$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363230303a3a2f34302d3430203d3e20323135313437.roa File: 326130393a353463333a363230303a3a2f34302d3430203d3e20323135313437.roa (raw, json) Hash identifier: KlpTdrap4oPUEJGaU6IagQnzVfBid6QPrR4PV84yXbE= Subject key identifier: 27:98:E5:67:11:55:E0:57:C7:2E:7A:6D:96:FA:82:CB:AE:16:EB:62 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 6D217AFD8DB97A04E18DC3D5D11981813FF201D8 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363230303a3a2f34302d3430203d3e20323135313437.roa Signing time: Tue 14 Jul 2026 17:05:02 +0000 ROA not before: Tue 14 Jul 2026 17:00:02 +0000 ROA not after: Tue 13 Jul 2027 17:05:02 +0000 asID: 215147 IP address blocks: 2a09:54c3:6200::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:21:7a:fd:8d:b9:7a:04:e1:8d:c3:d5:d1:19:81:81:3f:f2:01:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 14 17:00:02 2026 GMT Not After : Jul 13 17:05:02 2027 GMT Subject: CN=2798E5671155E057C72E7A6D96FA82CBAE16EB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:49:67:6e:95:ef:0e:a9:40:ad:83:85:82: 8b:f6:97:e3:87:cd:27:31:e3:1b:47:43:db:c5:37: e6:af:61:09:e5:65:9c:7c:49:8b:63:ee:57:3e:bf: e8:fd:b8:40:9b:66:af:af:4f:88:d8:4a:42:74:5b: 81:76:2b:a5:bd:36:69:c7:3e:c0:57:35:37:6e:5f: 38:93:c6:1c:8d:a2:ab:36:8f:50:89:83:5f:4c:70: ba:36:c6:44:78:20:ef:93:b0:1e:98:82:48:e9:4f: ee:81:42:5e:2f:02:d7:eb:24:2b:5b:59:e0:91:d2: c6:49:a0:ad:90:b9:d5:a8:ae:00:25:ba:96:af:f0: 74:41:22:fb:ca:f4:a0:9a:f5:ca:50:5b:a3:e7:74: ca:b1:08:b0:2d:18:f5:cf:b4:e8:60:4b:1e:ab:f3: 88:bd:d3:d0:1d:79:93:d4:cd:5d:1f:7f:c2:96:29: 0d:8f:91:5b:89:88:46:18:7d:0a:2d:1b:ff:41:b8: f9:b4:da:04:bc:04:ec:61:fc:75:eb:5c:c0:18:c4: 17:92:77:d3:63:1b:01:ce:7f:26:3d:55:0b:91:02: b9:6f:9b:ca:98:ca:75:60:42:0d:66:91:b9:4e:99: b8:f1:d1:81:c6:1f:9f:67:2b:fd:5b:09:50:83:0d: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:98:E5:67:11:55:E0:57:C7:2E:7A:6D:96:FA:82:CB:AE:16:EB:62 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a363230303a3a2f34302d3430203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:6200::/40 Signature Algorithm: sha256WithRSAEncryption 78:3a:4c:1c:fd:7b:3a:44:0e:24:a5:ff:18:94:fe:af:82:b3: 6e:cd:74:9d:47:34:cf:52:bf:85:5d:1f:b0:9a:a9:49:f1:aa: 37:88:ba:12:c5:f1:1f:b6:b0:09:e2:50:e7:f9:5f:d8:e1:7c: f5:d8:7f:55:f3:a8:9d:79:97:f3:29:db:6a:40:4b:55:7a:50: 4a:e1:00:a8:2f:f4:c6:71:8a:81:f6:2e:84:bb:cc:17:ce:05: 9a:ac:dc:12:b2:48:a6:cb:e4:14:48:10:16:a2:0c:e2:e1:c0: f3:d3:93:7f:3c:39:a5:07:4f:87:80:a9:59:2e:b2:98:cc:c8: a7:ce:a6:39:74:49:82:96:34:40:6b:e6:36:cb:02:6c:8e:f8: 19:95:7c:c0:c9:b8:69:a1:74:71:0e:05:bc:8d:65:da:57:25: f7:b9:b4:b2:39:c1:d8:7a:d9:25:d7:d3:08:d5:3e:e0:14:c9: c7:67:21:9d:51:72:c8:37:32:f0:a2:47:d8:d2:2a:bb:f0:24: 33:76:d7:69:50:e7:7b:e3:6a:df:97:60:8b:96:b6:ab:96:ab: 2b:77:06:da:67:c3:44:e1:8a:92:00:cc:4c:17:8d:7b:8f:cf: 40:32:66:b1:17:5b:89:22:ad:bd:92:1b:6f:ea:3d:b3:03:c9: 1a:2c:b3:92 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUbSF6/Y25egThjcPV0RmBgT/yAdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MTQxNzAwMDJaFw0yNzA3MTMxNzA1MDJaMDMxMTAvBgNV BAMTKDI3OThFNTY3MTE1NUUwNTdDNzJFN0E2RDk2RkE4MkNCQUUxNkVCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSklnbpXvDqlArYOFgov2l+OH zScx4xtHQ9vFN+avYQnlZZx8SYtj7lc+v+j9uECbZq+vT4jYSkJ0W4F2K6W9NmnH PsBXNTduXziTxhyNoqs2j1CJg19McLo2xkR4IO+TsB6YgkjpT+6BQl4vAtfrJCtb WeCR0sZJoK2QudWorgAlupav8HRBIvvK9KCa9cpQW6PndMqxCLAtGPXPtOhgSx6r 84i909AdeZPUzV0ff8KWKQ2PkVuJiEYYfQotG/9BuPm02gS8BOxh/HXrXMAYxBeS d9NjGwHOfyY9VQuRArlvm8qYynVgQg1mkblOmbjx0YHGH59nK/1bCVCDDWPrAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUJ5jlZxFV4FfHLnptlvqCy64W62IwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2EzNjMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEzNTMxMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoJVMNiMA0GCSqGSIb3DQEBCwUAA4IBAQB4Okwc/Xs6RA4kpf8Y lP6vgrNuzXSdRzTPUr+FXR+wmqlJ8ao3iLoSxfEftrAJ4lDn+V/Y4Xz12H9V86id eZfzKdtqQEtVelBK4QCoL/TGcYqB9i6Eu8wXzgWarNwSskimy+QUSBAWogzi4cDz 05N/PDmlB0+HgKlZLrKYzMinzqY5dEmCljRAa+Y2ywJsjvgZlXzAybhpoXRxDgW8 jWXaVyX3ubSyOcHYetkl19MI1T7gFMnHZyGdUXLINzLwokfY0iq78CQzdtdpUOd7 42rfl2CLlrarlqsrdwbaZ8NE4YqSAMxMF417j89AMmaxF1uJIq29khtv6j2zA8ka LLOS -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:05 2026 by rpki-client