$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930393a3a2f34382d3438203d3e20313938353930.roa File: 326130363a313238333a383930393a3a2f34382d3438203d3e20313938353930.roa (raw, json) Hash identifier: RIAoAnBA+jiT6jDwKwQ9EeTYFxczJv1I9u1AhuUsgO4= Subject key identifier: FE:E9:E6:9F:C5:BD:B0:0F:0C:6D:CE:90:0E:0C:13:16:FA:EC:0F:86 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 37F845A44D869330C304B45E5C744C3CC5DC4CFF Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930393a3a2f34382d3438203d3e20313938353930.roa Signing time: Sun 24 May 2026 21:50:16 +0000 ROA not before: Sun 24 May 2026 21:45:16 +0000 ROA not after: Sun 23 May 2027 21:50:16 +0000 asID: 198590 IP address blocks: 2a06:1283:8909::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 29 May 2026 01:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f8:45:a4:4d:86:93:30:c3:04:b4:5e:5c:74:4c:3c:c5:dc:4c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: May 24 21:45:16 2026 GMT Not After : May 23 21:50:16 2027 GMT Subject: CN=FEE9E69FC5BDB00F0C6DCE900E0C1316FAEC0F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:c2:ba:a7:8f:2b:be:be:2b:e0:fc:31:62: 0c:3e:69:cf:8a:e6:af:87:e5:88:0c:bf:5d:28:ea: 18:5c:3b:d1:27:92:9b:99:72:43:dc:1e:b8:31:45: 15:a6:11:7f:e3:34:81:21:66:ea:43:2c:78:e3:c1: 80:d1:4a:63:04:5a:3b:a8:4f:e7:7b:66:36:ef:bb: 4a:35:e6:cb:e0:58:aa:f3:0b:e2:0b:82:d1:4b:45: d9:a4:d9:ef:16:58:c6:05:a8:2e:59:39:58:8a:f2: dc:1e:9e:81:b7:b5:a7:81:cb:88:e6:8b:ad:6b:b4: cc:61:66:1a:50:25:e9:4b:7c:ad:78:49:19:db:96: 80:2f:e7:9e:49:55:be:bd:f6:c4:b7:a6:ef:26:6a: c4:1e:8f:7f:b3:c1:aa:ed:90:4d:27:b9:d7:b1:6b: a0:02:f9:09:5d:80:f3:4e:5f:30:43:e1:7c:77:d8: d5:e7:ac:c5:2b:c9:18:85:55:cf:70:f6:0a:3b:99: 58:9e:88:42:a2:66:7c:2d:5c:8f:91:b5:54:be:d0: d2:d6:26:b1:91:fb:ed:43:83:ed:49:0f:27:9e:7d: df:95:e2:28:5c:47:52:9b:87:e2:e5:7e:f0:c4:2b: 47:1a:87:87:0c:8d:07:a0:03:a7:c9:22:b4:45:47: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:E6:9F:C5:BD:B0:0F:0C:6D:CE:90:0E:0C:13:16:FA:EC:0F:86 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930393a3a2f34382d3438203d3e20313938353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8909::/48 Signature Algorithm: sha256WithRSAEncryption 39:d7:b6:f5:25:af:ee:bb:89:94:24:34:a9:8c:80:11:15:07: a2:4f:d2:28:48:0f:bf:0b:fb:7e:4d:dd:91:3b:a6:a0:b7:be: 41:c8:4b:85:8e:84:65:fc:58:2a:37:10:2d:48:11:49:4b:1b: 50:6f:dd:14:8d:89:16:de:a2:e4:a5:47:23:d1:4e:80:55:14: 3e:44:20:46:03:e7:e8:39:bc:41:2c:e2:41:f5:2b:e4:29:88: a8:81:e1:c3:cf:cc:6d:c6:71:e6:08:5c:40:17:ba:e8:25:48: e3:87:45:9e:96:71:1c:ee:4b:96:bf:ef:ca:e8:94:c9:38:93: 6d:58:6b:36:e0:c5:71:26:43:d0:76:93:7a:3b:8a:00:f5:11: 1a:f3:50:b9:48:22:0c:cf:8f:f2:07:77:04:8c:2c:95:14:6b: 03:be:2a:24:1f:83:b5:c2:06:3b:aa:f3:c9:92:60:db:dc:97: f0:91:19:c6:9b:6b:91:67:c9:d5:ea:96:27:d4:0c:d6:42:7c: 51:94:c5:e4:19:76:4e:fd:66:78:6c:5d:78:08:5d:a1:e0:75: 3e:06:b7:08:8a:3f:28:ba:cc:1d:bd:28:74:14:2a:e0:f6:c5: ad:5e:31:e9:28:fb:8f:a0:41:18:b1:39:03:c4:c1:84:e3:26: c6:05:9e:6e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUN/hFpE2GkzDDBLReXHRMPMXcTP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA1MjQyMTQ1MTZaFw0yNzA1MjMyMTUwMTZaMDMxMTAvBgNV BAMTKEZFRTlFNjlGQzVCREIwMEYwQzZEQ0U5MDBFMEMxMzE2RkFFQzBGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwocK6p48rvr4r4PwxYgw+ac+K 5q+H5YgMv10o6hhcO9EnkpuZckPcHrgxRRWmEX/jNIEhZupDLHjjwYDRSmMEWjuo T+d7Zjbvu0o15svgWKrzC+ILgtFLRdmk2e8WWMYFqC5ZOViK8twenoG3taeBy4jm i61rtMxhZhpQJelLfK14SRnbloAv555JVb699sS3pu8masQej3+zwartkE0nudex a6AC+QldgPNOXzBD4Xx32NXnrMUryRiFVc9w9go7mVieiEKiZnwtXI+RtVS+0NLW JrGR++1Dg+1JDyeefd+V4ihcR1Kbh+LlfvDEK0cah4cMjQegA6fJIrRFR84JAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU/unmn8W9sA8Mbc6QDgwTFvrsD4YwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz OTM4MzUzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kJMA0GCSqGSIb3DQEBCwUAA4IBAQA5 17b1Ja/uu4mUJDSpjIARFQeiT9IoSA+/C/t+Td2RO6agt75ByEuFjoRl/FgqNxAt SBFJSxtQb90UjYkW3qLkpUcj0U6AVRQ+RCBGA+foObxBLOJB9SvkKYiogeHDz8xt xnHmCFxAF7roJUjjh0WelnEc7kuWv+/K6JTJOJNtWGs24MVxJkPQdpN6O4oA9REa 81C5SCIMz4/yB3cEjCyVFGsDviokH4O1wgY7qvPJkmDb3JfwkRnGm2uRZ8nV6pYn 1AzWQnxRlMXkGXZO/WZ4bF14CF2h4HU+BrcIij8ouswdvSh0FCrg9sWtXjHpKPuP oEEYsTkDxMGE4ybGBZ5u -----END CERTIFICATE-----Generated at Thu May 28 18:28:24 2026 by rpki-client