$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861383a3a2f34382d3438203d3e20323135313437.roa File: 326130393a353463333a663861383a3a2f34382d3438203d3e20323135313437.roa (raw, json) Hash identifier: c4OAYm+S29Kw+sIdpOwEFAyikXL/NnCM1z5sdX8+LKU= Subject key identifier: 13:DD:E1:6A:EF:BA:7B:AB:06:B1:D9:3F:92:C2:53:01:E4:93:65:94 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 10046E2454F76A9F658529FAE6403A8F06A939CF Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861383a3a2f34382d3438203d3e20323135313437.roa Signing time: Tue 14 Jul 2026 17:02:02 +0000 ROA not before: Tue 14 Jul 2026 16:57:02 +0000 ROA not after: Tue 13 Jul 2027 17:02:02 +0000 asID: 215147 IP address blocks: 2a09:54c3:f8a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:04:6e:24:54:f7:6a:9f:65:85:29:fa:e6:40:3a:8f:06:a9:39:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 14 16:57:02 2026 GMT Not After : Jul 13 17:02:02 2027 GMT Subject: CN=13DDE16AEFBA7BAB06B1D93F92C25301E4936594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:b4:8d:92:72:12:b7:6a:51:8c:e8:5c:fc: 30:af:44:64:4c:57:80:24:51:a8:b5:bb:09:5b:33: 2c:f2:c7:e5:53:bc:6d:c7:7d:23:72:af:13:ab:3b: 52:46:ac:71:76:1f:63:bd:d4:72:db:b5:60:b2:5a: 05:fa:09:1a:64:a7:17:37:b8:23:e5:5d:54:d5:9b: d1:74:a8:f6:8b:d0:bc:f2:32:f7:a7:2c:41:52:c3: 20:25:02:42:a7:5f:6a:0a:32:d8:ca:e7:2f:07:fd: e8:2e:48:14:8d:c0:4a:75:02:f4:66:e4:53:1b:c1: c0:1b:e2:f1:83:96:27:a6:76:44:1f:3d:28:d8:f5: b8:9e:e5:6f:5a:b7:dc:88:06:be:a9:8e:27:0a:59: 84:9b:29:72:d9:e7:fa:01:80:4b:d3:57:ce:47:a9: 39:9d:73:ed:82:23:b3:fb:72:6d:1e:a8:cc:53:c9: 30:ec:5c:81:5a:ee:cb:c5:37:dc:2b:59:ad:d0:2e: cb:e5:66:80:a7:4a:a9:88:9b:8c:cf:62:34:3b:13: eb:eb:49:12:23:67:a2:e8:45:2c:b9:d3:bf:43:e9: bd:7a:ce:1c:b4:47:6d:68:a3:d8:25:76:e8:5a:c3: ec:61:2f:f0:45:c7:a4:59:38:f8:15:93:68:ab:b9: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DD:E1:6A:EF:BA:7B:AB:06:B1:D9:3F:92:C2:53:01:E4:93:65:94 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861383a3a2f34382d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:f8a8::/48 Signature Algorithm: sha256WithRSAEncryption 8f:18:27:58:e6:7e:cd:82:39:d7:c1:d2:eb:bc:c1:69:fc:02: 43:0e:37:5c:c9:a0:2f:37:ba:5b:83:88:47:b2:f6:f6:57:52: 9f:11:f5:e6:f7:cb:0b:3d:10:37:60:d6:ee:4f:85:23:e1:93: 04:a5:7a:a2:c2:65:4c:c2:bb:a0:5c:a0:bc:9e:20:86:24:1e: e3:12:61:e3:8e:91:ae:38:5c:60:b7:4c:c0:38:9a:f9:27:d3: 66:12:ff:32:f6:93:e1:88:82:bd:df:87:d6:e0:b6:40:e3:3f: 67:d7:9f:b7:cc:a4:21:a6:2a:59:b1:85:b3:8f:91:8c:86:5c: 6d:0b:ec:57:64:a7:5d:c8:1c:db:89:02:94:9f:b7:05:34:d4: 64:c1:05:42:c6:49:56:6c:1a:3c:71:78:ff:fb:da:11:8b:6a: 05:10:d5:f5:a7:73:c0:2b:bc:bf:8a:ae:af:29:f4:17:e8:89: f5:66:92:3b:49:54:b6:7f:3b:57:90:0e:5c:9e:2a:4a:c5:d7: dc:e9:fd:75:ff:4d:f4:2a:38:82:de:15:5b:b1:15:ee:cc:f3: 9c:96:2e:f5:b3:36:43:a2:25:ba:c4:fe:cf:48:fc:7d:79:ff: 83:f2:5b:6e:a4:63:e0:0f:78:09:e1:8c:2b:d2:df:6d:21:9c: 6e:36:52:f5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUEARuJFT3ap9lhSn65kA6jwapOc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MTQxNjU3MDJaFw0yNzA3MTMxNzAyMDJaMDMxMTAvBgNV BAMTKDEzRERFMTZBRUZCQTdCQUIwNkIxRDkzRjkyQzI1MzAxRTQ5MzY1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPArSNknISt2pRjOhc/DCvRGRM V4AkUai1uwlbMyzyx+VTvG3HfSNyrxOrO1JGrHF2H2O91HLbtWCyWgX6CRpkpxc3 uCPlXVTVm9F0qPaL0LzyMvenLEFSwyAlAkKnX2oKMtjK5y8H/eguSBSNwEp1AvRm 5FMbwcAb4vGDliemdkQfPSjY9bie5W9at9yIBr6pjicKWYSbKXLZ5/oBgEvTV85H qTmdc+2CI7P7cm0eqMxTyTDsXIFa7svFN9wrWa3QLsvlZoCnSqmIm4zPYjQ7E+vr SRIjZ6LoRSy5079D6b16zhy0R21oo9glduhaw+xhL/BFx6RZOPgVk2irubbDAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUE93hau+6e6sGsdk/ksJTAeSTZZQwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2NjM4NjEzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMxMzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMP4qDANBgkqhkiG9w0BAQsFAAOCAQEAjxgnWOZ+zYI518HS 67zBafwCQw43XMmgLze6W4OIR7L29ldSnxH15vfLCz0QN2DW7k+FI+GTBKV6osJl TMK7oFygvJ4ghiQe4xJh446RrjhcYLdMwDia+SfTZhL/MvaT4YiCvd+H1uC2QOM/ Z9eft8ykIaYqWbGFs4+RjIZcbQvsV2SnXcgc24kClJ+3BTTUZMEFQsZJVmwaPHF4 //vaEYtqBRDV9adzwCu8v4quryn0F+iJ9WaSO0lUtn87V5AOXJ4qSsXX3On9df9N 9Co4gt4VW7EV7szznJYu9bM2Q6IlusT+z0j8fXn/g/JbbqRj4A94CeGMK9LfbSGc bjZS9Q== -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:04 2026 by rpki-client