$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa File: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (raw, json) Hash identifier: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo= Subject key identifier: 05:BE:59:AD:9B:40:7A:36:09:B0:D7:01:3E:2C:AC:54:C5:F1:50:D9 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 0EE6713095D9ED8905BCA6BB12472DA12DCA717A Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa Signing time: Mon 29 Jun 2026 15:21:59 +0000 ROA not before: Mon 29 Jun 2026 15:16:59 +0000 ROA not after: Mon 28 Jun 2027 15:21:59 +0000 asID: 214701 IP address blocks: 2a0b:4e07:6011::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Jul 2026 20:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e6:71:30:95:d9:ed:89:05:bc:a6:bb:12:47:2d:a1:2d:ca:71:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jun 29 15:16:59 2026 GMT Not After : Jun 28 15:21:59 2027 GMT Subject: CN=05BE59AD9B407A3609B0D7013E2CAC54C5F150D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:38:44:b6:bf:15:5b:68:32:f6:bf:eb:d2:8c: c1:35:69:0e:00:b1:ef:07:e4:6e:67:94:d0:69:f7: 64:9b:96:9b:cc:9f:0f:2c:7b:3e:95:b9:b0:04:2c: a9:e5:e8:81:25:76:c3:d1:dc:32:cf:46:9c:7a:c3: 24:08:b9:88:bd:51:9b:9d:eb:0a:45:e0:4e:82:7c: af:ea:ad:52:cd:a4:2b:52:58:c5:ea:e5:ca:f0:49: 28:ea:72:e1:05:33:c8:40:96:ea:22:77:bf:f6:e6: 66:78:a2:2b:7c:65:54:15:fb:7c:f6:b2:e5:6d:f3: 31:fb:9d:13:2b:b0:05:4f:3e:c9:91:0d:be:c0:c5: 3d:1d:ca:00:d0:cc:72:b9:c4:4e:34:e3:8e:ef:3a: e5:12:c9:32:12:a0:d9:fd:34:ea:60:1a:5e:79:31: a7:6d:2d:de:74:f5:1e:d1:b3:b5:43:5f:03:ee:25: 16:a9:e2:66:22:7d:6f:96:0c:a7:f5:d5:5a:e8:03: 00:b3:a0:ef:03:6b:e0:a1:ce:d7:8b:1f:89:cc:e0: 4a:be:c4:3f:16:fb:66:b7:fa:a3:49:e9:62:c7:b9: 3a:82:e9:d8:91:2b:54:0c:a8:c2:eb:c8:82:ee:0f: dd:32:3b:01:fb:66:b3:0a:71:0a:b8:e3:6d:55:a3: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BE:59:AD:9B:40:7A:36:09:B0:D7:01:3E:2C:AC:54:C5:F1:50:D9 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6011::/48 Signature Algorithm: sha256WithRSAEncryption 1d:4b:c6:ed:1e:16:84:e1:6e:d8:1e:32:5f:7b:5f:fa:31:a5: 2b:db:51:01:22:95:ac:84:2c:8d:c0:a0:15:36:09:a5:8e:de: f0:a7:5b:e5:70:72:04:96:b6:bc:f2:80:a8:64:4f:8e:c6:4d: 28:5a:15:ff:4d:fb:65:da:d0:a5:e9:8c:9c:5c:5d:02:0e:d4: e0:50:e9:1f:fb:4b:15:bd:27:99:6a:76:7e:ca:f1:d6:62:b1: 52:08:58:55:b7:9c:ec:8d:f3:09:22:fc:36:d3:e4:d8:dc:a3: 11:bc:f0:34:1d:bc:c3:9b:7b:43:3d:b7:ea:49:29:64:ea:64: 4b:63:c3:10:9b:45:b4:26:86:9e:11:3d:0e:17:13:5a:28:09: c4:1c:70:f0:83:8b:7d:60:e3:02:eb:d4:a5:70:93:d5:ec:6d: 18:6b:47:04:fe:47:c1:a0:be:d0:d3:aa:31:88:ec:cf:45:01: 6f:11:4b:b7:ed:57:4d:e8:fa:ee:dd:97:45:0f:e0:12:f3:82: c8:4d:ee:c5:21:40:7a:cb:2d:5f:b9:6a:7f:28:91:1e:99:f7: 99:14:de:8a:bb:b5:a7:cc:65:25:0d:b3:06:63:09:60:b5:31: b7:4a:08:5b:eb:e8:fb:6a:c3:c7:f6:c0:44:fc:6b:0f:91:f6: 09:b8:81:04 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUDuZxMJXZ7YkFvKa7EkctoS3KcXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA2MjkxNTE2NTlaFw0yNzA2MjgxNTIxNTlaMDMxMTAvBgNV BAMTKDA1QkU1OUFEOUI0MDdBMzYwOUIwRDcwMTNFMkNBQzU0QzVGMTUwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOES2vxVbaDL2v+vSjME1aQ4A se8H5G5nlNBp92SblpvMnw8sez6VubAELKnl6IEldsPR3DLPRpx6wyQIuYi9UZud 6wpF4E6CfK/qrVLNpCtSWMXq5crwSSjqcuEFM8hAluoid7/25mZ4oit8ZVQV+3z2 suVt8zH7nRMrsAVPPsmRDb7AxT0dygDQzHK5xE40447vOuUSyTISoNn9NOpgGl55 MadtLd509R7Rs7VDXwPuJRap4mYifW+WDKf11VroAwCzoO8Da+ChzteLH4nM4Eq+ xD8W+2a3+qNJ6WLHuTqC6diRK1QMqMLryILuD90yOwH7ZrMKcQq4421Vo4RzAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUBb5ZrZtAejYJsNcBPiysVMXxUNkwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmVhZDJkY2Yt ZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5YzUwLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNjMwMzEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM3MzAzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgdgETANBgkqhkiG9w0BAQsFAAOCAQEAHUvG7R4WhOFu2B4y X3tf+jGlK9tRASKVrIQsjcCgFTYJpY7e8Kdb5XByBJa2vPKAqGRPjsZNKFoV/037 ZdrQpemMnFxdAg7U4FDpH/tLFb0nmWp2fsrx1mKxUghYVbec7I3zCSL8NtPk2Nyj EbzwNB28w5t7Qz236kkpZOpkS2PDEJtFtCaGnhE9DhcTWigJxBxw8IOLfWDjAuvU pXCT1extGGtHBP5HwaC+0NOqMYjsz0UBbxFLt+1XTej67t2XRQ/gEvOCyE3uxSFA esstX7lqfyiRHpn3mRTeiru1p8xlJQ2zBmMJYLUxt0oIW+vo+2rDx/bARPxrD5H2 CbiBBA== -----END CERTIFICATE-----Generated at Wed Jul 15 13:32:35 2026 by rpki-client