$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/326130663a363238333a663030303a3a2f33362d3438203d3e20323135363835.roa File: 326130663a363238333a663030303a3a2f33362d3438203d3e20323135363835.roa (raw, json) Hash identifier: bftpMskrnD/aa36IYmV90P4CJu+vNDx21LpK22sMgD4= Subject key identifier: 38:DF:02:14:EC:77:45:96:0F:65:66:40:37:8C:43:71:51:AA:62:A2 Certificate issuer: /CN=CE62AFC506F1860480AAF6A723393278644CFD7F Certificate serial: 23310ADEE3F897A85E70E6A917F0FE1FBD71A344 Authority key identifier: CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/326130663a363238333a663030303a3a2f33362d3438203d3e20323135363835.roa Signing time: Wed 01 Apr 2026 19:24:41 +0000 ROA not before: Wed 01 Apr 2026 19:19:41 +0000 ROA not after: Wed 31 Mar 2027 19:24:41 +0000 asID: 215685 IP address blocks: 2a0f:6283:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.mft rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 08:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:31:0a:de:e3:f8:97:a8:5e:70:e6:a9:17:f0:fe:1f:bd:71:a3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE62AFC506F1860480AAF6A723393278644CFD7F Validity Not Before: Apr 1 19:19:41 2026 GMT Not After : Mar 31 19:24:41 2027 GMT Subject: CN=38DF0214EC7745960F656640378C437151AA62A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:bf:6a:d1:09:bf:36:65:3e:9a:3c:20:b7: 34:45:a8:5a:86:f7:13:ca:de:fc:46:b0:c7:ca:ed: 42:9e:38:9e:3a:d0:59:e2:f2:7f:9d:67:b1:91:50: b0:a0:e7:d7:ac:99:e3:db:a8:c4:da:52:bb:cc:8a: 12:1e:c5:01:d3:87:90:c2:b3:6a:1b:15:6b:b2:a3: 98:4e:ec:5b:23:73:4b:a1:cf:bd:64:57:91:5b:a9: 1c:38:63:7e:ed:0a:f4:a6:d5:06:ec:10:5f:4f:32: 75:61:d9:dd:0d:ed:d5:a9:c6:9b:41:11:80:7d:ad: d4:b1:31:07:fc:e3:13:f8:05:62:8e:72:57:97:9d: b0:a9:4c:21:89:40:21:59:0e:6c:08:7c:08:3c:0d: b9:2f:a1:c9:3f:e9:5b:c0:33:00:2f:b7:07:54:b8: e7:67:62:9a:2a:49:74:f1:32:e4:6f:b4:e7:6e:4f: 87:9e:1f:e8:4c:f2:4d:ed:8a:6b:c6:a3:3e:f2:90: 5b:b0:ec:4a:2c:50:a9:c4:50:82:6e:15:ad:69:74: b0:6f:87:9e:19:c4:45:06:f0:85:f0:de:62:b9:9c: 1c:2d:b1:c9:88:00:d4:13:ef:65:86:0b:11:f1:78: b0:1c:a5:2b:45:39:3e:9c:b4:f8:05:fb:23:25:ef: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DF:02:14:EC:77:45:96:0F:65:66:40:37:8C:43:71:51:AA:62:A2 X509v3 Authority Key Identifier: keyid:CE:62:AF:C5:06:F1:86:04:80:AA:F6:A7:23:39:32:78:64:4C:FD:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/CE62AFC506F1860480AAF6A723393278644CFD7F.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/CE62AFC506F1860480AAF6A723393278644CFD7F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/2/326130663a363238333a663030303a3a2f33362d3438203d3e20323135363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:f000::/36 Signature Algorithm: sha256WithRSAEncryption 6e:ff:e1:a2:ec:30:08:f5:ec:d8:69:3e:19:b2:c2:c3:41:15: c5:ad:46:28:30:bb:da:ce:d8:5b:ab:29:51:97:ee:8f:f5:6f: 2a:96:cc:0c:3c:15:0e:dc:10:2e:fa:30:e7:69:de:e4:a7:8f: 66:7c:d8:14:f4:75:f7:2b:90:7e:9c:b3:1f:41:63:01:fd:20: 20:af:0c:e9:77:03:ff:d7:bb:b3:17:95:c3:e0:9e:12:05:c9: ce:4b:69:77:c9:f9:b4:4b:4c:a6:5c:46:fe:c2:08:69:0c:9e: 0d:fa:ae:b6:f3:09:ba:ba:3d:cb:46:f1:69:c7:50:68:d9:30: b4:0b:59:4e:77:84:fe:ac:a0:03:ba:00:a3:eb:a3:a4:93:37: df:45:47:38:7d:4e:74:df:de:44:b0:99:c6:22:3f:f7:46:50: 06:0c:de:92:9c:2c:97:1c:85:77:34:1f:3c:cf:07:f3:5c:e5: 76:f5:b9:a3:0d:9c:f5:3d:77:87:2e:d3:fd:78:dc:71:5e:f9: a3:ad:2a:a0:b1:8b:d0:86:b2:6f:90:33:0b:73:66:b6:24:e0: b9:4a:84:61:6c:2c:7f:ad:8b:f0:fd:0d:32:22:2e:17:3b:16: 72:da:c0:06:57:eb:f9:e9:c7:1c:c8:8d:d3:06:b0:91:38:9c: 75:fe:1a:60 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUIzEK3uP4l6hecOapF/D+H71xo0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2MkFGQzUwNkYxODYwNDgwQUFGNkE3MjMzOTMyNzg2 NDRDRkQ3RjAeFw0yNjA0MDExOTE5NDFaFw0yNzAzMzExOTI0NDFaMDMxMTAvBgNV BAMTKDM4REYwMjE0RUM3NzQ1OTYwRjY1NjY0MDM3OEM0MzcxNTFBQTYyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaLL9q0Qm/NmU+mjwgtzRFqFqG 9xPK3vxGsMfK7UKeOJ460Fni8n+dZ7GRULCg59esmePbqMTaUrvMihIexQHTh5DC s2obFWuyo5hO7Fsjc0uhz71kV5FbqRw4Y37tCvSm1QbsEF9PMnVh2d0N7dWpxptB EYB9rdSxMQf84xP4BWKOcleXnbCpTCGJQCFZDmwIfAg8Dbkvock/6VvAMwAvtwdU uOdnYpoqSXTxMuRvtOduT4eeH+hM8k3timvGoz7ykFuw7EosUKnEUIJuFa1pdLBv h54ZxEUG8IXw3mK5nBwtscmIANQT72WGCxHxeLAcpStFOT6ctPgF+yMl79iDAgMB AAGjggJUMIICUDAdBgNVHQ4EFgQUON8CFOx3RZYPZWZAN4xDcVGqYqIwHwYDVR0j BBgwFoAUzmKvxQbxhgSAqvanIzkyeGRM/X8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh MzIwLzIvQ0U2MkFGQzUwNkYxODYwNDgwQUFGNkE3MjMzOTMyNzg2NDRDRkQ3Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9DRTYyQUZDNTA2RjE4NjA0ODBBQUY2QTcy MzM5MzI3ODY0NENGRDdGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82ZTdmNzQ3ZS1mZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMi8zMjYxMzA2 NjNhMzYzMjM4MzMzYTY2MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKg9ig/AwDQYJKoZIhvcNAQELBQADggEBAG7/ 4aLsMAj17NhpPhmywsNBFcWtRigwu9rO2FurKVGX7o/1byqWzAw8FQ7cEC76MOdp 3uSnj2Z82BT0dfcrkH6csx9BYwH9ICCvDOl3A//Xu7MXlcPgnhIFyc5LaXfJ+bRL TKZcRv7CCGkMng36rrbzCbq6PctG8WnHUGjZMLQLWU53hP6soAO6AKPro6STN99F Rzh9TnTf3kSwmcYiP/dGUAYM3pKcLJcchXc0HzzPB/Nc5Xb1uaMNnPU9d4cu0/14 3HFe+aOtKqCxi9CGsm+QMwtzZrYk4LlKhGFsLH+ti/D9DTIiLhc7FnLawAZX6/np xxzIjdMGsJE4nHX+GmA= -----END CERTIFICATE-----Generated at Fri Apr 10 01:30:49 2026 by rpki-client