$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa File: 326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa (raw, json) Hash identifier: HgdPJda6r5W610xVzMNjTKP68bG2jdXcdcTL6VaTf2E= Subject key identifier: 2A:04:E6:62:09:58:4D:DE:CD:8B:81:F6:DD:E9:76:B8:25:D8:32:D6 Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Certificate serial: 65939F2077FB20CB0ED6EC77FA36E1849D26F8FA Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa Signing time: Thu 11 Jun 2026 07:36:06 +0000 ROA not before: Thu 11 Jun 2026 07:31:06 +0000 ROA not after: Thu 10 Jun 2027 07:36:06 +0000 asID: 216123 IP address blocks: 2a14:7581:6c69::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:93:9f:20:77:fb:20:cb:0e:d6:ec:77:fa:36:e1:84:9d:26:f8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6 Validity Not Before: Jun 11 07:31:06 2026 GMT Not After : Jun 10 07:36:06 2027 GMT Subject: CN=2A04E66209584DDECD8B81F6DDE976B825D832D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:e9:c9:af:51:67:94:bc:1e:e2:0b:ec:20: e9:3c:39:70:e0:5b:9d:df:ff:39:a8:d7:27:89:e8: d3:5c:7c:aa:51:72:51:35:87:05:24:bc:28:ba:53: a5:9c:2f:50:3e:cd:65:b1:86:66:46:97:77:5e:6e: e5:fe:5d:60:f0:eb:c4:e5:29:e7:fb:e2:fc:ac:30: 31:19:9b:24:ea:fa:88:fd:20:29:6b:4c:b9:87:dc: 83:4c:60:7c:61:a0:db:65:19:b8:f8:76:2d:23:dc: 72:5d:55:43:31:b6:db:f4:78:b7:9c:78:1a:9c:6f: 0a:c2:28:9e:52:b9:8c:b7:c3:f0:76:34:20:fb:cd: 36:f6:3a:2d:f9:a9:3a:93:ea:9b:55:5f:ee:19:f2: dc:8c:b6:03:17:da:f7:cd:3b:22:db:f7:42:0d:7c: b6:06:71:2f:b2:0a:ac:56:1b:52:bd:d7:bf:07:e0: 8f:58:3d:40:69:81:26:ca:0a:e5:3f:c4:df:97:1a: 88:6e:17:32:45:65:29:d1:8d:99:f5:bf:ef:5c:1d: 0d:3c:7d:97:20:81:49:da:b0:99:a8:9e:ae:37:db: 96:3b:77:7d:6c:4f:2f:98:51:29:a0:0d:f5:3b:a2: b2:1b:a5:a8:34:0d:35:27:4e:86:61:5a:72:02:48: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:04:E6:62:09:58:4D:DE:CD:8B:81:F6:DD:E9:76:B8:25:D8:32:D6 X509v3 Authority Key Identifier: keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6c69::/48 Signature Algorithm: sha256WithRSAEncryption 5f:c9:2a:40:45:98:06:da:0c:c7:2e:d5:b0:17:a8:1d:ce:d3: f1:26:8b:51:cc:1e:1e:4b:0b:ae:79:6a:1f:ad:c3:b2:6e:d4: c9:89:55:9a:43:f7:df:e4:ab:81:89:e3:21:bb:20:ae:2b:a0: f5:98:5d:2a:1d:74:fb:7c:0f:b1:2e:99:38:55:dc:77:4a:e4: 41:39:ef:3f:8a:d3:f6:76:1f:90:60:c1:5b:09:aa:94:94:3b: 04:c5:ba:d3:db:75:db:f5:54:f2:7d:46:10:37:33:3a:7d:b5: f3:be:5e:bc:26:52:33:54:c3:61:7b:32:f2:f9:3a:43:76:f1: e8:d2:63:13:ce:9a:87:2b:e9:3b:4d:ee:cd:95:62:43:f3:37: b5:47:f1:31:e7:b5:37:72:bd:90:d3:ff:99:da:2b:a6:02:48: 93:ba:3a:bf:19:15:57:d1:41:1c:17:fd:7b:60:87:0c:b0:51: 6a:16:63:66:fc:a2:bd:86:0b:4e:76:bc:de:b6:b9:6f:a0:ed: 2c:9e:ef:fc:e8:c6:ad:be:42:1b:d5:a2:3a:6a:ee:ed:e8:89: 01:16:84:dd:f3:4c:8c:5a:a1:e0:cb:94:92:94:c8:cc:d9:df: 71:fb:13:ae:75:6d:9b:83:4e:a5:fe:ac:ba:94:8b:02:e3:ee: c3:ff:c4:06 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZZOfIHf7IMsO1ux3+jbhhJ0m+PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx RjA2NDNGNjAeFw0yNjA2MTEwNzMxMDZaFw0yNzA2MTAwNzM2MDZaMDMxMTAvBgNV BAMTKDJBMDRFNjYyMDk1ODREREVDRDhCODFGNkRERTk3NkI4MjVEODMyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxunJr1FnlLwe4gvsIOk8OXDg W53f/zmo1yeJ6NNcfKpRclE1hwUkvCi6U6WcL1A+zWWxhmZGl3debuX+XWDw68Tl Kef74vysMDEZmyTq+oj9IClrTLmH3INMYHxhoNtlGbj4di0j3HJdVUMxttv0eLec eBqcbwrCKJ5SuYy3w/B2NCD7zTb2Oi35qTqT6ptVX+4Z8tyMtgMX2vfNOyLb90IN fLYGcS+yCqxWG1K9178H4I9YPUBpgSbKCuU/xN+XGohuFzJFZSnRjZn1v+9cHQ08 fZcggUnasJmonq4325Y7d31sTy+YUSmgDfU7orIbpag0DTUnToZhWnICSH6hAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUKgTmYglYTd7Ni4H23el2uCXYMtYwHwYDVR0j BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5 MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx MUY0NzMyNjFGMDY0M0Y2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MWJlZGY2Yy1jYzkxLTRiZjAtOWQ2ZS03ZTliM2NiOTkwNWQvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjMzNjM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM2MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gWxpMA0GCSqGSIb3DQEBCwUAA4IBAQBf ySpARZgG2gzHLtWwF6gdztPxJotRzB4eSwuueWofrcOybtTJiVWaQ/ff5KuBieMh uyCuK6D1mF0qHXT7fA+xLpk4Vdx3SuRBOe8/itP2dh+QYMFbCaqUlDsExbrT23Xb 9VTyfUYQNzM6fbXzvl68JlIzVMNhezLy+TpDdvHo0mMTzpqHK+k7Te7NlWJD8ze1 R/Ex57U3cr2Q0/+Z2iumAkiTujq/GRVX0UEcF/17YIcMsFFqFmNm/KK9hgtOdrze trlvoO0snu/86MatvkIb1aI6au7t6IkBFoTd80yMWqHgy5SSlMjM2d9x+xOudW2b g06l/qy6lIsC4+7D/8QG -----END CERTIFICATE-----Generated at Sat Jun 13 19:31:09 2026 by rpki-client