$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a313233343a3a2f34382d3438203d3e20323034303835.roa File: 326130363a613030323a313233343a3a2f34382d3438203d3e20323034303835.roa (raw, json) Hash identifier: /ueeiuIrHkj1UebpJT499/7uExjS/xhzsRdxFHL+OLs= Subject key identifier: 80:4C:A0:A8:D6:94:13:54:9A:31:00:8B:3C:FF:46:68:F8:49:51:6B Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Certificate serial: 116F437F362E20F5857F759243A044151B0B0676 Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a313233343a3a2f34382d3438203d3e20323034303835.roa Signing time: Wed 17 Jun 2026 20:32:10 +0000 ROA not before: Wed 17 Jun 2026 20:27:10 +0000 ROA not after: Wed 16 Jun 2027 20:32:10 +0000 asID: 204085 IP address blocks: 2a06:a002:1234::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6f:43:7f:36:2e:20:f5:85:7f:75:92:43:a0:44:15:1b:0b:06:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Validity Not Before: Jun 17 20:27:10 2026 GMT Not After : Jun 16 20:32:10 2027 GMT Subject: CN=804CA0A8D69413549A31008B3CFF4668F849516B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f7:5c:b5:e8:96:23:8b:2a:ce:2c:8c:8e:5d: 9c:7c:dd:6e:af:28:0e:e2:73:63:c5:f3:38:07:3d: 84:3c:ea:f3:77:a8:aa:b1:ae:26:49:fd:5e:62:2b: 9a:98:2d:1b:f2:29:b0:9e:0a:80:c6:3f:c2:db:3c: da:31:cf:b2:04:6d:be:f3:d8:9d:55:99:8e:c8:8e: a4:6c:5e:d6:b4:b5:03:9a:38:ba:67:d0:89:16:c9: 66:ec:66:72:22:16:74:08:1a:f5:bb:b2:ce:56:95: 6a:8f:0e:ac:c5:ab:d0:fb:dd:92:7e:4f:b1:eb:52: ea:fa:ba:e9:03:4a:5a:c4:73:08:56:68:de:14:7f: fc:a2:2a:15:e8:7f:3e:b3:c6:db:ad:c2:4b:29:c0: a9:64:fa:80:89:61:c5:84:e2:14:0e:41:68:86:29: dc:fa:bb:f3:81:8c:ca:cd:51:35:dd:48:61:0b:cc: 83:55:ba:1f:8d:d6:39:72:54:dc:d2:b9:45:64:27: c5:55:a5:05:ac:9e:4f:df:3b:73:a1:67:0c:34:cf: d6:00:26:9d:fd:45:cf:80:62:07:c3:70:09:9a:26: b2:67:2c:f3:dc:b9:bb:c5:97:b8:37:3c:bc:41:6a: fe:8c:81:93:66:0b:ca:4f:a4:c4:ba:9d:68:f0:cf: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4C:A0:A8:D6:94:13:54:9A:31:00:8B:3C:FF:46:68:F8:49:51:6B X509v3 Authority Key Identifier: keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a313233343a3a2f34382d3438203d3e20323034303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a002:1234::/48 Signature Algorithm: sha256WithRSAEncryption 00:cb:db:d7:4f:e3:80:19:2e:5a:64:58:48:04:d6:1e:92:3e: 70:f2:48:b8:4e:4d:3d:f3:eb:3e:1b:27:8a:6f:bb:94:72:4c: a2:50:ea:8f:ed:b3:76:13:55:4e:a7:d7:0e:3e:30:6a:41:f6: 08:91:f8:43:1b:40:4a:89:0b:8a:96:91:ab:e6:fc:1f:7c:ae: c7:e8:25:2f:38:9b:e3:c3:90:86:f7:07:53:d3:58:19:15:18: c3:36:20:75:36:98:3e:3e:40:0e:42:9c:cc:9a:f7:ab:31:7f: 18:58:a9:1b:83:1f:6e:f9:7f:9d:96:2e:08:0a:ff:17:35:9c: 19:76:35:46:8c:9a:a8:29:3a:ff:32:00:9c:47:62:b0:f6:2c: 42:e2:73:28:95:e1:ff:96:93:11:9b:6a:a4:a8:ef:1c:86:1a: 41:b3:9f:94:c4:2f:e2:aa:c7:65:fd:fe:48:c8:52:15:29:ba: 32:3f:87:08:d7:5b:16:8f:78:f9:e9:e9:26:b4:b8:74:61:e9: ca:e1:5e:ca:5f:0e:54:0a:e2:7d:8c:c4:c4:1f:2a:f4:7b:95: 5e:b2:de:5a:43:c0:71:d1:78:b8:57:af:82:b5:bb:bb:de:b2: 2e:b0:43:c8:54:62:fc:3a:e4:e4:25:79:f3:91:6b:eb:2b:a0: d5:1c:8a:dc -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUEW9DfzYuIPWFf3WSQ6BEFRsLBnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3 NDAxRTY3NjAeFw0yNjA2MTcyMDI3MTBaFw0yNzA2MTYyMDMyMTBaMDMxMTAvBgNV BAMTKDgwNENBMEE4RDY5NDEzNTQ5QTMxMDA4QjNDRkY0NjY4Rjg0OTUxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd91y16JYjiyrOLIyOXZx83W6v KA7ic2PF8zgHPYQ86vN3qKqxriZJ/V5iK5qYLRvyKbCeCoDGP8LbPNoxz7IEbb7z 2J1VmY7IjqRsXta0tQOaOLpn0IkWyWbsZnIiFnQIGvW7ss5WlWqPDqzFq9D73ZJ+ T7HrUur6uukDSlrEcwhWaN4Uf/yiKhXofz6zxtutwkspwKlk+oCJYcWE4hQOQWiG Kdz6u/OBjMrNUTXdSGELzINVuh+N1jlyVNzSuUVkJ8VVpQWsnk/fO3OhZww0z9YA Jp39Rc+AYgfDcAmaJrJnLPPcubvFl7g3PLxBav6MgZNmC8pPpMS6nWjwzzFfAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUgEygqNaUE1SaMQCLPP9GaPhJUWswHwYDVR0j BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx RTY3Ni5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzMvMzI2MTMwMzYzYTYxMzAzMDMy M2EzMTMyMzMzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDMwMzgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoAISNDANBgkqhkiG9w0BAQsFAAOCAQEAAMvb10/jgBkuWmRY SATWHpI+cPJIuE5NPfPrPhsnim+7lHJMolDqj+2zdhNVTqfXDj4wakH2CJH4QxtA SokLipaRq+b8H3yux+glLzib48OQhvcHU9NYGRUYwzYgdTaYPj5ADkKczJr3qzF/ GFipG4Mfbvl/nZYuCAr/FzWcGXY1RoyaqCk6/zIAnEdisPYsQuJzKJXh/5aTEZtq pKjvHIYaQbOflMQv4qrHZf3+SMhSFSm6Mj+HCNdbFo94+enpJrS4dGHpyuFeyl8O VArifYzExB8q9HuVXrLeWkPAcdF4uFevgrW7u96yLrBDyFRi/Drk5CV585Fr6yug 1RyK3A== -----END CERTIFICATE-----Generated at Fri Jul 10 16:04:33 2026 by rpki-client