$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa File: 326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa (raw, json) Hash identifier: Vj8pBup2nRsVCRRZZonBMO1mLcSOjU3VQ9IXLrIX7W4= Subject key identifier: 34:17:B3:24:35:A2:A4:B2:9A:3A:66:6E:7F:4D:EB:4B:53:2B:57:4A Certificate issuer: /CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Certificate serial: 7D2002B300C7F596885BD6DC6656F2E407EB13AD Authority key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa Signing time: Mon 23 Feb 2026 08:57:38 +0000 ROA not before: Mon 23 Feb 2026 08:52:38 +0000 ROA not after: Mon 22 Feb 2027 08:57:38 +0000 asID: 201398 IP address blocks: 2a0b:4e07:b0::/46 maxlen: 46 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:20:02:b3:00:c7:f5:96:88:5b:d6:dc:66:56:f2:e4:07:eb:13:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Validity Not Before: Feb 23 08:52:38 2026 GMT Not After : Feb 22 08:57:38 2027 GMT Subject: CN=3417B32435A2A4B29A3A666E7F4DEB4B532B574A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:14:21:df:21:6f:07:59:c3:50:e8:be:4f: a9:00:58:7a:31:11:8e:a1:4f:b4:89:74:ce:a1:45: 07:3f:de:f2:82:fd:fe:89:f3:af:b3:7b:85:da:2d: 75:44:a9:9a:3c:fc:bd:ee:03:72:5f:66:86:3c:ce: 17:8c:34:03:ff:bb:39:f3:3f:86:e0:e8:75:5b:ad: 10:db:1c:23:8b:4b:1b:d4:b4:f7:04:16:5d:20:72: 4d:d7:f5:97:b3:fb:0f:31:96:d7:e2:23:65:50:5e: 46:d6:73:d6:9d:84:28:3c:e3:8f:7d:10:2e:7c:11: d5:86:1a:b4:1a:56:03:66:40:ee:af:2d:81:b3:5b: d1:71:a4:87:be:37:3f:93:1e:a7:9c:ee:40:25:06: da:ba:90:00:98:f4:22:45:02:d3:24:37:b3:c4:0c: c8:28:b9:bf:bb:d0:ed:6d:28:5c:11:fc:f1:80:6d: e4:a9:17:14:c6:d5:47:87:87:90:6e:e0:34:3d:de: 80:f5:36:75:24:c9:f2:3e:28:06:00:73:01:c8:cf: 07:85:ec:60:54:4e:b6:14:ce:fd:8d:34:f6:95:4b: 98:c0:e4:89:0b:e7:86:2b:a3:97:3c:58:62:4c:56: fd:e0:5e:2c:f8:14:e7:47:46:d2:ce:31:65:44:b5: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:B3:24:35:A2:A4:B2:9A:3A:66:6E:7F:4D:EB:4B:53:2B:57:4A X509v3 Authority Key Identifier: keyid:C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62303a3a2f34362d3436203d3e20323031333938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b0::/46 Signature Algorithm: sha256WithRSAEncryption d6:26:ae:65:4b:57:14:92:39:4f:63:1c:64:89:75:84:6d:e2: c2:3f:01:f8:63:c1:1c:58:df:dd:81:e6:00:0e:7e:4a:53:09: da:0d:47:0f:6e:69:cb:a6:7e:2a:ee:52:98:6c:c6:46:12:bd: cf:39:e0:4b:3e:83:b0:e1:93:d1:d3:d2:86:4b:6e:49:72:29: ad:f2:fe:4e:d1:50:4b:2e:0a:b4:8a:56:28:b2:6f:76:f1:d2: 40:03:7a:a0:6c:cc:1d:87:bd:3b:a6:6f:58:b9:7f:cb:37:d8: 44:16:dc:cc:e1:5a:83:96:6e:6b:72:52:3c:a8:41:95:2e:f8: 23:4b:d5:c5:54:f9:01:8d:8a:4a:b8:bb:8f:3c:76:43:9a:14: b5:54:5f:4e:17:20:45:e3:8d:fa:47:c3:a1:73:fb:cb:0c:4d: 15:05:76:3f:5b:1c:68:a7:b1:4e:3b:52:a3:72:75:5e:71:a2: 9f:0a:77:02:97:c3:bb:bd:80:a9:e9:1a:86:ff:28:22:58:d7: d2:57:ba:e3:36:e2:f4:87:f2:85:98:d9:66:2b:93:94:b1:c8: 6d:dd:9a:cd:d1:7a:82:47:49:7f:f3:64:31:1d:5f:41:43:2b: f4:47:01:75:18:af:4f:30:dc:69:ac:bc:a3:54:27:9b:e5:4a: 24:55:8c:57 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUfSACswDH9ZaIW9bcZlby5AfrE60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5 NUMwM0VGMDAeFw0yNjAyMjMwODUyMzhaFw0yNzAyMjIwODU3MzhaMDMxMTAvBgNV BAMTKDM0MTdCMzI0MzVBMkE0QjI5QTNBNjY2RTdGNERFQjRCNTMyQjU3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhhQh3yFvB1nDUOi+T6kAWHox EY6hT7SJdM6hRQc/3vKC/f6J86+ze4XaLXVEqZo8/L3uA3JfZoY8zheMNAP/uznz P4bg6HVbrRDbHCOLSxvUtPcEFl0gck3X9Zez+w8xltfiI2VQXkbWc9adhCg84499 EC58EdWGGrQaVgNmQO6vLYGzW9FxpIe+Nz+THqec7kAlBtq6kACY9CJFAtMkN7PE DMgoub+70O1tKFwR/PGAbeSpFxTG1UeHh5Bu4DQ93oD1NnUkyfI+KAYAcwHIzweF 7GBUTrYUzv2NNPaVS5jA5IkL54Yro5c8WGJMVv3gXiz4FOdHRtLOMWVEtRUnAgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUNBezJDWipLKaOmZuf03rS1MrV0owHwYDVR0j BBgwFoAUxz+3Az8jyVlY/PvlDkxlqpXAPvAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTlmODA4ZDItMWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2 MmZjLzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMwM0VGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMw M0VGMC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTlmODA4ZDIt MWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2MmZjLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MjMwM2EzYTJmMzQzNjJkMzQzNjIwM2QzZTIwMzIzMDMxMzMzOTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcCKgtOBwCwMA0GCSqGSIb3DQEBCwUAA4IBAQDWJq5lS1cUkjlPYxxkiXWE beLCPwH4Y8EcWN/dgeYADn5KUwnaDUcPbmnLpn4q7lKYbMZGEr3POeBLPoOw4ZPR 09KGS25Jcimt8v5O0VBLLgq0ilYosm928dJAA3qgbMwdh707pm9YuX/LN9hEFtzM 4VqDlm5rclI8qEGVLvgjS9XFVPkBjYpKuLuPPHZDmhS1VF9OFyBF4436R8Ohc/vL DE0VBXY/Wxxop7FOO1KjcnVecaKfCncCl8O7vYCp6RqG/ygiWNfSV7rjNuL0h/KF mNlmK5OUscht3ZrN0XqCR0l/82QxHV9BQyv0RwF1GK9PMNxprLyjVCeb5UokVYxX -----END CERTIFICATE-----Generated at Sun Mar 1 20:08:40 2026 by rpki-client