$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386262303a3a2f34342d313238203d3e20323131303636.roa File: 326130363a313238333a386262303a3a2f34342d313238203d3e20323131303636.roa (raw, json) Hash identifier: DG13L7CSxQ4rkeIbYzLwUG3kmeXFRAhv6p8qoCFANSI= Subject key identifier: 22:A2:A3:F8:FB:16:08:18:37:F6:9C:2B:1D:EC:CF:65:E6:35:FA:64 Certificate issuer: /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Certificate serial: 652D97620D68EFDE48901936FA59ABC54D8AE926 Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386262303a3a2f34342d313238203d3e20323131303636.roa Signing time: Mon 01 Jun 2026 21:34:16 +0000 ROA not before: Mon 01 Jun 2026 21:29:16 +0000 ROA not after: Mon 31 May 2027 21:34:16 +0000 asID: 211066 IP address blocks: 2a06:1283:8bb0::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 03:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2d:97:62:0d:68:ef:de:48:90:19:36:fa:59:ab:c5:4d:8a:e9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07 Validity Not Before: Jun 1 21:29:16 2026 GMT Not After : May 31 21:34:16 2027 GMT Subject: CN=22A2A3F8FB16081837F69C2B1DECCF65E635FA64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:66:d3:c1:d1:88:46:29:1d:01:9a:7b:fe: 25:8b:e2:f9:5d:51:7f:7f:d6:6e:53:41:62:f5:2d: 01:60:68:08:ad:66:7d:98:2f:c0:3b:59:4a:b7:9a: 40:72:5d:2b:4e:8b:d3:3d:ea:55:df:3d:bd:b0:5b: ac:08:b2:15:fa:2a:62:3a:f8:2f:d2:46:3b:8e:18: 03:9d:35:80:ec:3a:0b:6b:5d:c3:05:11:27:1a:b1: bf:53:70:49:9d:fe:cd:81:08:b6:0b:88:cb:6f:16: d3:94:ab:77:8b:42:b4:d2:cd:2b:3e:f0:f2:8b:e1: 31:6e:1a:b8:ad:67:74:a2:b1:c9:ad:8a:c5:7a:22: 12:9c:72:ab:2a:8f:82:82:d1:34:fa:33:9f:08:69: 27:82:1b:13:0e:1a:6b:45:57:a2:65:66:04:e0:8a: ce:ed:ea:7a:a6:5d:41:36:93:34:ef:75:27:09:22: 98:df:9f:a5:3c:db:73:69:8a:90:48:f8:b8:3a:de: d6:db:f6:c9:1d:1c:17:9f:86:09:7a:6a:58:37:58: d4:70:ae:21:bb:74:86:1e:5d:ed:15:3b:c9:00:9b: b1:8f:75:ae:25:6d:c9:0d:b7:78:06:35:bc:73:43: e1:56:0c:13:89:fd:83:f1:b7:f7:f4:75:bf:20:87: 16:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A2:A3:F8:FB:16:08:18:37:F6:9C:2B:1D:EC:CF:65:E6:35:FA:64 X509v3 Authority Key Identifier: keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386262303a3a2f34342d313238203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8bb0::/44 Signature Algorithm: sha256WithRSAEncryption 1e:6e:1e:f7:b8:bc:7a:be:7e:38:16:68:76:49:5e:f9:03:9a: 91:9f:0e:06:43:a0:bd:fc:97:1b:29:2d:d6:7b:c7:35:7f:50: 4c:c3:c8:58:98:97:21:e8:ae:13:fe:ea:c3:a2:66:bf:e4:ff: 4f:df:d4:f1:59:83:e0:2f:4d:19:5c:b3:9f:d8:a9:a1:64:94: aa:c0:ac:f3:90:bd:1a:a6:42:0c:38:09:bd:01:29:8e:9d:67: 67:30:e5:85:f3:09:7a:40:20:7f:56:de:0f:3a:e9:b3:36:fd: 87:9b:e4:d8:87:49:94:d1:63:c9:81:82:1b:3e:02:89:78:1f: 3c:31:14:eb:de:43:fe:f0:6f:ea:0e:2b:96:dc:16:78:a7:95: 0c:6f:13:99:b4:10:06:15:86:9e:02:86:31:2c:0d:1a:ab:9c: 2f:cc:4f:ea:5f:d1:a3:3f:d7:90:89:8d:78:78:de:d6:32:24: a5:75:3a:ef:cd:e6:78:15:35:31:38:ce:dc:3f:d8:e8:f9:73: d4:a8:63:ee:49:38:da:68:b9:71:b9:ff:d5:88:88:c8:a6:39: 21:fa:ce:5b:13:fe:e3:cc:0d:2c:25:a0:c0:14:1e:33:f2:1e: 3f:04:68:24:1e:47:a6:6f:a3:36:b2:98:10:07:b4:cc:a6:b4: 2b:bb:6b:12 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUZS2XYg1o795IkBk2+lmrxU2K6SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVC QTgzMEUwNzAeFw0yNjA2MDEyMTI5MTZaFw0yNzA1MzEyMTM0MTZaMDMxMTAvBgNV BAMTKDIyQTJBM0Y4RkIxNjA4MTgzN0Y2OUMyQjFERUNDRjY1RTYzNUZBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLO2bTwdGIRikdAZp7/iWL4vld UX9/1m5TQWL1LQFgaAitZn2YL8A7WUq3mkByXStOi9M96lXfPb2wW6wIshX6KmI6 +C/SRjuOGAOdNYDsOgtrXcMFEScasb9TcEmd/s2BCLYLiMtvFtOUq3eLQrTSzSs+ 8PKL4TFuGritZ3SiscmtisV6IhKccqsqj4KC0TT6M58IaSeCGxMOGmtFV6JlZgTg is7t6nqmXUE2kzTvdScJIpjfn6U823NpipBI+Lg63tbb9skdHBefhgl6alg3WNRw riG7dIYeXe0VO8kAm7GPda4lbckNt3gGNbxzQ+FWDBOJ/YPxt/f0db8ghxbbAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUIqKj+PsWCBg39pwrHezPZeY1+mQwHwYDVR0j BBgwFoAUsROzHp8BovQYcOjHdJKxjrqDDgcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4 NTA3LzIvQjExM0IzMUU5RjAxQTJGNDE4NzBFOEM3NzQ5MkIxOEVCQTgzMEUwNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9CMTEzQjMxRTlGMDFBMkY0MTg3MEU4Qzc3 NDkyQjE4RUJBODMwRTA3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83NzlhNzkwMy0yZWRiLTQ4YWQtYWJlYi1lZTM5YTc5Zjg1MDcvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjI2MjMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAz MjMxMzEzMDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBhKDi7AwDQYJKoZIhvcNAQELBQADggEB AB5uHve4vHq+fjgWaHZJXvkDmpGfDgZDoL38lxspLdZ7xzV/UEzDyFiYlyHorhP+ 6sOiZr/k/0/f1PFZg+AvTRlcs5/YqaFklKrArPOQvRqmQgw4Cb0BKY6dZ2cw5YXz CXpAIH9W3g866bM2/Yeb5NiHSZTRY8mBghs+Aol4HzwxFOveQ/7wb+oOK5bcFnin lQxvE5m0EAYVhp4ChjEsDRqrnC/MT+pf0aM/15CJjXh43tYyJKV1Ou/N5ngVNTE4 ztw/2Oj5c9SoY+5JONpouXG5/9WIiMimOSH6zlsT/uPMDSwloMAUHjPyHj8EaCQe R6ZvozaymBAHtMymtCu7axI= -----END CERTIFICATE-----Generated at Thu Jun 4 12:00:25 2026 by rpki-client