$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a3a2f34302d3438203d3e20323034323131.roa File: 326130613a643638353a3a2f34302d3438203d3e20323034323131.roa (raw, json) Hash identifier: eBx6CYbDRTosurIDDB+KoSblZBSgp+vUq6zMeiKzypk= Subject key identifier: 27:4E:30:DA:35:45:D6:60:27:BD:B0:41:AD:0B:4D:50:62:46:AF:6E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 1D0D775071F11F20BFC83D45CB9C831C0F575C5D Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a3a2f34302d3438203d3e20323034323131.roa Signing time: Tue 16 Jun 2026 04:26:53 +0000 ROA not before: Tue 16 Jun 2026 04:21:53 +0000 ROA not after: Tue 15 Jun 2027 04:26:53 +0000 asID: 204211 IP address blocks: 2a0a:d685::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 08:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0d:77:50:71:f1:1f:20:bf:c8:3d:45:cb:9c:83:1c:0f:57:5c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jun 16 04:21:53 2026 GMT Not After : Jun 15 04:26:53 2027 GMT Subject: CN=274E30DA3545D66027BDB041AD0B4D506246AF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:d0:61:61:05:a8:2c:4c:2b:65:fb:2f:a6: 92:91:96:66:ac:de:bf:b2:bf:e5:80:5a:a4:e5:a9: 8b:c8:ba:ee:bd:70:8b:4b:6e:63:11:42:ff:6e:af: 33:e1:97:69:89:98:e8:62:27:80:45:bc:73:85:10: e3:a0:b4:89:d9:ca:76:15:f8:a6:0f:19:25:86:0c: 58:6a:cc:e4:10:8e:f2:1b:9c:21:98:4b:3a:79:b2: 8c:c0:3d:62:a2:b2:28:32:8c:40:bd:18:b5:0f:51: bf:91:57:87:0b:e9:8e:44:aa:5e:2b:2e:c1:f4:85: 85:60:53:3f:90:49:b4:ab:9c:a9:22:b5:1c:cb:23: a2:42:19:0c:4a:e4:04:d8:aa:24:d7:11:9a:43:81: db:02:86:72:2c:8b:25:a2:c0:3d:92:c9:db:c2:f4: 9f:78:a0:12:00:b3:c0:0b:8d:26:da:5a:87:91:6b: 86:46:99:ab:29:ee:f6:ad:53:c7:da:13:98:f8:4c: 5d:23:13:3a:1e:89:54:6a:18:30:38:dc:bd:52:54: 92:49:85:a2:b8:64:5a:fc:35:2c:ac:67:1a:04:7a: 26:2a:c8:e2:6e:f6:c2:2b:44:cc:f3:55:ff:df:e1: 5e:88:68:5e:72:15:03:21:0e:10:d3:56:ff:f2:54: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4E:30:DA:35:45:D6:60:27:BD:B0:41:AD:0B:4D:50:62:46:AF:6E X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/326130613a643638353a3a2f34302d3438203d3e20323034323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685::/40 Signature Algorithm: sha256WithRSAEncryption 2a:ab:71:fa:ee:26:26:58:61:ed:17:c0:41:79:57:fa:27:27: 4e:52:18:3c:1a:b1:51:0b:b6:45:c3:c3:49:e1:ca:71:8b:84: 0c:6a:be:4c:4b:59:60:ce:b2:d9:4b:5a:b9:af:b4:87:52:80: 67:08:71:77:56:57:35:60:ea:f3:41:f2:8a:95:78:89:e0:82: b8:87:9b:aa:60:9f:ec:12:3b:ae:e6:f3:50:3e:72:71:f8:b4: a6:61:7a:7b:c8:9e:b1:f9:22:34:93:35:47:30:e3:f1:a6:ad: 05:4c:e2:39:cc:65:79:e7:f2:6e:14:da:b5:ce:66:e3:e7:23: 6a:69:ba:7f:99:fc:82:d5:12:40:5d:7f:d6:19:4b:de:14:f6: 8f:bd:72:d0:7d:7e:5c:22:18:b0:ed:f4:93:5b:3a:9f:c0:2f: cd:43:02:a0:20:38:4f:73:ca:e3:5a:b1:3f:c8:db:78:14:54: a6:95:94:8e:a4:cd:f0:1a:5d:81:dc:77:83:00:0f:05:33:86: 38:75:3c:29:8a:aa:be:43:83:dd:37:35:71:ec:31:00:e6:57: d5:5a:76:ef:20:9c:d3:fa:bd:8a:95:49:a2:5a:7f:31:d5:b5: be:3c:eb:96:b6:2c:42:50:ef:c4:aa:9a:49:8b:b1:7a:2c:15: a6:90:8e:68 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUHQ13UHHxHyC/yD1Fy5yDHA9XXF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA2MTYwNDIxNTNaFw0yNzA2MTUwNDI2NTNaMDMxMTAvBgNV BAMTKDI3NEUzMERBMzU0NUQ2NjAyN0JEQjA0MUFEMEI0RDUwNjI0NkFGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RNBhYQWoLEwrZfsvppKRlmas 3r+yv+WAWqTlqYvIuu69cItLbmMRQv9urzPhl2mJmOhiJ4BFvHOFEOOgtInZynYV +KYPGSWGDFhqzOQQjvIbnCGYSzp5sozAPWKisigyjEC9GLUPUb+RV4cL6Y5Eql4r LsH0hYVgUz+QSbSrnKkitRzLI6JCGQxK5ATYqiTXEZpDgdsChnIsiyWiwD2SydvC 9J94oBIAs8ALjSbaWoeRa4ZGmasp7vatU8faE5j4TF0jEzoeiVRqGDA43L1SVJJJ haK4ZFr8NSysZxoEeiYqyOJu9sIrRMzzVf/f4V6IaF5yFQMhDhDTVv/yVMRnAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUJ04w2jVF1mAnvbBBrQtNUGJGr24wHwYDVR0j BBgwFoAUgIOGc+0pHcGs+uA36I+ceni3En4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzUvODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3OEI3MTI3RS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh MzctOTQwMy03NDNiMTVlYzJhOGUvMC84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mNTMyYjllYi0yZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvNS8zMjYxMzA2 MTNhNjQzNjM4MzUzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzQzMjMxMzEu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MA4EAgACMAgDBgAqCtaFADANBgkqhkiG9w0BAQsFAAOCAQEAKqtx+u4mJlhh7RfA QXlX+icnTlIYPBqxUQu2RcPDSeHKcYuEDGq+TEtZYM6y2Utaua+0h1KAZwhxd1ZX NWDq80HyipV4ieCCuIebqmCf7BI7rubzUD5ycfi0pmF6e8iesfkiNJM1RzDj8aat BUziOcxleefybhTatc5m4+cjamm6f5n8gtUSQF1/1hlL3hT2j71y0H1+XCIYsO30 k1s6n8AvzUMCoCA4T3PK41qxP8jbeBRUppWUjqTN8Bpdgdx3gwAPBTOGOHU8KYqq vkOD3Tc1cewxAOZX1Vp27yCc0/q9ipVJolp/MdW1vjzrlrYsQlDvxKqaSYuxeiwV ppCOaA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:36 2026 by rpki-client