$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa File: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: sZKmIrdMvk64uefomVxqrQfIRfYdr41SjuDolYGmZ5U= Subject key identifier: 00:16:22:06:F0:8E:4A:30:22:89:55:BA:D2:9A:0A:DE:84:8E:44:AA Certificate issuer: /CN=20914720382A1F52B950212C138E5E1E81BA69B7 Certificate serial: 0A68211110DBACB3A2D0CEEB0F9C8B40F47301C4 Authority key identifier: 20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa Signing time: Sat 13 Jun 2026 08:21:16 +0000 ROA not before: Sat 13 Jun 2026 08:16:16 +0000 ROA not after: Sat 12 Jun 2027 08:21:16 +0000 asID: 204211 IP address blocks: 2a14:7586:6113::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:68:21:11:10:db:ac:b3:a2:d0:ce:eb:0f:9c:8b:40:f4:73:01:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20914720382A1F52B950212C138E5E1E81BA69B7 Validity Not Before: Jun 13 08:16:16 2026 GMT Not After : Jun 12 08:21:16 2027 GMT Subject: CN=00162206F08E4A30228955BAD29A0ADE848E44AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:9e:fe:c2:2e:03:02:76:0a:a4:ae:0d:37: 8b:81:b1:65:67:91:79:19:5f:8e:c9:9f:6e:18:71: 7f:0b:9f:6c:4d:9f:b9:82:68:26:87:5e:35:4b:4c: 75:b2:53:11:bb:14:73:b1:14:e5:eb:b7:ae:06:68: 8e:74:b9:8b:7f:c7:cf:20:00:2b:e7:b6:5a:da:17: 40:6d:0a:6a:e8:d9:e8:ec:60:c8:e8:f4:89:a6:a5: 38:f5:b6:e4:a3:5b:95:bf:1c:c3:d2:be:a4:5b:bb: 9e:eb:82:b5:b6:1c:22:a8:17:13:62:f2:9e:f2:21: 90:66:b2:9e:94:58:bb:1e:7c:57:84:f3:d7:99:06: 1d:e0:3f:6d:6e:57:62:3e:ac:20:00:82:ef:1f:b9: 31:dd:98:ce:48:89:3c:36:84:7e:24:3e:96:d4:d7: c3:ff:0b:d8:44:b2:e3:a8:a2:c6:7a:f6:e1:47:02: 18:12:b4:e5:b2:ba:4c:3a:78:3d:27:6b:a5:7b:c2: d4:77:39:30:a2:ee:7b:4c:3d:3c:f6:94:a8:b9:cc: 28:f1:1d:16:ad:53:6d:e9:c4:ec:40:fc:f0:86:6c: 64:ea:19:c3:b5:a6:25:bb:08:72:99:bd:b0:9f:7e: 1e:18:26:c5:02:30:e3:24:a8:d7:73:5d:9e:54:0e: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:22:06:F0:8E:4A:30:22:89:55:BA:D2:9A:0A:DE:84:8E:44:AA X509v3 Authority Key Identifier: keyid:20:91:47:20:38:2A:1F:52:B9:50:21:2C:13:8E:5E:1E:81:BA:69:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6113::/48 Signature Algorithm: sha256WithRSAEncryption 7b:3f:74:ce:64:d2:97:da:02:96:c6:e1:46:dc:fc:f5:80:94: 90:e1:6c:35:07:e6:52:e8:05:64:3b:60:5d:a1:d8:61:52:ce: f9:3c:99:19:f4:6b:3c:91:0b:24:4f:af:ce:38:03:74:53:bf: 32:98:ea:ce:49:82:fb:9f:c2:ee:d5:cf:84:4e:38:a6:28:7a: b3:3a:10:46:48:68:70:63:dc:0d:eb:c4:14:62:f1:c3:b9:b0: 67:d9:e4:dc:d3:a1:ca:16:25:3e:cb:4b:6c:15:71:71:a0:02: c1:ba:35:87:fd:21:70:24:83:4f:c8:0f:7a:27:22:57:0a:60: 3d:98:e4:22:0e:4f:5a:27:cd:df:f5:11:7a:87:22:62:09:9a: ec:7b:b8:48:d6:59:69:5d:62:d9:bb:38:3f:31:fd:d0:41:99: 56:19:f0:53:63:b4:22:5f:66:9d:d7:5c:4b:f2:24:e4:3e:64: d3:95:45:34:d8:cf:94:fb:7b:16:22:3e:f7:56:cb:f5:8d:4c: 1b:0b:17:86:d2:80:be:10:17:9d:29:bc:83:d4:44:8b:c3:74: 1a:8d:48:ff:fa:32:61:3c:a7:85:0e:ea:f7:35:98:41:5f:e7: d8:b1:8b:89:c7:a4:20:d9:6c:0b:80:63:81:8f:c1:49:3c:70: c0:e2:86:89 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCmghERDbrLOi0M7rD5yLQPRzAcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4 MUJBNjlCNzAeFw0yNjA2MTMwODE2MTZaFw0yNzA2MTIwODIxMTZaMDMxMTAvBgNV BAMTKDAwMTYyMjA2RjA4RTRBMzAyMjg5NTVCQUQyOUEwQURFODQ4RTQ0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1Z7+wi4DAnYKpK4NN4uBsWVn kXkZX47Jn24YcX8Ln2xNn7mCaCaHXjVLTHWyUxG7FHOxFOXrt64GaI50uYt/x88g ACvntlraF0BtCmro2ejsYMjo9ImmpTj1tuSjW5W/HMPSvqRbu57rgrW2HCKoFxNi 8p7yIZBmsp6UWLsefFeE89eZBh3gP21uV2I+rCAAgu8fuTHdmM5IiTw2hH4kPpbU 18P/C9hEsuOoosZ69uFHAhgStOWyukw6eD0na6V7wtR3OTCi7ntMPTz2lKi5zCjx HRatU23pxOxA/PCGbGTqGcO1piW7CHKZvbCffh4YJsUCMOMkqNdzXZ5UDsiRAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUABYiBvCOSjAiiVW60poK3oSORKowHwYDVR0j BBgwFoAUIJFHIDgqH1K5UCEsE45eHoG6abcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzMvMjA5MTQ3MjAzODJBMUY1MkI5NTAyMTJDMTM4RTVFMUU4MUJBNjlCNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDkxNDcyMDM4MkExRjUyQjk1MDIxMkMx MzhFNUUxRTgxQkE2OUI3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMy8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzEzMTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hmETMA0GCSqGSIb3DQEBCwUAA4IBAQB7 P3TOZNKX2gKWxuFG3Pz1gJSQ4Ww1B+ZS6AVkO2BdodhhUs75PJkZ9Gs8kQskT6/O OAN0U78ymOrOSYL7n8Lu1c+ETjimKHqzOhBGSGhwY9wN68QUYvHDubBn2eTc06HK FiU+y0tsFXFxoALBujWH/SFwJINPyA96JyJXCmA9mOQiDk9aJ83f9RF6hyJiCZrs e7hI1llpXWLZuzg/Mf3QQZlWGfBTY7QiX2ad11xL8iTkPmTTlUU02M+U+3sWIj73 Vsv1jUwbCxeG0oC+EBedKbyD1ESLw3QajUj/+jJhPKeFDur3NZhBX+fYsYuJx6Qg 2WwLgGOBj8FJPHDA4oaJ -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:10 2026 by rpki-client