$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931383a3a2f34382d3438203d3e20323133343133.roa File: 326130363a313238333a383931383a3a2f34382d3438203d3e20323133343133.roa (raw, json) Hash identifier: YNcNtnB4v0SW3DvBKUlRbPVwZ6aC+YJGOdupTMg5t0Q= Subject key identifier: 14:F4:15:BE:73:6E:85:21:01:D1:E2:68:0D:19:E0:AF:82:57:C9:50 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 023F7DC041AF5CA8A51F1BB94B3B8076873D9DA7 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931383a3a2f34382d3438203d3e20323133343133.roa Signing time: Sat 23 May 2026 16:40:59 +0000 ROA not before: Sat 23 May 2026 16:35:59 +0000 ROA not after: Sat 22 May 2027 16:40:59 +0000 asID: 213413 IP address blocks: 2a06:1283:8918::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 21:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3f:7d:c0:41:af:5c:a8:a5:1f:1b:b9:4b:3b:80:76:87:3d:9d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: May 23 16:35:59 2026 GMT Not After : May 22 16:40:59 2027 GMT Subject: CN=14F415BE736E852101D1E2680D19E0AF8257C950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:94:60:b0:51:db:43:69:e6:6f:bc:25:5f: f6:e6:2c:8a:95:d1:46:0e:e8:e8:94:65:b5:a3:4a: af:b8:39:c3:e7:5b:7f:dd:a5:80:3e:bb:5a:11:b6: 7f:97:ab:05:65:20:1e:fc:de:c2:fb:13:cb:66:6f: 93:b0:f6:98:a2:69:43:1d:24:96:c9:7a:4f:c1:3c: 1c:c9:6b:19:fb:52:6f:87:e5:13:da:64:ee:37:72: 31:cc:84:c0:95:5e:21:fc:81:3b:90:2c:b2:7f:b4: 2a:f6:4e:20:d5:33:b5:a5:32:18:2b:10:f6:54:42: 98:90:1a:85:7b:19:48:e4:1d:7a:78:f7:5c:2f:e2: b3:e2:b0:c3:dd:68:c3:78:c4:e0:e0:19:46:56:b5: 80:db:4f:50:1a:bc:4b:3e:2f:12:40:31:7b:e0:25: 2f:ee:fb:ed:e4:37:8f:90:9e:18:25:5b:e3:a3:b0: d0:7c:75:0c:2e:3f:4c:d2:e5:a8:31:30:07:a4:20: cb:f8:51:c9:0f:ca:d9:82:d7:25:8b:48:84:5d:f5: 4e:c8:4e:52:50:62:1b:57:27:a9:ad:5a:dd:e4:65: df:ac:ac:94:18:e9:6f:c4:da:65:a9:f2:c6:7c:7b: 0c:c8:8f:d0:e2:29:d1:3b:f3:b2:31:33:1c:92:97: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:15:BE:73:6E:85:21:01:D1:E2:68:0D:19:E0:AF:82:57:C9:50 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931383a3a2f34382d3438203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8918::/48 Signature Algorithm: sha256WithRSAEncryption 64:f7:ea:24:e4:52:4f:7e:4a:33:1f:91:6c:a6:9d:ce:56:eb: 3c:67:5a:e7:e8:4b:01:93:6c:db:66:db:41:1d:4a:42:5b:6e: de:5e:2c:ed:3d:67:47:79:38:9b:6f:e9:6b:23:36:67:a7:d6: 26:0c:97:5a:5b:86:fd:21:13:28:c2:62:91:af:09:a6:bf:75: 9c:0c:05:a4:d1:3c:eb:94:0b:96:c9:52:96:e4:92:72:73:02: 91:ff:f5:79:1d:dc:98:73:49:64:cb:07:51:c3:35:c9:b3:1d: 93:ca:be:8b:47:f8:6f:42:5c:78:c3:1f:b6:7d:07:c1:db:9d: 01:c3:3d:5d:a3:b9:51:f5:bb:d4:8f:b5:0e:37:01:90:4b:9b: 95:c9:29:83:7d:d5:a6:0d:1f:63:e5:e0:a3:0b:08:a5:c8:ff: 28:0c:23:40:f8:16:76:4c:79:ac:fe:c4:87:ff:51:6e:1b:29: c1:8f:61:bb:33:ea:f7:24:e9:46:64:20:51:ee:82:e5:ba:cf: 0d:73:3f:3e:88:ae:f5:3a:91:21:f5:67:66:ef:0c:e3:3e:8f: 8c:90:35:22:db:76:a3:e2:45:0f:a3:f9:26:67:bd:a7:4f:38: 39:f9:81:e0:a0:0e:48:0c:66:5e:12:1d:15:0c:91:d5:4c:52: d1:5d:b0:a3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAj99wEGvXKilHxu5SzuAdoc9nacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA1MjMxNjM1NTlaFw0yNzA1MjIxNjQwNTlaMDMxMTAvBgNV BAMTKDE0RjQxNUJFNzM2RTg1MjEwMUQxRTI2ODBEMTlFMEFGODI1N0M5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWZRgsFHbQ2nmb7wlX/bmLIqV 0UYO6OiUZbWjSq+4OcPnW3/dpYA+u1oRtn+XqwVlIB783sL7E8tmb5Ow9piiaUMd JJbJek/BPBzJaxn7Um+H5RPaZO43cjHMhMCVXiH8gTuQLLJ/tCr2TiDVM7WlMhgr EPZUQpiQGoV7GUjkHXp491wv4rPisMPdaMN4xODgGUZWtYDbT1AavEs+LxJAMXvg JS/u++3kN4+QnhglW+OjsNB8dQwuP0zS5agxMAekIMv4UckPytmC1yWLSIRd9U7I TlJQYhtXJ6mtWt3kZd+srJQY6W/E2mWp8sZ8ewzIj9DiKdE787IxMxySl4EDAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUFPQVvnNuhSEB0eJoDRngr4JXyVAwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTMzMzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kYMA0GCSqGSIb3DQEBCwUAA4IBAQBk 9+ok5FJPfkozH5Fspp3OVus8Z1rn6EsBk2zbZttBHUpCW27eXiztPWdHeTibb+lr IzZnp9YmDJdaW4b9IRMowmKRrwmmv3WcDAWk0TzrlAuWyVKW5JJycwKR//V5HdyY c0lkywdRwzXJsx2Tyr6LR/hvQlx4wx+2fQfB250Bwz1do7lR9bvUj7UONwGQS5uV ySmDfdWmDR9j5eCjCwilyP8oDCNA+BZ2THms/sSH/1FuGynBj2G7M+r3JOlGZCBR 7oLlus8Ncz8+iK71OpEh9Wdm7wzjPo+MkDUi23aj4kUPo/kmZ72nTzg5+YHgoA5I DGZeEh0VDJHVTFLRXbCj -----END CERTIFICATE-----Generated at Thu Jun 4 15:07:26 2026 by rpki-client