$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa File: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (raw, json) Hash identifier: pBcgsCzE8VSZrRxLNHX2La9Up2EYDGqL+n7eIiT6ks8= Subject key identifier: D2:ED:19:FD:DC:0D:AB:4E:97:C1:04:6B:09:45:88:8A:2E:06:92:01 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 338BDCCA3D4210DDFB5A2A40879C07A4294303BD Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa Signing time: Sat 04 Jul 2026 12:25:52 +0000 ROA not before: Sat 04 Jul 2026 12:20:52 +0000 ROA not after: Sat 03 Jul 2027 12:25:52 +0000 asID: 215577 IP address blocks: 2a07:54c7:5f10::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 07:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8b:dc:ca:3d:42:10:dd:fb:5a:2a:40:87:9c:07:a4:29:43:03:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Jul 4 12:20:52 2026 GMT Not After : Jul 3 12:25:52 2027 GMT Subject: CN=D2ED19FDDC0DAB4E97C1046B0945888A2E069201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:91:5e:38:6f:1a:f3:e9:ba:6b:5c:2d:17: 5b:23:76:2c:58:32:a0:1c:c9:e4:d3:51:ad:b6:24: be:19:2b:36:04:d3:90:d7:c0:9c:16:c1:45:ea:dd: e2:9d:32:cf:ea:5b:18:d7:67:31:9e:5a:9b:85:ee: ff:35:30:0d:27:e9:d4:1f:6c:b8:f9:72:3d:b4:98: 61:4c:96:39:ac:ba:f1:de:e1:d2:92:7c:c2:4b:ef: 25:e7:40:54:a8:7f:42:65:fe:c6:ba:d5:61:29:9f: 86:cd:88:8c:4f:56:d5:7a:1b:1e:3e:fe:02:da:16: 1f:e9:70:f8:88:8d:45:aa:82:8e:77:71:7d:9f:cb: ed:a7:22:13:0b:61:73:87:d7:74:03:5f:79:7b:91: 16:37:bc:b4:13:bf:38:27:29:e0:54:a1:45:37:dc: 95:39:0a:1b:13:9f:9c:a7:d7:6f:bc:a8:26:16:e1: 4a:db:ed:11:b7:a9:6e:fd:48:a9:ff:4b:2a:27:b8: 24:6e:e5:7f:3b:14:a7:75:a5:e1:d3:ad:03:ec:74: f2:74:64:b7:2a:28:a0:db:93:b3:85:2f:14:d4:33: 38:fa:07:f0:21:96:7b:33:8d:87:4a:53:46:87:36: df:0c:b9:fd:69:64:c1:42:cd:7f:d4:02:f4:f8:45: 3c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:ED:19:FD:DC:0D:AB:4E:97:C1:04:6B:09:45:88:8A:2E:06:92:01 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5f10::/48 Signature Algorithm: sha256WithRSAEncryption af:55:51:36:7e:22:4d:97:dd:f3:80:b1:ea:ca:a9:9b:3a:d0: 74:c8:a7:7d:aa:70:61:c5:af:35:b6:ad:f1:49:e3:af:b5:00: bb:fd:62:4b:2a:3f:cd:02:89:9a:f8:38:01:45:ee:00:25:03: ce:e1:2d:8d:7a:bc:bf:7b:3c:1e:05:96:cb:c5:ea:80:89:ad: 8a:9d:d2:d8:c1:df:52:ae:c6:9d:ef:75:b1:49:a3:47:21:d5: be:ce:cf:e0:ba:20:f7:13:36:78:fd:4c:82:fc:75:3d:84:4e: 98:e4:77:98:5a:c6:05:ab:69:3b:08:6a:49:02:d2:e4:df:98: 61:0b:1f:ac:14:39:40:3e:ab:9d:cf:2c:98:b7:98:a1:d9:3a: b3:24:0c:55:e8:13:fd:23:75:dc:57:12:61:01:d9:22:1a:a2: f7:60:dd:98:d1:1f:57:be:ce:13:2f:8d:fb:af:e7:3e:0c:61: 7f:3f:87:39:34:ab:b0:8f:1a:86:cc:13:a7:fa:2e:cd:d2:a3: 44:1f:86:e8:f8:f3:51:c2:54:96:35:08:82:ec:69:77:01:29: f8:b8:17:03:54:61:3e:7e:c8:26:b8:aa:16:d4:b3:94:b8:41: 4b:5e:dd:62:d6:15:ba:ce:02:9d:cd:ff:be:ea:e9:45:50:44: 14:c6:94:b7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUM4vcyj1CEN37WipAh5wHpClDA70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjA3MDQxMjIwNTJaFw0yNzA3MDMxMjI1NTJaMDMxMTAvBgNV BAMTKEQyRUQxOUZEREMwREFCNEU5N0MxMDQ2QjA5NDU4ODhBMkUwNjkyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKPpFeOG8a8+m6a1wtF1sjdixY MqAcyeTTUa22JL4ZKzYE05DXwJwWwUXq3eKdMs/qWxjXZzGeWpuF7v81MA0n6dQf bLj5cj20mGFMljmsuvHe4dKSfMJL7yXnQFSof0Jl/sa61WEpn4bNiIxPVtV6Gx4+ /gLaFh/pcPiIjUWqgo53cX2fy+2nIhMLYXOH13QDX3l7kRY3vLQTvzgnKeBUoUU3 3JU5ChsTn5yn12+8qCYW4Urb7RG3qW79SKn/SyonuCRu5X87FKd1peHTrQPsdPJ0 ZLcqKKDbk7OFLxTUMzj6B/AhlnszjYdKU0aHNt8Muf1pZMFCzX/UAvT4RTzHAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU0u0Z/dwNq06XwQRrCUWIii4GkgEwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvMi8zMjYxMzAz NzNhMzUzNDYzMzczYTM1NjYzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUx18QMA0GCSqGSIb3DQEBCwUAA4IBAQCv VVE2fiJNl93zgLHqyqmbOtB0yKd9qnBhxa81tq3xSeOvtQC7/WJLKj/NAoma+DgB Re4AJQPO4S2Nery/ezweBZbLxeqAia2KndLYwd9Srsad73WxSaNHIdW+zs/guiD3 EzZ4/UyC/HU9hE6Y5HeYWsYFq2k7CGpJAtLk35hhCx+sFDlAPqudzyyYt5ih2Tqz JAxV6BP9I3XcVxJhAdkiGqL3YN2Y0R9Xvs4TL437r+c+DGF/P4c5NKuwjxqGzBOn +i7N0qNEH4bo+PNRwlSWNQiC7Gl3ASn4uBcDVGE+fsgmuKoW1LOUuEFLXt1i1hW6 zgKdzf++6ulFUEQUxpS3 -----END CERTIFICATE-----Generated at Tue Jul 21 14:31:23 2026 by rpki-client