$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa File: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (raw, json) Hash identifier: 4pHWpyVZFpmDYYnCP3t+rPQ/bvOYzNkXDNdwOaC6vs0= Subject key identifier: E0:AB:92:A1:61:42:27:EB:BF:58:3D:4E:84:A6:87:64:F1:AE:A3:9F Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 7169C2BA6F6A8BECFC2D3CE63250EAAB1099DA62 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa Signing time: Mon 22 Jun 2026 00:00:32 +0000 ROA not before: Sun 21 Jun 2026 23:55:32 +0000 ROA not after: Mon 21 Jun 2027 00:00:32 +0000 asID: 211066 IP address blocks: 2a06:1283:8003::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:69:c2:ba:6f:6a:8b:ec:fc:2d:3c:e6:32:50:ea:ab:10:99:da:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jun 21 23:55:32 2026 GMT Not After : Jun 21 00:00:32 2027 GMT Subject: CN=E0AB92A1614227EBBF583D4E84A68764F1AEA39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:40:7d:c3:3c:5a:7e:d4:c8:9c:fc:7d:77: f4:93:17:d8:85:42:17:6f:89:53:58:93:a2:1b:43: b2:6e:68:01:b7:c9:5d:49:3d:85:38:bb:98:f7:68: 85:14:2f:19:c6:20:e6:22:53:44:23:8c:ac:93:56: ad:78:ce:fe:ea:c8:c2:89:24:38:c8:d9:47:b6:c6: a3:80:e1:39:11:a1:b9:47:ab:19:54:74:92:7d:33: 12:90:ff:f2:d8:40:a7:d0:2c:ac:25:bc:d0:c8:20: f4:27:e6:36:ee:fe:09:42:f1:71:f4:37:39:b7:f8: aa:da:0e:26:36:c0:ba:4c:48:13:97:37:5d:ba:b5: 0e:cc:9c:bf:d9:ee:c2:9a:9b:ef:cc:a9:56:b0:82: 81:e4:3a:b3:d6:94:b4:e7:10:71:e6:57:c6:6b:83: d6:1d:38:84:71:02:c2:34:23:b1:4d:91:a1:c6:6b: 89:8b:05:39:44:ad:73:ef:a8:b3:14:c5:56:32:6c: 07:a1:ce:f9:f3:ee:b5:15:0f:83:9e:12:1e:66:3a: a0:23:54:a2:e6:ec:15:c3:de:b3:60:fb:4e:ca:95: 10:32:0b:07:7c:b2:8a:15:f6:25:84:88:9d:c1:a0: a3:f0:51:67:fa:40:12:9e:0f:ad:d6:c0:c1:61:df: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AB:92:A1:61:42:27:EB:BF:58:3D:4E:84:A6:87:64:F1:AE:A3:9F X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8003::/48 Signature Algorithm: sha256WithRSAEncryption 77:e6:e6:fa:b3:fd:3d:9d:16:74:25:1f:1c:be:b7:c3:6b:0d: 54:08:0c:7b:fe:fa:77:1c:03:c1:ac:06:7e:56:d2:08:75:49: cf:0f:d6:cd:0e:c7:67:95:51:7c:a7:14:cd:cd:40:8a:d5:44: 6d:9d:bb:a7:d4:36:ae:8f:b9:cd:f3:e5:7c:83:43:29:e5:ea: 67:a9:fe:26:7e:c2:2e:18:09:0f:4a:51:3a:ef:ae:ae:cb:cd: 61:ae:8c:f9:12:13:11:f4:8f:fb:98:7d:29:02:b3:65:aa:ca: c5:30:8e:20:38:70:e4:2c:5d:66:c1:be:31:a8:72:cf:da:12: 80:7a:5e:54:33:a7:f1:3c:29:e5:fa:e1:4f:4b:db:a0:38:87: a7:08:84:9e:9f:17:45:b0:57:cd:b2:fd:10:61:3d:23:ae:9c: dc:38:79:b7:6d:b0:5e:e7:79:17:ed:fd:11:5b:33:8b:e8:41: 9e:0f:de:64:5b:3e:90:8d:f4:dd:21:34:96:95:e3:39:a3:07: 96:12:7c:cf:33:b7:44:fb:cf:46:87:52:20:e0:ac:17:cf:21: e5:75:d2:a3:4b:c1:be:6d:73:aa:ce:eb:f8:96:5b:e5:48:7c: 19:34:ae:83:68:ca:79:81:c5:a5:16:d1:23:de:d9:d1:a1:ac: 8c:ff:a1:75 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUcWnCum9qi+z8LTzmMlDqqxCZ2mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA2MjEyMzU1MzJaFw0yNzA2MjEwMDAwMzJaMDMxMTAvBgNV BAMTKEUwQUI5MkExNjE0MjI3RUJCRjU4M0Q0RTg0QTY4NzY0RjFBRUEzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaU0B9wzxaftTInPx9d/STF9iF QhdviVNYk6IbQ7JuaAG3yV1JPYU4u5j3aIUULxnGIOYiU0QjjKyTVq14zv7qyMKJ JDjI2Ue2xqOA4TkRoblHqxlUdJJ9MxKQ//LYQKfQLKwlvNDIIPQn5jbu/glC8XH0 Nzm3+KraDiY2wLpMSBOXN126tQ7MnL/Z7sKam+/MqVawgoHkOrPWlLTnEHHmV8Zr g9YdOIRxAsI0I7FNkaHGa4mLBTlErXPvqLMUxVYybAehzvnz7rUVD4OeEh5mOqAj VKLm7BXD3rNg+07KlRAyCwd8sooV9iWEiJ3BoKPwUWf6QBKeD63WwMFh30TLAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQU4KuSoWFCJ+u/WD1OhKaHZPGuo58wHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzAzMDMzM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzEzMDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDgAMwDQYJKoZIhvcNAQELBQADggEB AHfm5vqz/T2dFnQlHxy+t8NrDVQIDHv++nccA8GsBn5W0gh1Sc8P1s0Ox2eVUXyn FM3NQIrVRG2du6fUNq6Puc3z5XyDQynl6mep/iZ+wi4YCQ9KUTrvrq7LzWGujPkS ExH0j/uYfSkCs2WqysUwjiA4cOQsXWbBvjGocs/aEoB6XlQzp/E8KeX64U9L26A4 h6cIhJ6fF0WwV82y/RBhPSOunNw4ebdtsF7neRft/RFbM4voQZ4P3mRbPpCN9N0h NJaV4zmjB5YSfM8zt0T7z0aHUiDgrBfPIeV10qNLwb5tc6rO6/iWW+VIfBk0roNo ynmBxaUW0SPe2dGhrIz/oXU= -----END CERTIFICATE-----Generated at Tue Jul 21 20:20:47 2026 by rpki-client