$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930363a3a2f34382d3438203d3e20323135303330.roa File: 326130363a313238333a383930363a3a2f34382d3438203d3e20323135303330.roa (raw, json) Hash identifier: oRcakkPcZD1SrYdKrqtHifBcMa6YT1qxe/241nlFWK8= Subject key identifier: 01:C1:B9:E8:32:24:78:78:EC:43:40:1B:E5:CC:42:8E:E8:EE:6B:53 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 1E19064C8C8B39AE5B7FAFC6D93713A5EEF65703 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930363a3a2f34382d3438203d3e20323135303330.roa Signing time: Mon 03 Aug 2026 10:16:40 +0000 ROA not before: Mon 03 Aug 2026 10:11:40 +0000 ROA not after: Mon 02 Aug 2027 10:16:40 +0000 asID: 215030 IP address blocks: 2a06:1283:8906::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 14:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:19:06:4c:8c:8b:39:ae:5b:7f:af:c6:d9:37:13:a5:ee:f6:57:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Aug 3 10:11:40 2026 GMT Not After : Aug 2 10:16:40 2027 GMT Subject: CN=01C1B9E832247878EC43401BE5CC428EE8EE6B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:3c:5a:1a:32:b0:9e:50:4b:5a:60:01:b3: 08:05:28:86:6e:b0:ba:76:81:21:f1:ae:33:37:85: de:71:82:1e:b6:85:ba:76:d2:5d:8f:c6:a0:85:6a: 58:5c:7b:67:56:33:c1:4f:a2:25:8e:10:11:27:90: b5:13:68:8b:fc:a7:c8:e5:bf:29:c5:fd:34:1b:37: 71:5d:09:6f:26:10:ac:22:e9:87:2a:6a:9e:a0:9c: 25:e5:18:ad:97:f3:c2:b0:40:a3:49:17:df:7c:7c: b8:ff:85:c9:d5:b1:45:f3:1a:70:32:77:bb:e6:aa: 94:21:25:b1:be:54:35:62:7d:e5:75:7e:19:79:63: 01:1e:80:07:05:2d:36:a0:d7:8c:3e:ac:f0:79:67: 53:37:07:00:14:93:4d:aa:10:3a:5b:e4:f6:c0:a2: cc:61:e6:45:7b:30:4a:2d:d2:a2:08:e7:20:be:d6: 12:96:7b:93:9b:5b:bf:42:73:19:d1:04:9c:5a:ef: e7:1f:5a:75:96:71:d7:05:b9:05:de:f9:e6:f1:c5: 8f:7f:65:98:47:3f:23:77:c5:c0:3c:be:ce:2a:a5: e5:81:42:15:0b:13:48:46:bc:50:21:8d:1e:1f:32: 3e:34:04:ac:0c:17:ae:b2:95:63:2f:b8:be:10:aa: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C1:B9:E8:32:24:78:78:EC:43:40:1B:E5:CC:42:8E:E8:EE:6B:53 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930363a3a2f34382d3438203d3e20323135303330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8906::/48 Signature Algorithm: sha256WithRSAEncryption 7a:60:fa:94:5a:b8:ee:6e:94:36:bf:5c:79:e1:74:17:e9:d8: 3a:5c:5c:f2:5e:c9:63:be:04:99:d1:34:3f:9e:9c:39:21:00: 42:1d:53:f4:8e:17:f2:19:d2:b9:23:3d:8b:46:5f:91:ce:1d: af:59:1b:15:0e:29:9f:6e:eb:a2:3b:87:97:9d:0c:23:03:27: 67:d8:95:9f:e9:ca:cd:7b:33:51:b5:29:9b:49:74:03:14:06: 71:20:ad:55:a7:6f:f4:31:53:a9:8f:bc:27:99:d1:60:7e:07: 98:84:04:29:c1:be:5a:0d:fb:ec:34:da:f8:9e:91:67:37:07: ee:23:92:f0:1a:5d:b5:92:23:59:94:15:06:07:88:8f:a0:e6: dd:1e:b9:41:4d:85:b9:c3:be:b6:96:4e:52:e5:e4:fb:c8:36: 15:2c:25:e3:98:4e:2d:50:a3:24:03:2d:58:59:f5:d8:3f:40: b9:d9:bd:9c:e3:e2:96:0e:03:f6:df:f0:c1:af:81:42:6a:cf: 39:9a:f5:5a:2c:2f:9b:80:29:4a:8b:d1:2d:c8:fd:e3:18:ac: 64:1f:74:11:de:04:f2:9b:b1:1f:30:47:05:3d:c1:63:1f:8d: b6:23:a6:ca:dd:0b:4b:8d:55:17:e8:e4:e8:74:74:73:43:34: 3a:39:74:2f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHhkGTIyLOa5bf6/G2TcTpe72VwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA4MDMxMDExNDBaFw0yNzA4MDIxMDE2NDBaMDMxMTAvBgNV BAMTKDAxQzFCOUU4MzIyNDc4NzhFQzQzNDAxQkU1Q0M0MjhFRThFRTZCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TTxaGjKwnlBLWmABswgFKIZu sLp2gSHxrjM3hd5xgh62hbp20l2PxqCFalhce2dWM8FPoiWOEBEnkLUTaIv8p8jl vynF/TQbN3FdCW8mEKwi6Ycqap6gnCXlGK2X88KwQKNJF998fLj/hcnVsUXzGnAy d7vmqpQhJbG+VDVifeV1fhl5YwEegAcFLTag14w+rPB5Z1M3BwAUk02qEDpb5PbA osxh5kV7MEot0qII5yC+1hKWe5ObW79CcxnRBJxa7+cfWnWWcdcFuQXe+ebxxY9/ ZZhHPyN3xcA8vs4qpeWBQhULE0hGvFAhjR4fMj40BKwMF66ylWMvuL4Qqi9VAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUAcG56DIkeHjsQ0Ab5cxCjujua1MwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzAzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kGMA0GCSqGSIb3DQEBCwUAA4IBAQB6 YPqUWrjubpQ2v1x54XQX6dg6XFzyXsljvgSZ0TQ/npw5IQBCHVP0jhfyGdK5Iz2L Rl+Rzh2vWRsVDimfbuuiO4eXnQwjAydn2JWf6crNezNRtSmbSXQDFAZxIK1Vp2/0 MVOpj7wnmdFgfgeYhAQpwb5aDfvsNNr4npFnNwfuI5LwGl21kiNZlBUGB4iPoObd HrlBTYW5w762lk5S5eT7yDYVLCXjmE4tUKMkAy1YWfXYP0C52b2c4+KWDgP23/DB r4FCas85mvVaLC+bgClKi9EtyP3jGKxkH3QR3gTym7EfMEcFPcFjH422I6bK3QtL jVUX6OTodHRzQzQ6OXQv -----END CERTIFICATE-----Generated at Wed Aug 12 19:39:05 2026 by rpki-client