$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa File: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (raw, json) Hash identifier: apK/0hsVpmhUeemtv6EK//BPPuH/vapkmzdJ2BaKCqI= Subject key identifier: 60:7C:8C:FA:D3:5C:AE:C1:F3:69:00:3A:06:1A:A3:D4:A7:01:A2:6C Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 1A3069735E594258E8E11CCC4A8E9786739A08A2 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa Signing time: Sat 04 Jul 2026 12:25:52 +0000 ROA not before: Sat 04 Jul 2026 12:20:52 +0000 ROA not after: Sat 03 Jul 2027 12:25:52 +0000 asID: 215577 IP address blocks: 2a07:54c7:5f00::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 07:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:30:69:73:5e:59:42:58:e8:e1:1c:cc:4a:8e:97:86:73:9a:08:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Jul 4 12:20:52 2026 GMT Not After : Jul 3 12:25:52 2027 GMT Subject: CN=607C8CFAD35CAEC1F369003A061AA3D4A701A26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:0e:45:fe:5c:1d:0c:0c:57:7b:e2:9a:66: c7:d4:79:02:f7:61:d9:b2:25:f5:a5:2f:37:2a:d6: 5b:c1:7d:1a:32:0b:10:01:25:aa:ed:b9:34:55:94: 36:1f:32:5a:80:07:97:fb:7e:fa:1b:24:39:3a:6a: 73:d4:61:6a:33:66:21:a7:32:c7:ca:83:47:b5:7c: fe:98:cf:92:00:5f:e2:68:82:31:cb:9e:62:4f:da: 5d:1a:32:9b:7a:03:f1:17:bf:e4:0d:43:5d:18:3b: e4:48:23:47:8c:37:42:f2:8c:e2:93:d4:9a:bf:99: 36:2f:2f:91:67:82:d0:6b:19:0b:86:2e:54:8b:af: 83:2e:fe:f9:cc:5f:e0:e2:e4:b9:e2:1d:ce:5c:07: 3b:99:a3:92:99:dd:32:a6:84:9e:37:58:b5:bb:b4: 8e:30:f5:02:0c:88:cd:46:df:67:c2:6b:7d:89:2a: 8b:d7:f0:43:e4:6c:a2:8a:73:80:dd:df:be:e9:54: 7d:5e:c6:cc:26:18:fb:95:59:77:dd:3a:a9:1e:e5: c4:2a:0f:b1:69:5e:13:42:6d:d4:a6:bf:42:e9:94: 9c:53:4a:e6:69:30:a9:1e:46:f9:f2:58:65:bf:cc: b5:ff:d0:0e:e2:47:96:40:0c:30:9e:a0:a0:fd:c8: 84:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7C:8C:FA:D3:5C:AE:C1:F3:69:00:3A:06:1A:A3:D4:A7:01:A2:6C X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5f00::/44 Signature Algorithm: sha256WithRSAEncryption 3e:30:e9:8a:16:ea:ab:98:c8:0b:dc:b3:21:9a:e6:46:e2:b5: d6:3f:ae:49:01:0a:82:fc:21:18:f6:3c:e0:54:b2:68:9a:65: 2d:57:fa:70:80:33:aa:eb:5b:6b:65:ef:fb:0c:41:45:73:7a: 46:81:eb:cb:a1:5b:ef:18:bd:b1:40:f7:4f:fc:ad:e3:5f:ac: 70:d4:1c:b4:3c:64:ea:d7:74:1b:3d:2e:ed:dc:2f:8b:14:20: 00:fe:31:1a:c6:2d:21:5b:10:41:06:0b:21:5a:41:7d:df:5a: e8:4b:58:d5:6a:66:3d:89:40:b6:69:9f:43:ec:55:f6:dd:5c: 22:e0:45:8a:7e:60:35:26:39:e5:6d:30:c1:51:d0:68:81:bd: 7f:f6:c6:f4:5c:34:da:4f:a8:05:21:f2:4f:b2:7d:49:4e:87: 84:8a:30:2f:21:2e:28:40:43:bf:91:42:a6:95:df:ac:64:67: 5f:bc:09:c1:c9:4d:47:70:98:40:01:3a:f9:16:e4:2f:61:82: a5:71:c2:25:a2:8c:5f:d7:7a:ad:db:9a:cd:c9:40:1b:9a:81: b1:4b:9e:4a:c8:8a:d8:13:fb:8c:74:c2:d8:57:75:e7:8b:5c: ca:a6:db:12:e2:da:7f:2a:6e:8f:46:ce:b7:17:ac:a2:d5:aa: ac:9f:bc:40 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUGjBpc15ZQljo4RzMSo6XhnOaCKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjA3MDQxMjIwNTJaFw0yNzA3MDMxMjI1NTJaMDMxMTAvBgNV BAMTKDYwN0M4Q0ZBRDM1Q0FFQzFGMzY5MDAzQTA2MUFBM0Q0QTcwMUEyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2g5F/lwdDAxXe+KaZsfUeQL3 YdmyJfWlLzcq1lvBfRoyCxABJartuTRVlDYfMlqAB5f7fvobJDk6anPUYWozZiGn MsfKg0e1fP6Yz5IAX+JogjHLnmJP2l0aMpt6A/EXv+QNQ10YO+RII0eMN0LyjOKT 1Jq/mTYvL5FngtBrGQuGLlSLr4Mu/vnMX+Di5LniHc5cBzuZo5KZ3TKmhJ43WLW7 tI4w9QIMiM1G32fCa32JKovX8EPkbKKKc4Dd377pVH1exswmGPuVWXfdOqke5cQq D7FpXhNCbdSmv0LplJxTSuZpMKkeRvnyWGW/zLX/0A7iR5ZADDCeoKD9yITVAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUYHyM+tNcrsHzaQA6Bhqj1KcBomwwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvMi8zMjYxMzAz NzNhMzUzNDYzMzczYTM1NjYzMDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM1MzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgdUx18AMA0GCSqGSIb3DQEBCwUAA4IBAQA+ MOmKFuqrmMgL3LMhmuZG4rXWP65JAQqC/CEY9jzgVLJommUtV/pwgDOq61trZe/7 DEFFc3pGgevLoVvvGL2xQPdP/K3jX6xw1By0PGTq13QbPS7t3C+LFCAA/jEaxi0h WxBBBgshWkF931roS1jVamY9iUC2aZ9D7FX23Vwi4EWKfmA1JjnlbTDBUdBogb1/ 9sb0XDTaT6gFIfJPsn1JToeEijAvIS4oQEO/kUKmld+sZGdfvAnByU1HcJhAATr5 FuQvYYKlccIlooxf13qt25rNyUAbmoGxS55KyIrYE/uMdMLYV3Xni1zKptsS4tp/ Km6PRs63F6yi1aqsn7xA -----END CERTIFICATE-----Generated at Tue Jul 21 14:31:14 2026 by rpki-client