:55: 5c:76:3b:a4:ad:01:30:fe:36:69:a0:b1:3d:d3:36: b8:0e:74:e7:86:98:06:a7:ad:d8:c2:9f:98:1d:59: c8:ac:a3:7e:8a:7c:04:e2:69:75:7f:45:3f:3d:cc: f9:c7:7b:30:46:3f:0d:3d:d4:91:98:89:b4:df:54: 1c:56:fe:55:09:27:cf:24:e2:b3:13:0b:07:45:39: b1:7b:02:7f:5f:83:e3:48:3a:57:52:f7:11:3d:80: e3:2d:81:25:13:72:1e:f4:e7:f7:6f:90:ee:fd:68: a6:f5:b7:ee:05:78:4f:de:a9:82:fe:87:18:9b:3e: 3b:c6:cf:2e:9f:da:a8:06:06:c9:3a:e1:eb:48:36: 88:c2:b5:7d:32:5c:9c:93:a4:8a:00:1b:be:cd:53: 0a:28:be:0d:c5:ee:4d:65:06:3b:f9:eb:95:ac:b7: 52:23:73:f2:92:36:1e:57:89:aa:c7:45:a2:19:73: bf:cf:08:3d:9d:b9:23:b2:94:1a:14:1a:9a:1d:87: 08:ca:5c:90:88:04:f9:0b:38:9c:35:2b:57:bd:ab: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:64:BF:81:90:09:F2:9F:F9:F4:B7:93:6C:DA:76:B7:E5:34:A7:6C X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c01::/48 Signature Algorithm: sha256WithRSAEncryption 35:73:d7:38:d7:fe:da:84:f2:42:1f:31:42:6b:3c:0e:0d:c4: c9:a9:ad:e1:10:df:0a:9f:6f:3e:4f:b7:e9:49:65:7b:de:e2: ed:55:bb:f5:3c:08:60:3d:5c:d2:58:34:6e:40:7d:a2:69:12: 2c:26:e4:cf:df:f8:25:fd:50:55:d1:cf:12:6b:63:51:e5:49: b6:16:0b:c8:9d:fe:45:b2:90:3e:5e:78:15:21:4c:45:82:3e: 0d:e9:e5:72:6d:b8:2c:d5:64:5f:f4:6a:dd:8f:47:f1:a5:9c: 2d:c6:22:be:f3:c7:40:0b:80:e1:84:0d:09:af:69:85:67:f9: cc:11:45:ed:ee:66:58:3e:90:e1:f1:a5:b9:10:f7:fe:ae:4c: bd:53:80:5b:32:c0:e4:41:00:ff:bc:ec:0a:96:ec:44:c2:21: b4:30:58:a3:b1:72:8a:cb:ae:bc:d8:7f:cc:88:fe:69:ed:04: d6:5c:31:b2:f3:d1:33:e2:e1:95:9f:d1:9b:48:c2:76:32:85: 23:d2:69:5d:b4:ef:ae:ce:08:46:b5:c5:33:c3:d9:23:ec:8e: 9d:be:85:78:d4:b2:03:dd:15:34:09:f7:4b:e8:da:91:25:e6: 0a:ae:48:96:53:f5:b6:b2:91:13:35:da:c1:0e:44:a7:ae:1b: 57:3c:93:cb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUcMCjPWtzcL009dMMA8LQARhFq5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNjA2MjQyMDAzMDBaFw0yNzA2MjMyMDA4MDBaMDMxMTAvBgNV BAMTKDUzNjRCRjgxOTAwOUYyOUZGOUY0Qjc5MzZDREE3NkI3RTUzNEE3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTF8qXi9V1zF4AOLEHffAUjXX Pr+iDh3l43PJj73xFz5VZBb7w/SSvlwTVVx2O6StATD+NmmgsT3TNrgOdOeGmAan rdjCn5gdWciso36KfATiaXV/RT89zPnHezBGPw091JGYibTfVBxW/lUJJ88k4rMT CwdFObF7An9fg+NIOldS9xE9gOMtgSUTch705/dvkO79aKb1t+4FeE/eqYL+hxib PjvGzy6f2qgGBsk64etINojCtX0yXJyTpIoAG77NUwoovg3F7k1lBjv565Wst1Ij c/KSNh5XiarHRaIZc7/PCD2duSOylBoUGpodhwjKXJCIBPkLOJw1K1e9q2GpAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUU2S/gZAJ8p/59LeTbNp2t+U0p2wwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAt MGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMTYzMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTM3MzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgccATANBgkqhkiG9w0BAQsFAAOCAQEANXPXONf+2oTyQh8x Qms8Dg3Eyamt4RDfCp9vPk+36Ulle97i7VW79TwIYD1c0lg0bkB9omkSLCbkz9/4 Jf1QVdHPEmtjUeVJthYLyJ3+RbKQPl54FSFMRYI+Denlcm24LNVkX/Rq3Y9H8aWc LcYivvPHQAuA4YQNCa9phWf5zBFF7e5mWD6Q4fGluRD3/q5MvVOAWzLA5EEA/7zs CpbsRMIhtDBYo7FyisuuvNh/zIj+ae0E1lwxsvPRM+LhlZ/Rm0jCdjKFI9JpXbTv rs4IRrXFM8PZI+yOnb6FeNSyA90VNAn3S+jakSXmCq5IllP1trKREzXawQ5Ep64b VzyTyw== -----END CERTIFICATE-----Generated at Tue Jul 21 18:22:01 2026 by rpki-client