$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa File: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (raw, json) Hash identifier: QUdcaAWn6C0rRifC05Eb+UyicOWd/5qy/suPtH7clcc= Subject key identifier: DD:58:5D:F3:A3:F7:72:B7:44:C3:15:16:58:53:B4:E9:CE:D7:D8:79 Certificate issuer: /CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Certificate serial: 5FC7178DDA8A2D6B537E0B0C778FB46BCACE4D90 Authority key identifier: 9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa Signing time: Tue 12 May 2026 19:54:18 +0000 ROA not before: Tue 12 May 2026 19:49:18 +0000 ROA not after: Tue 11 May 2027 19:54:18 +0000 asID: 214420 IP address blocks: 167.104.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 23:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c7:17:8d:da:8a:2d:6b:53:7e:0b:0c:77:8f:b4:6b:ca:ce:4d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Validity Not Before: May 12 19:49:18 2026 GMT Not After : May 11 19:54:18 2027 GMT Subject: CN=DD585DF3A3F772B744C315165853B4E9CED7D879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:eb:b1:3a:8e:34:b2:a1:6d:5a:1d:e0:b9: 31:b7:54:df:04:72:6f:6a:b1:67:ee:de:f4:b0:1c: f7:b5:96:66:b2:41:8e:81:ce:e9:df:16:45:34:a4: d0:de:cf:20:78:1f:c2:13:12:ac:ed:b0:e2:df:20: 1a:bd:5e:93:d3:1e:74:c4:8f:e3:1c:b1:74:e7:78: 97:b3:d0:3c:96:f7:6c:a3:b2:57:6a:3a:5c:b8:b2: 37:36:90:19:20:6f:16:02:4c:1c:5a:9f:44:c4:82: cf:23:d0:e1:97:78:6d:50:bc:5f:fb:44:79:d2:7d: 1a:42:4c:0f:75:6f:13:a8:e9:3b:eb:82:35:3e:38: 6a:24:10:da:85:b4:a5:72:6a:94:8a:9b:b7:6d:be: e1:26:95:b7:e3:5a:9c:81:a0:e9:cd:6f:77:b9:6e: 7d:9a:06:64:bd:c4:dc:a2:fb:b2:84:47:e0:75:b6: 6c:ef:bc:4a:33:da:7b:3d:19:18:57:b3:08:8c:ad: b1:78:c8:2c:d3:de:6b:b7:ea:77:e9:e8:af:7e:d6: 69:8d:d3:4f:73:f2:85:13:6f:d6:03:27:30:8a:7c: 6a:0b:60:12:b8:18:e1:38:c7:f0:0d:16:e9:c3:e9: 46:ca:17:40:84:16:e4:b3:a3:08:a5:a4:61:5f:6f: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:58:5D:F3:A3:F7:72:B7:44:C3:15:16:58:53:B4:E9:CE:D7:D8:79 X509v3 Authority Key Identifier: keyid:9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.104.218.0/24 Signature Algorithm: sha256WithRSAEncryption 59:1f:cf:05:29:df:91:fc:2c:51:ca:3c:19:48:62:3b:09:a1: bc:e7:04:50:f6:8a:4a:3e:4a:ea:3f:b2:4a:b4:a9:01:9a:26: 6e:89:56:01:18:ed:6c:9b:68:9d:1e:63:4f:d8:c0:59:ef:d1: 1b:7c:a7:74:91:0f:58:7a:f8:3e:1b:6f:45:4e:c4:a8:dc:c1: 60:35:6e:a4:1c:78:e9:70:32:08:e9:ed:a9:73:df:31:ee:95: b6:ce:00:7f:16:5e:c1:41:75:69:c1:4a:24:fa:86:59:1f:26: db:52:03:d7:66:8d:16:00:96:c1:e9:e7:67:67:76:31:e1:21: 34:77:a6:65:f0:89:31:9c:64:aa:c4:a6:09:6a:fe:fd:21:4a: 41:03:60:4e:23:6d:04:77:d2:aa:98:33:8f:89:af:6c:63:37: dd:ec:17:f9:48:45:97:c5:c4:66:5c:a3:15:30:28:5f:f0:29: df:2c:60:cb:1e:96:97:f1:37:f9:e8:3d:86:31:4a:d1:43:ba: fe:2c:1e:de:45:23:91:fd:e0:17:4c:c4:8c:c2:8d:63:6a:6d: 95:f7:b1:fc:6e:a4:25:9a:0f:b2:ca:5e:16:8b:04:ba:45:12: 4b:f3:b3:f3:33:b0:28:40:81:40:ef:4a:f7:4e:02:60:16:8a: 31:1f:cf:76 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUX8cXjdqKLWtTfgsMd4+0a8rOTZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENF N0IxQjY3MjAeFw0yNjA1MTIxOTQ5MThaFw0yNzA1MTExOTU0MThaMDMxMTAvBgNV BAMTKERENTg1REYzQTNGNzcyQjc0NEMzMTUxNjU4NTNCNEU5Q0VEN0Q4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRb+uxOo40sqFtWh3guTG3VN8E cm9qsWfu3vSwHPe1lmayQY6BzunfFkU0pNDezyB4H8ITEqztsOLfIBq9XpPTHnTE j+McsXTneJez0DyW92yjsldqOly4sjc2kBkgbxYCTBxan0TEgs8j0OGXeG1QvF/7 RHnSfRpCTA91bxOo6TvrgjU+OGokENqFtKVyapSKm7dtvuEmlbfjWpyBoOnNb3e5 bn2aBmS9xNyi+7KER+B1tmzvvEoz2ns9GRhXswiMrbF4yCzT3mu36nfp6K9+1mmN 009z8oUTb9YDJzCKfGoLYBK4GOE4x/ANFunD6UbKF0CEFuSzowilpGFfb3EPAgMB AAGjggJxMIICbTAdBgNVHQ4EFgQU3Vhd86P3crdEwxUWWFO06c7X2HkwHwYDVR0j BBgwFoAUnMo63LnIPlGgyVkQSxZy3OextnIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0 OWI4LzIvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0IxQjY3Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0Ix QjY3Mi5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI3YjVlZjct ZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0OWI4LzIvMzEzNjM3MmUzMTMwMzQyZTMy MzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzIzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKdo2jANBgkqhkiG9w0BAQsFAAOCAQEAWR/PBSnfkfwsUco8GUhiOwmhvOcE UPaKSj5K6j+ySrSpAZombolWARjtbJtonR5jT9jAWe/RG3yndJEPWHr4PhtvRU7E qNzBYDVupBx46XAyCOntqXPfMe6Vts4AfxZewUF1acFKJPqGWR8m21ID12aNFgCW wennZ2d2MeEhNHemZfCJMZxkqsSmCWr+/SFKQQNgTiNtBHfSqpgzj4mvbGM33ewX +UhFl8XEZlyjFTAoX/Ap3yxgyx6Wl/E3+eg9hjFK0UO6/iwe3kUjkf3gF0zEjMKN Y2ptlfex/G6kJZoPsspeFosEukUSS/Oz8zOwKECBQO9K904CYBaKMR/Pdg== -----END CERTIFICATE-----Generated at Mon May 25 16:24:39 2026 by rpki-client