$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa File: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (raw, json) Hash identifier: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM= Subject key identifier: A2:23:7F:CB:5E:94:D7:3C:83:9D:3D:68:EA:37:D2:9F:F0:04:E2:62 Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 6447457B644E8D453A8DAA2103774D3D235962CE Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa Signing time: Fri 03 Jul 2026 20:29:35 +0000 ROA not before: Fri 03 Jul 2026 20:24:35 +0000 ROA not after: Fri 02 Jul 2027 20:29:35 +0000 asID: 219458 IP address blocks: 2a0b:4e07:2900::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:47:45:7b:64:4e:8d:45:3a:8d:aa:21:03:77:4d:3d:23:59:62:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Jul 3 20:24:35 2026 GMT Not After : Jul 2 20:29:35 2027 GMT Subject: CN=A2237FCB5E94D73C839D3D68EA37D29FF004E262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:92:ea:ec:79:b5:9b:1a:86:9f:30:f5:83: c0:7d:00:d6:9a:95:70:b3:2a:91:53:67:37:75:a6: 05:11:8a:91:37:a0:0f:08:e4:56:51:c2:f8:35:39: eb:28:5b:1d:15:cc:86:55:ad:c4:5e:08:be:23:8e: 9d:10:bc:bc:41:2d:62:8c:1e:3d:c3:c3:15:7a:67: cb:2b:fd:04:7f:b7:32:8a:d9:15:b7:a6:ce:41:d9: a8:40:6e:2e:37:9f:18:7e:a5:75:2d:a3:ba:2b:17: 2f:3e:d0:e8:b2:c4:f8:b3:e0:a1:41:49:30:b2:ed: 33:f4:4c:1f:35:5d:91:36:b7:87:5e:87:ae:0a:29: 30:17:80:b0:64:d2:0f:f0:5a:77:d2:75:c0:b2:78: 2d:d7:3e:84:2b:63:34:0a:7b:43:47:d4:6a:0f:84: 6b:4f:d9:1e:3b:b6:7c:72:14:c1:53:99:bc:63:0b: 9f:40:75:2b:f1:f7:f4:eb:8a:05:ca:00:ab:36:25: 67:bc:35:96:6e:a3:db:55:30:26:04:04:bd:f3:1d: 6e:fd:7b:79:d5:d6:ed:48:fe:96:d2:c7:21:95:68: 38:62:30:b7:3d:82:ea:8e:fe:7d:b5:af:97:01:ef: 3f:7c:4e:2f:a9:46:71:af:55:63:d1:1e:19:fe:50: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:7F:CB:5E:94:D7:3C:83:9D:3D:68:EA:37:D2:9F:F0:04:E2:62 X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2900::/48 Signature Algorithm: sha256WithRSAEncryption 5a:62:a0:f9:09:d3:05:39:63:ff:1a:59:2f:88:7d:d9:e2:39: 60:08:fc:58:33:9b:c7:89:12:37:33:41:11:b8:22:ab:2e:88: 1f:0f:df:b8:9b:d9:4b:fd:57:5e:7e:a1:15:9e:77:36:8f:10: 9d:f7:4e:d0:de:31:6d:0d:51:1c:96:e0:7d:d6:c6:2a:5f:b2: 08:fd:6a:ae:8a:10:be:10:8b:12:57:e9:39:fa:86:57:85:83: 4b:f5:bc:00:30:b8:ce:4c:59:67:63:54:b4:c7:72:07:44:41: c1:26:a4:6d:15:b1:da:17:f7:29:66:b2:c9:b4:bc:85:c0:c7: b8:06:76:03:65:f4:72:a0:13:2d:85:2b:1c:f9:38:cd:ec:ce: 1f:87:67:c4:75:6f:59:0d:ef:89:f4:44:e5:01:e2:ed:ba:4f: 1b:9a:44:eb:6b:38:99:14:0c:a0:1e:e8:99:a4:de:c3:d8:a2: 24:de:a8:3b:cd:04:c6:26:42:48:9a:5c:a5:e0:45:98:e4:30: c5:83:c7:25:68:07:42:80:5b:66:d6:74:48:f2:5e:42:d4:fe: 67:f0:a2:2b:bb:c3:20:10:22:ca:9d:2e:57:62:1b:3c:41:5e: 88:f6:e6:8b:b0:84:02:7f:fd:60:10:c6:be:81:ba:df:c1:48: 24:47:e0:fa -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUZEdFe2ROjUU6jaohA3dNPSNZYs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA3MDMyMDI0MzVaFw0yNzA3MDIyMDI5MzVaMDMxMTAvBgNV BAMTKEEyMjM3RkNCNUU5NEQ3M0M4MzlEM0Q2OEVBMzdEMjlGRjAwNEUyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7C5Lq7Hm1mxqGnzD1g8B9ANaa lXCzKpFTZzd1pgURipE3oA8I5FZRwvg1OesoWx0VzIZVrcReCL4jjp0QvLxBLWKM Hj3DwxV6Z8sr/QR/tzKK2RW3ps5B2ahAbi43nxh+pXUto7orFy8+0OiyxPiz4KFB STCy7TP0TB81XZE2t4deh64KKTAXgLBk0g/wWnfSdcCyeC3XPoQrYzQKe0NH1GoP hGtP2R47tnxyFMFTmbxjC59AdSvx9/TrigXKAKs2JWe8NZZuo9tVMCYEBL3zHW79 e3nV1u1I/pbSxyGVaDhiMLc9guqO/n21r5cB7z98Ti+pRnGvVWPRHhn+UHWTAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUoiN/y16U1zyDnT1o6jfSn/AE4mIwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYxYjQxY2It YTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIyYjE3LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjM5MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzOTM0MzUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgcpADANBgkqhkiG9w0BAQsFAAOCAQEAWmKg+QnTBTlj/xpZ L4h92eI5YAj8WDObx4kSNzNBEbgiqy6IHw/fuJvZS/1XXn6hFZ53No8QnfdO0N4x bQ1RHJbgfdbGKl+yCP1qrooQvhCLElfpOfqGV4WDS/W8ADC4zkxZZ2NUtMdyB0RB wSakbRWx2hf3KWayybS8hcDHuAZ2A2X0cqATLYUrHPk4zezOH4dnxHVvWQ3vifRE 5QHi7bpPG5pE62s4mRQMoB7omaTew9iiJN6oO80ExiZCSJpcpeBFmOQwxYPHJWgH QoBbZtZ0SPJeQtT+Z/CiK7vDIBAiyp0uV2IbPEFeiPbmi7CEAn/9YBDGvoG638FI JEfg+g== -----END CERTIFICATE-----Generated at Tue Jul 21 23:43:56 2026 by rpki-client