$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa File: 326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa (raw, json) Hash identifier: EglxgVjZeYL21zAN5f1qTpSdvc9u/IUyk5p/E9eciNM= Subject key identifier: 3B:75:8E:97:A3:84:04:F3:EA:F4:2B:B6:43:A8:30:C2:1C:66:7C:54 Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578 Certificate serial: 67B92F1975B972B4627F6B380726BBDFB5C2B2DE Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa Signing time: Tue 23 Jun 2026 15:03:36 +0000 ROA not before: Tue 23 Jun 2026 14:58:36 +0000 ROA not after: Tue 22 Jun 2027 15:03:36 +0000 asID: 197817 IP address blocks: 2a0a:d685:201::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b9:2f:19:75:b9:72:b4:62:7f:6b:38:07:26:bb:df:b5:c2:b2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578 Validity Not Before: Jun 23 14:58:36 2026 GMT Not After : Jun 22 15:03:36 2027 GMT Subject: CN=3B758E97A38404F3EAF42BB643A830C21C667C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:14:b5:c8:de:68:bb:f7:f7:15:fd:af:7f: ff:94:84:c9:80:e9:8c:93:89:53:53:e3:76:1b:a7: 75:03:4a:01:7f:44:bf:e7:ab:5f:cc:27:65:d4:fd: 33:00:6e:35:bc:d0:b9:8c:d6:3e:16:ca:2d:0d:c3: e5:f8:03:dc:cf:59:b3:9b:05:77:90:4f:b6:69:11: d3:05:dc:66:00:d7:1f:f2:6c:2d:95:d3:3e:64:86: 5d:ff:a0:0f:19:84:fb:a5:14:cb:ac:f1:cc:e7:0b: 0c:f9:fa:ed:af:bb:18:0a:7c:42:98:01:18:d1:2c: 81:56:48:27:04:e0:0b:3d:16:11:38:48:db:2a:3a: 2f:0a:1d:f9:ce:06:fb:77:11:8d:94:10:f7:cc:f9: de:7e:89:1d:61:f0:35:16:05:3c:73:cd:6d:c9:c5: cf:5e:17:3a:c0:ce:88:82:81:fd:95:97:ec:7c:a6: 58:e2:36:08:38:58:4f:bd:07:77:be:24:1d:3c:8c: 29:97:9f:f2:4c:18:d2:4c:8f:55:32:6f:db:7e:1e: 46:a9:cd:c5:18:6b:15:eb:3e:c5:fe:ce:77:2b:62: 06:2c:01:cd:18:05:6a:f4:29:45:f2:60:14:6e:f2: 1f:5a:8f:d3:3b:6f:3f:92:fb:57:a4:e1:a6:e6:d8: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:75:8E:97:A3:84:04:F3:EA:F4:2B:B6:43:A8:30:C2:1C:66:7C:54 X509v3 Authority Key Identifier: keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:201::/48 Signature Algorithm: sha256WithRSAEncryption 0e:60:39:c3:5a:ea:4e:42:cc:ee:d3:83:0b:c8:51:4f:2f:ed: 1f:cd:c8:b5:c4:6e:49:4b:88:cd:80:e6:32:8e:ca:bb:27:23: 70:8e:b5:01:c1:f3:3b:fd:17:59:4b:c0:2e:9c:a3:69:80:db: eb:98:8a:0a:93:16:bb:15:8d:f5:89:6d:27:a1:60:dd:cd:55: 90:c3:a5:c0:78:3a:e9:de:70:6d:94:5e:ca:3b:47:9b:0a:1e: a7:24:0a:e2:56:dc:ff:2d:b3:64:84:9a:7c:2d:2c:5d:22:5f: f2:15:ab:8d:c7:47:37:15:e5:4e:7c:fa:3c:8d:94:3e:bb:b7: a1:89:8e:eb:e2:1b:a1:ba:7d:60:fa:00:71:7a:98:5e:95:75: 8c:9e:85:24:92:39:bc:9d:1b:e0:94:22:fd:95:66:67:a6:cb: 8e:8c:8d:02:b2:a8:0c:bc:cc:75:f9:80:08:55:be:85:dc:31: 69:f1:ca:52:45:62:64:6d:33:c7:bd:5f:c4:57:02:42:68:a4: f3:f7:29:54:53:e3:be:65:5d:55:ae:27:4c:f2:ac:34:7e:4f: 3f:4f:49:e6:35:1f:98:10:31:d9:b1:cf:58:e8:9c:7f:f0:82: 70:f1:84:88:8e:c6:2e:07:89:88:62:0e:9e:f0:06:86:c5:7c: 38:40:a2:2b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUZ7kvGXW5crRif2s4Bya737XCst4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYy ODkyRTU3ODAeFw0yNjA2MjMxNDU4MzZaFw0yNzA2MjIxNTAzMzZaMDMxMTAvBgNV BAMTKDNCNzU4RTk3QTM4NDA0RjNFQUY0MkJCNjQzQTgzMEMyMUM2NjdDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvhS1yN5ou/f3Ff2vf/+UhMmA 6YyTiVNT43Ybp3UDSgF/RL/nq1/MJ2XU/TMAbjW80LmM1j4Wyi0Nw+X4A9zPWbOb BXeQT7ZpEdMF3GYA1x/ybC2V0z5khl3/oA8ZhPulFMus8cznCwz5+u2vuxgKfEKY ARjRLIFWSCcE4As9FhE4SNsqOi8KHfnOBvt3EY2UEPfM+d5+iR1h8DUWBTxzzW3J xc9eFzrAzoiCgf2Vl+x8pljiNgg4WE+9B3e+JB08jCmXn/JMGNJMj1Uyb9t+Hkap zcUYaxXrPsX+zncrYgYsAc0YBWr0KUXyYBRu8h9aj9M7bz+S+1ek4abm2EIdAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUO3WOl6OEBPPq9Cu2Q6gwwhxmfFQwHwYDVR0j BBgwFoAUrSn38ZGZcDms/Zdg+RX+5iiS5XgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDI1NTBjYWEtZTM5Mi00ODQ4LTkyZmItYTNkNTgyOGUz Njk1LzEvQUQyOUY3RjE5MTk5NzAzOUFDRkQ5NzYwRjkxNUZFRTYyODkyRTU3OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS9BRDI5RjdGMTkxOTk3MDM5QUNGRDk3NjBG OTE1RkVFNjI4OTJFNTc4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMjU1MGNhYS1lMzkyLTQ4NDgtOTJmYi1hM2Q1ODI4ZTM2OTUvMS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMyMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz NzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoK1oUCATANBgkqhkiG9w0BAQsFAAOCAQEADmA5 w1rqTkLM7tODC8hRTy/tH83ItcRuSUuIzYDmMo7KuycjcI61AcHzO/0XWUvALpyj aYDb65iKCpMWuxWN9YltJ6Fg3c1VkMOlwHg66d5wbZReyjtHmwoepyQK4lbc/y2z ZISafC0sXSJf8hWrjcdHNxXlTnz6PI2UPru3oYmO6+Ibobp9YPoAcXqYXpV1jJ6F JJI5vJ0b4JQi/ZVmZ6bLjoyNArKoDLzMdfmACFW+hdwxafHKUkViZG0zx71fxFcC Qmik8/cpVFPjvmVdVa4nTPKsNH5PP09J5jUfmBAx2bHPWOicf/CCcPGEiI7GLgeJ iGIOnvAGhsV8OECiKw== -----END CERTIFICATE-----Generated at Mon Jul 13 07:38:10 2026 by rpki-client