$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931323a3a2f34382d3438203d3e20313939373436.roa File: 326130363a313238333a383931323a3a2f34382d3438203d3e20313939373436.roa (raw, json) Hash identifier: JiL6OW3WYBXp2hAGo0E1tRgFxCeJE1yi6TIffhdw9bg= Subject key identifier: 92:8B:4F:5D:B2:B6:CE:43:EB:F3:36:B5:41:0F:9F:62:64:F2:48:B4 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 69AAF53F3441B83E0F6C9B191D84B21442A859CC Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931323a3a2f34382d3438203d3e20313939373436.roa Signing time: Tue 09 Jun 2026 17:41:50 +0000 ROA not before: Tue 09 Jun 2026 17:36:50 +0000 ROA not after: Tue 08 Jun 2027 17:41:50 +0000 asID: 199746 IP address blocks: 2a06:1283:8912::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 04:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:aa:f5:3f:34:41:b8:3e:0f:6c:9b:19:1d:84:b2:14:42:a8:59:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Jun 9 17:36:50 2026 GMT Not After : Jun 8 17:41:50 2027 GMT Subject: CN=928B4F5DB2B6CE43EBF336B5410F9F6264F248B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:97:07:8a:74:08:de:a4:5b:38:74:38:d9: 30:25:1c:d0:4d:27:69:1b:8d:cc:27:5c:a2:1c:f0: 43:b2:30:b0:13:8a:9b:83:f2:52:e5:0c:7f:79:95: 20:5d:e8:29:6c:33:00:f2:7b:7d:ff:d6:9f:54:37: f5:e1:1e:f0:45:b8:6a:f0:18:d5:21:bb:eb:e7:2c: b0:9a:cd:3e:06:9b:e7:4d:86:8e:b0:cd:69:31:59: f9:d5:56:57:49:20:6e:b9:ad:66:e1:7f:70:85:a0: a6:09:ed:9b:02:14:e5:bd:6d:57:91:ab:2c:0e:8e: 3f:0c:af:78:d8:04:63:21:e3:ba:56:fe:fb:86:10: 90:72:2f:98:4a:f6:67:21:c9:a3:3e:cb:c8:ef:45: a3:61:59:2b:65:5d:61:86:2f:ab:8c:c8:04:ef:1f: c1:38:3a:2f:db:89:79:cb:a7:0c:fd:32:cc:fd:13: c9:62:c6:8b:fc:fd:76:50:39:57:f4:21:f7:c5:bc: ed:a3:5d:4e:a1:5a:b6:c3:af:d8:9d:87:28:6f:41: 3c:d0:1f:52:96:7f:51:48:07:c4:0c:84:77:f9:02: 06:98:c2:69:61:89:f2:ba:62:2e:01:1b:de:38:23: c1:41:bc:d5:cd:fd:3a:30:ef:2c:fc:ff:61:c5:73: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8B:4F:5D:B2:B6:CE:43:EB:F3:36:B5:41:0F:9F:62:64:F2:48:B4 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931323a3a2f34382d3438203d3e20313939373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8912::/48 Signature Algorithm: sha256WithRSAEncryption 43:c1:d7:f1:cd:10:38:37:99:8c:44:20:00:21:3e:47:1c:1d: 3b:9f:f3:6f:70:b3:9c:6d:34:c6:c9:40:80:dc:d2:45:00:6d: e1:53:71:67:6d:1d:da:8c:6b:e4:dc:8b:67:32:09:13:55:9e: 6a:39:f4:40:97:dc:9e:03:d2:2f:32:af:51:0b:49:01:3a:cc: 22:44:bb:06:4f:86:5d:a3:29:b6:fb:f5:e4:59:6c:c0:1d:6c: e0:a4:13:2a:d7:75:85:c9:d5:ca:77:d1:e0:53:07:27:c1:b2: 1c:01:74:ae:7f:1a:24:ba:6d:b4:41:f2:a4:56:ff:92:1d:e0: a5:1a:35:7e:1b:76:37:b7:00:d6:f0:86:f1:d9:97:a4:7f:a8: fd:12:bf:82:17:09:0b:d1:61:e6:e0:ea:fb:66:50:e3:d5:8e: 85:84:91:e0:bc:ab:77:8d:87:dc:47:c7:0f:e2:39:a7:9c:3e: e8:53:21:8b:27:d2:25:a7:36:c3:c8:dc:b6:4a:0f:37:c3:a1: cc:3b:88:68:7d:f8:a1:2c:d6:7a:9b:2b:e1:cf:c3:4d:21:be: e6:ca:bb:3f:24:8e:38:42:38:fb:0e:1b:ff:de:43:86:79:cd: 87:10:d6:fe:bc:08:2d:03:56:6c:d5:58:d6:9a:fe:f6:42:9a: 3d:01:8a:cc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUaar1PzRBuD4PbJsZHYSyFEKoWcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA2MDkxNzM2NTBaFw0yNzA2MDgxNzQxNTBaMDMxMTAvBgNV BAMTKDkyOEI0RjVEQjJCNkNFNDNFQkYzMzZCNTQxMEY5RjYyNjRGMjQ4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQpcHinQI3qRbOHQ42TAlHNBN J2kbjcwnXKIc8EOyMLATipuD8lLlDH95lSBd6ClsMwDye33/1p9UN/XhHvBFuGrw GNUhu+vnLLCazT4Gm+dNho6wzWkxWfnVVldJIG65rWbhf3CFoKYJ7ZsCFOW9bVeR qywOjj8Mr3jYBGMh47pW/vuGEJByL5hK9mchyaM+y8jvRaNhWStlXWGGL6uMyATv H8E4Oi/biXnLpwz9Msz9E8lixov8/XZQOVf0IffFvO2jXU6hWrbDr9idhyhvQTzQ H1KWf1FIB8QMhHf5AgaYwmlhifK6Yi4BG944I8FBvNXN/Tow7yz8/2HFc1Q5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUkotPXbK2zkPr8za1QQ+fYmTySLQwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz OTM5MzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kSMA0GCSqGSIb3DQEBCwUAA4IBAQBD wdfxzRA4N5mMRCAAIT5HHB07n/NvcLOcbTTGyUCA3NJFAG3hU3FnbR3ajGvk3Itn MgkTVZ5qOfRAl9yeA9IvMq9RC0kBOswiRLsGT4Zdoym2+/XkWWzAHWzgpBMq13WF ydXKd9HgUwcnwbIcAXSufxokum20QfKkVv+SHeClGjV+G3Y3twDW8Ibx2Zekf6j9 Er+CFwkL0WHm4Or7ZlDj1Y6FhJHgvKt3jYfcR8cP4jmnnD7oUyGLJ9IlpzbDyNy2 Sg83w6HMO4hoffihLNZ6myvhz8NNIb7myrs/JI44Qjj7Dhv/3kOGec2HENb+vAgt A1Zs1VjWmv72Qpo9AYrM -----END CERTIFICATE-----Generated at Sat Jun 13 22:26:15 2026 by rpki-client