$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa File: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (raw, json) Hash identifier: 0pqNFsy2Jv3exhCr65w5BUOK2wMYsDflsm3c/HDS3Jw= Subject key identifier: 72:C1:0B:C3:98:17:6A:DC:CA:8B:E4:F7:9F:26:08:56:CB:71:BF:A1 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 093C63EAD756DF71CDE14EB525B5F381D9869E77 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa Signing time: Fri 15 May 2026 07:05:53 +0000 ROA not before: Fri 15 May 2026 07:00:53 +0000 ROA not after: Fri 14 May 2027 07:05:53 +0000 asID: 39753 IP address blocks: 2a14:7581:9020::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3c:63:ea:d7:56:df:71:cd:e1:4e:b5:25:b5:f3:81:d9:86:9e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: May 15 07:00:53 2026 GMT Not After : May 14 07:05:53 2027 GMT Subject: CN=72C10BC398176ADCCA8BE4F79F260856CB71BFA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:2e:d9:e9:8f:f6:27:02:18:8b:1f:a0:14: 11:d1:ba:ac:7c:cc:6f:d2:0b:0d:c9:56:f6:d0:3e: 5e:f4:98:7a:72:a6:b1:51:f8:5a:51:b0:55:85:7a: a7:21:37:70:87:b6:4d:98:88:9d:40:1a:ae:65:4e: 19:50:1f:b8:ce:7f:97:a2:9a:6b:47:1c:f8:9d:6d: 34:c5:89:fe:2b:50:9d:5f:69:72:76:6b:46:68:31: a8:ae:19:33:99:4a:eb:11:ed:f9:8a:48:40:c2:bb: 91:8a:32:03:9f:4d:c2:e6:d0:1a:02:8a:92:60:b0: 70:15:c7:14:ef:da:8a:44:45:5b:af:28:86:c8:b7: 98:6f:e0:b0:22:53:7f:3f:9c:fa:29:92:be:7c:a0: f5:38:6b:fd:4f:81:a5:88:13:a2:ca:ab:79:6a:2a: 55:5a:41:25:40:29:20:a0:ff:ee:16:36:d7:1b:b4: 40:9b:7f:d2:db:bf:fb:f9:be:62:e0:cb:9b:eb:27: 9c:dd:96:6b:3f:7b:3d:c8:a3:2a:ec:69:58:af:21: ba:d7:f9:70:f6:aa:db:f6:6b:30:b7:10:10:59:10: ba:79:7c:c3:fe:26:fb:cf:69:23:ed:04:e3:9c:e7: ab:aa:ca:5c:3e:f5:7b:67:8c:ff:96:9b:7e:81:87: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C1:0B:C3:98:17:6A:DC:CA:8B:E4:F7:9F:26:08:56:CB:71:BF:A1 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9020::/44 Signature Algorithm: sha256WithRSAEncryption 8d:28:21:d9:d5:6c:16:95:b1:93:cb:29:05:c7:28:79:31:50: f6:34:8c:91:c5:e4:18:94:50:9d:06:d0:d0:2f:8a:1e:a3:86: 9b:31:81:e2:e8:04:db:00:05:5e:52:d3:6a:56:bd:1c:db:a8: 5f:af:a0:e0:ef:96:af:59:b8:99:76:66:20:b1:92:f6:38:a9: eb:29:0f:f4:8d:48:55:a7:ed:4b:9e:c4:41:00:d3:d0:da:56: 5a:bd:a0:44:ce:79:d8:12:5b:73:10:a2:53:55:1c:25:2c:d7: eb:a7:70:79:e9:c1:33:1c:a4:21:34:80:2e:e9:3a:f3:b7:95: 7e:f1:71:49:a7:3f:cb:a4:85:a7:c7:28:f9:8e:8f:84:91:65: d7:11:59:68:54:12:d1:1f:d5:ae:47:9f:d7:7a:dc:cf:1b:9f: 48:1c:7f:56:a2:f5:42:ba:9a:39:4d:50:e3:b1:20:a5:9d:00: 4d:9f:b5:94:dc:bc:35:d0:9c:ad:e2:ab:0f:5f:6a:5b:8a:53: 19:08:e2:2f:1f:84:2d:06:71:66:bb:a8:0c:7b:aa:78:07:25: 43:a0:9c:66:72:9c:e7:4b:fa:dc:dc:00:7a:a7:9d:a4:47:d1: dd:a5:0a:e5:a0:10:07:23:d5:8a:6b:36:e3:2f:d1:ee:2f:05: 9e:9d:5a:4d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUCTxj6tdW33HN4U61JbXzgdmGnncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNjA1MTUwNzAwNTNaFw0yNzA1MTQwNzA1NTNaMDMxMTAvBgNV BAMTKDcyQzEwQkMzOTgxNzZBRENDQThCRTRGNzlGMjYwODU2Q0I3MUJGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCi7Z6Y/2JwIYix+gFBHRuqx8 zG/SCw3JVvbQPl70mHpyprFR+FpRsFWFeqchN3CHtk2YiJ1AGq5lThlQH7jOf5ei mmtHHPidbTTFif4rUJ1faXJ2a0ZoMaiuGTOZSusR7fmKSEDCu5GKMgOfTcLm0BoC ipJgsHAVxxTv2opERVuvKIbIt5hv4LAiU38/nPopkr58oPU4a/1PgaWIE6LKq3lq KlVaQSVAKSCg/+4WNtcbtECbf9Lbv/v5vmLgy5vrJ5zdlms/ez3IoyrsaVivIbrX +XD2qtv2azC3EBBZELp5fMP+JvvPaSPtBOOc56uqylw+9XtnjP+Wm36Bh4vTAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUcsELw5gXatzKi+T3nyYIVstxv6EwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84NTVjN2Q1YS0xNWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzAzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzMz OTM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoUdYGQIDANBgkqhkiG9w0BAQsFAAOCAQEAjSgh 2dVsFpWxk8spBccoeTFQ9jSMkcXkGJRQnQbQ0C+KHqOGmzGB4ugE2wAFXlLTala9 HNuoX6+g4O+Wr1m4mXZmILGS9jip6ykP9I1IVaftS57EQQDT0NpWWr2gRM552BJb cxCiU1UcJSzX66dweenBMxykITSALuk687eVfvFxSac/y6SFp8co+Y6PhJFl1xFZ aFQS0R/Vrkef13rczxufSBx/VqL1QrqaOU1Q47EgpZ0ATZ+1lNy8NdCcreKrD19q W4pTGQjiLx+ELQZxZruoDHuqeAclQ6CcZnKc50v63NwAeqedpEfR3aUK5aAQByPV ims24y/R7i8Fnp1aTQ== -----END CERTIFICATE-----Generated at Thu Jun 11 21:47:51 2026 by rpki-client