$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa File: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (raw, json) Hash identifier: lsGH7oLHHg9lgyrZlbnWHv6FsdNdaO+nWCquXXccVho= Subject key identifier: 81:C2:8A:42:62:02:9C:12:D1:C7:0A:C4:80:71:4A:A0:EF:98:8B:74 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 4F1714D9B6044534B6BD1410DDBA744203C56A51 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa Signing time: Wed 01 Jul 2026 06:00:33 +0000 ROA not before: Wed 01 Jul 2026 05:55:33 +0000 ROA not after: Wed 30 Jun 2027 06:00:33 +0000 asID: 215147 IP address blocks: 2a09:54c3:a101::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:17:14:d9:b6:04:45:34:b6:bd:14:10:dd:ba:74:42:03:c5:6a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 1 05:55:33 2026 GMT Not After : Jun 30 06:00:33 2027 GMT Subject: CN=81C28A4262029C12D1C70AC480714AA0EF988B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:53:c8:d4:ab:12:ff:fb:58:b2:5d:44:e0:5e: 7a:fd:a6:3d:4a:b1:f2:f5:11:2d:e1:0f:a9:5b:78: 56:bf:af:60:4d:90:94:40:33:f4:30:6a:0a:81:16: 41:46:e0:38:72:98:21:b5:22:c3:ab:5d:95:53:3c: 9b:fc:87:9b:a0:f1:57:d9:c5:4a:77:b7:35:4b:de: b6:12:a0:cb:36:07:1a:82:97:98:28:26:ec:58:6f: 14:d4:9d:75:dd:cf:27:73:97:54:a4:25:c9:35:f3: 2c:9d:65:89:af:d4:7c:f5:6e:f3:dd:8c:8e:20:43: 45:2d:d2:c2:3e:d4:d1:59:ec:63:89:4a:62:1c:38: 1e:85:f9:0b:d2:3f:0a:54:d3:cf:73:c5:62:27:e5: 0f:ee:4d:e9:73:50:0f:b3:36:89:19:95:47:ef:33: 4f:63:7b:c1:2a:71:b4:07:7a:3d:b7:77:6f:ca:b1: b1:4e:eb:0c:90:fc:d1:1e:2e:d5:8b:0b:6c:89:d7: 0b:78:b1:46:83:90:22:e5:0f:10:59:50:b5:85:9c: 10:8a:fa:e8:d7:75:42:52:e4:da:bf:2c:81:fc:fb: 05:36:58:fb:9c:4b:36:39:54:ce:cb:6a:76:79:11: 47:71:b2:3a:bd:6a:df:56:c0:c5:49:f3:e0:9c:72: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C2:8A:42:62:02:9C:12:D1:C7:0A:C4:80:71:4A:A0:EF:98:8B:74 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:a101::/48 Signature Algorithm: sha256WithRSAEncryption 28:2d:68:bb:f0:47:20:77:27:ff:96:e9:0c:e6:40:b1:02:59: 77:02:68:b4:09:1d:57:5d:cd:53:06:8b:c5:ee:e5:b7:50:26: a4:fd:1a:65:01:a9:cd:5d:58:05:49:5e:09:6d:4b:ae:b9:c8: 76:a3:5e:ad:85:cf:8f:24:8f:13:3a:0e:5e:ce:7a:3b:66:a6: 92:87:47:db:81:5b:33:23:7e:2f:39:98:02:14:4b:8c:88:3e: a3:4b:05:2a:cd:f6:fd:ed:63:45:4c:e3:2e:41:34:e3:32:c2: bf:67:3d:44:0d:d9:8d:b1:c4:49:4f:20:9f:c5:4b:56:77:79: 9a:03:ca:89:30:eb:45:5a:8c:7d:19:b4:c1:d3:81:01:05:a3: a6:59:b3:7e:b9:8a:cd:27:cc:c8:ca:75:52:f2:e3:50:b1:9e: 2f:59:db:ee:3a:df:8c:55:7f:1e:63:f0:92:c2:d1:ed:7d:5b: 89:12:c5:a5:e5:4c:8a:02:2c:28:59:07:80:ae:a4:be:6f:fe: 38:5b:01:27:a2:1d:03:50:0c:12:11:34:9b:a4:e8:92:92:80: f8:38:0e:8e:a0:34:26:4f:6b:df:3a:f7:ee:de:b7:15:be:5d: 34:58:5a:32:fa:d9:f8:91:65:c5:38:49:3f:a7:58:cb:9d:73: 7e:d0:a0:76 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUTxcU2bYERTS2vRQQ3bp0QgPFalEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MDEwNTU1MzNaFw0yNzA2MzAwNjAwMzNaMDMxMTAvBgNV BAMTKDgxQzI4QTQyNjIwMjlDMTJEMUM3MEFDNDgwNzE0QUEwRUY5ODhCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNU8jUqxL/+1iyXUTgXnr9pj1K sfL1ES3hD6lbeFa/r2BNkJRAM/QwagqBFkFG4DhymCG1IsOrXZVTPJv8h5ug8VfZ xUp3tzVL3rYSoMs2BxqCl5goJuxYbxTUnXXdzydzl1SkJck18yydZYmv1Hz1bvPd jI4gQ0Ut0sI+1NFZ7GOJSmIcOB6F+QvSPwpU089zxWIn5Q/uTelzUA+zNokZlUfv M09je8EqcbQHej23d2/KsbFO6wyQ/NEeLtWLC2yJ1wt4sUaDkCLlDxBZULWFnBCK +ujXdUJS5Nq/LIH8+wU2WPucSzY5VM7LanZ5EUdxsjq9at9WwMVJ8+CccrQLAgMB AAGjggJ8MIICeDAdBgNVHQ4EFgQUgcKKQmICnBLRxwrEgHFKoO+Yi3QwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbkGCCsGAQUFBwELBIGsMIGpMIGmBggrBgEFBQcwC4aBmXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2MTMxMzAzMTNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzIzMTM1MzEzNDM3 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw ETAPBAIAAjAJAwcAKglUw6EBMA0GCSqGSIb3DQEBCwUAA4IBAQAoLWi78Ecgdyf/ lukM5kCxAll3Ami0CR1XXc1TBovF7uW3UCak/RplAanNXVgFSV4JbUuuuch2o16t hc+PJI8TOg5ezno7ZqaSh0fbgVszI34vOZgCFEuMiD6jSwUqzfb97WNFTOMuQTTj MsK/Zz1EDdmNscRJTyCfxUtWd3maA8qJMOtFWox9GbTB04EBBaOmWbN+uYrNJ8zI ynVS8uNQsZ4vWdvuOt+MVX8eY/CSwtHtfVuJEsWl5UyKAiwoWQeArqS+b/44WwEn oh0DUAwSETSbpOiSkoD4OA6OoDQmT2vfOvfu3rcVvl00WFoy+tn4kWXFOEk/p1jL nXN+0KB2 -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:54 2026 by rpki-client