$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa File: 326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa (raw, json) Hash identifier: D74S6x+CX7pIkmyrYc8C0iPdqtxDPmFuGT9pYsyXb5o= Subject key identifier: 9A:66:40:6A:A2:15:7E:D7:E8:9D:83:61:1D:94:0B:F2:CA:97:C8:40 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 7B1BDD26F6E152668198A38924E8C3F431ECA42C Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa Signing time: Sat 27 Jun 2026 11:42:17 +0000 ROA not before: Sat 27 Jun 2026 11:37:17 +0000 ROA not after: Sat 26 Jun 2027 11:42:17 +0000 asID: 219332 IP address blocks: 2a0a:d685:1ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 15:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1b:dd:26:f6:e1:52:66:81:98:a3:89:24:e8:c3:f4:31:ec:a4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jun 27 11:37:17 2026 GMT Not After : Jun 26 11:42:17 2027 GMT Subject: CN=9A66406AA2157ED7E89D83611D940BF2CA97C840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:58:82:e6:11:b8:90:9c:f8:66:1d:7f:48: 71:21:45:b4:5e:5c:94:09:f0:e4:09:ab:01:a5:73: 03:d8:ac:e9:59:3c:b6:0d:21:61:85:94:fe:08:9e: 94:ef:ff:41:47:e1:93:af:38:ef:37:11:08:7a:f0: 57:87:c8:7a:f6:08:f7:77:18:6a:42:16:83:3c:b3: 64:97:b1:a9:9c:ef:d0:bd:f4:a7:ea:20:5d:2d:7d: 6b:62:0b:88:7d:1a:ea:ad:e9:c2:4e:23:02:eb:d1: a2:fc:e1:81:b3:fa:2c:7c:b3:12:94:1d:bc:24:dd: 34:28:10:65:fe:d0:c8:e7:98:39:83:ab:d1:b5:d9: 74:c1:33:d7:9b:ca:2d:73:e4:60:70:69:87:9b:01: 90:98:40:74:6a:1f:dc:e6:49:59:ac:a1:da:da:dd: d3:62:69:96:e7:b8:0e:94:d2:60:ca:af:0b:53:1a: 72:6d:13:f1:6f:8d:29:95:0f:3c:79:df:59:de:12: 29:0c:88:31:7e:2f:6b:66:e8:30:89:5b:24:bf:7a: 45:8e:20:62:7a:66:8d:4d:e0:65:e1:d9:af:40:d4: 14:49:63:ef:32:56:e8:a8:21:b2:63:1d:47:03:d9: 84:ac:28:a5:c6:ff:87:5d:42:97:74:fc:03:69:df: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:66:40:6A:A2:15:7E:D7:E8:9D:83:61:1D:94:0B:F2:CA:97:C8:40 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1ff::/48 Signature Algorithm: sha256WithRSAEncryption 22:06:65:2a:f5:54:ae:bf:5a:3a:70:0b:12:a5:b5:80:68:aa: 36:bd:c5:0b:fc:52:14:18:5f:de:0a:67:27:f5:ff:38:5e:c8: c4:eb:56:6f:b0:8c:fd:b3:3b:8e:4f:7d:d7:3d:ec:e8:73:95: 7c:8e:55:4b:8a:0f:65:65:0c:ec:1c:8a:6a:20:e2:11:96:27: 34:f3:70:f8:47:05:2b:a8:9b:17:ff:79:da:45:8a:f1:ec:11: 1b:99:e9:46:b4:0e:3f:f4:71:e1:ee:56:22:95:aa:60:a9:d3: 4b:36:e3:7e:b4:8f:36:9d:d3:b1:20:80:67:0d:2e:1c:df:ea: f1:a2:ca:a2:a7:fc:97:56:27:2e:73:2b:84:0d:ed:e2:fd:f6: 5a:f3:b9:15:c8:61:92:49:76:fc:7e:31:62:48:97:51:b4:2a: 87:6b:eb:9f:3a:d6:38:a1:d4:80:49:3a:8e:47:f7:80:13:02: 7b:ea:cf:43:f2:0c:70:e4:a0:1b:31:b1:86:b4:4e:4c:cc:04: ec:b7:2a:c9:95:a8:4a:5d:05:42:d0:a7:ed:99:92:dd:74:70: 93:68:38:8e:c0:cc:3d:62:c7:06:d2:5e:25:10:ea:4a:5e:d3: 5d:68:c7:c9:60:ba:3b:0c:3f:c5:cd:d1:ce:67:fd:4e:53:c8: c4:f5:4a:c3 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUexvdJvbhUmaBmKOJJOjD9DHspCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA2MjcxMTM3MTdaFw0yNzA2MjYxMTQyMTdaMDMxMTAvBgNV BAMTKDlBNjY0MDZBQTIxNTdFRDdFODlEODM2MTFEOTQwQkYyQ0E5N0M4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iViC5hG4kJz4Zh1/SHEhRbRe XJQJ8OQJqwGlcwPYrOlZPLYNIWGFlP4InpTv/0FH4ZOvOO83EQh68FeHyHr2CPd3 GGpCFoM8s2SXsamc79C99KfqIF0tfWtiC4h9Guqt6cJOIwLr0aL84YGz+ix8sxKU Hbwk3TQoEGX+0MjnmDmDq9G12XTBM9ebyi1z5GBwaYebAZCYQHRqH9zmSVmsodra 3dNiaZbnuA6U0mDKrwtTGnJtE/FvjSmVDzx531neEikMiDF+L2tm6DCJWyS/ekWO IGJ6Zo1N4GXh2a9A1BRJY+8yVuioIbJjHUcD2YSsKKXG/4ddQpd0/ANp347BAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUmmZAaqIVftfonYNhHZQL8sqXyEAwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxNjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz OTMzMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUB/zANBgkqhkiG9w0BAQsFAAOCAQEAIgZl KvVUrr9aOnALEqW1gGiqNr3FC/xSFBhf3gpnJ/X/OF7IxOtWb7CM/bM7jk991z3s 6HOVfI5VS4oPZWUM7ByKaiDiEZYnNPNw+EcFK6ibF/952kWK8ewRG5npRrQOP/Rx 4e5WIpWqYKnTSzbjfrSPNp3TsSCAZw0uHN/q8aLKoqf8l1YnLnMrhA3t4v32WvO5 Fchhkkl2/H4xYkiXUbQqh2vrnzrWOKHUgEk6jkf3gBMCe+rPQ/IMcOSgGzGxhrRO TMwE7LcqyZWoSl0FQtCn7ZmS3XRwk2g4jsDMPWLHBtJeJRDqSl7TXWjHyWC6Oww/ xc3Rzmf9TlPIxPVKww== -----END CERTIFICATE-----Generated at Sun Jul 12 08:04:20 2026 by rpki-client