$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031643a3a2f34382d3438203d3e20323136303433.roa File: 326130363a313238333a633031643a3a2f34382d3438203d3e20323136303433.roa (raw, json) Hash identifier: GAmxnvZdHEGWzI7EW8jBZWZbsKQw2nlTRWjUAESUU28= Subject key identifier: 1F:FB:23:7E:06:25:CC:41:67:73:9F:7B:54:E3:E4:4D:A2:DC:48:10 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 256B85C699E018AC0BD3F2BE04CF0276BE8ED936 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031643a3a2f34382d3438203d3e20323136303433.roa Signing time: Fri 05 Jun 2026 16:35:04 +0000 ROA not before: Fri 05 Jun 2026 16:30:04 +0000 ROA not after: Fri 04 Jun 2027 16:35:04 +0000 asID: 216043 IP address blocks: 2a06:1283:c01d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6b:85:c6:99:e0:18:ac:0b:d3:f2:be:04:cf:02:76:be:8e:d9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jun 5 16:30:04 2026 GMT Not After : Jun 4 16:35:04 2027 GMT Subject: CN=1FFB237E0625CC4167739F7B54E3E44DA2DC4810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:9c:dd:2b:dd:3a:37:e9:e6:03:47:dc:16: 10:e5:26:d0:6d:09:51:87:9e:49:ae:5a:96:b2:78: 77:6c:91:63:30:65:39:dc:63:22:d7:59:cf:18:a4: 46:3e:10:6c:ec:d4:dd:5b:15:d9:99:9c:4a:8f:d4: ec:80:e3:55:06:0b:bf:e9:10:0c:7a:d0:91:b9:63: 0e:d1:b1:74:29:92:d9:48:f8:cb:8b:b1:c2:1b:50: ca:23:3d:ab:bf:0d:8e:06:32:8d:d7:fa:41:c6:e2: 54:52:32:7f:49:3e:12:48:e1:36:4f:39:83:b5:a0: 03:a0:32:b1:b9:b8:78:cc:39:87:a4:d3:dd:74:d3: ff:43:88:e8:e1:ba:95:ea:8f:b6:88:b1:14:b9:e8: f9:03:53:63:f1:e4:86:08:13:e3:6b:8d:d7:45:d2: 16:b3:0d:95:4a:a9:cc:64:1a:b8:93:90:a4:50:76: 81:74:a7:7a:f9:4a:93:2c:8a:8c:9b:80:42:fb:56: f7:f8:44:64:7e:3b:5a:d2:a8:7d:bc:9b:2f:96:a4: 5a:f9:7d:7e:35:be:7c:6e:b5:9d:af:1f:93:1c:c9: f8:c0:8c:0e:94:4e:09:57:75:5d:d7:7c:8d:f9:aa: 97:e8:8b:0a:57:42:53:a8:8f:bb:8f:1e:f3:d9:99: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FB:23:7E:06:25:CC:41:67:73:9F:7B:54:E3:E4:4D:A2:DC:48:10 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031643a3a2f34382d3438203d3e20323136303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c01d::/48 Signature Algorithm: sha256WithRSAEncryption 36:97:69:14:3b:2b:46:10:79:12:51:e1:8a:6e:ea:d9:32:84: 1d:10:0c:34:b4:67:22:9b:f7:42:60:d5:15:63:a0:ad:4c:63: b4:1c:77:ee:70:fe:0d:e0:7b:8a:9c:97:82:1c:a4:db:90:49: ee:e0:08:f1:63:b7:7c:8c:b5:65:d9:2a:75:56:cd:20:f0:e9: b5:53:15:be:57:c9:ff:e0:f6:5f:a6:90:09:30:e4:46:02:d1: 0d:b0:3f:a5:3f:87:a2:65:30:af:9d:22:c8:7a:54:92:6d:22: 7a:c7:76:4f:21:21:85:55:29:77:ce:46:c5:f0:c4:7c:93:fa: 00:ed:d2:f9:94:1d:bf:11:b1:9c:96:aa:ea:ad:b6:69:e9:e5: 7d:78:9c:ab:8f:32:24:ec:e4:ac:f1:c7:dd:3d:0a:14:b7:1a: 01:34:97:2d:bf:90:d8:78:73:e4:ab:66:83:d9:54:f4:a5:05: 1d:2b:4c:5e:28:45:5e:c5:91:1a:7f:d9:ff:62:d2:01:ad:9f: 5b:8b:98:e2:c8:e9:9b:79:9b:96:e5:5c:9c:d1:e9:c4:91:b9: 3e:33:76:10:2e:5f:41:eb:60:3f:df:4a:7b:76:47:44:43:52: c1:5d:56:aa:ee:da:36:48:da:76:14:54:7a:55:52:f7:9a:41: b9:0a:24:71 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUJWuFxpngGKwL0/K+BM8Cdr6O2TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDRaFw0yNzA2MDQxNjM1MDRaMDMxMTAvBgNV BAMTKDFGRkIyMzdFMDYyNUNDNDE2NzczOUY3QjU0RTNFNDREQTJEQzQ4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTpzdK906N+nmA0fcFhDlJtBt CVGHnkmuWpayeHdskWMwZTncYyLXWc8YpEY+EGzs1N1bFdmZnEqP1OyA41UGC7/p EAx60JG5Yw7RsXQpktlI+MuLscIbUMojPau/DY4GMo3X+kHG4lRSMn9JPhJI4TZP OYO1oAOgMrG5uHjMOYek09100/9DiOjhupXqj7aIsRS56PkDU2Px5IYIE+NrjddF 0hazDZVKqcxkGriTkKRQdoF0p3r5SpMsioybgEL7Vvf4RGR+O1rSqH28my+WpFr5 fX41vnxutZ2vH5McyfjAjA6UTglXdV3XfI35qpfoiwpXQlOoj7uPHvPZmeWhAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUH/sjfgYlzEFnc597VOPkTaLcSBAwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMwMzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoPAHTANBgkqhkiG9w0BAQsFAAOCAQEANpdpFDsrRhB5ElHh im7q2TKEHRAMNLRnIpv3QmDVFWOgrUxjtBx37nD+DeB7ipyXghyk25BJ7uAI8WO3 fIy1ZdkqdVbNIPDptVMVvlfJ/+D2X6aQCTDkRgLRDbA/pT+HomUwr50iyHpUkm0i esd2TyEhhVUpd85GxfDEfJP6AO3S+ZQdvxGxnJaq6q22aenlfXicq48yJOzkrPHH 3T0KFLcaATSXLb+Q2Hhz5Ktmg9lU9KUFHStMXihFXsWRGn/Z/2LSAa2fW4uY4sjp m3mbluVcnNHpxJG5PjN2EC5fQetgP99Ke3ZHRENSwV1Wqu7aNkjadhRUelVS95pB uQokcQ== -----END CERTIFICATE-----Generated at Sat Jun 13 23:43:37 2026 by rpki-client