$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa File: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (raw, json) Hash identifier: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y= Subject key identifier: 36:6A:50:78:DC:22:0D:19:E7:E1:92:A7:EF:E5:FE:78:F2:7B:89:B6 Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 7B64DB07E6F90481F72F28D42BCB35D02BF78AB6 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa Signing time: Thu 11 Jun 2026 18:09:26 +0000 ROA not before: Thu 11 Jun 2026 18:04:26 +0000 ROA not after: Thu 10 Jun 2027 18:09:26 +0000 asID: 204291 IP address blocks: 2a13:9644:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:64:db:07:e6:f9:04:81:f7:2f:28:d4:2b:cb:35:d0:2b:f7:8a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jun 11 18:04:26 2026 GMT Not After : Jun 10 18:09:26 2027 GMT Subject: CN=366A5078DC220D19E7E192A7EFE5FE78F27B89B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:28:0f:b4:2d:2a:a7:4b:8d:55:1d:80:c5:4c: 3d:f0:cc:d4:c3:aa:4f:48:f4:2e:28:5d:5d:46:86: 24:81:11:9c:d7:ac:14:04:db:e3:a4:58:b9:d7:04: 7b:25:81:14:50:11:31:b4:1c:3c:ff:3c:33:3b:4e: 6d:76:3a:37:70:14:b0:87:33:27:62:1b:7d:fc:6f: d4:b7:a1:f3:ad:6e:1f:dc:aa:70:9d:8a:e3:68:be: 9d:e1:c5:d9:e7:ed:51:b1:9b:47:75:14:ff:a8:f0: 92:3b:5d:47:24:0e:61:57:53:92:4d:7d:8a:78:f1: 15:68:f4:1c:92:5c:5f:0d:d6:f6:fb:1b:7d:f4:32: 95:98:66:1f:a8:fb:19:27:6e:97:b7:02:13:02:99: 17:10:e1:ed:6f:6e:cb:b2:ab:e1:fa:51:17:3f:d0: 82:1c:32:f3:0c:46:22:aa:bc:af:aa:39:40:a4:36: 31:c0:11:33:d8:08:d8:de:51:e6:61:f5:50:ad:93: b2:4c:0b:f6:b6:d1:88:f4:fc:bc:aa:ae:c2:59:22: 9c:dc:40:5e:70:34:7d:2c:25:3d:ed:c0:e1:0a:12: a7:a5:3f:ca:c5:71:15:e8:ae:d1:a1:9b:c6:cc:4c: f2:47:50:25:51:a8:84:3f:50:32:dd:8f:8f:b5:7d: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6A:50:78:DC:22:0D:19:E7:E1:92:A7:EF:E5:FE:78:F2:7B:89:B6 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9644:4000::/40 Signature Algorithm: sha256WithRSAEncryption 94:16:e4:07:d6:27:5c:21:ba:e3:83:06:e9:ec:8d:3a:15:79: 01:09:d7:a7:98:ad:85:23:46:ca:ed:08:79:6b:45:dc:ad:68: 64:51:1f:90:b7:4f:b6:26:95:1c:d0:bf:89:7e:a4:ff:c2:de: fd:18:56:f4:56:dd:a0:79:05:59:56:d1:a5:19:a6:b5:f9:01: 7d:a0:0a:cd:cd:51:eb:3b:bd:94:e5:48:20:a8:2c:a4:5f:74: 84:fc:fe:2b:59:6d:b5:7c:37:10:ef:20:9b:8a:43:cb:b6:f2: c5:af:db:36:5e:ea:48:ba:19:15:bd:44:a2:dc:98:a1:ab:4c: e1:9a:85:ca:f5:0c:84:82:4c:4f:e6:3d:d6:69:db:4f:e2:3f: 76:85:83:d7:b0:c6:93:5f:84:e7:f3:eb:8d:57:29:1a:2f:d5: cf:33:ba:5f:00:0c:17:c2:51:0a:f5:60:2e:e9:30:0b:38:19: 03:91:29:48:97:9b:a4:52:f9:40:19:26:83:b3:1a:aa:53:a9: 58:1b:cc:46:af:85:9b:af:45:fe:98:5d:80:75:f5:95:b0:09: dd:68:e7:68:2e:42:1b:51:34:d7:36:84:f9:b1:c0:1d:40:55: c6:b2:7b:34:37:7e:db:38:27:86:cc:8d:8c:de:96:2f:c2:88: 90:84:b1:47 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUe2TbB+b5BIH3LyjUK8s10Cv3irYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNjA2MTExODA0MjZaFw0yNzA2MTAxODA5MjZaMDMxMTAvBgNV BAMTKDM2NkE1MDc4REMyMjBEMTlFN0UxOTJBN0VGRTVGRTc4RjI3Qjg5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaKA+0LSqnS41VHYDFTD3wzNTD qk9I9C4oXV1GhiSBEZzXrBQE2+OkWLnXBHslgRRQETG0HDz/PDM7Tm12OjdwFLCH MydiG338b9S3ofOtbh/cqnCdiuNovp3hxdnn7VGxm0d1FP+o8JI7XUckDmFXU5JN fYp48RVo9BySXF8N1vb7G330MpWYZh+o+xknbpe3AhMCmRcQ4e1vbsuyq+H6URc/ 0IIcMvMMRiKqvK+qOUCkNjHAETPYCNjeUeZh9VCtk7JMC/a20Yj0/LyqrsJZIpzc QF5wNH0sJT3twOEKEqelP8rFcRXortGhm8bMTPJHUCVRqIQ/UDLdj4+1ff2hAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUNmpQeNwiDRnn4ZKn7+X+ePJ7ibYwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82NWVhZTc0NS04YWM5LTRlNzEtYmM5NC1mY2IyNjE3MDNmOTYvMS8zMjYxMzEz MzNhMzkzNjM0MzQzYTM0MzAzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MDM0MzIzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOWREAwDQYJKoZIhvcNAQELBQADggEBAJQW 5AfWJ1whuuODBunsjToVeQEJ16eYrYUjRsrtCHlrRdytaGRRH5C3T7YmlRzQv4l+ pP/C3v0YVvRW3aB5BVlW0aUZprX5AX2gCs3NUes7vZTlSCCoLKRfdIT8/itZbbV8 NxDvIJuKQ8u28sWv2zZe6ki6GRW9RKLcmKGrTOGahcr1DISCTE/mPdZp20/iP3aF g9ewxpNfhOfz641XKRov1c8zul8ADBfCUQr1YC7pMAs4GQORKUiXm6RS+UAZJoOz GqpTqVgbzEavhZuvRf6YXYB19ZWwCd1o52guQhtRNNc2hPmxwB1AVcayezQ3fts4 J4bMjYzeli/CiJCEsUc= -----END CERTIFICATE-----Generated at Sun Jun 14 00:55:51 2026 by rpki-client