$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861393a3a2f34382d3438203d3e20323135313130.roa File: 326130393a353463333a663861393a3a2f34382d3438203d3e20323135313130.roa (raw, json) Hash identifier: ++4tcGLPcw4wwRlUQpqKxKZDhd62dGEXR86ecRY/3Ig= Subject key identifier: F9:DB:AD:20:8F:5D:D4:33:55:EC:6D:25:41:71:44:87:06:70:E2:58 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 494AF68065527034C869B96A943C142CF34F83B2 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861393a3a2f34382d3438203d3e20323135313130.roa Signing time: Wed 15 Jul 2026 19:30:46 +0000 ROA not before: Wed 15 Jul 2026 19:25:46 +0000 ROA not after: Wed 14 Jul 2027 19:30:46 +0000 asID: 215110 IP address blocks: 2a09:54c3:f8a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4a:f6:80:65:52:70:34:c8:69:b9:6a:94:3c:14:2c:f3:4f:83:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Jul 15 19:25:46 2026 GMT Not After : Jul 14 19:30:46 2027 GMT Subject: CN=F9DBAD208F5DD43355EC6D25417144870670E258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:cf:36:47:81:eb:1f:12:56:31:43:c6:1c: ea:05:d5:e2:69:f7:e8:ce:bc:65:79:32:9a:1f:98: 4a:e5:99:9f:95:0e:df:8b:81:a5:0d:eb:11:b6:e6: 30:02:4e:3f:00:af:57:d7:e1:a9:fc:09:80:30:37: 9b:0b:3d:a9:02:16:84:30:64:1d:71:45:9e:93:7d: a7:54:c7:34:30:dc:c3:c3:b1:30:6b:d2:ed:df:dc: 88:72:96:a3:73:4f:59:91:a0:66:83:d9:fc:ab:77: a4:71:60:32:9f:aa:65:aa:30:34:e0:38:e6:ac:29: ac:4b:00:aa:ef:f5:d5:d6:3b:85:51:e7:8d:b8:17: 95:1e:b7:79:f9:f7:8f:0d:9c:95:01:d8:73:74:df: 21:60:89:51:07:f6:7e:a5:e3:9e:13:7c:06:4b:b7: 0c:76:bb:ad:e5:04:8e:ba:3e:6f:72:0c:15:1c:24: c5:0d:58:9d:e6:19:3d:a6:18:b5:14:60:20:68:32: 74:69:61:1e:86:24:1e:fb:47:60:a2:6d:68:01:40: 22:36:de:a4:bf:a6:a3:3e:49:36:7e:bb:7e:c0:40: 71:c4:fb:b4:dc:95:18:57:53:96:75:3c:ea:48:d0: 77:ac:59:bf:9a:b4:91:0c:96:55:db:90:79:d2:e1: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:AD:20:8F:5D:D4:33:55:EC:6D:25:41:71:44:87:06:70:E2:58 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861393a3a2f34382d3438203d3e20323135313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:f8a9::/48 Signature Algorithm: sha256WithRSAEncryption 23:a8:f1:d7:6a:51:49:3e:d9:72:4e:ba:61:0f:e0:a3:67:57: 4f:3e:fa:3b:71:f0:a4:2b:3c:7a:0c:73:af:4f:06:fa:3e:76: fd:59:54:f5:3d:6a:82:f7:c4:34:e7:5f:31:8c:91:3c:f9:d5: 19:44:19:4f:89:d5:f5:57:7b:68:93:fb:90:30:3e:e2:29:7c: 88:a6:de:3f:9e:47:b5:36:a1:89:e4:ed:59:a7:08:84:c7:50: 65:ce:61:ce:48:e5:69:f3:87:6a:4a:d8:e3:23:18:0d:f3:14: 5c:a4:f8:c5:42:1f:cb:2d:06:5e:7d:c1:36:24:8e:08:a0:ef: 06:15:20:39:80:71:a7:ad:6d:09:8f:31:83:e1:0e:c7:c9:67: ba:04:bb:67:00:22:84:a3:b6:1d:19:f6:00:df:8b:e9:88:0b: d3:ed:60:4c:aa:b2:38:26:52:5a:79:be:96:42:8b:14:7d:9b: 65:42:e5:c6:d4:fb:95:0a:82:2d:e6:f2:ee:f9:40:1e:60:19: 1f:03:ba:e6:44:b3:ae:bb:b1:a6:7e:5f:d5:e3:cb:0e:15:14: b6:6a:82:e8:88:ff:7c:1f:5e:29:2a:43:44:10:4e:f3:a3:0c: 6f:82:35:d2:cd:bc:f7:63:a8:c7:cd:db:f7:80:89:0f:85:29: 35:bc:63:1f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUSUr2gGVScDTIablqlDwULPNPg7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA3MTUxOTI1NDZaFw0yNzA3MTQxOTMwNDZaMDMxMTAvBgNV BAMTKEY5REJBRDIwOEY1REQ0MzM1NUVDNkQyNTQxNzE0NDg3MDY3MEUyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmt882R4HrHxJWMUPGHOoF1eJp 9+jOvGV5MpofmErlmZ+VDt+LgaUN6xG25jACTj8Ar1fX4an8CYAwN5sLPakCFoQw ZB1xRZ6TfadUxzQw3MPDsTBr0u3f3IhylqNzT1mRoGaD2fyrd6RxYDKfqmWqMDTg OOasKaxLAKrv9dXWO4VR5424F5Uet3n5948NnJUB2HN03yFgiVEH9n6l454TfAZL twx2u63lBI66Pm9yDBUcJMUNWJ3mGT2mGLUUYCBoMnRpYR6GJB77R2CibWgBQCI2 3qS/pqM+STZ+u37AQHHE+7TclRhXU5Z1POpI0HesWb+atJEMllXbkHnS4X21AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU+dutII9d1DNV7G0lQXFEhwZw4lgwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2NjM4NjEzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTMxMzEzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMP4qTANBgkqhkiG9w0BAQsFAAOCAQEAI6jx12pRST7Zck66 YQ/go2dXTz76O3HwpCs8egxzr08G+j52/VlU9T1qgvfENOdfMYyRPPnVGUQZT4nV 9Vd7aJP7kDA+4il8iKbeP55HtTahieTtWacIhMdQZc5hzkjlafOHakrY4yMYDfMU XKT4xUIfyy0GXn3BNiSOCKDvBhUgOYBxp61tCY8xg+EOx8lnugS7ZwAihKO2HRn2 AN+L6YgL0+1gTKqyOCZSWnm+lkKLFH2bZULlxtT7lQqCLeby7vlAHmAZHwO65kSz rruxpn5f1ePLDhUUtmqC6Ij/fB9eKSpDRBBO86MMb4I10s2892Oox83b94CJD4Up NbxjHw== -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:05 2026 by rpki-client