$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa File: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (raw, json) Hash identifier: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ= Subject key identifier: DE:59:F0:7A:C6:66:58:81:83:D9:64:F5:FC:D9:73:04:AC:A3:AC:E7 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 40D4A9ED9C394AD14FA4F9E1CFC3A5096CF2403A Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa Signing time: Mon 29 Jun 2026 15:22:30 +0000 ROA not before: Mon 29 Jun 2026 15:17:30 +0000 ROA not after: Mon 28 Jun 2027 15:22:30 +0000 asID: 214701 IP address blocks: 2a0b:4e07:6012::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Jul 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d4:a9:ed:9c:39:4a:d1:4f:a4:f9:e1:cf:c3:a5:09:6c:f2:40:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jun 29 15:17:30 2026 GMT Not After : Jun 28 15:22:30 2027 GMT Subject: CN=DE59F07AC666588183D964F5FCD97304ACA3ACE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:d9:90:62:d4:63:5b:ce:ef:42:a1:35:e9: 41:8b:24:13:ff:fa:4f:c5:01:48:dc:68:c5:df:c3: df:ce:6d:46:8e:28:ec:cd:ea:67:3a:3a:50:81:09: d1:76:fd:73:ce:ea:07:fd:ae:75:f9:f7:24:6a:af: b9:28:f4:6f:aa:7b:fc:03:62:88:24:6e:5a:d1:42: e1:04:85:c9:68:26:dd:af:d0:6f:5b:70:cc:09:00: 34:29:81:39:9f:e0:81:47:a3:93:e2:cd:a0:52:4b: 47:78:d3:db:39:2c:ec:7c:0b:f5:b9:4e:41:0a:77: 3b:f7:b3:f8:f1:36:31:1f:c2:a4:46:c5:64:78:24: a8:e5:ef:aa:38:1d:36:e6:9d:d2:4d:2a:fe:da:f4: 58:ac:b2:24:7e:6a:3d:0a:15:df:a3:3c:d7:57:01: ba:8c:aa:57:4a:47:d4:74:69:3b:52:8d:3c:6e:54: 52:de:b0:31:26:99:5c:1f:78:3a:cf:61:b7:46:c7: 70:13:31:2f:c3:83:82:44:00:66:d5:6f:50:29:ff: e6:49:77:41:ed:0b:f7:0c:97:6f:a2:56:76:6f:ea: 7b:18:23:41:13:ac:c7:23:78:3c:bf:17:73:c2:3a: 07:e6:db:12:d5:52:46:24:13:39:cb:0a:74:95:15: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:59:F0:7A:C6:66:58:81:83:D9:64:F5:FC:D9:73:04:AC:A3:AC:E7 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:6012::/48 Signature Algorithm: sha256WithRSAEncryption 87:44:56:1f:8c:76:12:2a:98:56:2b:1f:4b:13:b2:5c:9b:a3: ed:c7:98:f5:ba:5e:8c:65:62:b0:9a:7d:70:48:4c:61:c0:33: 62:89:db:ed:9f:7a:32:4c:46:c4:ce:00:d0:84:8d:6d:49:02: 1b:4b:1f:27:e8:c1:ce:5a:a8:65:24:0d:6e:e0:82:9d:ef:f3: 0f:d9:47:e5:e0:b8:49:8f:04:aa:81:12:93:7f:9e:0c:33:7d: f5:f5:fe:be:7b:61:35:ea:46:ae:c7:db:b8:16:15:f4:7d:64: 30:84:cb:b1:b8:a1:09:c9:3f:3f:7c:e3:76:2c:bd:13:55:88: a1:99:b0:ee:3f:92:72:20:bd:22:7d:b0:9c:60:26:be:e8:2c: a4:93:40:7c:50:a4:df:c3:cc:ff:6a:ef:37:e3:87:bf:30:44: 4f:14:65:81:5b:e9:dc:13:41:9c:86:40:41:cf:51:7e:e2:95: 94:6d:b2:d3:b2:c4:29:19:e3:d5:6a:d6:21:3f:b7:78:26:62: 72:8d:ea:da:92:d7:97:1e:92:55:57:1b:ba:2d:8b:fe:cf:c7: 1e:a6:a8:d6:64:03:a8:52:54:49:34:8e:52:9b:22:3e:91:16: 17:6b:42:0f:12:80:c4:c6:d8:c8:a0:52:6a:06:09:61:e5:10: 6c:e1:50:89 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUQNSp7Zw5StFPpPnhz8OlCWzyQDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA2MjkxNTE3MzBaFw0yNzA2MjgxNTIyMzBaMDMxMTAvBgNV BAMTKERFNTlGMDdBQzY2NjU4ODE4M0Q5NjRGNUZDRDk3MzA0QUNBM0FDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfztmQYtRjW87vQqE16UGLJBP/ +k/FAUjcaMXfw9/ObUaOKOzN6mc6OlCBCdF2/XPO6gf9rnX59yRqr7ko9G+qe/wD YogkblrRQuEEhcloJt2v0G9bcMwJADQpgTmf4IFHo5PizaBSS0d409s5LOx8C/W5 TkEKdzv3s/jxNjEfwqRGxWR4JKjl76o4HTbmndJNKv7a9FissiR+aj0KFd+jPNdX AbqMqldKR9R0aTtSjTxuVFLesDEmmVwfeDrPYbdGx3ATMS/Dg4JEAGbVb1Ap/+ZJ d0HtC/cMl2+iVnZv6nsYI0ETrMcjeDy/F3PCOgfm2xLVUkYkEznLCnSVFZnHAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU3lnwesZmWIGD2WT1/NlzBKyjrOcwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmVhZDJkY2Yt ZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5YzUwLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNjMwMzEzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM3MzAzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgdgEjANBgkqhkiG9w0BAQsFAAOCAQEAh0RWH4x2EiqYVisf SxOyXJuj7ceY9bpejGVisJp9cEhMYcAzYonb7Z96MkxGxM4A0ISNbUkCG0sfJ+jB zlqoZSQNbuCCne/zD9lH5eC4SY8EqoESk3+eDDN99fX+vnthNepGrsfbuBYV9H1k MITLsbihCck/P3zjdiy9E1WIoZmw7j+SciC9In2wnGAmvugspJNAfFCk38PM/2rv N+OHvzBETxRlgVvp3BNBnIZAQc9RfuKVlG2y07LEKRnj1WrWIT+3eCZico3q2pLX lx6SVVcbui2L/s/HHqao1mQDqFJUSTSOUpsiPpEWF2tCDxKAxMbYyKBSagYJYeUQ bOFQiQ== -----END CERTIFICATE-----Generated at Wed Jul 15 13:32:36 2026 by rpki-client