$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3a2f34382d3438203d3e20323135303835.roa File: 326130363a396634313a3a2f34382d3438203d3e20323135303835.roa (raw, json) Hash identifier: ifqv7lMl5QtLHVetA7gis4rsAT0Hkt22y/eFJkwNV2E= Subject key identifier: 3B:24:C5:08:C3:27:2C:59:86:F6:81:78:07:B3:17:9E:75:4C:A2:5D Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 09589FD2376D2EE801167995A0AC631EDD29D1BB Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3a2f34382d3438203d3e20323135303835.roa Signing time: Fri 05 Jun 2026 19:02:07 +0000 ROA not before: Fri 05 Jun 2026 18:57:07 +0000 ROA not after: Fri 04 Jun 2027 19:02:07 +0000 asID: 215085 IP address blocks: 2a06:9f41::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:58:9f:d2:37:6d:2e:e8:01:16:79:95:a0:ac:63:1e:dd:29:d1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Jun 5 18:57:07 2026 GMT Not After : Jun 4 19:02:07 2027 GMT Subject: CN=3B24C508C3272C5986F6817807B3179E754CA25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:fd:e2:7e:d2:01:1d:57:fb:65:cc:70:4f: 9c:dc:6a:2e:a4:f0:54:13:80:8d:b0:ef:38:79:ba: 05:80:86:3a:f1:99:ee:69:34:4b:72:cc:a2:22:44: 77:cf:d4:c0:68:52:fc:8d:5f:4a:9c:74:45:a6:a2: f5:08:a4:7e:5a:58:4c:24:20:fd:bf:40:4a:e6:68: 50:a0:0a:72:98:68:71:c0:81:7e:b8:ff:bf:0b:07: 3e:82:40:75:36:e0:6b:80:a8:e2:98:89:f4:1a:2d: 77:5f:c6:00:d5:64:0c:cf:ed:16:6a:34:d8:f7:e8: 9c:7e:ca:fe:ec:eb:c5:c8:41:c4:c6:55:20:58:c0: 7a:22:d1:0c:24:2a:a8:a9:ce:8c:2e:6c:45:36:27: 2c:df:c2:e8:af:be:a4:63:f3:ec:7c:76:e5:e0:e5: 83:d9:cf:53:66:6d:21:64:4a:f0:de:11:3e:1a:f2: 01:79:4f:37:48:37:93:1d:89:70:29:65:6d:c3:6a: 0b:bf:4a:a3:5f:71:1c:40:7b:07:d0:ff:a0:47:8b: bf:77:f2:8f:ba:8c:01:50:4f:3d:fc:bb:3f:ee:70: 79:f8:c1:e5:c1:29:55:b8:17:c0:77:9f:23:06:7f: 65:eb:22:00:16:09:82:09:69:50:88:9f:70:20:77: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:24:C5:08:C3:27:2C:59:86:F6:81:78:07:B3:17:9E:75:4C:A2:5D X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3a2f34382d3438203d3e20323135303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41::/48 Signature Algorithm: sha256WithRSAEncryption 52:67:62:6f:e0:d3:6b:9b:47:f3:c3:d6:35:76:75:9d:b4:53: bd:86:7a:03:9f:e1:b5:22:27:0e:29:40:11:e8:d0:01:2c:05: 44:54:12:21:72:32:ec:f4:29:b7:55:40:fa:56:a6:6d:92:71: 60:77:7b:25:30:8b:ec:8c:68:af:39:ed:50:90:6f:64:18:55: 2a:86:4b:b1:61:1b:8d:33:9e:1d:a7:67:76:92:0c:90:23:cf: 6b:82:5a:27:24:af:81:e9:20:bf:56:6a:78:bd:fb:09:60:c0: 74:51:1f:cb:46:67:6f:64:37:38:24:6a:5d:d5:4c:d4:5f:37: 1f:5e:7f:96:f1:51:7c:f0:6c:20:d3:e2:d6:b5:59:c4:73:6b: 28:74:db:0a:57:93:34:75:c8:4f:3c:70:d6:6e:bc:7d:60:19: 10:8b:45:42:24:a1:89:a7:15:fb:6e:70:8e:7a:0d:fd:be:d5: 18:0d:61:a9:0b:4f:a0:5f:98:73:78:fe:9a:2f:31:2a:c5:6d: 00:a3:08:17:19:da:b4:2c:3a:d6:ed:93:fc:26:f4:fa:36:56: 44:7d:3a:8c:ed:42:49:e6:6f:46:28:d0:f2:a7:0e:3c:02:74: 77:1d:c2:3d:37:97:ab:b2:87:de:6a:53:1e:c3:0f:6c:13:6f: 73:a3:51:6c -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgIUCVif0jdtLugBFnmVoKxjHt0p0bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNjA2MDUxODU3MDdaFw0yNzA2MDQxOTAyMDdaMDMxMTAvBgNV BAMTKDNCMjRDNTA4QzMyNzJDNTk4NkY2ODE3ODA3QjMxNzlFNzU0Q0EyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZn/3iftIBHVf7ZcxwT5zcai6k 8FQTgI2w7zh5ugWAhjrxme5pNEtyzKIiRHfP1MBoUvyNX0qcdEWmovUIpH5aWEwk IP2/QErmaFCgCnKYaHHAgX64/78LBz6CQHU24GuAqOKYifQaLXdfxgDVZAzP7RZq NNj36Jx+yv7s68XIQcTGVSBYwHoi0QwkKqipzowubEU2JyzfwuivvqRj8+x8duXg 5YPZz1NmbSFkSvDeET4a8gF5TzdIN5MdiXApZW3Dagu/SqNfcRxAewfQ/6BHi793 8o+6jAFQTz38uz/ucHn4weXBKVW4F8B3nyMGf2XrIgAWCYIJaVCIn3Agd39DAgMB AAGjggJwMIICbDAdBgNVHQ4EFgQUOyTFCMMnLFmG9oF4B7MXnnVMol0wHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzAzODM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA KgafQQAAMA0GCSqGSIb3DQEBCwUAA4IBAQBSZ2Jv4NNrm0fzw9Y1dnWdtFO9hnoD n+G1IicOKUAR6NABLAVEVBIhcjLs9Cm3VUD6VqZtknFgd3slMIvsjGivOe1QkG9k GFUqhkuxYRuNM54dp2d2kgyQI89rglonJK+B6SC/Vmp4vfsJYMB0UR/LRmdvZDc4 JGpd1UzUXzcfXn+W8VF88Gwg0+LWtVnEc2sodNsKV5M0dchPPHDWbrx9YBkQi0VC JKGJpxX7bnCOeg39vtUYDWGpC0+gX5hzeP6aLzEqxW0AowgXGdq0LDrW7ZP8JvT6 NlZEfTqM7UJJ5m9GKNDypw48AnR3HcI9N5ersofealMeww9sE29zo1Fs -----END CERTIFICATE-----Generated at Sat Jun 13 08:05:11 2026 by rpki-client