$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a313a3a2f34382d3438203d3e20323034323131.roa File: 326130613a643638353a313a3a2f34382d3438203d3e20323034323131.roa (raw, json) Hash identifier: laI5Q0pzbwM0SFktw07XD+6OjZd2N3daUYCWjZILC6M= Subject key identifier: ED:4E:7B:C5:8F:3C:4E:11:07:F8:D6:22:E9:D4:66:02:20:92:2D:36 Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 10C48F54FFBCA4AF98148ED29CD49F5CEF620C17 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a313a3a2f34382d3438203d3e20323034323131.roa Signing time: Mon 22 Jun 2026 11:09:15 +0000 ROA not before: Mon 22 Jun 2026 11:04:15 +0000 ROA not after: Mon 21 Jun 2027 11:09:15 +0000 asID: 204211 IP address blocks: 2a0a:d685:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 08:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c4:8f:54:ff:bc:a4:af:98:14:8e:d2:9c:d4:9f:5c:ef:62:0c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jun 22 11:04:15 2026 GMT Not After : Jun 21 11:09:15 2027 GMT Subject: CN=ED4E7BC58F3C4E1107F8D622E9D4660220922D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:21:29:ef:77:c4:5e:d7:35:bb:a7:ef:36: 91:b3:b2:f2:03:1b:7b:e6:d5:c3:d4:7d:7e:59:bb: 55:c1:f5:d0:1f:c0:01:6e:41:1e:35:d1:e7:40:26: 8b:a1:77:70:74:32:1b:45:79:dc:f4:7e:fb:39:48: d3:1a:01:3c:ca:14:4b:0a:bd:3e:e6:64:e1:cf:31: f1:1e:6b:46:f6:a4:8f:c9:58:7d:1e:0e:1c:a6:24: a3:5a:d2:d2:e0:0e:98:e8:f0:34:0a:96:a8:b6:4d: 62:a1:c7:dd:f1:9f:ef:18:28:7c:f2:df:61:74:cd: 16:12:5c:5c:4f:d9:02:16:a7:d4:3d:ff:0b:72:26: a5:5f:af:2c:ba:d9:f5:f7:7d:c2:d8:6c:a7:45:d7: 0d:06:02:a8:ec:9e:25:a6:e9:8d:7e:98:33:67:95: 65:cb:12:93:1a:db:bf:da:11:62:cc:bf:c0:b0:ec: 13:40:87:97:75:dc:bb:07:56:d3:0c:a7:e8:d1:f0: 75:7e:8d:dd:cf:de:c3:66:6f:e3:38:5e:22:c9:2a: f0:da:0e:ee:43:88:88:c1:75:b1:14:ad:09:ce:df: ec:1c:85:f5:bf:44:c3:9e:f7:bb:e9:82:9b:0c:ad: 33:91:20:22:55:b0:8c:9f:99:18:44:a8:65:ea:fd: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4E:7B:C5:8F:3C:4E:11:07:F8:D6:22:E9:D4:66:02:20:92:2D:36 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a313a3a2f34382d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1::/48 Signature Algorithm: sha256WithRSAEncryption ba:67:cb:27:83:9e:b9:48:0b:9b:d0:1c:67:4e:83:4c:18:15: d2:48:18:d6:0c:a0:01:3f:a9:91:2b:ec:b3:c0:6f:7a:0d:b7: 87:cf:f6:c3:bb:d3:17:d2:ea:2f:a5:0a:6c:9d:1b:04:36:ff: 47:cb:5d:ce:39:3e:37:cd:a4:cc:13:81:58:3f:0e:ce:62:4f: 41:e4:76:78:11:c7:9b:9a:96:b7:c6:85:17:17:4b:e8:23:8c: 9f:34:18:d0:e8:89:10:57:80:fe:bf:7f:3a:0e:83:a9:5c:f7: 8d:5f:1e:a7:cb:6b:0d:31:5d:3b:fd:ea:7f:fe:46:b2:16:67: 3a:6d:92:3d:1a:a6:21:56:01:26:6d:88:49:ef:3b:9b:7d:e2: 84:86:5b:bb:02:4e:75:41:b1:78:e2:f6:a3:c2:44:d4:00:36: 63:4a:00:87:ef:5b:30:da:54:92:d2:00:03:95:e8:f4:2c:c0: e9:ee:35:e9:a4:44:5b:4a:77:50:8f:be:9c:0d:a9:02:56:8b: 13:80:97:8e:36:21:c9:c8:27:17:33:7f:c9:f2:c2:ed:07:dd: cc:ad:f3:9e:f9:dc:da:72:92:fc:29:73:af:11:e3:ba:dc:45: 93:8e:36:e0:d6:4b:c9:15:10:92:79:3a:49:c0:45:76:d2:21: 6e:dc:0f:9d -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUEMSPVP+8pK+YFI7SnNSfXO9iDBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA2MjIxMTA0MTVaFw0yNzA2MjExMTA5MTVaMDMxMTAvBgNV BAMTKEVENEU3QkM1OEYzQzRFMTEwN0Y4RDYyMkU5RDQ2NjAyMjA5MjJEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHSEp73fEXtc1u6fvNpGzsvID G3vm1cPUfX5Zu1XB9dAfwAFuQR410edAJouhd3B0MhtFedz0fvs5SNMaATzKFEsK vT7mZOHPMfEea0b2pI/JWH0eDhymJKNa0tLgDpjo8DQKlqi2TWKhx93xn+8YKHzy 32F0zRYSXFxP2QIWp9Q9/wtyJqVfryy62fX3fcLYbKdF1w0GAqjsniWm6Y1+mDNn lWXLEpMa27/aEWLMv8Cw7BNAh5d13LsHVtMMp+jR8HV+jd3P3sNmb+M4XiLJKvDa Du5DiIjBdbEUrQnO3+wchfW/RMOe97vpgpsMrTORICJVsIyfmRhEqGXq/VqLAgMB AAGjggJ/MIICezAdBgNVHQ4EFgQU7U57xY88ThEH+NYi6dRmAiCSLTYwHwYDVR0j BBgwFoAUgIOGc+0pHcGs+uA36I+ceni3En4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzUvODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3OEI3MTI3RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNlcjCBsQYIKwYBBQUHAQsEgaQwgaEwgZ4GCCsGAQUF BzALhoGRcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvNS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM0MzIz MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAKgrWhQABMA0GCSqGSIb3DQEBCwUAA4IBAQC6Z8sng565 SAub0BxnToNMGBXSSBjWDKABP6mRK+yzwG96DbeHz/bDu9MX0uovpQpsnRsENv9H y13OOT43zaTME4FYPw7OYk9B5HZ4Ecebmpa3xoUXF0voI4yfNBjQ6IkQV4D+v386 DoOpXPeNXx6ny2sNMV07/ep//kayFmc6bZI9GqYhVgEmbYhJ7zubfeKEhlu7Ak51 QbF44vajwkTUADZjSgCH71sw2lSS0gADlej0LMDp7jXppERbSndQj76cDakCVosT gJeONiHJyCcXM3/J8sLtB93MrfOe+dzacpL8KXOvEeO63EWTjjbg1kvJFRCSeTpJ wEV20iFu3A+d -----END CERTIFICATE-----Generated at Tue Jul 21 20:55:31 2026 by rpki-client