$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363030663a3a2f34382d3438203d3e20323139343138.roa File: 326130393a353463333a363030663a3a2f34382d3438203d3e20323139343138.roa (raw, json) Hash identifier: sKIw4NrThAO1kxA5bSRlrd8XVQtlWix2HvkVpkltELA= Subject key identifier: 83:45:A1:B1:B7:CC:B1:09:9A:A2:4C:99:D6:46:AB:61:A8:F9:1E:E4 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 5B41061745473F5C264E57B1B18B24B0D4A35E50 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363030663a3a2f34382d3438203d3e20323139343138.roa Signing time: Thu 02 Jul 2026 00:17:44 +0000 ROA not before: Thu 02 Jul 2026 00:12:44 +0000 ROA not after: Thu 01 Jul 2027 00:17:44 +0000 asID: 219418 IP address blocks: 2a09:54c3:600f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:41:06:17:45:47:3f:5c:26:4e:57:b1:b1:8b:24:b0:d4:a3:5e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 2 00:12:44 2026 GMT Not After : Jul 1 00:17:44 2027 GMT Subject: CN=8345A1B1B7CCB1099AA24C99D646AB61A8F91EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:59:74:55:fc:13:48:23:7a:33:be:56:1c: 8a:82:93:eb:90:c3:15:c5:4c:21:45:1e:e2:41:5b: 3d:8c:47:a4:83:2f:ea:7c:89:56:88:e2:dd:10:74: 90:9b:54:9d:38:0b:c4:f9:9a:6a:54:e9:d2:39:7c: 6c:00:1b:da:57:97:5e:50:f6:f0:34:77:76:b2:89: 63:23:d5:b2:c7:08:4a:7b:92:5e:7b:4f:e2:35:87: de:b9:f3:68:5e:18:37:13:4b:c2:b0:f8:23:f1:55: 82:f8:64:6d:3b:42:aa:99:06:03:dc:c5:23:34:4c: 46:75:7d:12:e3:5c:dc:06:be:8c:c2:00:9b:85:88: b8:4c:ad:7a:8d:0e:bb:ee:e8:60:05:e9:65:1f:f4: 56:d5:47:37:37:c8:4a:64:1b:33:f5:2c:17:bb:33: 94:fb:c4:66:0f:37:7c:16:5b:85:74:8e:53:dc:99: 64:60:46:2f:d1:69:1a:5e:a5:0f:a1:62:e6:b1:83: b3:1e:2c:de:b3:93:e7:fa:26:50:b0:db:d3:97:02: ac:8b:83:9d:d5:a4:3c:2d:22:26:8a:c0:90:7a:ec: e4:ba:c1:94:ca:8e:6e:2b:72:db:c4:a0:c5:d7:a1: 2f:39:5d:2d:4d:38:a4:db:5b:1c:33:64:aa:70:eb: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:45:A1:B1:B7:CC:B1:09:9A:A2:4C:99:D6:46:AB:61:A8:F9:1E:E4 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363030663a3a2f34382d3438203d3e20323139343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:600f::/48 Signature Algorithm: sha256WithRSAEncryption c2:a7:22:14:a5:7d:ca:cd:94:88:86:ae:95:73:56:03:a2:9a: 68:38:d3:5c:4b:4e:cc:96:fe:37:dc:70:b7:16:8e:57:fc:9c: 7a:58:8a:c4:fc:fe:26:ab:26:49:b2:f0:ae:0e:b9:81:bd:2c: 28:2a:05:29:b3:0c:d4:d5:c3:c5:53:a3:01:36:f5:a8:73:82: c3:e5:88:1a:65:13:72:41:39:1e:89:c7:59:c4:ec:82:51:14: 08:49:f0:96:13:b2:24:e0:9b:e8:8f:59:af:49:9a:44:e0:6f: 65:52:b9:ac:49:23:68:26:5b:7a:27:5f:50:2d:21:8c:63:52: 88:0f:20:53:57:d8:e6:1f:f9:bb:0d:34:d9:11:eb:74:54:6b: 10:29:b6:1e:40:c8:4d:57:c4:59:85:56:98:82:89:eb:61:76: d2:4b:bc:67:7d:f5:2f:41:8b:d6:e1:62:c4:81:7b:03:b3:23: 0d:0c:2d:97:f7:e0:63:0a:2b:db:5f:03:62:01:fe:67:64:e2: 1c:38:67:ad:42:cf:61:83:8e:8b:e9:89:d6:99:72:bd:9c:61: ef:01:a8:71:50:83:85:3c:28:40:4b:11:f3:19:c5:72:dc:bb: 0f:7f:94:e2:54:91:7e:4d:15:24:18:ff:e8:9e:29:b4:7e:b7: 16:ef:6b:68 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUW0EGF0VHP1wmTlexsYsksNSjXlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MDIwMDEyNDRaFw0yNzA3MDEwMDE3NDRaMDMxMTAvBgNV BAMTKDgzNDVBMUIxQjdDQ0IxMDk5QUEyNEM5OUQ2NDZBQjYxQThGOTFFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4Vl0VfwTSCN6M75WHIqCk+uQ wxXFTCFFHuJBWz2MR6SDL+p8iVaI4t0QdJCbVJ04C8T5mmpU6dI5fGwAG9pXl15Q 9vA0d3ayiWMj1bLHCEp7kl57T+I1h96582heGDcTS8Kw+CPxVYL4ZG07QqqZBgPc xSM0TEZ1fRLjXNwGvozCAJuFiLhMrXqNDrvu6GAF6WUf9FbVRzc3yEpkGzP1LBe7 M5T7xGYPN3wWW4V0jlPcmWRgRi/RaRpepQ+hYuaxg7MeLN6zk+f6JlCw29OXAqyL g53VpDwtIiaKwJB67OS6wZTKjm4rctvEoMXXoS85XS1NOKTbWxwzZKpw66/nAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUg0WhsbfMsQmaokyZ1karYaj5HuQwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2EzNjMwMzA2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzOTM0MzEzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMNgDzANBgkqhkiG9w0BAQsFAAOCAQEAwqciFKV9ys2UiIau lXNWA6KaaDjTXEtOzJb+N9xwtxaOV/yceliKxPz+JqsmSbLwrg65gb0sKCoFKbMM 1NXDxVOjATb1qHOCw+WIGmUTckE5HonHWcTsglEUCEnwlhOyJOCb6I9Zr0maROBv ZVK5rEkjaCZbeidfUC0hjGNSiA8gU1fY5h/5uw002RHrdFRrECm2HkDITVfEWYVW mIKJ62F20ku8Z331L0GL1uFixIF7A7MjDQwtl/fgYwor218DYgH+Z2TiHDhnrULP YYOOi+mJ1plyvZxh7wGocVCDhTwoQEsR8xnFcty7D3+U4lSRfk0VJBj/6J4ptH63 Fu9raA== -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:04 2026 by rpki-client