$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931393a3a2f34382d3438203d3e20323135313130.roa File: 326130363a313238333a383931393a3a2f34382d3438203d3e20323135313130.roa (raw, json) Hash identifier: szbFoyx09HdOWDopdDqyGWUyOEz/saKor9G/Uw/KPlo= Subject key identifier: 66:20:E5:D4:7D:63:44:A0:7A:B1:A3:EC:C4:8C:5B:74:D2:27:44:FD Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 38771C031378AA36D535677D607CA641A34D0D63 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931393a3a2f34382d3438203d3e20323135313130.roa Signing time: Thu 11 Jun 2026 22:04:55 +0000 ROA not before: Thu 11 Jun 2026 21:59:55 +0000 ROA not after: Thu 10 Jun 2027 22:04:55 +0000 asID: 215110 IP address blocks: 2a06:1283:8919::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 18:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:77:1c:03:13:78:aa:36:d5:35:67:7d:60:7c:a6:41:a3:4d:0d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Jun 11 21:59:55 2026 GMT Not After : Jun 10 22:04:55 2027 GMT Subject: CN=6620E5D47D6344A07AB1A3ECC48C5B74D22744FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:d8:af:15:47:a0:1a:35:72:47:1d:72:eb: 7c:f7:00:8b:be:f1:bc:36:e2:f6:c2:b3:49:e3:a2: 04:ad:22:20:ac:5a:18:07:b3:d6:08:7b:fe:30:0e: 13:76:a3:c3:f6:76:83:50:49:34:06:89:b4:87:94: c7:a4:62:0e:5c:fd:92:bf:c8:3d:7e:88:f1:31:0e: 7c:90:29:ec:bf:57:44:0c:5b:35:af:4e:04:79:0f: 2b:a9:4d:19:9a:f7:51:26:7a:e7:1c:6e:3a:c5:f8: 78:38:4f:f6:e2:e1:85:86:85:5b:2f:9a:da:a9:fd: c2:16:5c:b8:57:77:0d:fe:17:41:51:24:25:ca:70: 84:16:87:c4:e4:19:3d:c2:dc:db:54:7a:5f:67:e4: de:3c:59:be:7b:86:f9:99:08:35:f5:b5:ed:62:b7: 94:15:7b:92:f3:be:01:e5:70:a7:f1:a2:4a:52:e0: 77:ac:a0:a0:2d:b7:83:ce:84:37:b6:a1:9a:fc:ab: f4:67:b4:3d:10:bb:80:08:97:8f:9e:a8:7a:31:e2: 05:c8:62:86:1d:bb:51:ba:d2:05:96:6a:7b:ce:ac: 7b:81:ad:b8:e1:a6:75:7b:68:92:5d:72:9b:c4:85: ce:44:3c:f8:63:7b:3f:60:4a:5f:9c:3b:db:0c:22: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:20:E5:D4:7D:63:44:A0:7A:B1:A3:EC:C4:8C:5B:74:D2:27:44:FD X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931393a3a2f34382d3438203d3e20323135313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8919::/48 Signature Algorithm: sha256WithRSAEncryption 7d:0d:48:71:df:36:04:d1:f3:ac:4a:8e:e4:44:eb:49:7a:ab: 4d:2b:32:9c:48:84:86:fa:56:f1:da:f4:68:04:80:d4:c1:80: 83:0b:28:67:b5:1f:82:8b:43:e7:32:27:f3:68:83:6c:36:a4: 33:1e:e1:fc:9a:89:b5:1b:e9:c4:ec:2f:e5:c8:9d:f9:61:16: c9:e3:75:fb:09:59:aa:a4:94:2b:b2:79:b1:a9:be:20:98:ac: f3:db:5f:c3:15:e2:1f:31:bb:ec:0d:e8:c6:dc:96:b5:9b:73: 86:62:27:c3:f4:42:65:4a:2e:85:e0:dd:67:bc:67:d1:ab:c7: 9b:0e:2d:44:a4:42:db:24:a5:a2:49:6c:e8:ba:ec:9f:83:b4: 08:8c:f2:23:cf:92:e7:37:8e:ff:26:92:79:63:fb:bb:a6:4b: 76:5a:ee:d2:47:1c:f1:21:78:4f:7d:d1:47:8d:e6:23:4a:65: 14:f4:a1:10:d2:5c:23:1f:c1:0c:eb:9b:7f:4d:43:ad:9f:56: 77:75:8a:37:54:25:38:6d:66:47:30:76:d3:63:85:6b:b3:77: 7d:64:1c:0d:b7:b2:27:97:1b:e6:0d:cb:96:05:7e:a8:76:81: cc:1e:fb:29:a7:d7:ea:f5:9a:84:bb:de:6b:36:23:63:4b:a0: ae:58:4b:14 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOHccAxN4qjbVNWd9YHymQaNNDWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA2MTEyMTU5NTVaFw0yNzA2MTAyMjA0NTVaMDMxMTAvBgNV BAMTKDY2MjBFNUQ0N0Q2MzQ0QTA3QUIxQTNFQ0M0OEM1Qjc0RDIyNzQ0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTNivFUegGjVyRx1y63z3AIu+ 8bw24vbCs0njogStIiCsWhgHs9YIe/4wDhN2o8P2doNQSTQGibSHlMekYg5c/ZK/ yD1+iPExDnyQKey/V0QMWzWvTgR5DyupTRma91EmeuccbjrF+Hg4T/bi4YWGhVsv mtqp/cIWXLhXdw3+F0FRJCXKcIQWh8TkGT3C3NtUel9n5N48Wb57hvmZCDX1te1i t5QVe5LzvgHlcKfxokpS4HesoKAtt4POhDe2oZr8q/RntD0Qu4AIl4+eqHox4gXI YoYdu1G60gWWanvOrHuBrbjhpnV7aJJdcpvEhc5EPPhjez9gSl+cO9sMItN9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUZiDl1H1jRKB6saPsxIxbdNInRP0wHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMTM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kZMA0GCSqGSIb3DQEBCwUAA4IBAQB9 DUhx3zYE0fOsSo7kROtJeqtNKzKcSISG+lbx2vRoBIDUwYCDCyhntR+Ci0PnMifz aINsNqQzHuH8mom1G+nE7C/lyJ35YRbJ43X7CVmqpJQrsnmxqb4gmKzz21/DFeIf MbvsDejG3Ja1m3OGYifD9EJlSi6F4N1nvGfRq8ebDi1EpELbJKWiSWzouuyfg7QI jPIjz5LnN47/JpJ5Y/u7pkt2Wu7SRxzxIXhPfdFHjeYjSmUU9KEQ0lwjH8EM65t/ TUOtn1Z3dYo3VCU4bWZHMHbTY4Vrs3d9ZBwNt7InlxvmDcuWBX6odoHMHvspp9fq 9ZqEu95rNiNjS6CuWEsU -----END CERTIFICATE-----Generated at Sat Jun 13 06:41:05 2026 by rpki-client