$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa File: 326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa (raw, json) Hash identifier: ONcitOTF4nf9vG71nL0mbyM38SYfrxQqVzfvqNutiX8= Subject key identifier: AC:D2:BB:F9:F1:45:4A:74:D9:C7:38:BB:20:D6:1A:BC:83:E6:7C:DE Certificate issuer: /CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222 Certificate serial: 1570EDB7E1CC821DF20A9850B36B86827AB74CB6 Authority key identifier: EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa Signing time: Mon 03 Aug 2026 21:39:39 +0000 ROA not before: Mon 03 Aug 2026 21:34:39 +0000 ROA not after: Mon 02 Aug 2027 21:39:39 +0000 asID: 201398 IP address blocks: 2a0b:4e07:2000::/37 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:70:ed:b7:e1:cc:82:1d:f2:0a:98:50:b3:6b:86:82:7a:b7:4c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEE4A02E545C02C2C5A2556E1E446F1C94E5222 Validity Not Before: Aug 3 21:34:39 2026 GMT Not After : Aug 2 21:39:39 2027 GMT Subject: CN=ACD2BBF9F1454A74D9C738BB20D61ABC83E67CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:4d:b4:88:2e:64:78:e3:8b:95:90:17:ef: f2:73:38:c6:89:df:ef:91:3e:d6:af:75:3d:d7:b3: 25:1c:3e:a7:ab:46:7c:6d:34:87:a2:02:1d:da:c4: fe:da:1c:2e:12:05:de:39:b5:37:32:19:8c:d5:f6: f2:56:b8:d3:93:a0:81:fb:47:67:0d:d6:0c:a4:18: 00:f7:91:24:68:ba:66:9a:6b:35:be:cb:ef:2a:4b: ab:c8:d5:e1:20:84:69:a9:77:3e:f4:1e:74:1f:4a: fd:2d:4f:63:df:c1:ee:78:1f:e8:dd:39:8e:91:96: 36:9c:5b:fd:ee:41:f7:70:e2:a4:ce:ab:f6:31:3a: d9:fb:b7:99:ce:f8:1c:79:85:07:6d:d7:ce:37:68: fb:b9:6e:37:50:3b:f8:93:0a:ad:00:cb:06:26:af: 39:c2:32:1b:c7:90:ee:65:7b:bd:04:71:eb:03:35: 6c:b0:db:10:c8:1c:99:e0:ab:dd:78:9d:3f:e0:60: 23:e0:9f:1c:56:70:52:1e:2a:ec:62:a4:d9:3a:1a: 5b:68:6b:52:87:aa:19:a3:2b:05:59:49:f3:cf:d9: 54:7c:66:fc:2e:a9:15:f2:0f:07:70:2a:19:7f:42: b7:db:b3:de:4c:b9:9d:48:5b:ae:43:26:07:d1:a4: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:BB:F9:F1:45:4A:74:D9:C7:38:BB:20:D6:1A:BC:83:E6:7C:DE X509v3 Authority Key Identifier: keyid:EA:EE:4A:02:E5:45:C0:2C:2C:5A:25:56:E1:E4:46:F1:C9:4E:52:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EAEE4A02E545C02C2C5A2556E1E446F1C94E5222.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/2/326130623a346530373a323030303a3a2f33372d3438203d3e20323031333938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2000::/37 Signature Algorithm: sha256WithRSAEncryption 2b:34:f4:d4:00:73:fe:2a:c1:db:51:b2:4d:cd:fd:c0:f4:8e: 54:0b:95:3a:a5:b6:86:5f:46:fc:45:c8:57:e3:3a:91:0e:5a: 27:94:06:b5:c8:90:37:fb:a9:ff:39:b5:32:be:ee:24:6a:6c: 36:cc:29:c0:d7:27:7f:2a:a6:90:6f:6d:5c:19:ce:22:c0:62: 6f:35:f4:cf:8c:59:7d:76:86:5d:96:3a:19:6e:8c:fd:ae:13: 57:ec:50:13:8a:2d:4b:50:4c:9b:2b:44:c8:d8:01:5b:32:af: da:12:86:43:7a:79:7b:4b:7d:e9:2b:d7:ee:70:c1:93:c8:92: c6:0d:4d:12:b4:08:c4:a9:a2:18:9c:99:ea:e7:8a:e5:38:f2: 71:08:06:36:f2:83:71:e3:8a:ba:fa:18:e0:5e:ed:5e:93:d8: da:a9:ab:55:b1:95:cc:62:b6:14:bb:0d:4c:23:fb:ce:67:91: 99:e1:02:28:81:6e:43:9e:36:57:92:12:21:f4:0b:80:89:c5: ff:94:c1:c1:87:00:ee:bd:6f:ca:00:ee:fd:8a:82:1e:3b:c1: 37:55:39:d7:2e:99:9c:d2:7e:93:9f:d2:41:de:38:58:54:ef: 1e:a6:f2:cd:9c:5f:cc:b5:48:1e:e1:c2:d8:59:8e:5d:8d:94: 19:33:0e:8d -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUFXDtt+HMgh3yCphQs2uGgnq3TLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFD OTRFNTIyMjAeFw0yNjA4MDMyMTM0MzlaFw0yNzA4MDIyMTM5MzlaMDMxMTAvBgNV BAMTKEFDRDJCQkY5RjE0NTRBNzREOUM3MzhCQjIwRDYxQUJDODNFNjdDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcp020iC5keOOLlZAX7/JzOMaJ 3++RPtavdT3XsyUcPqerRnxtNIeiAh3axP7aHC4SBd45tTcyGYzV9vJWuNOToIH7 R2cN1gykGAD3kSRoumaaazW+y+8qS6vI1eEghGmpdz70HnQfSv0tT2Pfwe54H+jd OY6RljacW/3uQfdw4qTOq/YxOtn7t5nO+Bx5hQdt1843aPu5bjdQO/iTCq0AywYm rznCMhvHkO5le70EcesDNWyw2xDIHJngq914nT/gYCPgnxxWcFIeKuxipNk6Glto a1KHqhmjKwVZSfPP2VR8ZvwuqRXyDwdwKhl/Qrfbs95MuZ1IW65DJgfRpHYVAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUrNK7+fFFSnTZxzi7INYavIPmfN4wHwYDVR0j BBgwFoAU6u5KAuVFwCwsWiVW4eRG8clOUiIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNmZDlhMmMtODdmMS00OGE5LWI2ZWEtMjhhZDA5N2I3 NWQzLzIvRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFDOTRFNTIyMi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUFFRTRBMDJFNTQ1QzAyQzJDNUEyNTU2RTFFNDQ2RjFDOTRF NTIyMi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNmZDlhMmMt ODdmMS00OGE5LWI2ZWEtMjhhZDA5N2I3NWQzLzIvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjMwMzAzMDNhM2EyZjMzMzcyZDM0MzgyMDNkM2UyMDMyMzAzMTMzMzkzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGAyoLTgcgMA0GCSqGSIb3DQEBCwUAA4IBAQArNPTUAHP+KsHbUbJN zf3A9I5UC5U6pbaGX0b8RchX4zqRDlonlAa1yJA3+6n/ObUyvu4kamw2zCnA1yd/ KqaQb21cGc4iwGJvNfTPjFl9doZdljoZboz9rhNX7FATii1LUEybK0TI2AFbMq/a EoZDenl7S33pK9fucMGTyJLGDU0StAjEqaIYnJnq54rlOPJxCAY28oNx44q6+hjg Xu1ek9jaqatVsZXMYrYUuw1MI/vOZ5GZ4QIogW5DnjZXkhIh9AuAicX/lMHBhwDu vW/KAO79ioIeO8E3VTnXLpmc0n6Tn9JB3jhYVO8epvLNnF/MtUge4cLYWY5djZQZ Mw6N -----END CERTIFICATE-----Generated at Wed Aug 26 22:32:33 2026 by rpki-client