$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861303a3a2f34382d3438203d3e20323130373936.roa File: 326130393a353463333a663861303a3a2f34382d3438203d3e20323130373936.roa (raw, json) Hash identifier: X0CUZY7eCVPdKNVYgU4CZQOyS/PtQA7Qu11pXSHBTAY= Subject key identifier: 29:49:10:C8:FD:F7:E2:72:56:5E:62:E3:0A:55:C8:06:62:1E:64:8D Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 7F8F39070F1142480B8CDCD72AE4C171313B4FFF Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861303a3a2f34382d3438203d3e20323130373936.roa Signing time: Tue 07 Apr 2026 02:04:34 +0000 ROA not before: Tue 07 Apr 2026 01:59:34 +0000 ROA not after: Tue 06 Apr 2027 02:04:34 +0000 asID: 210796 IP address blocks: 2a09:54c3:f8a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 15:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8f:39:07:0f:11:42:48:0b:8c:dc:d7:2a:e4:c1:71:31:3b:4f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Apr 7 01:59:34 2026 GMT Not After : Apr 6 02:04:34 2027 GMT Subject: CN=294910C8FDF7E272565E62E30A55C806621E648D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:38:0d:23:68:c4:32:66:ad:a9:04:5f:db: 62:c7:51:7f:02:f5:99:0d:20:02:ba:f8:91:f8:43: 40:d5:82:e8:27:41:a6:05:8c:67:f5:84:81:a7:d8: 6f:ea:e6:d5:53:b4:c9:2e:0a:ae:92:04:2b:4c:95: 9b:ea:e5:16:ec:90:73:f4:4d:01:4d:69:08:86:f7: 06:b4:5d:97:41:14:6d:70:2d:1c:5e:37:35:0b:95: 04:b9:40:59:17:51:97:e6:8d:e7:7a:77:c7:06:e2: ca:77:ca:17:eb:5f:40:c2:c5:67:ab:b2:18:f4:c5: 4b:e6:47:3f:22:d6:33:0f:14:cf:62:02:80:9c:09: df:04:fd:2e:be:24:01:44:4d:f6:37:b3:69:45:bd: e7:8c:d5:ea:aa:a1:c8:7d:e0:c1:f7:55:7c:63:82: b3:7d:82:8b:cc:22:86:7e:49:42:10:89:0b:43:94: 70:ff:16:8e:f6:ec:61:ea:28:13:08:c7:f0:ca:e6: e2:4a:9c:9a:1a:67:60:d8:3d:82:09:d5:fc:0b:03: d0:dc:48:40:7d:a7:da:93:96:9c:24:7e:d1:64:8c: 8b:d4:fc:b7:5a:3e:b6:c2:ce:92:71:54:55:31:63: 43:63:20:b3:60:1a:a3:d5:d2:c7:0d:14:72:b6:61: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:10:C8:FD:F7:E2:72:56:5E:62:E3:0A:55:C8:06:62:1E:64:8D X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a663861303a3a2f34382d3438203d3e20323130373936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:f8a0::/48 Signature Algorithm: sha256WithRSAEncryption 94:ed:27:4e:72:b5:96:ef:dd:68:46:25:1b:8e:fb:46:59:64: 39:7e:c0:fb:1b:0d:e5:da:a2:40:b7:6f:57:d3:3b:59:7b:d9: ee:b3:36:dc:74:7a:9d:e5:54:2d:f3:20:90:23:13:83:38:9d: 36:1c:5e:20:8b:52:29:11:a1:d3:98:13:63:58:1d:02:b7:a7: 98:e4:33:c4:77:ce:af:d2:2d:c4:a3:28:e9:8d:63:fc:b8:40: 4d:e6:fa:e9:ae:9e:6a:78:f3:3d:6b:1e:81:1d:f9:42:9e:0b: 78:be:d1:0b:05:b3:be:7f:4d:e1:be:d7:d3:cd:d9:01:91:7e: 2b:03:80:a7:72:17:e9:6a:ec:0f:f9:65:75:13:e9:f4:41:93: 06:a8:f7:86:b9:c6:44:29:72:18:81:5d:c7:87:1f:f2:f7:d0: 12:4f:1d:72:90:b1:43:72:97:0f:dd:fc:93:29:b3:2e:6d:b0: 0d:2b:79:d3:15:26:a1:60:ce:63:1a:89:ad:0c:aa:2d:5d:91: 64:e9:ba:79:04:81:f4:5e:21:aa:f8:07:c6:f1:65:78:53:c2: 39:5d:35:52:96:ed:28:22:d6:00:28:b5:9b:8a:fe:4f:f9:14: 3a:1f:26:b6:7c:40:ef:af:71:aa:b3:51:f0:bc:56:8c:01:d1: 35:ae:bd:b3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUf485Bw8RQkgLjNzXKuTBcTE7T/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA0MDcwMTU5MzRaFw0yNzA0MDYwMjA0MzRaMDMxMTAvBgNV BAMTKDI5NDkxMEM4RkRGN0UyNzI1NjVFNjJFMzBBNTVDODA2NjIxRTY0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJjgNI2jEMmatqQRf22LHUX8C 9ZkNIAK6+JH4Q0DVgugnQaYFjGf1hIGn2G/q5tVTtMkuCq6SBCtMlZvq5RbskHP0 TQFNaQiG9wa0XZdBFG1wLRxeNzULlQS5QFkXUZfmjed6d8cG4sp3yhfrX0DCxWer shj0xUvmRz8i1jMPFM9iAoCcCd8E/S6+JAFETfY3s2lFveeM1eqqoch94MH3VXxj grN9govMIoZ+SUIQiQtDlHD/Fo727GHqKBMIx/DK5uJKnJoaZ2DYPYIJ1fwLA9Dc SEB9p9qTlpwkftFkjIvU/LdaPrbCzpJxVFUxY0NjILNgGqPV0scNFHK2Yf5VAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUKUkQyP334nJWXmLjClXIBmIeZI0wHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjhhYmFiYmIt ZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4MDhiLzUvMzI2MTMwMzkzYTM1MzQ2MzMz M2E2NjM4NjEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMDM3MzkzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoJVMP4oDANBgkqhkiG9w0BAQsFAAOCAQEAlO0nTnK1lu/daEYl G477RllkOX7A+xsN5dqiQLdvV9M7WXvZ7rM23HR6neVULfMgkCMTgzidNhxeIItS KRGh05gTY1gdArenmOQzxHfOr9ItxKMo6Y1j/LhATeb66a6eanjzPWsegR35Qp4L eL7RCwWzvn9N4b7X083ZAZF+KwOAp3IX6WrsD/lldRPp9EGTBqj3hrnGRClyGIFd x4cf8vfQEk8dcpCxQ3KXD938kymzLm2wDSt50xUmoWDOYxqJrQyqLV2RZOm6eQSB 9F4hqvgHxvFleFPCOV01UpbtKCLWACi1m4r+T/kUOh8mtnxA769xqrNR8LxWjAHR Na69sw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:16:58 2026 by rpki-client