$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa File: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (raw, json) Hash identifier: w5QHtu9cQyKjArMrfA6wboJd2mLuch9xpK2TkgucmN8= Subject key identifier: 43:90:96:3E:F3:D4:21:89:52:20:01:32:AB:59:72:A6:5B:CE:EE:7D Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 62EF528BF61F60D504F786B0A9AE1D31F0E94126 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa Signing time: Sat 16 May 2026 08:07:28 +0000 ROA not before: Sat 16 May 2026 08:02:28 +0000 ROA not after: Sat 15 May 2027 08:07:28 +0000 asID: 206069 IP address blocks: 2a14:7586:6112::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ef:52:8b:f6:1f:60:d5:04:f7:86:b0:a9:ae:1d:31:f0:e9:41:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: May 16 08:02:28 2026 GMT Not After : May 15 08:07:28 2027 GMT Subject: CN=4390963EF3D4218952200132AB5972A65BCEEE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:75:1e:ed:6c:41:4f:ee:90:f4:2a:cf:76: 24:9c:4d:98:08:4d:8f:41:27:c2:a1:e2:f5:56:37: d9:0a:42:b7:df:49:a2:43:60:2c:48:44:a5:65:1c: 06:12:a5:b1:e2:14:a9:12:e2:e2:47:13:27:b9:45: 5f:d4:43:07:86:59:c8:55:12:56:e9:68:d3:0c:ed: 75:90:f4:5c:90:97:79:91:98:28:19:a5:56:aa:f5: 93:da:81:3a:eb:6d:48:8b:4d:22:44:51:5b:7a:86: 93:5d:6e:7b:3f:7d:86:33:82:2d:c0:c5:b0:7d:a8: fa:36:72:5e:b8:65:83:be:0f:38:a8:93:36:75:06: ac:42:6b:3b:26:11:ee:0e:ca:b1:78:d2:ec:b3:19: 7f:c2:3e:06:dc:f3:2a:e7:5a:e1:3b:a8:8e:dd:04: c7:4a:b8:37:76:16:43:c2:19:5a:05:f9:eb:51:19: d5:d9:37:34:58:03:ee:6b:07:e6:0a:a8:c4:c4:0f: c6:eb:bc:e1:2b:de:13:9e:99:01:17:cd:09:9a:03: bf:ec:79:c9:ad:e1:ea:e6:c5:a3:57:c7:b5:4a:1e: 5d:80:48:8f:b6:b8:a4:14:40:98:e1:95:31:85:8a: 34:1f:5d:c0:bb:a7:77:30:38:92:2a:d2:ab:bb:44: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:96:3E:F3:D4:21:89:52:20:01:32:AB:59:72:A6:5B:CE:EE:7D X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6112::/48 Signature Algorithm: sha256WithRSAEncryption 9c:c5:53:f5:6a:40:6e:61:c1:9a:b9:71:d4:f3:71:1f:97:c2: 74:75:15:55:97:e0:bd:56:32:25:58:a4:38:07:82:23:26:69: e6:c3:a8:10:7a:cd:3f:1d:5e:a5:67:99:ea:d1:1a:2a:98:f3: 9d:de:0e:a6:4b:3e:be:eb:3b:95:13:d3:b0:3f:3d:bf:21:e0: ef:d0:2c:3b:fa:78:26:25:e3:bd:7b:5c:66:ec:1d:a8:2a:a2: e9:f9:7f:18:e1:3c:35:46:42:9e:ce:ea:dd:18:db:9a:a8:ec: 5c:31:95:6b:ca:c7:6f:ee:93:9f:93:1c:e6:91:e5:ac:08:92: 71:9d:cc:6b:41:0e:e5:9c:c8:21:6b:66:6e:fb:22:b0:8e:11: 6c:2d:b0:f0:ed:7a:03:44:0d:4d:ec:35:b8:71:8d:22:db:43: e0:a2:1c:26:d9:d5:25:e4:71:85:7c:ec:1e:d2:7b:b4:be:40: aa:56:35:a7:5c:22:81:ec:08:52:cc:96:4b:72:64:09:f2:c6: a5:a0:2b:d7:39:ff:d0:84:66:ab:e7:fc:8a:74:6e:3d:6e:69: ee:f2:2e:c0:52:3f:b6:32:59:4c:b9:4f:20:43:45:30:66:99: ce:75:93:a1:46:1f:d0:ce:6b:3a:2a:1e:af:62:f0:54:4b:c1: 6d:94:05:91 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYu9Si/YfYNUE94awqa4dMfDpQSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA1MTYwODAyMjhaFw0yNzA1MTUwODA3MjhaMDMxMTAvBgNV BAMTKDQzOTA5NjNFRjNENDIxODk1MjIwMDEzMkFCNTk3MkE2NUJDRUVFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNXUe7WxBT+6Q9CrPdiScTZgI TY9BJ8Kh4vVWN9kKQrffSaJDYCxIRKVlHAYSpbHiFKkS4uJHEye5RV/UQweGWchV ElbpaNMM7XWQ9FyQl3mRmCgZpVaq9ZPagTrrbUiLTSJEUVt6hpNdbns/fYYzgi3A xbB9qPo2cl64ZYO+DziokzZ1BqxCazsmEe4OyrF40uyzGX/CPgbc8yrnWuE7qI7d BMdKuDd2FkPCGVoF+etRGdXZNzRYA+5rB+YKqMTED8brvOEr3hOemQEXzQmaA7/s ecmt4ermxaNXx7VKHl2ASI+2uKQUQJjhlTGFijQfXcC7p3cwOJIq0qu7RKfnAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUQ5CWPvPUIYlSIAEyq1lyplvO7n0wHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM2MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmESMA0GCSqGSIb3DQEBCwUAA4IBAQCc xVP1akBuYcGauXHU83Efl8J0dRVVl+C9VjIlWKQ4B4IjJmnmw6gQes0/HV6lZ5nq 0RoqmPOd3g6mSz6+6zuVE9OwPz2/IeDv0Cw7+ngmJeO9e1xm7B2oKqLp+X8Y4Tw1 RkKezurdGNuaqOxcMZVrysdv7pOfkxzmkeWsCJJxncxrQQ7lnMgha2Zu+yKwjhFs LbDw7XoDRA1N7DW4cY0i20Pgohwm2dUl5HGFfOwe0nu0vkCqVjWnXCKB7AhSzJZL cmQJ8saloCvXOf/QhGar5/yKdG49bmnu8i7AUj+2MllMuU8gQ0UwZpnOdZOhRh/Q zms6Kh6vYvBUS8FtlAWR -----END CERTIFICATE-----Generated at Sat Jun 6 05:40:01 2026 by rpki-client