$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa File: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (raw, json) Hash identifier: OHOa8pdQ/+cUDWoy8JYEhdO3yt3e1qfHEUXnAM/72Is= Subject key identifier: 25:00:4C:34:93:70:1F:37:AE:17:EE:DB:94:2A:0F:FE:9B:8D:0F:1E Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 0F73AE1DC01F96A29A6FDA4638E9ACF6CCA82CBE Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa Signing time: Fri 05 Jun 2026 17:00:30 +0000 ROA not before: Fri 05 Jun 2026 16:55:30 +0000 ROA not after: Fri 04 Jun 2027 17:00:30 +0000 asID: 215147 IP address blocks: 2a06:1283:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:73:ae:1d:c0:1f:96:a2:9a:6f:da:46:38:e9:ac:f6:cc:a8:2c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jun 5 16:55:30 2026 GMT Not After : Jun 4 17:00:30 2027 GMT Subject: CN=25004C3493701F37AE17EEDB942A0FFE9B8D0F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:e2:86:1d:ed:b6:3f:76:22:9c:01:13:b8: af:30:d1:04:d4:fc:eb:05:98:c5:fb:72:5b:0e:3d: 85:bc:74:7b:91:4d:0c:8f:12:54:a2:22:cc:7f:10: 43:92:8d:62:30:bf:39:4f:30:6d:b4:82:a4:c1:4f: 1e:7d:73:a1:50:5a:bb:e9:9b:cc:e4:75:21:24:1b: 4a:ae:ae:9b:f2:5c:69:a1:e4:83:d4:f8:39:19:b2: 6c:ee:1d:06:35:46:b2:0d:41:88:74:ea:1b:6f:0d: d2:f8:34:e9:3d:fe:45:83:a2:5d:91:5e:63:e4:72: 92:13:42:27:ba:83:f9:25:ea:ae:68:e0:fc:2d:ae: 42:72:a1:97:99:51:8b:3d:d3:75:91:26:84:69:dc: 03:f7:85:56:c4:cb:49:cf:d9:6c:7d:0a:6a:ec:30: 37:31:cd:68:e5:82:29:b1:27:ef:3b:84:86:52:40: 06:40:1c:2f:ff:0c:7e:6c:04:09:9f:3d:f1:e7:cf: 46:7a:bc:67:c7:fa:ee:0b:ef:b5:61:60:04:8b:86: 8d:45:e3:20:36:5e:e6:06:48:ab:65:be:e0:cd:a7: 76:24:4c:29:ab:92:9d:33:45:ad:27:f5:99:28:9a: 86:cf:73:63:b6:b4:a8:4c:4c:ba:51:b2:74:6f:74: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:00:4C:34:93:70:1F:37:AE:17:EE:DB:94:2A:0F:FE:9B:8D:0F:1E X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8000::/36 Signature Algorithm: sha256WithRSAEncryption 99:fe:47:26:a6:79:61:27:c7:b8:2c:40:42:1f:01:3d:b1:6a: d1:99:71:07:90:de:e0:0c:2f:c7:fa:c2:93:f7:f1:42:bf:97: e1:d1:5e:27:77:ab:61:83:e8:00:48:32:97:d8:95:3c:02:d4: 23:4e:b4:c3:2b:bc:d9:c4:04:c3:35:16:a4:23:4e:c5:51:29: 38:2b:a4:de:68:70:5c:8b:ae:ee:a0:b8:1d:96:5f:61:05:8c: 1c:cb:73:00:b4:3e:1b:f4:bc:16:0f:d0:5e:ab:6e:78:07:51: eb:d4:9d:6c:d7:31:76:a6:6d:d3:68:10:d1:d2:71:7d:08:44: bf:8a:03:76:b4:ea:9d:3b:81:dc:03:c7:21:df:91:3a:1b:25: 46:48:e6:8f:29:01:a3:3d:f4:3f:4d:ee:3a:55:9f:5d:19:b2: ee:2b:2e:2b:26:d3:c1:d8:ea:a4:a0:3c:f7:7f:9a:de:1c:00: 68:53:ee:1b:20:5f:bc:04:e2:bd:06:9a:67:ca:10:97:d6:e1: 79:7e:a6:80:b0:c7:8e:d7:98:f3:29:28:fa:f1:83:35:6b:e9: 1e:36:d1:70:89:56:46:8d:c0:8b:ed:8e:3b:9a:02:bc:c6:5b: 9d:1e:38:95:6f:e1:71:3a:a3:cc:19:6a:ec:78:72:35:89:4c: b7:17:03:81 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUD3OuHcAflqKab9pGOOms9syoLL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA2MDUxNjU1MzBaFw0yNzA2MDQxNzAwMzBaMDMxMTAvBgNV BAMTKDI1MDA0QzM0OTM3MDFGMzdBRTE3RUVEQjk0MkEwRkZFOUI4RDBGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat+KGHe22P3YinAETuK8w0QTU /OsFmMX7clsOPYW8dHuRTQyPElSiIsx/EEOSjWIwvzlPMG20gqTBTx59c6FQWrvp m8zkdSEkG0qurpvyXGmh5IPU+DkZsmzuHQY1RrINQYh06htvDdL4NOk9/kWDol2R XmPkcpITQie6g/kl6q5o4PwtrkJyoZeZUYs903WRJoRp3AP3hVbEy0nP2Wx9Cmrs MDcxzWjlgimxJ+87hIZSQAZAHC//DH5sBAmfPfHnz0Z6vGfH+u4L77VhYASLho1F 4yA2XuYGSKtlvuDNp3YkTCmrkp0zRa0n9ZkomobPc2O2tKhMTLpRsnRvdMUPAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUJQBMNJNwHzeuF+7blCoP/puNDx4wHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKgYSg4AwDQYJKoZIhvcNAQELBQADggEBAJn+ RyameWEnx7gsQEIfAT2xatGZcQeQ3uAML8f6wpP38UK/l+HRXid3q2GD6ABIMpfY lTwC1CNOtMMrvNnEBMM1FqQjTsVRKTgrpN5ocFyLru6guB2WX2EFjBzLcwC0Phv0 vBYP0F6rbngHUevUnWzXMXambdNoENHScX0IRL+KA3a06p07gdwDxyHfkTobJUZI 5o8pAaM99D9N7jpVn10Zsu4rLism08HY6qSgPPd/mt4cAGhT7hsgX7wE4r0GmmfK EJfW4Xl+poCwx47XmPMpKPrxgzVr6R420XCJVkaNwIvtjjuaArzGW50eOJVv4XE6 o8wZaux4cjWJTLcXA4E= -----END CERTIFICATE-----Generated at Sun Jun 14 02:38:17 2026 by rpki-client