$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa File: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (raw, json) Hash identifier: FkfWJe29iHnNlJdMbmZJIXc57ti+3ftPAFjBN1jj2Hs= Subject key identifier: E5:0A:04:9D:73:90:78:98:81:F2:75:7A:8E:11:F3:34:33:9B:BB:BC Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Certificate serial: 13F50F3D62CC37E9552A983AC14998F30AEB7837 Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa Signing time: Fri 05 Jun 2026 00:19:26 +0000 ROA not before: Fri 05 Jun 2026 00:14:26 +0000 ROA not after: Fri 04 Jun 2027 00:19:26 +0000 asID: 203069 IP address blocks: 2a05:dfc5:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f5:0f:3d:62:cc:37:e9:55:2a:98:3a:c1:49:98:f3:0a:eb:78:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Validity Not Before: Jun 5 00:14:26 2026 GMT Not After : Jun 4 00:19:26 2027 GMT Subject: CN=E50A049D7390789881F2757A8E11F334339BBBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:fe:08:7b:bf:2a:8c:05:0b:65:6d:e8:c6: a4:c5:20:d6:4f:16:62:67:a9:80:18:dc:2c:37:0d: d2:48:6f:07:9e:a6:ba:93:60:ba:d1:7b:85:03:8a: 1b:a9:15:c1:b7:ca:97:51:e6:81:df:25:62:3e:2a: 82:78:23:01:31:16:75:ab:ca:cd:89:68:a5:95:88: b6:9e:f1:58:89:09:52:11:39:ea:9c:8c:1a:63:c6: b7:ab:a0:67:cb:15:e9:5e:94:61:36:10:b0:e6:39: d3:b2:77:4c:1a:fb:31:46:b3:0d:94:95:c8:2b:4a: 6c:e0:e1:4b:a3:52:c6:6c:cf:ea:dc:22:6a:33:b8: 9b:79:37:07:1d:16:3e:5b:27:11:41:4b:27:83:de: e2:fc:90:d6:05:cd:c3:b7:9d:45:ce:84:99:ce:f5: 98:a8:c9:df:d9:b5:c1:eb:77:09:0c:e4:9b:43:70: 17:02:ba:20:28:c1:52:77:44:ff:f9:34:48:b5:36: a7:f6:ed:63:f3:1a:8a:af:24:3e:d2:50:12:f1:a4: 1f:e5:07:a0:c7:44:f2:c5:eb:d6:be:a5:83:ab:08: 04:5f:e9:93:63:36:48:a4:e8:92:97:09:dd:b0:59: c3:28:e5:06:e3:95:af:8e:69:ac:eb:34:f3:02:60: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0A:04:9D:73:90:78:98:81:F2:75:7A:8E:11:F3:34:33:9B:BB:BC X509v3 Authority Key Identifier: keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc5:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 5d:5e:5a:34:2a:c1:ec:5b:76:20:56:30:08:20:6f:cc:4c:42: 58:55:21:8a:3b:af:55:68:bf:36:df:6e:75:ff:61:ee:7a:a1: 4d:6b:e7:b3:66:96:63:86:77:bc:ff:99:1e:33:bf:83:fa:77: 8f:72:0d:4a:9a:1a:85:5a:a3:eb:b7:ff:ca:cb:5b:6d:78:a0: 7f:be:e3:39:cd:70:72:16:2f:57:c8:2d:e0:28:36:d9:a3:c2: fb:3f:40:9a:c4:6f:12:b9:8b:f7:4a:1f:97:b4:60:36:d2:9a: c5:6b:a7:83:5b:d7:3f:11:ad:27:d3:b2:b3:f6:7d:e2:99:89: b0:d2:88:d4:73:b0:b9:2c:a6:19:22:5f:c9:ff:0c:fe:4b:05: 08:2f:0c:8c:02:60:f1:f4:91:23:30:0c:fb:dc:58:88:36:99: 40:5f:d9:f8:f7:9f:78:34:cd:d7:45:60:87:53:8c:45:25:be: ba:22:5d:53:b1:9f:73:eb:2d:0f:21:e3:bf:e9:e6:3b:b6:0f: 41:17:f6:67:50:ec:58:77:24:a5:0c:a0:1a:f4:8a:34:50:ea: 8f:6a:0f:6d:ae:32:8f:e9:74:7e:76:83:21:58:d6:ef:35:71: a2:50:23:8b:ec:61:94:50:fc:9c:3d:2c:e2:33:aa:33:43:4b: 44:db:67:8f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUE/UPPWLMN+lVKpg6wUmY8wrreDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC RkQ2OEQ2NTAeFw0yNjA2MDUwMDE0MjZaFw0yNzA2MDQwMDE5MjZaMDMxMTAvBgNV BAMTKEU1MEEwNDlENzM5MDc4OTg4MUYyNzU3QThFMTFGMzM0MzM5QkJCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS//4Ie78qjAULZW3oxqTFINZP FmJnqYAY3Cw3DdJIbweeprqTYLrRe4UDihupFcG3ypdR5oHfJWI+KoJ4IwExFnWr ys2JaKWViLae8ViJCVIROeqcjBpjxreroGfLFelelGE2ELDmOdOyd0wa+zFGsw2U lcgrSmzg4UujUsZsz+rcImozuJt5NwcdFj5bJxFBSyeD3uL8kNYFzcO3nUXOhJnO 9Zioyd/ZtcHrdwkM5JtDcBcCuiAowVJ3RP/5NEi1Nqf27WPzGoqvJD7SUBLxpB/l B6DHRPLF69a+pYOrCARf6ZNjNkik6JKXCd2wWcMo5Qbjla+OaazrNPMCYNN7AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU5QoEnXOQeJiB8nV6jhHzNDObu7wwHwYDVR0j BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2 OEQ2NS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJmOGU5Nzct NzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRlLzkvMzI2MTMwMzUzYTY0NjY2MzM1 M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzMzMwMzYzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoF38WwCzANBgkqhkiG9w0BAQsFAAOCAQEAXV5aNCrB7Ft2IFYw CCBvzExCWFUhijuvVWi/Nt9udf9h7nqhTWvns2aWY4Z3vP+ZHjO/g/p3j3INSpoa hVqj67f/ystbbXigf77jOc1wchYvV8gt4Cg22aPC+z9AmsRvErmL90ofl7RgNtKa xWung1vXPxGtJ9Oys/Z94pmJsNKI1HOwuSymGSJfyf8M/ksFCC8MjAJg8fSRIzAM +9xYiDaZQF/Z+PefeDTN10Vgh1OMRSW+uiJdU7Gfc+stDyHjv+nmO7YPQRf2Z1Ds WHckpQygGvSKNFDqj2oPba4yj+l0fnaDIVjW7zVxolAji+xhlFD8nD0s4jOqM0NL RNtnjw== -----END CERTIFICATE-----Generated at Sat Jun 13 22:10:08 2026 by rpki-client