$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130343a3a2f34382d3438203d3e20323130363332.roa File: 326130623a346530373a363130343a3a2f34382d3438203d3e20323130363332.roa (raw, json) Hash identifier: zvjx/yTCTWO3kCoZu0S8S/X09AzIBk5JMwyuFagXb+o= Subject key identifier: 98:F9:DD:8A:CA:AB:17:B0:91:2D:D7:4D:2D:21:AE:BC:FB:27:0B:B1 Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Certificate serial: 59DB31D21D82B6A6BA075651BF4D984AD7CF1BD6 Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130343a3a2f34382d3438203d3e20323130363332.roa Signing time: Tue 19 May 2026 17:05:59 +0000 ROA not before: Tue 19 May 2026 17:00:59 +0000 ROA not after: Tue 18 May 2027 17:05:59 +0000 asID: 210632 IP address blocks: 2a0b:4e07:6104::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 13:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:db:31:d2:1d:82:b6:a6:ba:07:56:51:bf:4d:98:4a:d7:cf:1b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484 Validity Not Before: May 19 17:00:59 2026 GMT Not After : May 18 17:05:59 2027 GMT Subject: CN=98F9DD8ACAAB17B0912DD74D2D21AEBCFB270BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:cd:a8:ae:e9:35:c4:0b:8e:cb:2d:23:ca: b3:ea:15:b9:4a:ca:e8:39:6e:26:ac:3b:ac:da:3c: 39:37:e2:ca:5c:ff:6b:2b:79:bb:e5:07:ae:c0:81: b7:8d:c2:e6:97:66:be:ee:65:de:4a:73:25:2b:7a: dc:55:47:2f:6f:64:e1:1a:d5:c4:de:d4:12:d7:dc: f4:c9:33:2b:a3:b6:b0:1d:e9:1a:09:f9:0b:e5:9b: 84:58:40:f0:d1:e4:62:91:35:41:51:3a:3b:4e:47: 1f:c3:e6:56:6a:97:8e:e5:dd:a1:00:02:b6:65:27: 54:0c:50:e1:2e:6e:fa:93:3f:30:b0:9c:12:4a:cb: 4e:a6:18:f7:3f:e2:16:6c:04:c4:3a:50:e1:62:4e: 7a:62:fc:1b:f3:70:cb:94:21:78:ee:2b:f1:8f:77: 8e:6a:75:57:50:10:9b:f8:25:78:66:9e:d3:24:17: 94:6f:b3:ab:dc:56:74:b8:fd:48:82:b4:89:64:02: f4:ec:f8:47:10:d7:49:2b:f1:5b:90:45:1f:37:32: b5:c1:cd:7d:ab:ff:b2:e6:8e:50:da:95:2b:8c:e7: 85:dc:47:12:26:d1:73:08:ee:7b:81:b6:f7:49:8b: 99:7b:58:60:d6:f6:fb:fc:76:9d:a9:73:e9:9e:60: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F9:DD:8A:CA:AB:17:B0:91:2D:D7:4D:2D:21:AE:BC:FB:27:0B:B1 X509v3 Authority Key Identifier: keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/326130623a346530373a363130343a3a2f34382d3438203d3e20323130363332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6104::/48 Signature Algorithm: sha256WithRSAEncryption 65:ec:f5:af:05:32:73:63:55:0e:35:fb:59:8a:fa:26:5d:35: 3e:fa:19:4d:0d:0d:7e:9b:b6:72:ad:95:7a:55:d8:1a:e0:2a: fd:e1:c2:d8:74:23:80:69:b4:c7:49:f0:9c:a4:5b:36:48:d2: 6a:0e:e2:b6:9b:89:c6:50:b5:6f:5c:59:5a:76:88:76:31:3a: 7c:e7:d0:84:41:30:5f:45:d2:ed:cd:91:39:f8:27:95:c4:7a: 2e:36:eb:ad:d7:91:f0:f9:48:13:15:27:e9:09:55:81:16:57: 49:3d:c4:86:40:39:67:be:ac:9d:1e:13:80:3b:a5:18:db:57: 18:1e:47:b1:e0:e5:36:45:52:ff:4a:93:fc:5e:6e:ea:86:ec: ae:42:41:bf:26:95:0a:ab:49:ee:fa:63:bb:85:9e:a3:05:f4: 9a:81:56:1a:79:80:b3:3b:cb:c0:e7:d1:25:d2:97:df:3b:92: dc:2c:67:b0:2d:7c:04:ce:7a:05:74:37:85:f8:17:25:cc:37: 11:5f:c7:13:c6:dd:ce:fe:52:ca:1f:09:83:08:24:5b:c1:20: 47:44:e3:ea:01:2b:bd:0c:69:41:e7:59:02:58:eb:73:ef:87: f6:d9:41:ce:f7:dc:d4:7a:ce:91:07:ca:b0:85:27:e3:88:fc: 09:c6:19:38 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUWdsx0h2Ctqa6B1ZRv02YStfPG9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4 OEUxODQ4NDAeFw0yNjA1MTkxNzAwNTlaFw0yNzA1MTgxNzA1NTlaMDMxMTAvBgNV BAMTKDk4RjlERDhBQ0FBQjE3QjA5MTJERDc0RDJEMjFBRUJDRkIyNzBCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrc2oruk1xAuOyy0jyrPqFblK yug5biasO6zaPDk34spc/2srebvlB67AgbeNwuaXZr7uZd5KcyUretxVRy9vZOEa 1cTe1BLX3PTJMyujtrAd6RoJ+Qvlm4RYQPDR5GKRNUFROjtORx/D5lZql47l3aEA ArZlJ1QMUOEubvqTPzCwnBJKy06mGPc/4hZsBMQ6UOFiTnpi/BvzcMuUIXjuK/GP d45qdVdQEJv4JXhmntMkF5Rvs6vcVnS4/UiCtIlkAvTs+EcQ10kr8VuQRR83MrXB zX2r/7LmjlDalSuM54XcRxIm0XMI7nuBtvdJi5l7WGDW9vv8dp2pc+meYDOrAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUmPndisqrF7CRLddNLSGuvPsnC7EwHwYDVR0j BBgwFoAUeaoSutfixQJ4iQ8t+czgK4jhhIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGYxNjlhN2EtZTA0My00MzM3LWFlZWMtMjRkMmFiOTFm MTM4LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUxODQ4NC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNzlBQTEyQkFEN0UyQzUwMjc4ODkwRjJERjlDQ0UwMkI4OEUx ODQ4NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGYxNjlhN2Et ZTA0My00MzM3LWFlZWMtMjRkMmFiOTFmMTM4LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNjMxMzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMDM2MzMzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgdhBDANBgkqhkiG9w0BAQsFAAOCAQEAZez1rwUyc2NVDjX7 WYr6Jl01PvoZTQ0Nfpu2cq2VelXYGuAq/eHC2HQjgGm0x0nwnKRbNkjSag7itpuJ xlC1b1xZWnaIdjE6fOfQhEEwX0XS7c2ROfgnlcR6LjbrrdeR8PlIExUn6QlVgRZX ST3EhkA5Z76snR4TgDulGNtXGB5HseDlNkVS/0qT/F5u6obsrkJBvyaVCqtJ7vpj u4WeowX0moFWGnmAszvLwOfRJdKX3zuS3CxnsC18BM56BXQ3hfgXJcw3EV/HE8bd zv5Syh8JgwgkW8EgR0Tj6gErvQxpQedZAljrc++H9tlBzvfc1HrOkQfKsIUn44j8 CcYZOA== -----END CERTIFICATE-----Generated at Sat Jun 6 05:21:59 2026 by rpki-client