$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa File: 326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa (raw, json) Hash identifier: /uTqT5JLie3E28kiPUEQaB1WxPf4ESjtP7GgXWWmEIg= Subject key identifier: 1E:3D:EB:9B:9D:6B:AB:E5:39:8A:D3:25:19:6F:67:01:C2:D7:14:1C Certificate issuer: /CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Certificate serial: 2263080A75B66FE80974C4F50895EA96AD92D469 Authority key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa Signing time: Mon 23 Feb 2026 08:59:24 +0000 ROA not before: Mon 23 Feb 2026 08:54:24 +0000 ROA not after: Mon 22 Feb 2027 08:59:24 +0000 asID: 201398 IP address blocks: 2a0b:4e07:b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:63:08:0a:75:b6:6f:e8:09:74:c4:f5:08:95:ea:96:ad:92:d4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Validity Not Before: Feb 23 08:54:24 2026 GMT Not After : Feb 22 08:59:24 2027 GMT Subject: CN=1E3DEB9B9D6BABE5398AD325196F6701C2D7141C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:02:ad:3b:22:98:9a:ca:ef:e2:e7:c1:85: 94:8a:1d:d8:a9:a7:e4:3c:fc:ae:e4:11:75:19:33: 3e:cd:37:26:ca:1c:c0:b1:23:17:2c:e8:6b:ae:19: b0:15:69:54:82:bd:81:7a:4f:4a:91:57:6c:b3:32: d8:13:a6:71:4e:5f:b1:e0:55:3a:52:df:36:64:3e: ee:8a:37:e6:57:0a:21:cf:a2:1d:90:d2:34:05:ba: c3:61:f9:77:67:7a:3f:de:dd:06:39:64:71:2b:96: f3:92:ce:4c:a9:38:cc:b1:4c:1e:68:23:c6:e7:f2: 17:b4:4b:7b:86:8c:76:c1:76:b8:84:61:88:64:9f: 2e:b8:d5:8f:e2:bf:6e:0a:36:30:3e:43:fa:2a:d1: 8f:85:d4:c6:19:a5:38:e3:d9:9f:c5:d9:d5:cf:b1: 26:dc:86:86:db:7b:d3:2e:b9:5c:b3:4d:f2:9e:74: 93:f4:1d:c6:b0:46:90:6e:e5:16:fd:00:4c:74:7d: a1:32:a6:f3:02:b1:f1:88:15:15:85:3d:95:d3:13: 5b:35:16:77:64:3c:ee:3e:27:9c:78:12:ca:3b:a7: 43:0f:4f:62:7f:2b:4c:22:9f:58:66:c8:e5:04:0a: c3:9c:92:31:87:89:ca:c5:d8:ec:ff:bc:ac:b4:3b: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3D:EB:9B:9D:6B:AB:E5:39:8A:D3:25:19:6F:67:01:C2:D7:14:1C X509v3 Authority Key Identifier: keyid:C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62303a3a2f34382d3438203d3e20323031333938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b0::/48 Signature Algorithm: sha256WithRSAEncryption 11:86:93:1f:2f:98:09:6a:85:b0:bd:bf:c4:e8:b5:0a:63:52: 64:40:4d:3e:d3:6c:90:e8:90:1c:20:a9:15:99:d2:a2:b7:29: 6d:07:b3:e0:c2:fa:4d:43:1e:f5:d0:32:9c:17:a1:f1:4c:bd: d0:a8:30:a1:d1:45:ea:7c:71:43:15:f1:50:e8:d3:81:a5:89: 0a:47:2f:1a:60:6a:f7:d1:67:d1:12:8b:8a:21:3e:3a:9f:d3: e8:e1:c8:26:0f:63:ab:d7:41:33:bf:d1:7d:69:a7:7f:21:be: 9b:17:9b:5a:9c:0f:9c:c1:81:bf:b4:9f:65:e4:5d:90:5d:67: 17:91:87:e0:43:bc:8f:5b:28:b5:2a:18:dc:28:bb:54:b3:2a: 20:8e:68:26:71:02:30:9b:4b:74:2f:96:c4:5d:d2:56:62:2f: 87:da:a1:64:38:a2:d1:e5:3a:d1:ea:b1:bb:4f:cd:11:d7:ed: f0:00:95:ee:e1:d3:9f:f5:23:b2:69:ab:9e:9e:dd:54:f5:34: 14:bc:0b:2f:d3:35:7d:35:0d:e9:b9:b4:f9:ca:8b:c5:68:fe: e6:c6:48:af:70:c0:aa:1a:b8:51:55:76:6b:03:4e:1b:5b:a5: 01:30:94:50:b8:1c:b3:cf:25:9f:23:a8:01:75:7d:62:06:45: 68:f3:14:48 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUImMICnW2b+gJdMT1CJXqlq2S1GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5 NUMwM0VGMDAeFw0yNjAyMjMwODU0MjRaFw0yNzAyMjIwODU5MjRaMDMxMTAvBgNV BAMTKDFFM0RFQjlCOUQ2QkFCRTUzOThBRDMyNTE5NkY2NzAxQzJENzE0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaTwKtOyKYmsrv4ufBhZSKHdip p+Q8/K7kEXUZMz7NNybKHMCxIxcs6GuuGbAVaVSCvYF6T0qRV2yzMtgTpnFOX7Hg VTpS3zZkPu6KN+ZXCiHPoh2Q0jQFusNh+Xdnej/e3QY5ZHErlvOSzkypOMyxTB5o I8bn8he0S3uGjHbBdriEYYhkny641Y/iv24KNjA+Q/oq0Y+F1MYZpTjj2Z/F2dXP sSbchobbe9MuuVyzTfKedJP0HcawRpBu5Rb9AEx0faEypvMCsfGIFRWFPZXTE1s1 FndkPO4+J5x4Eso7p0MPT2J/K0win1hmyOUECsOckjGHicrF2Oz/vKy0O76JAgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUHj3rm51rq+U5itMlGW9nAcLXFBwwHwYDVR0j BBgwFoAUxz+3Az8jyVlY/PvlDkxlqpXAPvAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTlmODA4ZDItMWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2 MmZjLzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMwM0VGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMw M0VGMC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTlmODA4ZDIt MWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2MmZjLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMxMzMzOTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKgtOBwCwMA0GCSqGSIb3DQEBCwUAA4IBAQARhpMfL5gJaoWwvb/E6LUK Y1JkQE0+02yQ6JAcIKkVmdKityltB7PgwvpNQx710DKcF6HxTL3QqDCh0UXqfHFD FfFQ6NOBpYkKRy8aYGr30WfREouKIT46n9Po4cgmD2Or10Ezv9F9aad/Ib6bF5ta nA+cwYG/tJ9l5F2QXWcXkYfgQ7yPWyi1KhjcKLtUsyogjmgmcQIwm0t0L5bEXdJW Yi+H2qFkOKLR5TrR6rG7T80R1+3wAJXu4dOf9SOyaauent1U9TQUvAsv0zV9NQ3p ubT5yovFaP7mxkivcMCqGrhRVXZrA04bW6UBMJRQuByzzyWfI6gBdX1iBkVo8xRI -----END CERTIFICATE-----Generated at Mon Mar 2 11:52:21 2026 by rpki-client