$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363030353a3a2f34382d3438203d3e20323139343138.roa File: 326130393a353463333a363030353a3a2f34382d3438203d3e20323139343138.roa (raw, json) Hash identifier: Sb+8Q4r8Ju2o+EI8zqIob3IV6wVo8dUK/DDSt9lRLwk= Subject key identifier: A3:80:FD:BE:9D:92:54:18:95:0F:91:97:B1:5C:06:C1:09:F5:B4:7F Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 12F9D3869193C1DEC16156FBE366031444D8366B Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363030353a3a2f34382d3438203d3e20323139343138.roa Signing time: Mon 22 Jun 2026 17:12:38 +0000 ROA not before: Mon 22 Jun 2026 17:07:38 +0000 ROA not after: Mon 21 Jun 2027 17:12:38 +0000 asID: 219418 IP address blocks: 2a09:54c3:6005::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f9:d3:86:91:93:c1:de:c1:61:56:fb:e3:66:03:14:44:d8:36:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jun 22 17:07:38 2026 GMT Not After : Jun 21 17:12:38 2027 GMT Subject: CN=A380FDBE9D925418950F9197B15C06C109F5B47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5c:8c:80:b1:9e:c9:76:2b:24:f0:b5:df:f7: b5:d3:e1:5d:d2:6c:2d:de:64:54:d1:75:56:15:9f: 4d:b0:e0:b3:c0:48:cc:f9:84:83:f6:6b:7e:c1:a9: fb:8f:33:6d:9d:96:a6:2b:1c:df:ca:3b:3f:08:25: c8:63:9f:ba:dd:b1:aa:a1:e6:f9:b8:c7:4a:af:e0: 8c:1b:26:5d:bb:6f:ab:79:64:12:2f:d8:60:81:48: d7:a5:f4:db:f7:9b:b5:dc:8c:35:01:5a:bf:ea:64: ba:a4:54:0d:37:02:6b:b2:07:b3:87:38:d7:7c:3b: d7:cb:77:52:31:ee:1c:e4:f0:0e:1a:e9:c9:cb:cb: 8b:a4:19:8c:44:3d:2a:05:19:30:46:de:3e:0f:60: ed:a2:ec:e3:92:ea:a2:c4:ad:3f:59:cf:3e:c0:d1: 17:69:4e:e3:5d:86:ec:18:83:77:fb:08:bb:e7:43: 09:0f:ea:b2:bc:af:c7:cd:a3:56:df:cf:63:3c:4c: d4:90:2c:87:e7:44:95:c7:bf:f3:95:a1:c4:65:9b: 8c:5b:bc:9e:35:f4:0e:66:5e:b1:bb:c7:5d:3e:a6: 14:0c:a6:49:88:5a:da:da:8c:11:83:38:79:54:e1: 2b:a9:f8:cd:98:1f:a3:4e:c9:db:d1:44:e6:b8:df: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:80:FD:BE:9D:92:54:18:95:0F:91:97:B1:5C:06:C1:09:F5:B4:7F X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363030353a3a2f34382d3438203d3e20323139343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:6005::/48 Signature Algorithm: sha256WithRSAEncryption 07:25:36:6f:84:df:2a:53:e1:fe:ca:96:be:2a:5b:dc:32:44: 7f:91:46:5f:b4:c5:cd:15:fc:ec:d0:95:0a:2d:27:83:30:cf: d2:99:ff:3a:32:57:af:38:4f:10:50:ad:26:d9:09:5a:fe:06: c9:2a:fd:dc:5b:83:7e:ff:5c:e4:be:70:c9:41:26:98:8c:28: 27:f2:9e:ee:18:4a:ca:71:c3:5c:57:e4:1d:07:e8:a4:26:78: 91:d6:7b:9e:51:9c:c6:e3:19:1f:da:ed:1a:ed:80:5d:e5:f0: 48:a8:46:bb:0b:91:f5:fd:5f:d5:19:ac:8c:01:b5:1e:1e:60: 4c:16:ef:60:50:8c:62:5a:97:c5:a7:7a:9c:de:5c:8e:14:5d: 2e:6c:80:f9:a5:c8:63:7b:01:0a:5d:21:48:a0:9e:cd:3d:50: 2f:c1:1c:09:3c:c2:62:72:1d:e0:ad:3c:bd:34:d0:89:b2:6b: 93:ab:ab:32:e4:92:03:24:d1:6e:51:86:7f:57:e2:bb:0c:8c: 1b:e2:96:6e:79:fc:c0:ba:6e:05:c7:2a:b4:37:d8:fc:a0:64: 24:e1:17:38:70:cf:b8:53:06:25:cf:a2:ce:00:84:a7:60:2a: 12:b7:5a:15:14:a4:5f:47:94:da:65:0b:32:b0:fd:9b:0b:63: 17:ca:92:f4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUEvnThpGTwd7BYVb742YDFETYNmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA2MjIxNzA3MzhaFw0yNzA2MjExNzEyMzhaMDMxMTAvBgNV BAMTKEEzODBGREJFOUQ5MjU0MTg5NTBGOTE5N0IxNUMwNkMxMDlGNUI0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXIyAsZ7Jdisk8LXf97XT4V3S bC3eZFTRdVYVn02w4LPASMz5hIP2a37BqfuPM22dlqYrHN/KOz8IJchjn7rdsaqh 5vm4x0qv4IwbJl27b6t5ZBIv2GCBSNel9Nv3m7XcjDUBWr/qZLqkVA03AmuyB7OH ONd8O9fLd1Ix7hzk8A4a6cnLy4ukGYxEPSoFGTBG3j4PYO2i7OOS6qLErT9Zzz7A 0RdpTuNdhuwYg3f7CLvnQwkP6rK8r8fNo1bfz2M8TNSQLIfnRJXHv/OVocRlm4xb vJ419A5mXrG7x10+phQMpkmIWtrajBGDOHlU4Sup+M2YH6NOydvRROa436X3AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUo4D9vp2SVBiVD5GXsVwGwQn1tH8wHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2EzNjMwMzAzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzOTM0MzEzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMNgBTANBgkqhkiG9w0BAQsFAAOCAQEAByU2b4TfKlPh/sqW vipb3DJEf5FGX7TFzRX87NCVCi0ngzDP0pn/OjJXrzhPEFCtJtkJWv4GySr93FuD fv9c5L5wyUEmmIwoJ/Ke7hhKynHDXFfkHQfopCZ4kdZ7nlGcxuMZH9rtGu2AXeXw SKhGuwuR9f1f1RmsjAG1Hh5gTBbvYFCMYlqXxad6nN5cjhRdLmyA+aXIY3sBCl0h SKCezT1QL8EcCTzCYnId4K08vTTQibJrk6urMuSSAyTRblGGf1fiuwyMG+KWbnn8 wLpuBccqtDfY/KBkJOEXOHDPuFMGJc+izgCEp2AqErdaFRSkX0eU2mULMrD9mwtj F8qS9A== -----END CERTIFICATE-----Generated at Mon Jun 29 10:33:35 2026 by rpki-client