$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa File: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (raw, json) Hash identifier: vWVn4Krh8HFG73AqoAv0VK8xxfGftrDUl+DwuXFUflE= Subject key identifier: 38:46:78:92:9A:23:E0:C2:49:2A:0A:1E:E7:47:33:2F:D3:CD:B7:A7 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 0AE874A5E4A614633230FE4DFCF24F631E69EDC8 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa Signing time: Sat 04 Jul 2026 12:25:52 +0000 ROA not before: Sat 04 Jul 2026 12:20:52 +0000 ROA not after: Sat 03 Jul 2027 12:25:52 +0000 asID: 215577 IP address blocks: 2a07:54c7:5ffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 07:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e8:74:a5:e4:a6:14:63:32:30:fe:4d:fc:f2:4f:63:1e:69:ed:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Jul 4 12:20:52 2026 GMT Not After : Jul 3 12:25:52 2027 GMT Subject: CN=384678929A23E0C2492A0A1EE747332FD3CDB7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:44:93:48:a5:3d:55:90:f0:b9:49:f7:5e:6c: 95:d5:f6:09:59:70:cd:2c:0b:8f:12:a3:ea:2e:9c: 65:98:bf:0d:26:34:56:77:d6:9b:04:a3:52:42:a7: a8:f2:83:78:bf:53:0d:84:55:71:f3:e9:a7:53:5b: 94:04:bd:0e:0a:6a:7c:30:5c:d6:02:d8:57:8a:27: cf:b1:c1:d4:b8:29:73:8a:c0:35:85:5b:f3:87:50: 0d:78:e4:61:97:d9:86:ac:79:60:ea:be:e0:81:38: 3f:cc:3b:98:ad:f3:02:04:21:2d:8a:24:29:e7:96: 93:3c:4b:4f:c7:e5:ab:1e:f1:c9:77:59:d2:b8:50: c6:a3:72:d4:a3:c8:3a:f8:ce:96:a0:5c:43:ec:c2: 04:fd:75:3a:e2:b1:d1:35:fa:b5:e8:29:f9:c9:5e: c2:b2:17:6f:4c:a1:09:21:4e:e3:19:49:10:c5:8b: bf:7d:5a:40:b7:62:f7:28:fd:3c:5a:23:41:92:3e: ce:e0:59:d3:69:a3:38:36:e3:56:d2:e3:f9:cf:ae: 8a:b9:36:88:c8:75:c7:6a:5a:26:88:b8:20:50:37: 93:48:12:63:85:54:22:36:8c:f6:4a:60:aa:cd:b3: f1:7c:2f:b2:82:8d:c0:16:c6:3c:1e:0a:73:a2:a7: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:46:78:92:9A:23:E0:C2:49:2A:0A:1E:E7:47:33:2F:D3:CD:B7:A7 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5ffe::/48 Signature Algorithm: sha256WithRSAEncryption 37:7a:61:69:4e:ee:29:cf:e0:1f:18:b7:57:69:b7:80:81:c5: f1:09:f2:a7:ef:b8:9c:f8:90:3c:03:08:5c:f0:d3:cc:c7:16: b1:11:2a:3b:f1:6c:1e:89:df:5a:54:1a:37:ad:d6:97:b5:a9: ee:69:4c:83:f5:51:16:1c:08:87:7d:26:c2:b1:29:e7:50:2f: 4a:44:a0:5e:df:71:d6:f7:e9:8c:99:80:d8:de:01:a4:39:e1: e2:af:21:9d:d5:94:0e:2c:60:61:fd:62:86:75:6c:35:20:16: 11:f1:6f:99:2e:de:d1:ee:5e:b7:4a:f8:a6:df:f3:0a:c6:53: 72:96:66:da:71:5e:dc:51:ae:e1:86:2c:fa:8a:9f:bf:83:81: a0:88:3f:7d:a0:53:09:b4:04:ae:31:a6:63:65:f0:96:21:39: e1:59:ba:63:2c:6d:2d:b8:7c:b9:46:14:52:66:8c:df:92:72: 97:28:21:c4:fd:c9:a9:eb:89:c5:90:df:f7:a9:44:a3:53:db: 79:11:76:85:94:d6:af:86:b5:7d:ac:99:93:24:6e:fb:65:61: 2d:d4:16:38:9d:61:17:3a:ac:df:3a:98:33:db:02:b0:36:44: 5c:66:d5:b1:39:a2:06:27:7a:53:5f:c6:a9:46:20:5e:91:67: a5:9f:e0:46 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCuh0peSmFGMyMP5N/PJPYx5p7cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNjA3MDQxMjIwNTJaFw0yNzA3MDMxMjI1NTJaMDMxMTAvBgNV BAMTKDM4NDY3ODkyOUEyM0UwQzI0OTJBMEExRUU3NDczMzJGRDNDREI3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvRJNIpT1VkPC5SfdebJXV9glZ cM0sC48So+ounGWYvw0mNFZ31psEo1JCp6jyg3i/Uw2EVXHz6adTW5QEvQ4Kanww XNYC2FeKJ8+xwdS4KXOKwDWFW/OHUA145GGX2YaseWDqvuCBOD/MO5it8wIEIS2K JCnnlpM8S0/H5ase8cl3WdK4UMajctSjyDr4zpagXEPswgT9dTrisdE1+rXoKfnJ XsKyF29MoQkhTuMZSRDFi799WkC3Yvco/TxaI0GSPs7gWdNpozg241bS4/nProq5 NojIdcdqWiaIuCBQN5NIEmOFVCI2jPZKYKrNs/F8L7KCjcAWxjweCnOip6cfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUOEZ4kpoj4MJJKgoe50czL9PNt6cwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvMi8zMjYxMzAz NzNhMzUzNDYzMzczYTM1NjY2NjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUx1/+MA0GCSqGSIb3DQEBCwUAA4IBAQA3 emFpTu4pz+AfGLdXabeAgcXxCfKn77ic+JA8Awhc8NPMxxaxESo78Wweid9aVBo3 rdaXtanuaUyD9VEWHAiHfSbCsSnnUC9KRKBe33HW9+mMmYDY3gGkOeHiryGd1ZQO LGBh/WKGdWw1IBYR8W+ZLt7R7l63Svim3/MKxlNylmbacV7cUa7hhiz6ip+/g4Gg iD99oFMJtASuMaZjZfCWITnhWbpjLG0tuHy5RhRSZozfknKXKCHE/cmp64nFkN/3 qUSjU9t5EXaFlNavhrV9rJmTJG77ZWEt1BY4nWEXOqzfOpgz2wKwNkRcZtWxOaIG J3pTX8apRiBekWeln+BG -----END CERTIFICATE-----Generated at Tue Jul 21 14:32:20 2026 by rpki-client