$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/326130363a613030303a3a2f33322d3438203d3e20323134343230.roa File: 326130363a613030303a3a2f33322d3438203d3e20323134343230.roa (raw, json) Hash identifier: yJmbgpP6mdJfaSYoJIQACMWWGWguWhwE6ZoadayiXNA= Subject key identifier: DE:5D:D4:F8:3E:4C:8B:F2:4B:C7:1D:04:85:38:18:E2:C2:CC:7B:35 Certificate issuer: /CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Certificate serial: 3BD6B96C885E3CF3BA0C3CBA6091F458D168CE70 Authority key identifier: 9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/326130363a613030303a3a2f33322d3438203d3e20323134343230.roa Signing time: Sat 27 Jun 2026 23:48:31 +0000 ROA not before: Sat 27 Jun 2026 23:43:31 +0000 ROA not after: Sat 26 Jun 2027 23:48:31 +0000 asID: 214420 IP address blocks: 2a06:a000::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 07:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d6:b9:6c:88:5e:3c:f3:ba:0c:3c:ba:60:91:f4:58:d1:68:ce:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672 Validity Not Before: Jun 27 23:43:31 2026 GMT Not After : Jun 26 23:48:31 2027 GMT Subject: CN=DE5DD4F83E4C8BF24BC71D04853818E2C2CC7B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:75:7a:56:a9:e1:a9:f5:9e:5b:6a:8f:86: e9:71:62:a3:92:ef:fc:09:4c:c6:bc:0d:a1:c6:01: 07:81:df:1d:1e:99:b4:e6:81:a2:ca:1a:a1:3b:e9: 47:af:61:09:12:64:14:d3:15:a2:7a:6b:c5:9b:6e: 6b:dd:bc:b0:0c:b2:b2:89:60:af:9b:59:c2:f7:44: 5f:d4:2e:7e:df:d6:63:0a:0b:0d:a2:ba:80:7b:cc: a7:42:40:af:a0:82:79:40:b8:07:6b:7b:05:c4:10: 67:37:60:68:0e:be:a3:5c:3b:c5:be:bd:69:fc:d6: ec:27:e6:91:43:27:d0:e8:3a:7b:0e:84:84:38:f1: df:e1:7a:33:ef:35:f1:2d:3a:9e:b5:ec:be:e7:2b: 3f:6a:5a:0f:35:67:2f:e8:23:87:c0:a1:d8:b3:ca: 6c:33:00:75:77:82:fe:83:42:e6:2f:84:e7:90:6c: ab:00:4a:90:61:12:36:78:99:87:4b:fa:cf:d0:33: 9f:1f:11:12:f4:05:af:0e:45:b7:dc:c6:9b:d5:ca: 71:23:cf:32:66:cb:bc:af:88:e3:1d:ba:bc:51:6a: 07:29:a5:92:c5:61:04:a1:76:b7:7b:ef:a2:80:71: f1:3f:e6:aa:28:30:72:54:af:9b:bb:d1:21:13:a8: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5D:D4:F8:3E:4C:8B:F2:4B:C7:1D:04:85:38:18:E2:C2:CC:7B:35 X509v3 Authority Key Identifier: keyid:9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/326130363a613030303a3a2f33322d3438203d3e20323134343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a000::/32 Signature Algorithm: sha256WithRSAEncryption 59:ac:83:ed:96:45:ee:b9:6d:94:3b:c7:27:6a:10:3e:59:e8: f3:50:cc:02:d3:88:93:4d:05:bb:22:8f:b3:14:07:90:50:67: 14:9a:59:2a:4c:1b:8b:e7:e8:71:b8:c2:23:4b:f7:7f:1d:3b: a6:3a:ff:8b:ee:3e:d5:2c:d0:78:ca:1a:e1:31:d8:80:f7:65: 4b:bf:89:0a:33:5f:81:6f:47:fb:4c:f7:be:b0:15:c9:4c:94: 30:c0:3e:ca:ed:88:bc:1b:2f:0e:39:e7:97:77:2e:62:1e:30: 3e:2a:be:e0:c3:93:c8:09:00:ad:56:39:47:34:e7:02:6a:cd: 6c:dd:9d:72:df:61:21:63:b2:56:7f:3e:f6:60:63:71:f5:e6: 2b:03:10:1c:92:ff:3f:92:b6:ed:a1:3d:33:89:93:69:09:ab: 2c:ba:a2:45:56:13:b0:67:1d:9f:e5:69:37:b6:77:22:fc:5d: 4a:5b:f6:94:fb:ad:19:23:a6:ff:a3:27:3f:55:6d:4b:ff:61: 3f:e4:b3:b6:39:b5:1e:56:00:42:ce:c5:59:fb:b3:77:90:55: 90:b8:34:cd:55:fe:7b:c1:57:3c:26:4f:9e:e8:cc:9c:2e:23: 86:0a:46:fb:85:35:49:e7:74:32:da:50:da:8d:cc:35:8e:d5: bc:28:3a:58 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUO9a5bIhePPO6DDy6YJH0WNFoznAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENF N0IxQjY3MjAeFw0yNjA2MjcyMzQzMzFaFw0yNzA2MjYyMzQ4MzFaMDMxMTAvBgNV BAMTKERFNURENEY4M0U0QzhCRjI0QkM3MUQwNDg1MzgxOEUyQzJDQzdCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGXV6VqnhqfWeW2qPhulxYqOS 7/wJTMa8DaHGAQeB3x0embTmgaLKGqE76UevYQkSZBTTFaJ6a8WbbmvdvLAMsrKJ YK+bWcL3RF/ULn7f1mMKCw2iuoB7zKdCQK+ggnlAuAdrewXEEGc3YGgOvqNcO8W+ vWn81uwn5pFDJ9DoOnsOhIQ48d/hejPvNfEtOp617L7nKz9qWg81Zy/oI4fAodiz ymwzAHV3gv6DQuYvhOeQbKsASpBhEjZ4mYdL+s/QM58fERL0Ba8ORbfcxpvVynEj zzJmy7yviOMdurxRagcppZLFYQShdrd776KAcfE/5qooMHJUr5u70SETqDPlAgMB AAGjggJuMIICajAdBgNVHQ4EFgQU3l3U+D5Mi/JLxx0EhTgY4sLMezUwHwYDVR0j BBgwFoAUnMo63LnIPlGgyVkQSxZy3OextnIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0 OWI4LzIvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0IxQjY3Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvOUNDQTNBRENCOUM4M0U1MUEwQzk1OTEwNEIxNjcyRENFN0Ix QjY3Mi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzI3YjVlZjct ZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0OWI4LzIvMzI2MTMwMzYzYTYxMzAzMDMw M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMTM0MzQzMjMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA KgagADANBgkqhkiG9w0BAQsFAAOCAQEAWayD7ZZF7rltlDvHJ2oQPlno81DMAtOI k00FuyKPsxQHkFBnFJpZKkwbi+focbjCI0v3fx07pjr/i+4+1SzQeMoa4THYgPdl S7+JCjNfgW9H+0z3vrAVyUyUMMA+yu2IvBsvDjnnl3cuYh4wPiq+4MOTyAkArVY5 RzTnAmrNbN2dct9hIWOyVn8+9mBjcfXmKwMQHJL/P5K27aE9M4mTaQmrLLqiRVYT sGcdn+VpN7Z3IvxdSlv2lPutGSOm/6MnP1VtS/9hP+Sztjm1HlYAQs7FWfuzd5BV kLg0zVX+e8FXPCZPnujMnC4jhgpG+4U1Sed0MtpQ2o3MNY7VvCg6WA== -----END CERTIFICATE-----Generated at Fri Jul 10 16:04:10 2026 by rpki-client