$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861313a3a2f34382d3438203d3e20323030393132.roa File: 326130393a353463333a663861313a3a2f34382d3438203d3e20323030393132.roa (raw, json) Hash identifier: FCAlip+CNwsjJL1bxw6pbiua695GICP2dr74eLi9WIE= Subject key identifier: 7B:FA:6E:D1:39:A2:3A:BC:39:7B:D5:09:08:B4:48:23:2E:9B:F8:FC Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 48E9607BDE7322E3C9ACA18232A9152B821E5879 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861313a3a2f34382d3438203d3e20323030393132.roa Signing time: Thu 14 May 2026 19:02:49 +0000 ROA not before: Thu 14 May 2026 18:57:49 +0000 ROA not after: Thu 13 May 2027 19:02:49 +0000 asID: 200912 IP address blocks: 2a09:54c3:f8a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 28 May 2026 08:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e9:60:7b:de:73:22:e3:c9:ac:a1:82:32:a9:15:2b:82:1e:58:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: May 14 18:57:49 2026 GMT Not After : May 13 19:02:49 2027 GMT Subject: CN=7BFA6ED139A23ABC397BD50908B448232E9BF8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:47:9a:c9:1b:1a:e0:98:00:24:8d:de:25: c4:29:27:ce:c1:bd:da:cb:19:a9:2e:75:81:6f:98: e6:54:9c:66:d6:82:d5:c8:af:db:3f:0a:d0:80:81: 9b:62:b6:c9:35:ea:5b:95:aa:dc:ec:85:a9:a4:9d: f7:84:2b:08:1c:71:52:cc:84:10:74:10:af:05:28: bd:5f:4d:4d:99:35:57:aa:0a:29:99:27:5c:5e:8f: 16:41:0a:ec:44:c5:de:33:61:fc:f4:8c:11:82:0d: 30:bb:c5:bc:12:f0:33:05:e1:bb:3e:4a:62:c7:42: c5:f1:f1:c6:23:7b:6f:1c:9b:e6:64:40:b0:e9:e3: 6c:e4:61:11:b2:f4:ce:9e:cc:c3:80:c6:91:a6:a5: 07:61:52:4b:0f:60:82:8c:00:96:a0:6f:41:22:ee: c4:cd:d3:83:3f:19:82:8e:1d:4e:f8:4a:92:71:12: 97:ad:c8:80:9a:3b:c1:1a:94:59:4e:cc:42:b9:7e: dd:1f:bf:f7:12:8e:8a:5a:94:70:1f:cb:be:f9:1f: 6d:bf:30:f2:b6:26:80:df:b4:58:df:13:c1:70:3f: 8c:29:cb:ff:88:7a:41:7d:86:1d:bc:5b:16:61:fc: cd:11:cb:a8:86:c8:06:e2:f8:52:9b:66:e8:5d:91: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FA:6E:D1:39:A2:3A:BC:39:7B:D5:09:08:B4:48:23:2E:9B:F8:FC X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861313a3a2f34382d3438203d3e20323030393132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:f8a1::/48 Signature Algorithm: sha256WithRSAEncryption 6f:87:e9:ae:9f:a1:0e:c8:7e:06:5e:83:1c:b2:cc:dc:32:1c: 87:2c:32:f4:99:99:19:a0:6c:9f:a0:61:4a:0a:f5:1a:e9:b2: d1:73:ea:38:44:59:f9:09:3a:5a:5a:ad:f2:17:07:c2:c1:c2: 9c:7a:7a:61:29:2c:3f:bb:11:39:13:ca:4a:aa:1d:db:07:44: 11:9b:d0:ac:fb:ce:7d:fc:33:09:08:ef:26:68:99:ec:7f:54: c0:7d:48:81:5e:bc:d2:b2:7c:2f:44:97:38:c0:93:ae:1f:0b: 6f:5d:ea:fb:78:40:e3:a0:2e:2f:f6:e4:ac:78:3e:a9:3d:27: 12:2f:c3:05:20:af:ef:b7:df:3a:17:26:b2:1a:64:c7:2e:44: 8a:2d:a2:0e:0b:6b:62:49:36:37:43:7c:4b:d4:c2:ee:9a:81: 65:7e:48:94:ff:07:b1:df:76:e8:a2:b0:6b:40:d8:e5:e1:75: 61:c0:b7:87:39:e6:ee:d6:29:cc:93:88:dd:52:d3:4b:65:58: c8:99:b2:bb:85:0c:0a:7c:4a:df:88:f4:ee:60:eb:d4:a5:4f: 23:55:1a:d0:c3:80:2d:ef:96:bc:c1:14:5d:d7:f0:86:4b:90: 04:7f:68:0f:b3:e9:4e:19:05:42:91:8f:75:28:b0:27:7c:52: c1:c5:84:fe -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUSOlge95zIuPJrKGCMqkVK4IeWHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA1MTQxODU3NDlaFw0yNzA1MTMxOTAyNDlaMDMxMTAvBgNV BAMTKDdCRkE2RUQxMzlBMjNBQkMzOTdCRDUwOTA4QjQ0ODIzMkU5QkY4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6keayRsa4JgAJI3eJcQpJ87B vdrLGakudYFvmOZUnGbWgtXIr9s/CtCAgZtitsk16luVqtzshamknfeEKwgccVLM hBB0EK8FKL1fTU2ZNVeqCimZJ1xejxZBCuxExd4zYfz0jBGCDTC7xbwS8DMF4bs+ SmLHQsXx8cYje28cm+ZkQLDp42zkYRGy9M6ezMOAxpGmpQdhUksPYIKMAJagb0Ei 7sTN04M/GYKOHU74SpJxEpetyICaO8EalFlOzEK5ft0fv/cSjopalHAfy775H22/ MPK2JoDftFjfE8FwP4wpy/+IekF9hh28WxZh/M0Ry6iGyAbi+FKbZuhdkc61AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUe/pu0TmiOrw5e9UJCLRIIy6b+PwwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2NjM4NjEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMDM5MzEzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMP4oTANBgkqhkiG9w0BAQsFAAOCAQEAb4fprp+hDsh+Bl6D HLLM3DIchywy9JmZGaBsn6BhSgr1Gumy0XPqOERZ+Qk6Wlqt8hcHwsHCnHp6YSks P7sRORPKSqod2wdEEZvQrPvOffwzCQjvJmiZ7H9UwH1IgV680rJ8L0SXOMCTrh8L b13q+3hA46AuL/bkrHg+qT0nEi/DBSCv77ffOhcmshpkxy5Eii2iDgtrYkk2N0N8 S9TC7pqBZX5IlP8Hsd926KKwa0DY5eF1YcC3hznm7tYpzJOI3VLTS2VYyJmyu4UM CnxK34j07mDr1KVPI1Ua0MOALe+WvMEUXdfwhkuQBH9oD7PpThkFQpGPdSiwJ3xS wcWE/g== -----END CERTIFICATE-----Generated at Wed May 27 17:02:15 2026 by rpki-client