$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa File: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (raw, json) Hash identifier: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo= Subject key identifier: 4A:43:25:CB:82:BA:96:5E:60:16:76:20:8F:E1:AB:75:28:85:12:E6 Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 1D185D84A0DBD80E56A2E0B4D948C793DEBDD740 Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa Signing time: Tue 07 Jul 2026 17:24:11 +0000 ROA not before: Tue 07 Jul 2026 17:19:11 +0000 ROA not after: Tue 06 Jul 2027 17:24:11 +0000 asID: 219458 IP address blocks: 2a0b:4e07:290f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:18:5d:84:a0:db:d8:0e:56:a2:e0:b4:d9:48:c7:93:de:bd:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Jul 7 17:19:11 2026 GMT Not After : Jul 6 17:24:11 2027 GMT Subject: CN=4A4325CB82BA965E601676208FE1AB75288512E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:06:37:36:17:92:8c:77:07:03:65:38:10: ff:c7:74:37:2f:5e:e0:11:bf:72:a6:fe:55:d8:a8: 88:c8:74:90:4a:23:01:b5:d0:b8:54:da:01:76:19: fa:0b:aa:23:c8:9e:5c:b5:ff:f8:7d:de:f5:5c:46: f4:5c:a6:95:12:13:a8:46:e2:fd:d2:ec:74:01:db: d9:75:40:34:f4:65:bb:e7:f2:83:e7:c6:a9:7d:3a: 78:7d:24:36:7b:b3:dc:3e:e3:54:d7:55:63:61:63: 0a:bc:20:8f:6b:fc:63:cf:c6:0c:64:c5:83:fa:9a: a4:c1:93:e2:5f:35:cf:cd:c6:0f:8d:ed:ce:15:04: c1:11:15:55:0f:dc:a1:3e:1b:4f:17:68:6f:c4:68: c3:85:9b:64:9f:a9:8d:98:6b:c3:60:12:85:26:aa: 98:3b:8a:60:6b:f9:a8:e8:e0:78:c4:d6:b5:97:91: c0:b0:fd:5d:88:fd:f0:f5:61:39:3c:2a:e6:d1:a1: de:5f:80:ae:87:a4:87:a5:ed:9f:a9:21:91:b0:0d: 3c:8f:64:8b:10:00:16:c4:ff:f3:6f:08:02:3f:73: 22:08:84:10:29:8d:aa:81:e6:a9:d2:b0:14:05:fe: 92:fb:b5:56:f6:63:75:ec:f2:41:da:2d:79:56:1b: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:25:CB:82:BA:96:5E:60:16:76:20:8F:E1:AB:75:28:85:12:E6 X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:290f::/48 Signature Algorithm: sha256WithRSAEncryption 21:e3:73:32:19:87:69:29:91:58:1b:16:50:28:ba:08:02:d7: ca:5e:89:2c:f5:48:01:e0:cb:da:fb:aa:73:70:c9:63:7c:44: 3c:68:69:31:93:0e:9c:3e:6a:dd:4f:70:a6:ea:b8:c0:0e:9f: 63:8d:61:f4:5b:5d:46:b1:84:e1:f7:5f:7d:df:54:67:ad:10: 78:99:24:cf:4d:11:7f:77:0f:d2:b9:ff:af:88:93:ab:7e:f6: c4:78:84:94:0b:12:11:e1:a8:03:5c:9f:52:dc:b2:8b:d1:b1: 3f:b7:a8:61:5e:6c:c7:09:d7:5d:d9:cd:d6:93:0d:7d:89:a6: 18:6e:93:46:96:fb:39:66:48:56:7d:67:28:40:7a:8c:dd:ef: 43:64:cd:e2:73:15:0d:84:61:2d:71:ef:7d:89:e0:5a:56:8f: 89:3a:50:c9:98:9a:31:8c:22:44:8c:7d:ca:1b:cb:af:0a:ca: 0d:63:49:a7:df:11:88:0b:71:11:68:a8:7d:bf:c8:d7:c1:02: 59:ed:b0:2d:f6:fc:1d:59:df:ac:7b:6c:89:2d:b0:91:d5:3a: 12:eb:f5:51:eb:8e:99:6a:7e:3d:c3:ff:56:7e:41:35:65:27: 32:4d:7c:05:27:10:3d:0b:61:58:d8:52:df:00:bc:3c:43:71: ad:c9:30:d1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUHRhdhKDb2A5WouC02UjHk96910AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA3MDcxNzE5MTFaFw0yNzA3MDYxNzI0MTFaMDMxMTAvBgNV BAMTKDRBNDMyNUNCODJCQTk2NUU2MDE2NzYyMDhGRTFBQjc1Mjg4NTEyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPNQY3NheSjHcHA2U4EP/HdDcv XuARv3Km/lXYqIjIdJBKIwG10LhU2gF2GfoLqiPInly1//h93vVcRvRcppUSE6hG 4v3S7HQB29l1QDT0Zbvn8oPnxql9Onh9JDZ7s9w+41TXVWNhYwq8II9r/GPPxgxk xYP6mqTBk+JfNc/Nxg+N7c4VBMERFVUP3KE+G08XaG/EaMOFm2SfqY2Ya8NgEoUm qpg7imBr+ajo4HjE1rWXkcCw/V2I/fD1YTk8KubRod5fgK6HpIel7Z+pIZGwDTyP ZIsQABbE//NvCAI/cyIIhBApjaqB5qnSsBQF/pL7tVb2Y3Xs8kHaLXlWG/FdAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUSkMly4K6ll5gFnYgj+GrdSiFEuYwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYxYjQxY2It YTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIyYjE3LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjM5MzA2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzOTM0MzUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgcpDzANBgkqhkiG9w0BAQsFAAOCAQEAIeNzMhmHaSmRWBsW UCi6CALXyl6JLPVIAeDL2vuqc3DJY3xEPGhpMZMOnD5q3U9wpuq4wA6fY41h9Ftd RrGE4fdffd9UZ60QeJkkz00Rf3cP0rn/r4iTq372xHiElAsSEeGoA1yfUtyyi9Gx P7eoYV5sxwnXXdnN1pMNfYmmGG6TRpb7OWZIVn1nKEB6jN3vQ2TN4nMVDYRhLXHv fYngWlaPiTpQyZiaMYwiRIx9yhvLrwrKDWNJp98RiAtxEWiofb/I18ECWe2wLfb8 HVnfrHtsiS2wkdU6Euv1UeuOmWp+PcP/Vn5BNWUnMk18BScQPQthWNhS3wC8PENx rckw0Q== -----END CERTIFICATE-----Generated at Tue Jul 21 23:43:58 2026 by rpki-client