$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa File: 326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa (raw, json) Hash identifier: WoLAH8bn3slZnQGIKeHtYgCa/9r+2P9ipz4xelOJp5o= Subject key identifier: BA:99:BA:BA:01:3A:BB:9A:E9:8A:BE:D4:73:0D:FC:FA:65:72:79:49 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 4F8C7EF903D93BA1D9E8D72AEC29B9B500732242 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa Signing time: Fri 05 Jun 2026 16:35:04 +0000 ROA not before: Fri 05 Jun 2026 16:30:04 +0000 ROA not after: Fri 04 Jun 2027 16:35:04 +0000 asID: 207252 IP address blocks: 2a06:1283:c04f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8c:7e:f9:03:d9:3b:a1:d9:e8:d7:2a:ec:29:b9:b5:00:73:22:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jun 5 16:30:04 2026 GMT Not After : Jun 4 16:35:04 2027 GMT Subject: CN=BA99BABA013ABB9AE98ABED4730DFCFA65727949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:60:4e:e2:8e:dc:39:6a:1f:63:ed:c4:49: 28:59:c3:b9:29:68:06:71:20:75:ff:03:58:5c:52: ae:76:69:02:08:33:66:de:58:7d:34:d2:54:ea:52: 34:76:1d:37:b4:20:a6:2d:70:43:35:e7:e2:46:08: ea:9c:82:50:a5:e2:c9:5c:94:0f:15:16:e6:a2:a2: 3e:e0:59:fe:0a:d6:84:22:55:d2:b6:6c:a4:14:93: 9b:d6:f2:2c:73:71:b3:bf:9c:87:3c:37:56:83:19: d4:33:44:be:89:de:a2:68:b7:de:ca:17:9e:30:39: aa:86:3f:85:5c:61:fb:05:0d:39:89:9f:54:b6:fc: 9d:0b:bb:d8:88:e5:78:53:91:ea:8c:f1:f7:d5:21: c9:77:76:79:38:11:83:5b:22:14:fb:d5:ae:db:cb: 70:9f:fa:21:85:b3:a1:64:2d:af:5e:e4:b8:70:23: ce:60:fa:96:a0:8f:62:90:94:f9:3c:b3:e3:9e:ea: d0:92:8a:53:ca:12:30:53:d3:4a:cc:9e:96:15:e4: 44:6d:95:5d:f0:f5:81:ec:f9:19:6b:56:d8:37:15: 91:8c:a7:ea:e2:9e:e0:84:fd:88:6d:0d:28:7e:0e: e1:d8:e3:b0:58:f7:71:fa:42:1f:73:b2:ea:d8:3a: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:99:BA:BA:01:3A:BB:9A:E9:8A:BE:D4:73:0D:FC:FA:65:72:79:49 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633034663a3a2f34382d3438203d3e20323037323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c04f::/48 Signature Algorithm: sha256WithRSAEncryption 86:ff:55:66:ab:40:50:19:d9:4f:ae:05:f4:78:1f:87:f8:26: 40:8b:e6:00:c5:e0:7b:e0:b1:72:50:98:fb:e0:ee:b1:a3:0e: 1e:79:63:d4:28:9c:10:f8:e6:fe:0d:56:39:74:0d:ad:1d:2f: 53:39:9a:89:06:a9:81:76:79:71:64:03:82:b1:88:37:9a:e7: 97:2a:b2:7c:78:63:05:39:30:1f:e0:d6:44:de:da:2b:ad:22: eb:8d:c0:6c:47:3e:b6:fb:c1:c7:b3:36:26:bd:7e:2c:b0:68: 06:b0:49:8d:14:25:26:12:7f:38:0a:17:ae:10:3a:76:5f:3c: f5:f7:1e:e1:92:b7:0f:0f:9b:85:7e:2d:45:db:a2:d6:8d:eb: b3:d5:a4:fd:ca:a9:f3:a8:65:82:69:52:66:07:cd:6d:b3:a9: ba:3a:2b:1d:7a:3c:7d:db:75:0a:ed:b5:48:c9:54:3b:03:c9: 51:16:8b:71:b2:b0:2c:b7:67:63:22:7a:db:7b:39:28:21:2b: 73:44:f7:04:3b:94:b7:f2:aa:aa:48:88:16:0d:8e:9a:b2:2e: 2c:a1:69:31:e7:0b:5f:c3:0c:eb:48:3a:b2:b7:ac:cf:8a:8d: ad:af:14:83:06:42:c2:77:da:23:ee:c1:78:93:d2:d9:4c:92: 99:f7:72:85 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUT4x++QPZO6HZ6Ncq7Cm5tQBzIkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjA2MDUxNjMwMDRaFw0yNzA2MDQxNjM1MDRaMDMxMTAvBgNV BAMTKEJBOTlCQUJBMDEzQUJCOUFFOThBQkVENDczMERGQ0ZBNjU3Mjc5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoj2BO4o7cOWofY+3ESShZw7kp aAZxIHX/A1hcUq52aQIIM2beWH000lTqUjR2HTe0IKYtcEM15+JGCOqcglCl4slc lA8VFuaioj7gWf4K1oQiVdK2bKQUk5vW8ixzcbO/nIc8N1aDGdQzRL6J3qJot97K F54wOaqGP4VcYfsFDTmJn1S2/J0Lu9iI5XhTkeqM8ffVIcl3dnk4EYNbIhT71a7b y3Cf+iGFs6FkLa9e5LhwI85g+pagj2KQlPk8s+Oe6tCSilPKEjBT00rMnpYV5ERt lV3w9YHs+RlrVtg3FZGMp+rinuCE/YhtDSh+DuHY47BY93H6Qh9zsurYOqmRAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUupm6ugE6u5rpir7Ucw38+mVyeUkwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzQ2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzMyMzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoPATzANBgkqhkiG9w0BAQsFAAOCAQEAhv9VZqtAUBnZT64F 9Hgfh/gmQIvmAMXge+CxclCY++DusaMOHnlj1CicEPjm/g1WOXQNrR0vUzmaiQap gXZ5cWQDgrGIN5rnlyqyfHhjBTkwH+DWRN7aK60i643AbEc+tvvBx7M2Jr1+LLBo BrBJjRQlJhJ/OAoXrhA6dl889fce4ZK3Dw+bhX4tRdui1o3rs9Wk/cqp86hlgmlS ZgfNbbOpujorHXo8fdt1Cu21SMlUOwPJURaLcbKwLLdnYyJ623s5KCErc0T3BDuU t/KqqkiIFg2OmrIuLKFpMecLX8MM60g6sresz4qNra8UgwZCwnfaI+7BeJPS2UyS mfdyhQ== -----END CERTIFICATE-----Generated at Sat Jun 13 22:14:13 2026 by rpki-client