$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931393a3a2f34382d3438203d3e20323139343138.roa File: 326130363a313238333a383931393a3a2f34382d3438203d3e20323139343138.roa (raw, json) Hash identifier: SvM4lW7mJx4FEVZcscy1+zHSoLBqPFdjvwEGU+djvVI= Subject key identifier: FC:F5:93:B5:4F:1B:B9:85:F4:FE:96:54:F1:39:F9:0C:DB:B8:E3:67 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 0B0190149002C8E1AB90E11E998EF5A37D8379C9 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931393a3a2f34382d3438203d3e20323139343138.roa Signing time: Sun 05 Jul 2026 21:09:08 +0000 ROA not before: Sun 05 Jul 2026 21:04:08 +0000 ROA not after: Sun 04 Jul 2027 21:09:08 +0000 asID: 219418 IP address blocks: 2a06:1283:8919::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 11:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:01:90:14:90:02:c8:e1:ab:90:e1:1e:99:8e:f5:a3:7d:83:79:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Jul 5 21:04:08 2026 GMT Not After : Jul 4 21:09:08 2027 GMT Subject: CN=FCF593B54F1BB985F4FE9654F139F90CDBB8E367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:25:ac:34:05:e5:68:11:63:c3:89:9c:17: ea:57:6b:e3:d9:df:1f:8a:26:58:ef:c4:f3:25:fb: 3c:dd:6a:3e:a0:91:c9:18:29:94:93:6e:a5:37:b5: 67:a6:9c:a9:8a:bc:2e:64:98:f9:7c:39:ee:88:6e: 80:e7:05:c8:e7:17:51:a6:cf:a6:e9:48:64:75:5b: c1:5f:61:33:c7:f9:cc:3b:a0:64:c0:a6:fd:95:47: ac:bf:55:32:b9:f4:be:c5:10:62:83:8f:6a:61:cc: a8:a2:ff:0c:58:8e:9d:48:ac:65:40:30:ca:72:fe: 76:30:5d:1e:5e:ef:2d:29:9e:05:cd:1e:e8:5a:72: e6:39:32:ff:09:90:a8:2b:3a:6b:b8:85:01:32:92: 39:34:2d:43:e7:0e:8b:96:50:c2:ba:0f:cc:59:a0: 69:54:72:8a:6b:fa:fc:56:e0:05:37:e8:39:29:0c: b3:9b:74:f7:43:db:01:17:23:e3:38:40:43:7b:8d: e1:02:d0:1c:ee:bb:20:32:ef:7e:cb:c9:2b:5f:c5: a0:2e:c7:82:f0:d9:c3:f8:94:b0:ff:54:03:a0:ba: 88:c7:0c:b9:8b:ee:52:88:c0:66:f8:64:a4:0e:2d: 4d:68:9b:cd:bc:ee:5d:c9:8b:9b:43:e2:ef:5f:a2: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F5:93:B5:4F:1B:B9:85:F4:FE:96:54:F1:39:F9:0C:DB:B8:E3:67 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931393a3a2f34382d3438203d3e20323139343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8919::/48 Signature Algorithm: sha256WithRSAEncryption 95:b1:a0:94:bf:e2:a2:57:a3:20:c8:e1:a0:20:38:8d:eb:e0: c8:6a:c7:13:e5:6b:02:5a:82:6f:60:9e:b8:87:90:4d:37:9e: e2:ca:42:fd:e4:42:99:36:17:e6:e0:68:37:a4:b2:69:ad:16: c2:40:28:01:54:93:09:63:19:a3:0f:cb:6f:5b:eb:12:2e:30: 48:b5:6a:6a:d2:8b:d0:db:5a:ea:1a:5a:41:9a:ab:2c:a0:b2: 59:4f:80:c7:8a:a3:9c:30:48:28:10:04:c8:b4:31:4c:29:0f: 30:7f:0a:d3:89:8b:14:0e:b7:ef:21:3a:9f:c3:db:fd:55:13: 35:27:c9:21:a6:d6:3a:b0:c9:ae:e5:2a:fe:24:3d:32:93:a2: dd:82:13:39:c6:85:d7:d6:26:a7:b8:c8:c2:1f:49:8f:58:7e: d8:90:1e:f8:d3:6d:98:0f:e1:e8:9f:6c:5d:58:7d:9a:c7:b3: 0c:51:5a:40:1c:1c:85:6a:e5:34:97:50:87:16:b7:8b:8f:27: 6c:6a:a0:33:3b:17:14:92:48:da:d5:b2:da:72:ea:48:d3:82: 41:4d:e0:28:82:b2:c5:57:ca:6a:09:d4:b2:d8:db:2a:76:41: ce:5a:3f:e9:ff:69:1f:ce:f2:ab:90:89:56:12:c2:ee:ab:8f: 61:88:f8:76 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCwGQFJACyOGrkOEemY71o32DeckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA3MDUyMTA0MDhaFw0yNzA3MDQyMTA5MDhaMDMxMTAvBgNV BAMTKEZDRjU5M0I1NEYxQkI5ODVGNEZFOTY1NEYxMzlGOTBDREJCOEUzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFiWsNAXlaBFjw4mcF+pXa+PZ 3x+KJljvxPMl+zzdaj6gkckYKZSTbqU3tWemnKmKvC5kmPl8Oe6IboDnBcjnF1Gm z6bpSGR1W8FfYTPH+cw7oGTApv2VR6y/VTK59L7FEGKDj2phzKii/wxYjp1IrGVA MMpy/nYwXR5e7y0pngXNHuhacuY5Mv8JkKgrOmu4hQEykjk0LUPnDouWUMK6D8xZ oGlUcopr+vxW4AU36DkpDLObdPdD2wEXI+M4QEN7jeEC0BzuuyAy737LyStfxaAu x4Lw2cP4lLD/VAOguojHDLmL7lKIwGb4ZKQOLU1om8287l3Ji5tD4u9fouDvAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU/PWTtU8buYX0/pZU8Tn5DNu442cwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM5MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kZMA0GCSqGSIb3DQEBCwUAA4IBAQCV saCUv+KiV6MgyOGgIDiN6+DIascT5WsCWoJvYJ64h5BNN57iykL95EKZNhfm4Gg3 pLJprRbCQCgBVJMJYxmjD8tvW+sSLjBItWpq0ovQ21rqGlpBmqssoLJZT4DHiqOc MEgoEATItDFMKQ8wfwrTiYsUDrfvITqfw9v9VRM1J8khptY6sMmu5Sr+JD0yk6Ld ghM5xoXX1ianuMjCH0mPWH7YkB74022YD+Hon2xdWH2ax7MMUVpAHByFauU0l1CH FreLjydsaqAzOxcUkkja1bLacupI04JBTeAogrLFV8pqCdSy2NsqdkHOWj/p/2kf zvKrkIlWEsLuq49hiPh2 -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:49 2026 by rpki-client