$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa File: 326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa (raw, json) Hash identifier: TspdqNLxsfL6dp4xdPseIhhfwq7xkWofsgu2VL8cf5s= Subject key identifier: 57:A4:BF:AD:47:BB:F0:64:AB:76:A3:38:1E:36:4D:D7:2B:0B:21:67 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 3F1A46AA54387BEA375A821A23B5C0D4B3966F52 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa Signing time: Sat 11 Jul 2026 04:09:34 +0000 ROA not before: Sat 11 Jul 2026 04:04:34 +0000 ROA not after: Sat 10 Jul 2027 04:09:34 +0000 asID: 197817 IP address blocks: 2a0a:d685:1fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 15:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1a:46:aa:54:38:7b:ea:37:5a:82:1a:23:b5:c0:d4:b3:96:6f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jul 11 04:04:34 2026 GMT Not After : Jul 10 04:09:34 2027 GMT Subject: CN=57A4BFAD47BBF064AB76A3381E364DD72B0B2167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:ec:e6:96:01:28:d8:71:17:83:5d:2a:5f: fe:2c:5a:e2:dd:3b:60:24:5a:66:ce:60:a0:28:32: 54:05:a0:82:84:21:00:32:13:fa:ab:30:fc:8d:be: cd:2c:fc:51:f8:8b:d4:c5:f6:12:d0:3a:f4:95:08: 4d:ae:9a:7a:dc:91:48:c9:2f:f9:2b:1b:fc:6e:62: 61:04:1e:cc:a7:2d:ea:62:57:aa:0f:06:9a:9d:95: c8:3a:a3:d8:6f:4e:a9:dd:a5:0d:64:fb:26:e3:28: 42:ad:fc:69:fc:3b:69:4d:18:59:22:be:28:47:92: 10:36:9a:02:a4:59:20:e0:b8:15:e2:7d:fc:74:fd: 5f:c5:1d:1b:03:36:40:cb:7f:34:d8:a4:1c:86:eb: 1a:10:60:83:de:f6:d3:2e:11:1c:81:06:c6:39:21: e4:9b:3e:31:78:2a:62:23:a9:48:e4:67:fb:d3:69: b7:19:33:b5:2b:a7:28:5d:3b:8e:89:9a:12:0d:3e: b6:fc:40:64:69:ba:a8:ea:86:a6:8f:f3:17:b0:58: cf:24:02:65:81:52:b2:ff:44:d0:54:1c:74:b1:1f: 0b:c6:bf:ef:8b:c8:1b:d7:d6:48:b3:61:f6:13:9b: c9:63:77:c1:34:94:07:ac:ac:0b:6c:9f:57:55:05: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A4:BF:AD:47:BB:F0:64:AB:76:A3:38:1E:36:4D:D7:2B:0B:21:67 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1fe::/48 Signature Algorithm: sha256WithRSAEncryption 12:52:d5:7e:a3:29:97:5b:a2:41:27:b5:f0:a3:ca:53:50:30: 75:06:91:44:4d:14:6c:15:0d:d3:b6:f1:0a:f5:0e:fb:3f:fd: 85:64:d3:56:f4:91:8d:b3:ad:5a:93:d2:5f:86:50:a8:40:f7: e3:ee:21:dc:9f:1d:3c:da:80:f4:46:c7:60:2a:01:a5:22:24: f1:34:60:a5:6b:2c:b1:b2:23:3f:d7:b7:2e:15:1c:32:ab:c0: 63:b3:5d:82:d4:33:ed:f5:9b:af:61:4c:66:2a:94:39:19:8f: 3f:a4:76:8e:15:5b:57:04:3a:05:a4:4e:7d:72:66:d1:c1:b2: c8:e9:31:a4:e1:be:07:c7:21:f3:9c:f5:e9:8f:e7:e6:25:c1: c3:1a:69:61:f0:a8:86:a3:df:7f:d4:da:8c:6b:41:fb:b9:a4: f3:c0:12:47:7c:c9:cb:35:33:84:ca:6e:a8:b6:aa:95:c5:f9: 41:85:e8:38:b3:15:19:ea:72:46:92:b7:aa:16:16:c2:f2:a7: 7b:94:b1:6b:3f:67:0a:45:c4:b6:71:c4:8e:9a:53:81:a9:08: de:17:01:b4:4f:a8:84:fd:9f:77:ed:8e:2b:e6:29:7d:d1:ba: 34:2b:03:6b:13:dd:a7:38:7c:84:d9:14:33:dc:e1:23:fe:83: 46:18:2d:5c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUPxpGqlQ4e+o3WoIaI7XA1LOWb1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA3MTEwNDA0MzRaFw0yNzA3MTAwNDA5MzRaMDMxMTAvBgNV BAMTKDU3QTRCRkFENDdCQkYwNjRBQjc2QTMzODFFMzY0REQ3MkIwQjIxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuOzmlgEo2HEXg10qX/4sWuLd O2AkWmbOYKAoMlQFoIKEIQAyE/qrMPyNvs0s/FH4i9TF9hLQOvSVCE2umnrckUjJ L/krG/xuYmEEHsynLepiV6oPBpqdlcg6o9hvTqndpQ1k+ybjKEKt/Gn8O2lNGFki vihHkhA2mgKkWSDguBXiffx0/V/FHRsDNkDLfzTYpByG6xoQYIPe9tMuERyBBsY5 IeSbPjF4KmIjqUjkZ/vTabcZM7UrpyhdO46JmhINPrb8QGRpuqjqhqaP8xewWM8k AmWBUrL/RNBUHHSxHwvGv++LyBvX1kizYfYTm8ljd8E0lAesrAtsn1dVBWqvAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUV6S/rUe78GSrdqM4HjZN1ysLIWcwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz NzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB/jANBgkqhkiG9w0BAQsFAAOCAQEAElLV fqMpl1uiQSe18KPKU1AwdQaRRE0UbBUN07bxCvUO+z/9hWTTVvSRjbOtWpPSX4ZQ qED34+4h3J8dPNqA9EbHYCoBpSIk8TRgpWsssbIjP9e3LhUcMqvAY7NdgtQz7fWb r2FMZiqUORmPP6R2jhVbVwQ6BaROfXJm0cGyyOkxpOG+B8ch85z16Y/n5iXBwxpp YfCohqPff9TajGtB+7mk88ASR3zJyzUzhMpuqLaqlcX5QYXoOLMVGepyRpK3qhYW wvKne5Sxaz9nCkXEtnHEjppTgakI3hcBtE+ohP2fd+2OK+YpfdG6NCsDaxPdpzh8 hNkUM9zhI/6DRhgtXA== -----END CERTIFICATE-----Generated at Sun Jul 12 05:45:36 2026 by rpki-client