$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa File: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (raw, json) Hash identifier: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8= Subject key identifier: 8E:F7:32:9B:1B:50:22:CF:9D:64:B0:B2:E7:71:94:14:47:CB:BD:F4 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 2EAF33859A601631E2E96E8EF914D410B78B92BA Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa Signing time: Tue 26 May 2026 00:57:52 +0000 ROA not before: Tue 26 May 2026 00:52:52 +0000 ROA not after: Tue 25 May 2027 00:57:52 +0000 asID: 214701 IP address blocks: 2a0b:4e07:60ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Jun 2026 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:af:33:85:9a:60:16:31:e2:e9:6e:8e:f9:14:d4:10:b7:8b:92:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: May 26 00:52:52 2026 GMT Not After : May 25 00:57:52 2027 GMT Subject: CN=8EF7329B1B5022CF9D64B0B2E771941447CBBDF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:22:6e:36:53:6d:0a:9e:b0:7f:ac:b7:56: d5:d8:5c:4e:48:1f:09:d6:78:2e:82:29:da:18:98: b4:97:9e:1b:a3:85:64:f9:9f:d6:12:d4:d0:12:a2: d7:0a:4d:91:96:9e:7b:78:99:2b:cc:87:7d:e3:fd: f1:c8:85:7c:55:08:73:80:60:7a:d0:e3:5b:70:4d: 12:48:9c:f6:11:c9:1c:fb:c4:2e:19:12:6d:fd:3e: d4:d7:46:21:09:65:cb:37:ba:82:ca:b5:a8:ba:a9: d9:67:2b:1b:a7:1a:67:fa:ef:03:7f:83:b7:9c:f7: ea:b0:c5:75:05:5e:0d:23:a5:24:b0:62:ee:85:4b: ef:01:a7:75:a8:75:c0:7a:36:b0:68:38:91:52:2d: 9b:f8:c3:2f:8d:00:7e:45:11:ef:bc:4b:df:61:07: 1e:d6:47:6a:79:5f:d4:31:27:1f:c8:24:33:71:3b: 0d:83:81:56:4e:29:14:1b:20:eb:e8:6f:5b:c8:a8: 27:35:58:fa:57:01:38:31:4f:e1:a6:ad:07:97:f9: c5:3b:ac:73:b5:db:b7:e1:42:17:20:e5:d2:e2:9d: 5b:13:73:f3:b4:90:8d:d7:78:04:83:28:fb:4c:b2: 34:97:6f:19:0d:b2:5a:e3:f9:30:ab:3a:ec:b9:16: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F7:32:9B:1B:50:22:CF:9D:64:B0:B2:E7:71:94:14:47:CB:BD:F4 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:60ff::/48 Signature Algorithm: sha256WithRSAEncryption c0:e3:3b:98:25:00:3c:a9:0a:14:bd:e3:5f:81:7d:0e:f8:04: 91:0d:5e:f6:29:bc:cf:a9:dd:a9:2c:82:77:0c:0a:2c:76:6d: fd:be:02:37:94:df:2e:64:3d:00:ca:f7:74:24:aa:a1:9a:d2: 7a:ea:34:7d:35:1f:46:7f:53:83:a8:81:7f:36:5a:03:98:94: cf:f1:10:ef:4d:3e:86:c4:69:fc:ba:9c:f6:3a:5a:d3:30:cd: d4:c8:31:53:8a:73:25:af:05:d7:df:36:aa:24:59:47:95:3e: ac:86:53:43:a9:37:9a:db:56:68:6c:3e:31:3d:4d:45:62:3b: da:06:57:b8:a2:60:ea:b6:22:99:e6:e5:20:e4:15:89:b0:05: da:fa:49:7b:79:42:aa:24:02:c0:17:8b:0d:ff:d6:d0:14:db: e4:51:e1:bc:4c:c4:82:27:96:87:8c:6d:0d:93:08:bc:24:3d: ce:b8:3d:5c:17:e6:90:fb:22:0d:01:7b:04:a2:40:e3:17:6b: b9:2f:39:91:41:38:6d:85:3c:89:d9:66:f8:c1:cc:2d:15:81: 1a:2a:05:76:45:ba:6b:47:4f:29:e4:6b:ee:0a:ae:f4:26:e2: d4:da:7e:04:70:4b:38:7f:a8:1e:6c:bf:de:50:af:f7:06:a3: 2e:43:01:98 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIULq8zhZpgFjHi6W6O+RTUELeLkrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA1MjYwMDUyNTJaFw0yNzA1MjUwMDU3NTJaMDMxMTAvBgNV BAMTKDhFRjczMjlCMUI1MDIyQ0Y5RDY0QjBCMkU3NzE5NDE0NDdDQkJERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxCJuNlNtCp6wf6y3VtXYXE5I HwnWeC6CKdoYmLSXnhujhWT5n9YS1NASotcKTZGWnnt4mSvMh33j/fHIhXxVCHOA YHrQ41twTRJInPYRyRz7xC4ZEm39PtTXRiEJZcs3uoLKtai6qdlnKxunGmf67wN/ g7ec9+qwxXUFXg0jpSSwYu6FS+8Bp3WodcB6NrBoOJFSLZv4wy+NAH5FEe+8S99h Bx7WR2p5X9QxJx/IJDNxOw2DgVZOKRQbIOvob1vIqCc1WPpXATgxT+GmrQeX+cU7 rHO127fhQhcg5dLinVsTc/O0kI3XeASDKPtMsjSXbxkNslrj+TCrOuy5Fk9xAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUjvcymxtQIs+dZLCy53GUFEfLvfQwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmVhZDJkY2Yt ZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5YzUwLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzNjMwNjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM3MzAzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgdg/zANBgkqhkiG9w0BAQsFAAOCAQEAwOM7mCUAPKkKFL3j X4F9DvgEkQ1e9im8z6ndqSyCdwwKLHZt/b4CN5TfLmQ9AMr3dCSqoZrSeuo0fTUf Rn9Tg6iBfzZaA5iUz/EQ700+hsRp/Lqc9jpa0zDN1MgxU4pzJa8F1982qiRZR5U+ rIZTQ6k3mttWaGw+MT1NRWI72gZXuKJg6rYimeblIOQVibAF2vpJe3lCqiQCwBeL Df/W0BTb5FHhvEzEgieWh4xtDZMIvCQ9zrg9XBfmkPsiDQF7BKJA4xdruS85kUE4 bYU8idlm+MHMLRWBGioFdkW6a0dPKeRr7gqu9Cbi1Np+BHBLOH+oHmy/3lCv9waj LkMBmA== -----END CERTIFICATE-----Generated at Sun May 31 09:57:12 2026 by rpki-client