$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031633a3a2f34382d3438203d3e20323136303433.roa File: 326130363a313238333a633031633a3a2f34382d3438203d3e20323136303433.roa (raw, json) Hash identifier: 4CCHb61dlnW3cRl2VmvXC8w9SCdNInPQ8k+O/stbtD8= Subject key identifier: 81:BA:A7:A3:29:B9:84:30:20:01:E7:0A:CA:9C:44:D8:DC:99:58:9E Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 1F8180877ADF7649ADEFEBBD0B0B010067024A77 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031633a3a2f34382d3438203d3e20323136303433.roa Signing time: Fri 05 Jun 2026 16:35:04 +0000 ROA not before: Fri 05 Jun 2026 16:30:04 +0000 ROA not after: Fri 04 Jun 2027 16:35:04 +0000 asID: 216043 IP address blocks: 2a06:1283:c01c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:81:80:87:7a:df:76:49:ad:ef:eb:bd:0b:0b:01:00:67:02:4a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jun 5 16:30:04 2026 GMT Not After : Jun 4 16:35:04 2027 GMT Subject: CN=81BAA7A329B984302001E70ACA9C44D8DC99589E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:09:98:f4:1f:a3:7a:17:ff:35:2c:81:ee: 50:1d:b4:33:6e:cf:2e:3e:0d:57:c3:20:4f:2e:08: d2:bf:3b:e7:40:0a:65:0c:ee:09:fa:28:be:55:7c: 2f:31:a9:d7:57:3c:ba:b1:c1:f2:c7:ce:6b:9e:cd: e3:a0:5f:29:92:6a:4d:ac:77:56:bf:35:c8:a2:e4: 7b:a3:26:4a:5e:2b:d2:01:51:3e:9b:35:4b:87:e4: e3:58:e0:41:87:98:92:f7:2a:db:68:ec:11:f6:6b: db:d0:d7:f4:64:09:67:0e:6d:90:2a:d7:c1:f5:de: ee:4e:17:db:7f:d8:a5:52:9e:ec:c2:3f:8c:ca:83: 6c:43:43:55:16:40:5e:c6:77:aa:71:06:80:e1:66: 85:71:be:d6:b5:1e:2f:0a:05:25:03:6b:27:8d:44: 88:e8:96:65:7d:63:8b:b2:99:a6:c6:1c:60:c8:76: ef:ca:e9:a2:6a:dc:ac:64:19:f5:fd:16:c8:b7:51: e8:00:bf:36:03:57:28:78:84:a6:9c:e4:db:d6:2b: f5:0d:44:fd:58:59:21:d2:86:79:d5:b7:1c:ad:d0: 50:10:71:1d:13:d9:3b:c0:76:a9:06:0e:53:05:7f: 22:e2:c0:ba:91:30:fb:e2:3a:5b:d5:10:88:53:29: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BA:A7:A3:29:B9:84:30:20:01:E7:0A:CA:9C:44:D8:DC:99:58:9E X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031633a3a2f34382d3438203d3e20323136303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c01c::/48 Signature Algorithm: sha256WithRSAEncryption 6d:10:36:5d:1a:50:c4:b4:2d:fa:df:8c:88:34:f4:69:ab:fb: bf:57:93:95:17:c3:e6:61:ed:ab:05:29:ae:60:35:71:53:9d: 77:55:c8:46:0c:1a:1d:26:78:9b:bd:40:9c:23:da:2f:c6:ee: ca:e9:2b:ce:74:21:a8:b3:77:e4:ad:15:ed:1a:e5:a6:4e:bc: c4:2c:36:18:5b:05:ee:6e:21:11:25:ec:f1:f8:e2:e7:12:09: 42:3a:41:94:89:de:24:e3:d7:e6:b5:fa:23:b5:97:0b:cb:dd: d6:84:91:0c:c4:d0:3c:df:63:b5:6c:41:93:fd:7e:23:f9:e8: ad:37:29:29:d8:ca:d4:be:72:de:d2:3b:11:77:62:66:ef:45: 66:d9:40:01:f7:ee:ab:ce:c7:63:a1:e8:59:6d:a4:5c:bb:4d: 32:19:50:0b:9f:82:bd:7a:79:66:dd:22:9b:3c:7a:d7:63:5a: ba:02:82:fa:fc:dc:a8:7d:9d:a3:9f:61:0c:ff:5e:a9:c4:67: 17:a2:ab:98:3a:55:c6:76:59:46:a1:81:dd:4c:92:94:65:23: 01:d0:05:79:37:c1:52:39:3f:45:03:74:4d:3d:da:6c:2a:58: d0:39:b3:ba:fd:a1:5f:b1:0c:11:00:c2:c5:ac:cf:1f:c8:c6: e4:30:65:04 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUH4GAh3rfdkmt7+u9CwsBAGcCSncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDRaFw0yNzA2MDQxNjM1MDRaMDMxMTAvBgNV BAMTKDgxQkFBN0EzMjlCOTg0MzAyMDAxRTcwQUNBOUM0NEQ4REM5OTU4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmQmY9B+jehf/NSyB7lAdtDNu zy4+DVfDIE8uCNK/O+dACmUM7gn6KL5VfC8xqddXPLqxwfLHzmuezeOgXymSak2s d1a/Ncii5HujJkpeK9IBUT6bNUuH5ONY4EGHmJL3Ktto7BH2a9vQ1/RkCWcObZAq 18H13u5OF9t/2KVSnuzCP4zKg2xDQ1UWQF7Gd6pxBoDhZoVxvta1Hi8KBSUDayeN RIjolmV9Y4uymabGHGDIdu/K6aJq3KxkGfX9Fsi3UegAvzYDVyh4hKac5NvWK/UN RP1YWSHShnnVtxyt0FAQcR0T2TvAdqkGDlMFfyLiwLqRMPviOlvVEIhTKZHZAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUgbqnoym5hDAgAecKypxE2NyZWJ4wHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzE2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMwMzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoPAHDANBgkqhkiG9w0BAQsFAAOCAQEAbRA2XRpQxLQt+t+M iDT0aav7v1eTlRfD5mHtqwUprmA1cVOdd1XIRgwaHSZ4m71AnCPaL8buyukrznQh qLN35K0V7Rrlpk68xCw2GFsF7m4hESXs8fji5xIJQjpBlIneJOPX5rX6I7WXC8vd 1oSRDMTQPN9jtWxBk/1+I/norTcpKdjK1L5y3tI7EXdiZu9FZtlAAffuq87HY6Ho WW2kXLtNMhlQC5+CvXp5Zt0imzx612NaugKC+vzcqH2do59hDP9eqcRnF6KrmDpV xnZZRqGB3UySlGUjAdAFeTfBUjk/RQN0TT3abCpY0Dmzuv2hX7EMEQDCxazPH8jG 5DBlBA== -----END CERTIFICATE-----Generated at Sat Jun 13 23:11:51 2026 by rpki-client