$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa File: 326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa (raw, json) Hash identifier: TmQ0le/l8ws1Wb4HrTMvMEVGRgkcyqYl6oMiV7FPUPY= Subject key identifier: 3B:B8:84:12:DA:C9:DF:1D:FD:66:76:C6:56:7B:66:A5:54:A4:39:E7 Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 5F8CAFDC7194C0B0FF59689B2621ABA29F501895 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa Signing time: Fri 26 Jun 2026 15:27:55 +0000 ROA not before: Fri 26 Jun 2026 15:22:55 +0000 ROA not after: Fri 25 Jun 2027 15:27:55 +0000 asID: 219332 IP address blocks: 2a0a:d685:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 Jul 2026 19:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8c:af:dc:71:94:c0:b0:ff:59:68:9b:26:21:ab:a2:9f:50:18:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jun 26 15:22:55 2026 GMT Not After : Jun 25 15:27:55 2027 GMT Subject: CN=3BB88412DAC9DF1DFD6676C6567B66A554A439E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ba:9c:82:71:f3:17:c9:ce:16:ec:cb:c2:e1: 0c:71:65:14:44:55:1f:bf:d9:4f:1b:fc:cc:6a:b4: a0:f7:cd:54:69:f7:c5:51:88:49:95:e7:a2:0a:ae: 85:45:83:ce:72:59:4b:b0:33:88:9e:5d:ab:73:72: 18:c7:c7:88:b7:50:38:c6:a8:42:82:5e:97:a3:86: a1:3d:bd:5e:e0:14:89:45:9e:0f:50:bc:89:7d:93: d7:a1:ac:08:b7:40:15:68:8e:52:11:36:31:f7:6c: c1:38:00:0e:e9:6b:0f:a4:62:95:6c:c6:8d:76:b7: 07:27:e4:be:e3:2e:71:9c:c0:94:d7:30:33:cc:59: 19:52:d3:9c:a3:be:6d:88:cd:35:1c:9f:cc:10:73: 61:3c:fb:26:06:1b:d7:ed:36:e1:51:ef:80:dc:8f: 50:e0:d3:ad:8a:4f:c4:7a:66:1e:61:1b:79:ea:f8: 41:68:a2:e0:ed:9e:53:8a:de:7f:35:43:c1:de:22: 76:c2:4d:bf:c6:a1:ca:b1:0e:cc:61:60:7a:8b:c2: 01:55:f8:3c:37:33:1f:b3:56:8c:0b:40:3c:52:7c: 2c:f0:83:a3:4c:b7:c9:a4:54:c9:ba:32:e2:ad:79: 44:e6:69:cf:41:a5:05:21:1b:f7:5a:2e:f4:e0:5e: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:84:12:DA:C9:DF:1D:FD:66:76:C6:56:7B:66:A5:54:A4:39:E7 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a3330303a3a2f34302d3438203d3e20323139333332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:300::/40 Signature Algorithm: sha256WithRSAEncryption b1:ee:21:7f:0f:52:db:c7:c3:01:ef:74:97:e9:25:28:df:e3: 67:7f:c1:fe:cc:cf:cd:17:9d:6e:e6:ad:d4:1f:8d:55:9e:33: 12:99:1d:71:c6:85:6e:ed:a1:e3:43:eb:e2:1b:ea:0a:f5:c8: 27:6d:79:00:96:b9:e6:0f:84:d3:53:e2:82:3c:07:6b:80:35: e3:90:32:74:a9:6b:fb:aa:d2:5a:72:46:80:35:ba:6c:68:c3: bf:fb:18:53:8e:9a:1b:b7:3b:30:1f:84:fc:86:e6:f4:b7:5b: 21:2b:89:64:16:81:39:82:20:cd:4d:99:4f:ac:5e:95:ef:52: 06:cd:88:13:ef:09:a8:fd:9f:a3:3d:29:b1:8b:c6:e3:31:9c: da:65:a8:b2:af:74:bb:37:ee:51:73:83:db:da:4f:3c:3b:73: d5:03:fc:0e:d9:ab:b3:1f:f9:e8:4a:26:0a:52:b1:d2:38:06: aa:52:be:55:c2:76:b8:c5:8e:f3:01:dc:5b:ee:87:42:a2:0e: 20:fb:2b:16:bd:fa:44:a6:53:cb:ad:ba:2a:54:b1:07:85:bc: e9:62:b3:35:55:e1:ba:6a:c8:18:30:f6:4e:c8:ad:ac:7e:58: 92:bc:89:9e:95:f4:bf:61:96:e7:99:0b:53:6c:5e:c6:25:d5: fb:72:0a:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX4yv3HGUwLD/WWibJiGrop9QGJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA2MjYxNTIyNTVaFw0yNzA2MjUxNTI3NTVaMDMxMTAvBgNV BAMTKDNCQjg4NDEyREFDOURGMURGRDY2NzZDNjU2N0I2NkE1NTRBNDM5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeupyCcfMXyc4W7MvC4QxxZRRE VR+/2U8b/MxqtKD3zVRp98VRiEmV56IKroVFg85yWUuwM4ieXatzchjHx4i3UDjG qEKCXpejhqE9vV7gFIlFng9QvIl9k9ehrAi3QBVojlIRNjH3bME4AA7paw+kYpVs xo12twcn5L7jLnGcwJTXMDPMWRlS05yjvm2IzTUcn8wQc2E8+yYGG9ftNuFR74Dc j1Dg062KT8R6Zh5hG3nq+EFoouDtnlOK3n81Q8HeInbCTb/GocqxDsxhYHqLwgFV +Dw3Mx+zVowLQDxSfCzwg6NMt8mkVMm6MuKteUTmac9BpQUhG/daLvTgXs7VAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUO7iEEtrJ3x39ZnbGVntmpVSkOecwHwYDVR0j BBgwFoAUgIOGc+0pHcGs+uA36I+ceni3En4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzUvODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3OEI3MTI3RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvNS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTMzMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEz OTMzMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoK1oUDMA0GCSqGSIb3DQEBCwUAA4IBAQCx7iF/ D1Lbx8MB73SX6SUo3+Nnf8H+zM/NF51u5q3UH41VnjMSmR1xxoVu7aHjQ+viG+oK 9cgnbXkAlrnmD4TTU+KCPAdrgDXjkDJ0qWv7qtJackaANbpsaMO/+xhTjpobtzsw H4T8hub0t1shK4lkFoE5giDNTZlPrF6V71IGzYgT7wmo/Z+jPSmxi8bjMZzaZaiy r3S7N+5Rc4Pb2k88O3PVA/wO2auzH/noSiYKUrHSOAaqUr5Vwna4xY7zAdxb7odC og4g+ysWvfpEplPLrboqVLEHhbzpYrM1VeG6asgYMPZOyK2sfliSvImelfS/YZbn mQtTbF7GJdX7cgqj -----END CERTIFICATE-----Generated at Sun Jul 12 10:09:36 2026 by rpki-client