$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/326131343a373538343a333030303a3a2f33362d3438203d3e20323135383439.roa File: 326131343a373538343a333030303a3a2f33362d3438203d3e20323135383439.roa (raw, json) Hash identifier: mRoIFmsCmEGH6SUTDOuYeSSlx3FrBmmk9tb2GFLY9aI= Subject key identifier: 66:0F:79:C8:22:DF:01:4A:05:AA:54:3F:4D:A7:41:9E:19:09:B3:6B Certificate issuer: /CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D Certificate serial: 245C25191F349D1292F798201A2849D597305BFD Authority key identifier: 52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/326131343a373538343a333030303a3a2f33362d3438203d3e20323135383439.roa Signing time: Sat 06 Jun 2026 15:37:20 +0000 ROA not before: Sat 06 Jun 2026 15:32:20 +0000 ROA not after: Sat 05 Jun 2027 15:37:20 +0000 asID: 215849 IP address blocks: 2a14:7584:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5c:25:19:1f:34:9d:12:92:f7:98:20:1a:28:49:d5:97:30:5b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D Validity Not Before: Jun 6 15:32:20 2026 GMT Not After : Jun 5 15:37:20 2027 GMT Subject: CN=660F79C822DF014A05AA543F4DA7419E1909B36B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:d7:fe:72:e4:ac:d1:56:53:eb:37:d5:9d: 00:65:49:19:b3:e4:1f:48:8f:23:4e:cc:55:e8:0e: 86:60:6e:dd:33:4a:1c:43:1d:d0:ed:21:b6:60:95: 32:36:bf:1a:f1:ce:fc:9a:32:24:b2:d0:ff:ab:8f: e2:9d:3e:74:81:b1:7e:cf:ec:61:56:ea:3d:01:14: 21:3f:1a:4e:fb:95:37:1a:25:cd:a9:55:0e:4e:d4: 7a:89:53:3d:e1:62:2b:f9:d6:02:32:b2:87:4a:62: 49:f9:6e:47:2c:15:97:8f:39:88:98:db:a3:24:1b: bb:ca:8b:76:ab:54:cf:16:a9:75:df:34:84:02:ef: bb:ef:fe:99:c6:30:d1:5e:7b:6c:6a:17:d9:ad:53: e1:41:09:99:35:73:19:3e:d3:cb:2a:76:75:93:e6: cc:77:d8:2f:fb:6a:88:12:c9:45:42:eb:40:aa:70: 68:e1:bd:73:20:43:96:b5:8e:05:b9:1c:ef:b8:f3: 58:df:7f:13:fc:10:bd:fd:67:29:11:b6:dd:cd:3c: 69:eb:f7:8c:ff:53:58:2f:88:61:68:01:92:66:79: 48:66:90:31:75:e6:7e:c4:db:19:39:3c:68:99:76: 5b:07:98:9e:7f:2e:28:42:ac:2a:e5:64:b4:30:f0: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0F:79:C8:22:DF:01:4A:05:AA:54:3F:4D:A7:41:9E:19:09:B3:6B X509v3 Authority Key Identifier: keyid:52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/326131343a373538343a333030303a3a2f33362d3438203d3e20323135383439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:3000::/36 Signature Algorithm: sha256WithRSAEncryption 45:4f:97:df:ee:db:88:8d:b3:c0:2b:61:12:83:46:d3:3b:c4: ef:b6:5b:a8:a8:b5:94:dc:e2:42:94:bc:23:c2:f2:85:07:d4: 8b:91:26:5d:57:86:73:25:eb:42:5f:bd:bb:98:1f:bd:80:60: c3:57:53:04:3a:ee:55:e9:36:4a:1d:de:b8:27:fa:b6:84:05: 59:01:70:02:e7:34:dd:b8:cd:e0:5a:df:37:e5:26:9f:14:a0: 7d:fa:66:ef:1d:68:df:88:6b:41:c2:94:70:bd:ea:ff:48:ec: 97:0b:c5:a9:f7:d6:7f:4e:f7:53:3c:b2:b2:eb:27:4a:84:bf: 4f:db:46:b4:fb:d0:41:87:4d:c5:c7:00:00:08:56:a7:99:fe: b2:a2:55:b0:7e:06:f7:7f:67:ea:17:3a:a6:90:a9:4b:ea:02: 76:08:76:53:4c:b3:c8:d7:30:c7:fa:10:21:68:6a:30:5d:10: f3:30:ea:e9:d1:31:78:42:72:35:3b:a2:a3:1b:1e:9e:9f:14: 8c:4c:a3:07:a0:8c:c5:17:93:04:32:25:9d:63:36:33:74:a6: b1:d6:11:96:d7:18:24:99:e5:b1:f4:f3:dd:d5:b7:2f:8a:16: c7:ee:8d:29:7f:a9:49:ac:00:31:24:fc:34:90:d8:a4:af:aa: 57:35:25:16 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUJFwlGR80nRKS95ggGihJ1ZcwW/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI3MjJERTNFNzY3QkE4RkMxRUIyOUE3RDE2NzlGNzM0 QzU1OTY2RDAeFw0yNjA2MDYxNTMyMjBaFw0yNzA2MDUxNTM3MjBaMDMxMTAvBgNV BAMTKDY2MEY3OUM4MjJERjAxNEEwNUFBNTQzRjREQTc0MTlFMTkwOUIzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+B9f+cuSs0VZT6zfVnQBlSRmz 5B9IjyNOzFXoDoZgbt0zShxDHdDtIbZglTI2vxrxzvyaMiSy0P+rj+KdPnSBsX7P 7GFW6j0BFCE/Gk77lTcaJc2pVQ5O1HqJUz3hYiv51gIysodKYkn5bkcsFZePOYiY 26MkG7vKi3arVM8WqXXfNIQC77vv/pnGMNFee2xqF9mtU+FBCZk1cxk+08sqdnWT 5sx32C/7aogSyUVC60CqcGjhvXMgQ5a1jgW5HO+481jffxP8EL39ZykRtt3NPGnr 94z/U1gviGFoAZJmeUhmkDF15n7E2xk5PGiZdlsHmJ5/LihCrCrlZLQw8ChrAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUZg95yCLfAUoFqlQ/TadBnhkJs2swHwYDVR0j BBgwFoAUUnIt4+dnuo/B6ymn0Wefc0xVlm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODA2MmJmYTYtOTNkYi00ZDU5LTlhNDUtODFmODJhOGMy Yzc2LzEvNTI3MjJERTNFNzY3QkE4RkMxRUIyOUE3RDE2NzlGNzM0QzU1OTY2RC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjcyMkRFM0U3NjdCQThGQzFFQjI5QTdE MTY3OUY3MzRDNTU5NjZELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84MDYyYmZhNi05M2RiLTRkNTktOWE0NS04MWY4MmE4YzJjNzYvMS8zMjYxMzEz NDNhMzczNTM4MzQzYTMzMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzgzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1hDAwDQYJKoZIhvcNAQELBQADggEBAEVP l9/u24iNs8ArYRKDRtM7xO+2W6iotZTc4kKUvCPC8oUH1IuRJl1XhnMl60JfvbuY H72AYMNXUwQ67lXpNkod3rgn+raEBVkBcALnNN24zeBa3zflJp8UoH36Zu8daN+I a0HClHC96v9I7JcLxan31n9O91M8srLrJ0qEv0/bRrT70EGHTcXHAAAIVqeZ/rKi VbB+Bvd/Z+oXOqaQqUvqAnYIdlNMs8jXMMf6ECFoajBdEPMw6unRMXhCcjU7oqMb Hp6fFIxMowegjMUXkwQyJZ1jNjN0prHWEZbXGCSZ5bH0893Vty+KFsfujSl/qUms ADEk/DSQ2KSvqlc1JRY= -----END CERTIFICATE-----Generated at Sat Jun 13 22:08:06 2026 by rpki-client