$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa File: 326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa (raw, json) Hash identifier: +Bzn0imBvQ3Dm0XfkE2a2wG1dPY04xOf0M1OUTVWvjc= Subject key identifier: 52:CD:FC:03:E2:04:2A:29:A7:53:FE:73:F7:F7:7F:2D:86:46:1D:AF Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 7AF0ED17FE3CF9777D1271920F955CEA448407A3 Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa Signing time: Tue 16 Jun 2026 11:28:03 +0000 ROA not before: Tue 16 Jun 2026 11:23:03 +0000 ROA not after: Tue 15 Jun 2027 11:28:03 +0000 asID: 197817 IP address blocks: 2a0a:d685:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f0:ed:17:fe:3c:f9:77:7d:12:71:92:0f:95:5c:ea:44:84:07:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jun 16 11:23:03 2026 GMT Not After : Jun 15 11:28:03 2027 GMT Subject: CN=52CDFC03E2042A29A753FE73F7F77F2D86461DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:d5:8a:d7:ca:0e:df:1a:87:59:44:ed:1e: f0:ff:f8:8a:27:2f:c9:12:d8:b9:f9:8c:d3:63:15: 4c:41:1d:87:51:1c:42:0a:b2:82:d8:98:d3:3b:65: 70:20:c6:42:14:e9:65:a9:0b:1f:9b:b0:63:85:a2: 10:9f:e8:1a:4f:40:ac:81:26:66:b5:de:b6:91:ab: f2:35:5d:b9:22:b4:8f:54:80:63:24:b1:e4:05:d0: 12:a7:2d:b4:81:9f:7a:40:3a:75:77:65:a4:84:d2: da:a2:5d:13:c8:19:93:38:e7:0f:40:e1:90:93:3f: 2b:5e:a3:98:3e:12:47:05:56:21:46:4f:34:f1:a5: 2c:2e:45:20:d9:ae:fd:2e:a0:9a:ae:81:1b:d3:ba: 50:a2:b4:75:e8:58:63:5c:07:eb:31:d8:5f:16:96: ab:90:d5:c6:3f:59:8b:6d:ce:ee:7b:52:d3:24:c4: 06:bc:05:71:0a:72:e5:8f:06:ea:05:2d:3b:5b:40: 47:2b:90:9e:92:ff:36:cb:22:9b:de:e9:09:6b:4d: 83:32:2b:7e:cf:54:39:6f:58:1d:c7:05:ee:12:2f: f1:62:a2:ad:d3:3a:23:40:19:1d:e0:bd:ce:ec:12: b5:be:a1:33:5b:e9:45:a7:22:1c:c3:2f:3b:dd:34: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CD:FC:03:E2:04:2A:29:A7:53:FE:73:F7:F7:7F:2D:86:46:1D:AF X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:200::/48 Signature Algorithm: sha256WithRSAEncryption 4f:ec:50:74:27:52:b7:ff:73:15:42:3f:de:5d:87:9f:20:94: 99:e6:aa:22:2f:98:0f:f8:60:aa:9e:c9:13:42:0c:ba:11:85: af:8b:83:00:6e:dd:3c:c9:1e:8a:3d:bc:04:84:10:5d:4e:36: 6b:a2:28:c2:ee:d8:74:c9:ed:52:af:bb:9f:3a:10:17:52:9c: 00:8a:be:8a:51:36:87:c1:86:ac:cd:f4:f7:56:9d:48:2c:1e: e1:86:2e:dc:3a:94:9f:b1:65:da:c8:48:f7:35:cc:62:e7:4f: 22:63:5f:ec:55:22:d2:00:2a:c7:0f:52:6c:4a:3d:e3:38:a1: 17:b9:61:97:a5:35:bb:55:28:41:c2:ee:44:5f:6f:dd:86:a4: 7d:b3:b3:75:03:ad:5a:6c:55:03:24:1a:5a:64:73:39:6f:32: 43:96:f2:3d:1f:c2:dd:fe:c0:3c:9f:78:99:15:b1:e1:58:b8: 56:2d:3b:6c:c1:30:68:a7:e5:ee:03:66:b3:5a:19:e6:ae:83: f1:f9:40:dd:a5:c8:11:a1:5e:ea:12:41:25:2b:cf:9d:2b:33: 40:6e:83:0e:83:18:0c:3b:a1:bc:5a:33:33:cb:df:0f:8f:70: 0e:97:de:92:fa:76:df:d9:32:e7:11:46:91:3a:9e:23:39:47: 95:35:0f:9b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUevDtF/48+Xd9EnGSD5Vc6kSEB6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA2MTYxMTIzMDNaFw0yNzA2MTUxMTI4MDNaMDMxMTAvBgNV BAMTKDUyQ0RGQzAzRTIwNDJBMjlBNzUzRkU3M0Y3Rjc3RjJEODY0NjFEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJNWK18oO3xqHWUTtHvD/+Ion L8kS2Ln5jNNjFUxBHYdRHEIKsoLYmNM7ZXAgxkIU6WWpCx+bsGOFohCf6BpPQKyB Jma13raRq/I1XbkitI9UgGMkseQF0BKnLbSBn3pAOnV3ZaSE0tqiXRPIGZM45w9A 4ZCTPyteo5g+EkcFViFGTzTxpSwuRSDZrv0uoJqugRvTulCitHXoWGNcB+sx2F8W lquQ1cY/WYttzu57UtMkxAa8BXEKcuWPBuoFLTtbQEcrkJ6S/zbLIpve6QlrTYMy K37PVDlvWB3HBe4SL/Fioq3TOiNAGR3gvc7sErW+oTNb6UWnIhzDLzvdNNoXAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUUs38A+IEKimnU/5z9/d/LYZGHa8wHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMyMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz NzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUCADANBgkqhkiG9w0BAQsFAAOCAQEAT+xQ dCdSt/9zFUI/3l2HnyCUmeaqIi+YD/hgqp7JE0IMuhGFr4uDAG7dPMkeij28BIQQ XU42a6Iowu7YdMntUq+7nzoQF1KcAIq+ilE2h8GGrM3091adSCwe4YYu3DqUn7Fl 2shI9zXMYudPImNf7FUi0gAqxw9SbEo94zihF7lhl6U1u1UoQcLuRF9v3YakfbOz dQOtWmxVAyQaWmRzOW8yQ5byPR/C3f7APJ94mRWx4Vi4Vi07bMEwaKfl7gNms1oZ 5q6D8flA3aXIEaFe6hJBJSvPnSszQG6DDoMYDDuhvFozM8vfD49wDpfekvp239ky 5xFGkTqeIzlHlTUPmw== -----END CERTIFICATE-----Generated at Mon Jul 13 07:38:01 2026 by rpki-client