$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa File: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (raw, json) Hash identifier: v5viufJUSKWuwj+d/Y1XFSYcf+6nXu4aUZj9tnF4HUs= Subject key identifier: D9:E2:73:EC:5D:8B:4B:23:8C:BB:85:2A:F2:98:B7:5C:37:A7:97:1E Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 73886B1E3E17599640B93F65480C1BAF59072786 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa Signing time: Fri 05 Jun 2026 17:00:30 +0000 ROA not before: Fri 05 Jun 2026 16:55:30 +0000 ROA not after: Fri 04 Jun 2027 17:00:30 +0000 asID: 215147 IP address blocks: 2a06:1283:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 19:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:88:6b:1e:3e:17:59:96:40:b9:3f:65:48:0c:1b:af:59:07:27:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jun 5 16:55:30 2026 GMT Not After : Jun 4 17:00:30 2027 GMT Subject: CN=D9E273EC5D8B4B238CBB852AF298B75C37A7971E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:61:7c:b1:cf:48:3e:c7:ac:bf:3b:30:52: 80:f6:89:f4:d1:81:3f:85:f6:e4:07:1b:ec:b1:5d: 24:93:c7:67:6d:d8:01:20:5c:de:7b:ac:a0:66:12: 96:df:1d:24:c7:ef:93:47:ff:79:7c:37:5d:17:dd: d3:9a:2b:e9:c4:5a:a0:49:bf:54:db:d8:90:0f:28: 7b:a6:2d:f2:9e:7c:a2:ff:ee:28:26:a8:88:b9:46: f1:e1:8b:72:5e:bb:f6:ce:ef:1e:26:40:24:51:23: d8:fb:bc:ed:b7:52:ca:e5:98:b3:70:b3:c7:84:a9: 23:a7:5e:16:0d:a7:90:f4:ec:f5:b5:7b:57:b8:3f: 3a:c4:fe:41:63:f9:d6:34:b1:ab:d8:50:4a:8f:18: 6b:c2:b2:22:0f:38:40:8a:75:4b:d8:93:c1:5c:b4: 13:22:ce:57:27:0b:d7:7c:ba:ef:97:26:70:98:db: e0:b2:65:96:54:86:8b:3c:cc:cb:f5:6a:7e:3f:98: fd:17:4b:21:c1:1e:54:52:f3:7d:f2:e3:db:e9:fc: e6:39:ca:23:e4:34:b8:86:05:aa:01:9a:9d:44:e3: 42:e5:0e:b2:88:7a:10:3e:c6:8c:ac:d0:0c:21:4e: 7f:82:23:b4:bb:ed:8a:11:7f:9c:89:01:17:fc:77: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E2:73:EC:5D:8B:4B:23:8C:BB:85:2A:F2:98:B7:5C:37:A7:97:1E X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8002::/48 Signature Algorithm: sha256WithRSAEncryption 20:ac:b3:8f:69:bd:48:56:6f:9d:78:a9:23:bd:b7:9b:61:83: 95:74:b1:40:51:41:83:02:dd:b2:c4:07:a5:ac:1f:a2:29:0f: 84:79:28:e6:5e:cc:63:d3:5c:d5:ef:26:41:24:42:c8:3e:e7: c5:1c:b8:2c:e6:ae:5f:f3:9c:02:11:7b:42:a3:9f:5c:72:78: f0:04:7b:cf:11:b8:b6:2b:f1:54:03:ec:c4:84:91:2c:bf:ea: 28:be:e9:c2:99:a7:15:b4:95:c1:99:95:fe:85:df:2b:b9:bf: 26:5a:9b:d8:44:ca:4c:d5:d8:39:d6:03:cb:2c:d5:eb:7d:73: a6:16:c2:08:09:ed:9e:c7:d1:28:13:77:9d:9f:e8:57:f0:06: e6:e9:95:a4:8a:7e:d0:79:e1:3f:bf:95:37:35:5b:51:db:9d: 3b:cd:3b:98:77:bf:0c:8f:0b:77:ba:ed:83:e1:46:f8:ac:b2: 2f:74:94:8d:8d:40:b1:97:73:6c:e3:da:16:40:c1:58:f6:6f: 36:ee:25:70:7e:b3:51:22:65:28:21:da:91:2e:5b:4e:49:eb: b5:84:95:e0:8f:9c:fc:8d:44:49:c7:97:2a:20:23:bd:45:43: 27:7b:de:42:15:bc:27:9f:b4:4a:b5:21:c5:24:70:69:6b:31: 09:1e:df:a6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUc4hrHj4XWZZAuT9lSAwbr1kHJ4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNjA2MDUxNjU1MzBaFw0yNzA2MDQxNzAwMzBaMDMxMTAvBgNV BAMTKEQ5RTI3M0VDNUQ4QjRCMjM4Q0JCODUyQUYyOThCNzVDMzdBNzk3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93mF8sc9IPsesvzswUoD2ifTR gT+F9uQHG+yxXSSTx2dt2AEgXN57rKBmEpbfHSTH75NH/3l8N10X3dOaK+nEWqBJ v1Tb2JAPKHumLfKefKL/7igmqIi5RvHhi3Jeu/bO7x4mQCRRI9j7vO23UsrlmLNw s8eEqSOnXhYNp5D07PW1e1e4PzrE/kFj+dY0savYUEqPGGvCsiIPOECKdUvYk8Fc tBMizlcnC9d8uu+XJnCY2+CyZZZUhos8zMv1an4/mP0XSyHBHlRS833y49vp/OY5 yiPkNLiGBaoBmp1E40LlDrKIehA+xoys0AwhTn+CI7S77YoRf5yJARf8d4TjAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU2eJz7F2LSyOMu4Uq8pi3XDenlx4wHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzAzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4ACMA0GCSqGSIb3DQEBCwUAA4IBAQAg rLOPab1IVm+deKkjvbebYYOVdLFAUUGDAt2yxAelrB+iKQ+EeSjmXsxj01zV7yZB JELIPufFHLgs5q5f85wCEXtCo59ccnjwBHvPEbi2K/FUA+zEhJEsv+oovunCmacV tJXBmZX+hd8rub8mWpvYRMpM1dg51gPLLNXrfXOmFsIICe2ex9EoE3edn+hX8Abm 6ZWkin7QeeE/v5U3NVtR2507zTuYd78Mjwt3uu2D4Ub4rLIvdJSNjUCxl3Ns49oW QMFY9m827iVwfrNRImUoIdqRLltOSeu1hJXgj5z8jURJx5cqICO9RUMne95CFbwn n7RKtSHFJHBpazEJHt+m -----END CERTIFICATE-----Generated at Sun Jun 14 05:27:05 2026 by rpki-client