$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa File: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (raw, json) Hash identifier: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM= Subject key identifier: FF:96:47:EA:8D:A0:79:B4:0B:0D:57:15:D7:CA:D7:A3:B3:9B:39:F8 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 76DC561FD2515CB07E795D16D6BD6EDCF0E6032B Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa Signing time: Fri 10 Apr 2026 12:09:14 +0000 ROA not before: Fri 10 Apr 2026 12:04:14 +0000 ROA not after: Fri 09 Apr 2027 12:09:14 +0000 asID: 16509 IP address blocks: 2a0f:1cc5:c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 13:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:dc:56:1f:d2:51:5c:b0:7e:79:5d:16:d6:bd:6e:dc:f0:e6:03:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Apr 10 12:04:14 2026 GMT Not After : Apr 9 12:09:14 2027 GMT Subject: CN=FF9647EA8DA079B40B0D5715D7CAD7A3B39B39F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:de:66:5b:5b:31:b7:5d:ba:fb:9f:46:52:56: 6b:d1:9d:83:34:6f:e5:63:ef:f4:b3:21:bd:9c:7d: 15:d5:8c:12:a2:f5:69:21:84:e1:47:83:cc:70:16: 4f:5a:f6:be:64:c8:26:2f:26:14:ca:b5:90:ef:28: ca:87:d0:fd:4b:67:a7:19:08:b8:66:73:ea:3c:03: e9:b3:83:27:8f:b3:83:cd:66:6d:2a:e9:6e:12:15: 75:0f:18:71:c0:42:5e:29:49:63:1f:ca:12:59:64: 6d:b3:cf:50:49:f8:32:23:52:94:13:e5:db:69:1a: 9a:91:59:6e:45:24:48:8d:ae:fe:1d:c6:80:02:a4: 5d:e0:6d:8f:96:82:cf:3f:d6:60:e2:c5:38:dd:68: 7d:36:88:78:21:6c:58:69:8d:0d:f8:2d:c6:58:0d: 64:cd:8a:97:15:99:36:d8:c8:c7:fa:cd:7f:4e:e3: da:bf:39:2f:50:47:1d:83:8b:b7:27:ec:ac:5e:b9: ce:65:e1:6b:25:e2:76:b4:ae:f1:3c:b0:78:3a:4c: b4:22:e2:32:3a:5d:d5:2f:a4:96:7d:a3:05:64:30: cd:7b:6f:69:d9:ca:38:f3:77:9a:46:be:2a:bc:4e: 50:80:f1:8e:d9:e7:70:af:81:16:9a:53:fa:0f:b8: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:96:47:EA:8D:A0:79:B4:0B:0D:57:15:D7:CA:D7:A3:B3:9B:39:F8 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:c10::/48 Signature Algorithm: sha256WithRSAEncryption b2:70:73:67:13:94:35:87:b0:73:50:f1:28:3f:3b:0d:04:be: be:9b:9e:c1:af:2d:b7:3c:8f:08:ce:65:70:64:0b:8f:90:41: 3a:c0:ce:4e:1a:6a:ab:5e:5d:d8:6e:66:6b:bf:53:2f:56:ce: 10:71:01:c4:ca:30:a6:ee:7b:c9:87:d9:07:2c:d5:07:f2:fa: 9b:20:d3:55:8a:12:bb:0c:43:13:eb:45:25:aa:d8:39:36:77: 5c:be:bc:d5:7b:10:fa:39:b8:ae:d1:47:8f:fa:bf:97:1e:b1: 8d:e8:33:f3:26:9b:ad:46:e8:4f:29:13:49:57:6e:a2:8a:83: d3:cc:93:2e:32:3e:08:8f:33:82:74:b1:cf:5d:1e:b1:58:2e: 17:99:69:88:89:89:ee:c6:f7:47:2d:17:7c:71:f0:20:39:cc: 04:24:16:25:83:2c:02:7e:3e:21:21:53:5d:34:82:9d:0e:d6: 76:bf:1d:3b:af:18:c1:c5:db:8b:71:49:bb:08:73:25:06:8c: 75:ec:97:c0:c4:80:96:08:21:68:79:28:17:c2:0f:8e:cf:bd: b1:58:dc:09:0f:2d:8e:b0:33:f0:27:c8:80:52:52:9b:4b:9f: 83:f9:40:85:64:1b:51:85:d9:d0:5d:fa:d7:fe:fb:c6:d8:39: 68:e6:93:b3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUdtxWH9JRXLB+eV0W1r1u3PDmAyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA0MTAxMjA0MTRaFw0yNzA0MDkxMjA5MTRaMDMxMTAvBgNV BAMTKEZGOTY0N0VBOERBMDc5QjQwQjBENTcxNUQ3Q0FEN0EzQjM5QjM5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD43mZbWzG3Xbr7n0ZSVmvRnYM0 b+Vj7/SzIb2cfRXVjBKi9WkhhOFHg8xwFk9a9r5kyCYvJhTKtZDvKMqH0P1LZ6cZ CLhmc+o8A+mzgyePs4PNZm0q6W4SFXUPGHHAQl4pSWMfyhJZZG2zz1BJ+DIjUpQT 5dtpGpqRWW5FJEiNrv4dxoACpF3gbY+Wgs8/1mDixTjdaH02iHghbFhpjQ34LcZY DWTNipcVmTbYyMf6zX9O49q/OS9QRx2Di7cn7Kxeuc5l4Wsl4na0rvE8sHg6TLQi 4jI6XdUvpJZ9owVkMM17b2nZyjjzd5pGviq8TlCA8Y7Z53CvgRaaU/oPuLCjAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQU/5ZH6o2gebQLDVcV18rXo7ObOfgwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mODEyZDNlZi1jNWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTYzMzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzYz NTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqDxzFDBAwDQYJKoZIhvcNAQELBQADggEBALJwc2cT lDWHsHNQ8Sg/Ow0Evr6bnsGvLbc8jwjOZXBkC4+QQTrAzk4aaqteXdhuZmu/Uy9W zhBxAcTKMKbue8mH2Qcs1Qfy+psg01WKErsMQxPrRSWq2Dk2d1y+vNV7EPo5uK7R R4/6v5cesY3oM/Mmm61G6E8pE0lXbqKKg9PMky4yPgiPM4J0sc9dHrFYLheZaYiJ ie7G90ctF3xx8CA5zAQkFiWDLAJ+PiEhU100gp0O1na/HTuvGMHF24txSbsIcyUG jHXsl8DEgJYIIWh5KBfCD47PvbFY3AkPLY6wM/AnyIBSUptLn4P5QIVkG1GF2dBd +tf++8bYOWjmk7M= -----END CERTIFICATE-----Generated at Sun Apr 19 04:00:53 2026 by rpki-client