$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363130303a3a2f34302d3430203d3e20323135313437.roa File: 326130393a353463333a363130303a3a2f34302d3430203d3e20323135313437.roa (raw, json) Hash identifier: nWl9+oXcM0cboeAlwKXLQnp7dtmOdxWJKv5cGRGWvec= Subject key identifier: 9E:88:5C:82:DD:C8:E9:94:2A:B7:7E:97:B8:1B:6D:EA:D9:21:0D:34 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 7B7B0E556A1D3AF6D6D5ACF9FA6CD240D521D18A Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363130303a3a2f34302d3430203d3e20323135313437.roa Signing time: Mon 22 Jun 2026 17:02:04 +0000 ROA not before: Mon 22 Jun 2026 16:57:04 +0000 ROA not after: Mon 21 Jun 2027 17:02:04 +0000 asID: 215147 IP address blocks: 2a09:54c3:6100::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Jul 2026 06:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:0e:55:6a:1d:3a:f6:d6:d5:ac:f9:fa:6c:d2:40:d5:21:d1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jun 22 16:57:04 2026 GMT Not After : Jun 21 17:02:04 2027 GMT Subject: CN=9E885C82DDC8E9942AB77E97B81B6DEAD9210D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:8b:6c:87:9a:77:43:0a:bb:4b:50:7f:19: 82:da:39:55:f9:f7:dd:0e:5a:59:4d:f4:e4:3f:3c: a8:cd:4d:c6:cb:84:7f:05:fc:57:81:49:96:39:e9: 64:8f:d9:d0:d0:bb:c8:40:72:96:02:89:c0:34:1b: ab:b6:00:53:4d:c2:32:2c:47:44:95:eb:01:4b:62: 30:77:32:ea:73:0a:52:19:42:72:32:3d:e5:9e:01: 3b:7a:d4:5d:6d:e9:d6:bd:20:c2:40:2d:6f:05:96: d2:89:69:c7:0a:c0:7c:a9:29:21:43:8b:3a:52:9a: 81:42:03:d8:75:2c:36:10:70:1a:9c:e0:1f:88:35: 2e:17:a5:10:0a:b7:30:e3:78:a9:6f:c9:dc:ed:63: 86:c8:a2:8c:f7:21:7d:bf:ca:d4:fa:bc:45:ad:cf: b3:bb:b9:43:35:16:d6:1f:0e:f0:40:99:20:4d:86: 20:35:b4:91:5c:ab:92:f2:60:8c:e9:82:d3:71:eb: 21:a5:76:29:b9:d1:01:f4:4f:48:d2:06:51:5b:14: eb:9d:d5:d5:8c:9f:39:78:22:99:17:37:15:93:1c: d3:1e:54:65:69:66:9c:46:2d:aa:1f:36:ce:23:fb: 10:2a:8b:03:96:31:5b:a7:2d:bd:98:cf:ae:8e:e8: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:88:5C:82:DD:C8:E9:94:2A:B7:7E:97:B8:1B:6D:EA:D9:21:0D:34 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363130303a3a2f34302d3430203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:6100::/40 Signature Algorithm: sha256WithRSAEncryption 5e:df:16:04:d8:71:b9:3c:40:86:06:3c:97:c6:4b:b3:86:47: e9:d1:40:49:ce:40:c0:00:34:55:db:33:5a:61:a0:6c:95:f5: f1:11:22:f8:28:65:89:3c:31:63:2d:9e:d1:03:04:b2:64:ac: 2c:13:ba:07:4c:5d:9d:ff:a2:06:99:a4:e1:a9:d1:93:b3:e7: 52:58:51:2f:03:94:79:bf:42:b0:67:a4:ec:1c:bb:03:2e:1a: aa:27:75:c8:24:b9:c2:57:2e:2f:26:95:07:1f:37:a7:74:b1: 13:b6:0b:e9:27:58:fa:39:17:c3:9a:99:73:0e:a4:9a:7f:d8: 7a:50:bd:12:00:22:8e:5f:fb:69:51:85:39:6b:06:61:bb:5a: fa:74:22:2c:1c:ee:96:b0:f8:22:9a:bf:54:11:03:83:9b:42: ef:8f:78:51:8b:2d:ca:1a:2e:3c:b5:79:07:9c:68:40:65:9e: b7:2d:e9:3e:a1:0c:50:26:42:ce:e0:00:36:38:b4:00:73:6b: d3:59:0d:66:cd:41:a8:a7:80:9f:fc:68:15:c2:79:3d:72:db: f6:1a:eb:8a:fd:e1:7b:df:51:2d:a5:3f:3c:85:ab:80:ec:d8: 69:c7:0a:c7:f1:50:df:35:4b:c9:c5:42:fc:59:82:1f:d9:f3: 2c:2f:b3:52 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUe3sOVWodOvbW1az5+mzSQNUh0YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA2MjIxNjU3MDRaFw0yNzA2MjExNzAyMDRaMDMxMTAvBgNV BAMTKDlFODg1QzgyRERDOEU5OTQyQUI3N0U5N0I4MUI2REVBRDkyMTBEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJotsh5p3Qwq7S1B/GYLaOVX5 990OWllN9OQ/PKjNTcbLhH8F/FeBSZY56WSP2dDQu8hAcpYCicA0G6u2AFNNwjIs R0SV6wFLYjB3MupzClIZQnIyPeWeATt61F1t6da9IMJALW8FltKJaccKwHypKSFD izpSmoFCA9h1LDYQcBqc4B+INS4XpRAKtzDjeKlvydztY4bIooz3IX2/ytT6vEWt z7O7uUM1FtYfDvBAmSBNhiA1tJFcq5LyYIzpgtNx6yGldim50QH0T0jSBlFbFOud 1dWMnzl4IpkXNxWTHNMeVGVpZpxGLaofNs4j+xAqiwOWMVunLb2Yz66O6BhbAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUnohcgt3I6ZQqt36XuBtt6tkhDTQwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2EzNjMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNTMxMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoJVMNhMA0GCSqGSIb3DQEBCwUAA4IBAQBe3xYE2HG5PECGBjyX xkuzhkfp0UBJzkDAADRV2zNaYaBslfXxESL4KGWJPDFjLZ7RAwSyZKwsE7oHTF2d /6IGmaThqdGTs+dSWFEvA5R5v0KwZ6TsHLsDLhqqJ3XIJLnCVy4vJpUHHzendLET tgvpJ1j6ORfDmplzDqSaf9h6UL0SACKOX/tpUYU5awZhu1r6dCIsHO6WsPgimr9U EQODm0Lvj3hRiy3KGi48tXkHnGhAZZ63Lek+oQxQJkLO4AA2OLQAc2vTWQ1mzUGo p4Cf/GgVwnk9ctv2GuuK/eF731EtpT88hauA7NhpxwrH8VDfNUvJxUL8WYIf2fMs L7NS -----END CERTIFICATE-----Generated at Wed Jul 1 14:01:50 2026 by rpki-client