$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635323a3a2f34382d3438203d3e20323135333735.roa File: 326131343a373538333a656635323a3a2f34382d3438203d3e20323135333735.roa (raw, json) Hash identifier: SkNEqHKkgb9xaKNRo3z5v+C960c6kIipwLJBD5hMIP8= Subject key identifier: E1:C9:67:D1:39:1F:43:4A:4A:3F:C6:D0:E3:AA:10:87:1B:B3:F0:CA Certificate issuer: /CN=B75F3781BC9C2E7301754988659F92686704E570 Certificate serial: 383A773E836D602E2A3DD32BB9D2F23722DE4D22 Authority key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635323a3a2f34382d3438203d3e20323135333735.roa Signing time: Tue 26 May 2026 06:07:25 +0000 ROA not before: Tue 26 May 2026 06:02:25 +0000 ROA not after: Tue 25 May 2027 06:07:25 +0000 asID: 215375 IP address blocks: 2a14:7583:ef52::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 18:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3a:77:3e:83:6d:60:2e:2a:3d:d3:2b:b9:d2:f2:37:22:de:4d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F3781BC9C2E7301754988659F92686704E570 Validity Not Before: May 26 06:02:25 2026 GMT Not After : May 25 06:07:25 2027 GMT Subject: CN=E1C967D1391F434A4A3FC6D0E3AA10871BB3F0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:dd:70:41:ee:ed:f3:74:43:ee:e9:31:1b: 9c:67:76:52:ab:88:2b:52:99:de:ce:61:5c:bf:ff: 44:cd:5f:de:f3:c5:ae:41:45:02:b4:57:9c:c0:3b: 6b:bf:61:bd:b1:d5:6d:d3:0c:8f:0e:36:fd:bb:20: f7:bd:bd:a7:15:79:ee:72:22:c1:db:a9:19:78:61: 66:a4:60:c3:c2:e7:f5:df:14:72:8c:be:a1:c2:83: ea:c6:1a:e7:65:a2:a8:ff:8c:19:69:d4:e5:b1:05: d5:8e:dd:3a:b7:8c:05:aa:83:e6:7c:05:f4:7f:a3: 86:30:1a:1a:4e:89:8c:5c:b2:19:9b:34:4c:73:07: 9a:5b:16:0b:a9:73:a9:55:ae:3d:1d:a1:a0:c2:9d: 6f:42:d6:0d:5d:bc:33:d9:03:2b:f2:fe:e5:36:c7: 30:05:cb:c3:2c:2c:39:e2:25:90:fe:3f:68:5d:93: c7:98:0f:4b:06:1f:a7:66:7c:77:07:c3:04:82:1d: 00:ec:9a:fb:e8:c2:f7:df:83:91:c6:f7:62:56:24: 1b:44:2f:8e:e0:d6:26:f1:67:74:73:b8:82:78:d2: f4:09:85:be:5b:ab:89:49:22:8a:45:25:a0:07:ea: 6d:98:5b:44:0d:84:89:d2:df:ff:32:77:75:82:19: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:67:D1:39:1F:43:4A:4A:3F:C6:D0:E3:AA:10:87:1B:B3:F0:CA X509v3 Authority Key Identifier: keyid:B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635323a3a2f34382d3438203d3e20323135333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:ef52::/48 Signature Algorithm: sha256WithRSAEncryption 30:df:22:ba:3f:68:9b:ac:bd:bf:06:18:89:ae:25:6c:3d:25: c9:62:32:fe:82:25:e8:e1:1b:49:0e:07:51:5c:27:62:44:fd: b5:08:f1:77:2d:7b:9f:5a:9a:25:7c:23:b5:7d:03:a1:70:2c: 61:ea:e9:af:18:dc:cd:ec:8c:33:04:32:31:c8:df:b1:b4:cb: bb:d7:c9:28:ad:91:c7:fa:6f:5d:d3:9c:97:e1:14:a5:84:52: 2a:c2:5d:97:a5:7f:ee:66:53:e2:5d:23:ce:e8:ca:bc:5e:a5: c6:81:22:ca:40:0d:27:05:14:4b:59:47:f7:3d:19:14:ac:5b: 8d:6e:7a:a7:7e:10:5d:ef:38:1a:70:ac:9e:77:f2:75:f1:97: 75:cc:b5:50:40:6b:ca:42:13:26:97:05:84:8c:59:d6:da:13: be:ac:e0:77:6f:7a:c6:35:b6:a0:cd:c1:59:99:a7:1d:f7:ec: e7:0f:8d:f9:0e:8d:a0:b7:94:1a:f3:cf:a8:e2:f1:f7:96:cc: f5:b8:e8:0c:ea:14:ad:85:8d:46:fc:99:75:52:be:7c:66:73: a9:11:0c:57:cd:72:67:2f:af:d1:de:4f:be:f5:98:13:81:fc: d6:e0:72:00:9c:61:9e:fb:1f:de:d0:40:b6:58:3d:6b:58:91: c3:65:b2:2e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUODp3PoNtYC4qPdMrudLyNyLeTSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1RjM3ODFCQzlDMkU3MzAxNzU0OTg4NjU5RjkyNjg2 NzA0RTU3MDAeFw0yNjA1MjYwNjAyMjVaFw0yNzA1MjUwNjA3MjVaMDMxMTAvBgNV BAMTKEUxQzk2N0QxMzkxRjQzNEE0QTNGQzZEMEUzQUExMDg3MUJCM0YwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiD91wQe7t83RD7ukxG5xndlKr iCtSmd7OYVy//0TNX97zxa5BRQK0V5zAO2u/Yb2x1W3TDI8ONv27IPe9vacVee5y IsHbqRl4YWakYMPC5/XfFHKMvqHCg+rGGudloqj/jBlp1OWxBdWO3Tq3jAWqg+Z8 BfR/o4YwGhpOiYxcshmbNExzB5pbFgupc6lVrj0doaDCnW9C1g1dvDPZAyvy/uU2 xzAFy8MsLDniJZD+P2hdk8eYD0sGH6dmfHcHwwSCHQDsmvvowvffg5HG92JWJBtE L47g1ibxZ3RzuIJ40vQJhb5bq4lJIopFJaAH6m2YW0QNhInS3/8yd3WCGZk/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU4cln0TkfQ0pKP8bQ46oQhxuz8MowHwYDVR0j BBgwFoAUt183gbycLnMBdUmIZZ+SaGcE5XAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1 NTU2LzEvQjc1RjM3ODFCQzlDMkU3MzAxNzU0OTg4NjU5RjkyNjg2NzA0RTU3MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNzVGMzc4MUJDOUMyRTczMDE3NTQ5ODg2 NTlGOTI2ODY3MDRFNTcwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zNzQ2MDUyOS02OTkyLTRmYzUtOGExNy01MjViNmIyNzU1NTYvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY1NjYzNTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g+9SMA0GCSqGSIb3DQEBCwUAA4IBAQAw 3yK6P2ibrL2/BhiJriVsPSXJYjL+giXo4RtJDgdRXCdiRP21CPF3LXufWpolfCO1 fQOhcCxh6umvGNzN7IwzBDIxyN+xtMu718korZHH+m9d05yX4RSlhFIqwl2XpX/u ZlPiXSPO6Mq8XqXGgSLKQA0nBRRLWUf3PRkUrFuNbnqnfhBd7zgacKyed/J18Zd1 zLVQQGvKQhMmlwWEjFnW2hO+rOB3b3rGNbagzcFZmacd9+znD435Do2gt5Qa88+o 4vH3lsz1uOgM6hSthY1G/Jl1Ur58ZnOpEQxXzXJnL6/R3k++9ZgTgfzW4HIAnGGe +x/e0EC2WD1rWJHDZbIu -----END CERTIFICATE-----Generated at Sat Jun 13 06:40:54 2026 by rpki-client