$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa File: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (raw, json) Hash identifier: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g= Subject key identifier: 76:90:8F:4B:4C:B3:C8:68:24:EF:6E:12:62:8A:67:B0:4D:7D:40:F7 Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Certificate serial: 7347F7CE1224E8BF8BB4A1450D8E5023A4578726 Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa Signing time: Mon 06 Jul 2026 11:50:45 +0000 ROA not before: Mon 06 Jul 2026 11:45:45 +0000 ROA not after: Mon 05 Jul 2027 11:50:45 +0000 asID: 219458 IP address blocks: 2a0b:4e07:2910::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:47:f7:ce:12:24:e8:bf:8b:b4:a1:45:0d:8e:50:23:a4:57:87:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE Validity Not Before: Jul 6 11:45:45 2026 GMT Not After : Jul 5 11:50:45 2027 GMT Subject: CN=76908F4B4CB3C86824EF6E12628A67B04D7D40F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:35:38:fd:d9:8a:23:a1:82:12:8b:74:ec:59: c0:8f:2f:8a:5b:50:6a:b6:84:04:ef:d0:0b:c3:79: e6:9d:a6:d1:f5:a0:a5:59:05:1c:ff:86:e6:3b:4f: 2b:c4:36:ab:ce:b0:f9:67:e4:23:ef:41:93:f5:48: c8:46:29:fe:02:ad:11:45:1f:85:db:b6:b2:f7:10: d4:c5:72:e2:f9:42:03:7a:ef:8c:a7:e6:62:c9:b4: 27:d0:3c:47:99:43:35:60:7d:b6:41:41:01:6b:ea: bb:8e:7c:24:7f:88:7a:99:09:00:b8:df:d3:3d:b7: 5a:8b:2b:3e:45:cc:39:a7:de:a3:2e:76:dc:d8:e2: e0:e1:cd:fd:c2:b7:fc:46:b9:53:69:04:13:e8:ae: 2a:62:d5:dc:df:57:8e:7e:13:99:91:14:2c:e2:95: 0a:76:4b:b2:8e:f9:85:5e:17:85:85:44:30:a6:80: 6d:94:ad:0e:f0:f9:d6:4e:81:79:b2:42:da:82:c5: ac:da:e4:64:b4:f9:06:41:8c:43:ce:a4:02:20:6b: a9:16:d8:4e:b3:63:f1:7c:c7:f3:db:75:05:4d:ab: a8:09:eb:86:6d:72:64:39:17:4f:f7:7b:e2:46:1c: a9:25:08:87:8c:ec:36:e8:fc:22:df:d3:4e:66:1d: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:8F:4B:4C:B3:C8:68:24:EF:6E:12:62:8A:67:B0:4D:7D:40:F7 X509v3 Authority Key Identifier: keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:2910::/48 Signature Algorithm: sha256WithRSAEncryption b1:b1:fc:2e:ed:9f:7d:65:18:31:12:ee:cb:ac:c1:b9:50:89: 9c:00:e9:7f:8f:61:9b:e8:d8:3f:17:3d:d4:fa:40:c6:23:40: ed:a9:f7:26:4f:ce:f7:7a:61:3d:da:74:80:46:9a:19:46:e1: 29:ef:8f:e2:d3:70:55:b1:3e:c0:f1:5e:2a:c4:6f:4e:d8:a9: 5b:dd:41:ec:d3:5f:94:ca:de:59:81:df:59:34:9b:23:27:10: dc:e1:6e:c5:f3:3e:76:01:96:28:f1:b1:7e:04:27:b3:9b:e5: de:9f:19:8a:74:53:78:b4:0e:67:44:92:67:59:9e:ab:27:0e: 93:42:dc:86:af:94:7b:c7:1b:f7:ec:1a:92:a5:e6:f3:50:ae: db:5f:c4:41:c5:f3:f9:33:e1:b5:ad:24:19:84:96:83:cf:3b: a0:5c:11:45:6f:11:83:bf:9b:e0:cd:c0:d4:63:51:bd:bd:e0: 4d:33:b0:2a:89:7c:e0:fe:b7:11:d7:00:0d:03:9b:99:69:35: 43:50:ac:40:fd:2b:9f:bf:9d:b0:9c:56:82:1a:29:eb:a3:16: 26:6a:30:97:68:dc:73:57:ff:47:5c:a9:34:bd:16:11:c7:8c: b4:52:73:45:a0:10:49:ed:40:ef:78:af:6f:66:c3:8d:0d:8b: e2:9f:fe:2b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUc0f3zhIk6L+LtKFFDY5QI6RXhyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VG Q0Q3RjdDRTAeFw0yNjA3MDYxMTQ1NDVaFw0yNzA3MDUxMTUwNDVaMDMxMTAvBgNV BAMTKDc2OTA4RjRCNENCM0M4NjgyNEVGNkUxMjYyOEE2N0IwNEQ3RDQwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNTj92YojoYISi3TsWcCPL4pb UGq2hATv0AvDeeadptH1oKVZBRz/huY7TyvENqvOsPln5CPvQZP1SMhGKf4CrRFF H4XbtrL3ENTFcuL5QgN674yn5mLJtCfQPEeZQzVgfbZBQQFr6ruOfCR/iHqZCQC4 39M9t1qLKz5FzDmn3qMudtzY4uDhzf3Ct/xGuVNpBBPoripi1dzfV45+E5mRFCzi lQp2S7KO+YVeF4WFRDCmgG2UrQ7w+dZOgXmyQtqCxaza5GS0+QZBjEPOpAIga6kW 2E6zY/F8x/PbdQVNq6gJ64ZtcmQ5F0/3e+JGHKklCIeM7Dbo/CLf005mHb1/AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUdpCPS0yzyGgk724SYopnsE19QPcwHwYDVR0j BBgwFoAU77XfB2zfBiKUsSwwLnXVfvzX984wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy YjE3LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3RjdDRS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRUZCNURGMDc2Q0RGMDYyMjk0QjEyQzMwMkU3NUQ1N0VGQ0Q3 RjdDRS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYxYjQxY2It YTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIyYjE3LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMjM5MzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzOTM0MzUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgcpEDANBgkqhkiG9w0BAQsFAAOCAQEAsbH8Lu2ffWUYMRLu y6zBuVCJnADpf49hm+jYPxc91PpAxiNA7an3Jk/O93phPdp0gEaaGUbhKe+P4tNw VbE+wPFeKsRvTtipW91B7NNflMreWYHfWTSbIycQ3OFuxfM+dgGWKPGxfgQns5vl 3p8ZinRTeLQOZ0SSZ1meqycOk0Lchq+Ue8cb9+wakqXm81Cu21/EQcXz+TPhta0k GYSWg887oFwRRW8Rg7+b4M3A1GNRvb3gTTOwKol84P63EdcADQObmWk1Q1CsQP0r n7+dsJxWghop66MWJmowl2jcc1f/R1ypNL0WEceMtFJzRaAQSe1A73ivb2bDjQ2L 4p/+Kw== -----END CERTIFICATE-----Generated at Tue Jul 21 23:43:56 2026 by rpki-client