$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: ZgjB8m1thnqWfHedFQRot49v76xsWvW29soNj1KmfdQ= Subject key identifier: FB:03:ED:BD:53:B6:26:DC:81:4D:A6:F8:0E:4F:3F:C3:58:E8:8E:BA Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 616F502717260C7B52689348D02C6A38AC28D21F Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa Signing time: Wed 01 Jul 2026 07:31:23 +0000 ROA not before: Wed 01 Jul 2026 07:26:23 +0000 ROA not after: Wed 30 Jun 2027 07:31:23 +0000 asID: 204211 IP address blocks: 2a14:7586:6108::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6f:50:27:17:26:0c:7b:52:68:93:48:d0:2c:6a:38:ac:28:d2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jul 1 07:26:23 2026 GMT Not After : Jun 30 07:31:23 2027 GMT Subject: CN=FB03EDBD53B626DC814DA6F80E4F3FC358E88EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:62:2d:72:05:00:9f:eb:dd:e4:95:41:e3: 28:97:5a:dc:88:70:41:93:e8:1c:40:be:89:b5:66: 8a:e6:54:79:c5:e8:55:0f:b9:cf:8b:2f:4e:97:39: 75:3d:ed:fa:c8:1e:5a:89:d7:e0:9a:9f:5f:a7:87: 9a:00:1f:1d:14:d5:7b:8f:b0:19:97:06:b7:dd:cb: cb:c2:f3:1d:03:e2:5e:86:01:e0:2e:48:2a:7f:ba: 3e:8d:eb:d1:f5:80:8a:f3:bc:50:96:8f:e0:7e:dd: 7c:61:ea:97:06:c7:1c:2b:19:71:b9:6d:d4:3f:35: ec:98:ec:37:2e:35:1f:6d:bd:26:b5:c4:89:29:01: 3f:ee:52:54:2b:b1:f7:43:d2:05:30:00:2c:8e:cf: 9f:6b:41:1f:62:76:1f:52:9a:5b:9f:28:e9:79:3f: cc:c9:f5:cf:11:52:a9:96:b9:46:84:ad:b3:72:15: 37:df:03:1f:48:7f:60:5e:76:ea:99:8c:d2:c8:5e: b7:69:3d:34:22:d5:95:7a:55:47:29:bf:a6:85:e4: 58:1f:67:22:cb:cc:bf:6f:91:20:4d:13:f5:65:f8: 1e:01:c8:d3:f1:d2:3d:b1:e3:8f:23:e3:20:f4:1d: e6:ba:c5:79:fe:9b:9c:8d:40:fc:8d:7f:5b:33:a2: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:03:ED:BD:53:B6:26:DC:81:4D:A6:F8:0E:4F:3F:C3:58:E8:8E:BA X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6108::/48 Signature Algorithm: sha256WithRSAEncryption 94:82:6d:fd:6a:3d:0d:1d:ab:2f:04:d0:30:88:af:b9:5d:a1: 51:3a:dc:fa:9f:7f:fb:4c:03:f9:b8:82:87:06:86:9a:01:d7: cf:dd:ce:8d:fd:c9:4d:ba:c2:0c:c3:c5:80:96:df:75:7f:2f: ca:03:be:b9:04:ce:58:57:6c:c3:e1:07:54:da:ed:ca:3f:4a: 15:c2:98:9f:68:a3:88:d9:51:79:05:ff:8c:41:f6:b5:af:aa: 33:c5:50:ae:ac:9d:dd:df:9d:f3:3c:a1:52:6c:49:f2:38:6f: 0c:76:13:de:c6:83:76:79:b1:e2:10:b5:df:2e:09:eb:86:82: c3:6c:6e:7e:c4:13:82:90:be:0a:c1:a8:93:9a:5e:9a:b0:f6: 78:22:7d:70:21:ac:cd:2d:eb:73:bd:1a:ca:93:14:15:60:38: 38:df:5d:76:55:c3:99:df:e4:8b:f3:36:30:df:96:5b:77:56: d0:38:12:f8:2b:d0:ce:ad:0b:e6:3a:21:20:cc:ee:d1:6b:02: f8:2d:bc:08:c5:84:38:fd:7e:c6:98:76:25:31:65:7e:d4:7a: 65:ed:b5:04:8b:aa:39:a3:57:aa:a0:a1:0c:40:2e:e7:25:b5: 06:9c:b8:73:8f:25:ad:8f:37:b3:e2:62:37:bd:99:53:f2:4a: 92:cc:fd:9e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYW9QJxcmDHtSaJNI0CxqOKwo0h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA3MDEwNzI2MjNaFw0yNzA2MzAwNzMxMjNaMDMxMTAvBgNV BAMTKEZCMDNFREJENTNCNjI2REM4MTREQTZGODBFNEYzRkMzNThFODhFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfsWItcgUAn+vd5JVB4yiXWtyI cEGT6BxAvom1ZormVHnF6FUPuc+LL06XOXU97frIHlqJ1+Can1+nh5oAHx0U1XuP sBmXBrfdy8vC8x0D4l6GAeAuSCp/uj6N69H1gIrzvFCWj+B+3Xxh6pcGxxwrGXG5 bdQ/NeyY7DcuNR9tvSa1xIkpAT/uUlQrsfdD0gUwACyOz59rQR9idh9SmlufKOl5 P8zJ9c8RUqmWuUaErbNyFTffAx9If2BeduqZjNLIXrdpPTQi1ZV6VUcpv6aF5Fgf ZyLLzL9vkSBNE/Vl+B4ByNPx0j2x448j4yD0Hea6xXn+m5yNQPyNf1szooa3AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU+wPtvVO2JtyBTab4Dk8/w1jojrowHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmEIMA0GCSqGSIb3DQEBCwUAA4IBAQCU gm39aj0NHasvBNAwiK+5XaFROtz6n3/7TAP5uIKHBoaaAdfP3c6N/clNusIMw8WA lt91fy/KA765BM5YV2zD4QdU2u3KP0oVwpifaKOI2VF5Bf+MQfa1r6ozxVCurJ3d 353zPKFSbEnyOG8MdhPexoN2ebHiELXfLgnrhoLDbG5+xBOCkL4KwaiTml6asPZ4 In1wIazNLetzvRrKkxQVYDg43112VcOZ3+SL8zYw35Zbd1bQOBL4K9DOrQvmOiEg zO7RawL4LbwIxYQ4/X7GmHYlMWV+1Hpl7bUEi6o5o1eqoKEMQC7nJbUGnLhzjyWt jzez4mI3vZlT8kqSzP2e -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:34 2026 by rpki-client