$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa File: 326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa (raw, json) Hash identifier: cDjuLUbRjX/Cym0utwjlfeBVNw9Y0FFMyk52KGeOY2I= Subject key identifier: C8:49:EE:2E:19:41:59:1A:CE:8B:BF:A2:C8:AE:D3:BA:D8:BC:5B:6F Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 681CF1E3949DA962868A80F2D9E35F2671C45E06 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa Signing time: Fri 05 Jun 2026 16:35:05 +0000 ROA not before: Fri 05 Jun 2026 16:30:05 +0000 ROA not after: Fri 04 Jun 2027 16:35:05 +0000 asID: 216043 IP address blocks: 2a06:1283:c01f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1c:f1:e3:94:9d:a9:62:86:8a:80:f2:d9:e3:5f:26:71:c4:5e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jun 5 16:30:05 2026 GMT Not After : Jun 4 16:35:05 2027 GMT Subject: CN=C849EE2E1941591ACE8BBFA2C8AED3BAD8BC5B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:45:62:df:8a:28:af:a4:d9:7b:69:2c:26: 77:ce:24:e4:35:57:83:55:43:50:94:a6:cf:3e:14: 7a:56:d9:f9:4b:d8:fd:2a:a3:2b:54:78:8e:63:98: 10:cc:a6:ce:3f:68:4e:25:94:a3:ec:a5:2f:f3:39: 8c:d4:5d:a0:c8:04:de:54:10:79:ef:29:b7:ff:ed: b2:33:03:da:e1:23:c0:ca:fa:af:1f:a2:59:77:22: c0:56:9f:ec:5f:61:71:5a:73:dd:63:c5:32:bd:08: fe:6c:1f:fa:3e:d5:8d:42:2f:08:35:32:67:5d:30: 56:3d:14:4c:a0:79:ec:06:6a:df:0a:ce:ea:cf:bb: 72:35:52:ec:69:b4:9b:7b:f6:28:2a:67:8a:1e:d1: f9:6d:94:61:3d:40:62:56:9a:12:a0:9a:8a:14:db: 3c:bd:67:be:31:21:a7:4f:dc:cd:ff:01:41:6f:d1: 96:22:d8:c8:db:3a:0e:8b:46:b4:a5:b3:c3:04:6e: b4:04:ad:a6:46:cd:b8:c5:d7:7b:b3:17:02:2e:fb: 64:a3:bb:06:f3:44:bf:db:df:d0:e4:fb:f9:13:5f: 99:dd:4c:c6:fc:fd:6b:d8:38:d2:d1:4c:fe:c5:4d: 7d:ea:00:b4:f2:ad:7f:8c:07:88:37:fb:a5:1c:2f: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:EE:2E:19:41:59:1A:CE:8B:BF:A2:C8:AE:D3:BA:D8:BC:5B:6F X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c01f::/48 Signature Algorithm: sha256WithRSAEncryption 3a:30:58:dc:36:32:4d:31:75:4f:94:23:10:6a:32:e7:31:de: 24:85:69:ab:12:d0:0a:67:9c:5d:5f:83:6c:80:b9:f8:22:1e: 99:7c:64:e3:82:27:43:07:6c:5b:55:eb:94:71:0b:95:98:8c: b9:54:06:e1:7b:77:06:1b:80:79:b7:91:f6:27:31:ba:df:24: 6e:60:88:77:1c:35:37:d1:a3:ed:12:3f:c3:d8:0d:77:a1:5e: 59:4c:0e:16:20:d2:f6:00:61:90:98:d7:c0:dc:a8:c7:ba:5d: 62:7d:8c:12:62:5e:f1:e0:74:13:c4:fd:81:f7:4b:1f:3e:62: 62:f2:7b:ed:6a:a7:48:aa:47:32:8e:2a:89:84:8f:70:23:98: e1:d6:f4:a7:8e:ab:99:ea:86:5a:2f:0f:ee:64:f2:20:8c:fc: e7:ed:70:bc:d6:3a:79:d1:a8:28:4e:95:aa:d6:34:94:36:9a: 72:60:4d:38:cb:57:85:08:7b:be:45:82:0b:2d:2a:16:8a:a0: 0d:73:08:0e:d4:19:26:3a:8b:c1:01:e0:1e:66:11:b8:ba:52: e1:d9:0a:be:53:41:f4:83:99:28:7e:cb:f1:6f:ee:f8:8e:d5: 8d:c0:b8:1a:94:9f:ec:2c:4b:71:32:47:92:8d:7f:8d:85:c7: 8c:1e:c9:e3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUaBzx45SdqWKGioDy2eNfJnHEXgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDVaFw0yNzA2MDQxNjM1MDVaMDMxMTAvBgNV BAMTKEM4NDlFRTJFMTk0MTU5MUFDRThCQkZBMkM4QUVEM0JBRDhCQzVCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTkVi34oor6TZe2ksJnfOJOQ1 V4NVQ1CUps8+FHpW2flL2P0qoytUeI5jmBDMps4/aE4llKPspS/zOYzUXaDIBN5U EHnvKbf/7bIzA9rhI8DK+q8foll3IsBWn+xfYXFac91jxTK9CP5sH/o+1Y1CLwg1 MmddMFY9FEygeewGat8KzurPu3I1UuxptJt79igqZ4oe0fltlGE9QGJWmhKgmooU 2zy9Z74xIadP3M3/AUFv0ZYi2MjbOg6LRrSls8MEbrQEraZGzbjF13uzFwIu+2Sj uwbzRL/b39Dk+/kTX5ndTMb8/WvYONLRTP7FTX3qALTyrX+MB4g3+6UcLziLAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUyEnuLhlBWRrOi7+iyK7Tuti8W28wHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzE2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMwMzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoPAHzANBgkqhkiG9w0BAQsFAAOCAQEAOjBY3DYyTTF1T5Qj EGoy5zHeJIVpqxLQCmecXV+DbIC5+CIemXxk44InQwdsW1XrlHELlZiMuVQG4Xt3 BhuAebeR9icxut8kbmCIdxw1N9Gj7RI/w9gNd6FeWUwOFiDS9gBhkJjXwNyox7pd Yn2MEmJe8eB0E8T9gfdLHz5iYvJ77WqnSKpHMo4qiYSPcCOY4db0p46rmeqGWi8P 7mTyIIz85+1wvNY6edGoKE6VqtY0lDaacmBNOMtXhQh7vkWCCy0qFoqgDXMIDtQZ JjqLwQHgHmYRuLpS4dkKvlNB9IOZKH7L8W/u+I7VjcC4GpSf7CxLcTJHko1/jYXH jB7J4w== -----END CERTIFICATE-----Generated at Sat Jun 13 22:53:40 2026 by rpki-client