$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa File: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (raw, json) Hash identifier: BZRQLqQAJ0cIPC4wI8bbtjWnX9DRSr0SwNQK6fvjnbY= Subject key identifier: 5C:C9:B5:32:97:44:E1:62:C0:7C:D7:61:90:16:F1:6A:AF:48:BD:2C Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 2D9ACDB3B4265E1D6EFEE5A8000BF066C1F2814A Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa Signing time: Wed 01 Jul 2026 06:00:33 +0000 ROA not before: Wed 01 Jul 2026 05:55:33 +0000 ROA not after: Wed 30 Jun 2027 06:00:33 +0000 asID: 215147 IP address blocks: 2a09:54c3:a100::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9a:cd:b3:b4:26:5e:1d:6e:fe:e5:a8:00:0b:f0:66:c1:f2:81:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 1 05:55:33 2026 GMT Not After : Jun 30 06:00:33 2027 GMT Subject: CN=5CC9B5329744E162C07CD7619016F16AAF48BD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:1e:6d:16:16:d5:e6:39:3e:ba:d9:13:cf: fc:37:c1:49:ff:f1:5c:6b:cd:6e:aa:01:88:9b:41: 38:3d:f9:cd:84:81:f9:88:11:9d:26:62:64:61:62: 4e:1c:1c:9c:92:e6:c2:37:66:c6:72:25:ec:04:69: 40:35:25:9d:8d:62:d4:20:7f:de:ca:63:76:e2:16: 6a:8d:32:66:e7:fc:bc:ec:95:57:2f:c2:73:cc:a1: a4:5d:8c:76:dc:39:4e:60:43:ef:8b:41:1b:e8:4d: e7:79:ab:be:6a:da:2f:37:60:04:f4:79:98:06:8a: 08:ce:cf:53:5c:53:c3:b2:ec:a6:7e:0a:ff:cd:18: ae:bd:10:c5:b8:73:8b:d9:2f:98:1b:d8:c5:76:d3: 2b:fc:04:b3:48:67:3c:3f:35:55:8a:f0:5a:a5:36: ef:f7:a1:42:da:d6:1e:88:df:42:f5:1b:1c:61:7c: cf:89:fa:95:8e:06:1c:42:56:65:f5:f2:f7:30:ac: e2:2d:0a:c8:42:65:b1:7e:ba:74:ac:4a:8f:28:99: 1a:2e:75:8b:ef:9a:20:8b:41:bb:05:dd:38:11:ad: ec:cf:0a:d8:28:55:f1:e3:40:24:f3:4a:47:7d:20: 3d:9d:0c:ec:7e:d3:17:27:ed:0e:02:91:89:7e:6f: 11:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C9:B5:32:97:44:E1:62:C0:7C:D7:61:90:16:F1:6A:AF:48:BD:2C X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a100::/48 Signature Algorithm: sha256WithRSAEncryption c3:88:aa:30:5a:30:1f:b9:48:be:5b:fd:d0:b7:89:45:a0:4d: 9e:45:58:93:e1:e4:07:ac:c2:bb:55:b4:99:92:f1:04:94:8c: 6a:e1:c8:bc:a9:45:92:64:38:89:12:ff:2d:3f:04:ee:02:e8: a3:47:ad:1f:47:af:83:04:bd:e2:61:85:b6:17:45:98:2f:5d: 48:39:74:a7:c4:8e:68:eb:57:00:d1:01:9e:34:81:49:9a:ac: 2a:92:46:29:11:70:ef:07:f8:1b:74:92:31:a4:f9:5c:b4:23: c9:84:5f:85:da:33:b8:d1:fe:85:75:61:bb:c6:16:55:d2:ba: f5:6f:c6:55:d1:44:64:26:90:07:60:4e:d4:ec:1c:c0:3b:02: 4c:14:04:a9:1c:87:a7:47:ae:27:a6:98:f3:28:32:0a:cd:97: c4:7b:bf:3d:ef:52:9e:4d:e5:e9:c4:2d:6c:9c:ce:e9:6c:63: 25:fc:f4:6f:aa:d4:d6:a9:b7:0d:b4:39:f4:a7:2c:4a:14:5f: 59:27:2b:a4:59:94:e8:ed:c9:e2:79:c0:1e:56:40:75:fd:af: 9d:ae:65:a1:c3:ea:e2:83:8d:d8:3b:f7:31:4c:40:3b:49:c4: fc:b7:22:4d:1e:c4:6b:e7:ce:64:e3:db:c3:e6:b8:45:00:ac: cf:b6:d0:4f -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIULZrNs7QmXh1u/uWoAAvwZsHygUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MDEwNTU1MzNaFw0yNzA2MzAwNjAwMzNaMDMxMTAvBgNV BAMTKDVDQzlCNTMyOTc0NEUxNjJDMDdDRDc2MTkwMTZGMTZBQUY0OEJEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzox5tFhbV5jk+utkTz/w3wUn/ 8VxrzW6qAYibQTg9+c2EgfmIEZ0mYmRhYk4cHJyS5sI3ZsZyJewEaUA1JZ2NYtQg f97KY3biFmqNMmbn/LzslVcvwnPMoaRdjHbcOU5gQ++LQRvoTed5q75q2i83YAT0 eZgGigjOz1NcU8Oy7KZ+Cv/NGK69EMW4c4vZL5gb2MV20yv8BLNIZzw/NVWK8Fql Nu/3oULa1h6I30L1GxxhfM+J+pWOBhxCVmX18vcwrOItCshCZbF+unSsSo8omRou dYvvmiCLQbsF3TgRrezPCtgoVfHjQCTzSkd9ID2dDOx+0xcn7Q4CkYl+bxEfAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUXMm1MpdE4WLAfNdhkBbxaq9IvSwwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMxMzAzMDNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzIzMTM1MzEzNDM3 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw ETAPBAIAAjAJAwcAKglUw6EAMA0GCSqGSIb3DQEBCwUAA4IBAQDDiKowWjAfuUi+ W/3Qt4lFoE2eRViT4eQHrMK7VbSZkvEElIxq4ci8qUWSZDiJEv8tPwTuAuijR60f R6+DBL3iYYW2F0WYL11IOXSnxI5o61cA0QGeNIFJmqwqkkYpEXDvB/gbdJIxpPlc tCPJhF+F2jO40f6FdWG7xhZV0rr1b8ZV0URkJpAHYE7U7BzAOwJMFASpHIenR64n ppjzKDIKzZfEe78971KeTeXpxC1snM7pbGMl/PRvqtTWqbcNtDn0pyxKFF9ZJyuk WZTo7cniecAeVkB1/a+drmWhw+rig43YO/cxTEA7ScT8tyJNHsRr585k49vD5rhF AKzPttBP -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:54 2026 by rpki-client