$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931333a3a2f34382d3438203d3e20313938353930.roa File: 326130363a313238333a383931333a3a2f34382d3438203d3e20313938353930.roa (raw, json) Hash identifier: cjRNHfnIAIc+wxIR27HOYe9Dl41cBDvISeqKuHiEpOQ= Subject key identifier: A2:D2:4B:C8:23:94:4C:68:00:0F:3B:B1:8F:26:86:48:BE:06:70:EA Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 549236B064D8193D2C30B3F089DDDC76A350CADE Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931333a3a2f34382d3438203d3e20313938353930.roa Signing time: Sun 24 May 2026 21:55:55 +0000 ROA not before: Sun 24 May 2026 21:50:55 +0000 ROA not after: Sun 23 May 2027 21:55:55 +0000 asID: 198590 IP address blocks: 2a06:1283:8913::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 29 May 2026 01:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:92:36:b0:64:d8:19:3d:2c:30:b3:f0:89:dd:dc:76:a3:50:ca:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: May 24 21:50:55 2026 GMT Not After : May 23 21:55:55 2027 GMT Subject: CN=A2D24BC823944C68000F3BB18F268648BE0670EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:9f:16:3b:86:88:a4:48:98:ca:3d:16:7e: 61:00:68:e7:4a:27:0d:81:2c:fb:b9:e8:fb:b5:ec: 56:26:6d:87:70:43:f2:c7:65:cb:ac:5a:cf:6f:6b: df:ff:2a:4c:36:6f:bc:e6:86:8e:f7:be:c6:51:c7: 00:6b:b7:2e:97:2b:70:5f:57:b5:2b:db:ba:22:00: 06:d0:cb:d0:2e:ba:d3:c6:06:a4:16:ae:5a:4b:6f: 8a:df:a9:d2:b1:e5:0a:26:89:8e:50:f6:99:35:e9: 45:e1:c1:d7:a4:bc:d0:5f:c1:8a:90:42:64:10:33: 21:70:d3:1e:f3:7b:58:d5:e3:a0:5a:48:98:e4:58: 9f:bc:24:4f:d1:41:19:7b:a7:7f:02:37:f5:89:96: 6b:9e:8d:a0:f2:d4:f1:ff:2b:97:2d:b6:0f:3e:54: dd:7f:92:6f:0b:0c:ed:f6:f2:2a:74:93:d4:a3:79: 81:e5:61:b0:6b:04:2d:8c:62:3d:e3:3c:22:ba:14: cb:81:15:c4:0c:ac:ab:cf:e5:8e:48:6a:1c:dd:86: 29:c1:13:72:b1:da:5b:54:64:6a:c1:b1:5d:42:8f: ce:ba:3f:5a:25:4e:8b:62:fe:73:69:e9:fe:e8:5a: 2c:45:1a:4b:9c:6a:ed:64:8c:81:ea:92:07:b0:07: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D2:4B:C8:23:94:4C:68:00:0F:3B:B1:8F:26:86:48:BE:06:70:EA X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931333a3a2f34382d3438203d3e20313938353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8913::/48 Signature Algorithm: sha256WithRSAEncryption 07:18:9d:7e:ca:24:a4:15:eb:6a:32:6e:1e:db:83:a2:fc:a9: 8a:15:eb:06:23:f5:49:61:35:d8:53:17:6d:22:9f:eb:0e:48: 2b:f0:5b:d4:c9:b3:58:df:99:16:98:e7:92:da:21:fb:bd:cd: 01:4a:11:04:6c:e9:d8:6e:d5:46:6f:79:03:6d:f2:15:05:5b: 10:7d:92:47:51:ac:7c:1c:f3:84:ad:79:8b:35:5a:92:c6:fd: 8c:06:8b:9b:8e:e1:fe:17:f7:fe:a7:5c:d0:93:5c:ac:71:a8: 6b:e5:71:1c:34:96:50:a3:a8:16:a2:a9:51:06:2f:02:e8:bc: 32:11:0a:a9:f1:af:d3:b8:c5:56:f7:f6:87:4b:bf:72:3f:32: 01:6b:f0:7d:25:f6:7a:0b:78:bc:7d:f2:f2:11:8b:32:00:bb: c7:3b:73:7e:47:58:be:c7:ba:f2:bd:fa:bc:0b:e4:41:95:b3: 35:62:78:7d:a9:02:19:3d:e0:e8:60:03:f7:a9:bc:cb:d6:66: 0b:9f:ed:32:6f:76:cb:0a:8a:a3:f5:c4:c0:b8:06:3c:ac:c8: 0f:4a:1b:87:bb:a9:d7:68:52:b5:18:2a:bd:b4:10:a0:ba:bb: e4:fd:21:9f:66:75:a8:f9:20:ab:55:b8:26:eb:a2:e6:91:49: cd:7c:b3:51 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVJI2sGTYGT0sMLPwid3cdqNQyt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA1MjQyMTUwNTVaFw0yNzA1MjMyMTU1NTVaMDMxMTAvBgNV BAMTKEEyRDI0QkM4MjM5NDRDNjgwMDBGM0JCMThGMjY4NjQ4QkUwNjcwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrt58WO4aIpEiYyj0WfmEAaOdK Jw2BLPu56Pu17FYmbYdwQ/LHZcusWs9va9//Kkw2b7zmho73vsZRxwBrty6XK3Bf V7Ur27oiAAbQy9AuutPGBqQWrlpLb4rfqdKx5QomiY5Q9pk16UXhwdekvNBfwYqQ QmQQMyFw0x7ze1jV46BaSJjkWJ+8JE/RQRl7p38CN/WJlmuejaDy1PH/K5cttg8+ VN1/km8LDO328ip0k9SjeYHlYbBrBC2MYj3jPCK6FMuBFcQMrKvP5Y5IahzdhinB E3Kx2ltUZGrBsV1Cj866P1olToti/nNp6f7oWixFGkucau1kjIHqkgewB4AjAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUotJLyCOUTGgADzuxjyaGSL4GcOowHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz OTM4MzUzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kTMA0GCSqGSIb3DQEBCwUAA4IBAQAH GJ1+yiSkFetqMm4e24Oi/KmKFesGI/VJYTXYUxdtIp/rDkgr8FvUybNY35kWmOeS 2iH7vc0BShEEbOnYbtVGb3kDbfIVBVsQfZJHUax8HPOErXmLNVqSxv2MBoubjuH+ F/f+p1zQk1yscahr5XEcNJZQo6gWoqlRBi8C6LwyEQqp8a/TuMVW9/aHS79yPzIB a/B9JfZ6C3i8ffLyEYsyALvHO3N+R1i+x7ryvfq8C+RBlbM1Ynh9qQIZPeDoYAP3 qbzL1mYLn+0yb3bLCoqj9cTAuAY8rMgPShuHu6nXaFK1GCq9tBCgurvk/SGfZnWo +SCrVbgm66LmkUnNfLNR -----END CERTIFICATE-----Generated at Thu May 28 18:28:24 2026 by rpki-client