$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa File: 326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa (raw, json) Hash identifier: LS3BrlYZK8SbNX6J/CClnGQfo8ZO+l7g9dfo7FOeS6Y= Subject key identifier: 8F:D1:F8:A5:92:0D:5D:74:DF:EA:AE:15:42:E5:B1:61:B5:71:59:9B Certificate issuer: /CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Certificate serial: 0D756496F7A74899BE11F63BC351BD183323C0CB Authority key identifier: C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa Signing time: Mon 23 Feb 2026 08:59:50 +0000 ROA not before: Mon 23 Feb 2026 08:54:50 +0000 ROA not after: Mon 22 Feb 2027 08:59:50 +0000 asID: 201398 IP address blocks: 2a0b:4e07:b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 05:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:75:64:96:f7:a7:48:99:be:11:f6:3b:c3:51:bd:18:33:23:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73FB7033F23C95958FCFBE50E4C65AA95C03EF0 Validity Not Before: Feb 23 08:54:50 2026 GMT Not After : Feb 22 08:59:50 2027 GMT Subject: CN=8FD1F8A5920D5D74DFEAAE1542E5B161B571599B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:03:f9:16:c3:91:c3:9e:04:85:7a:d5:f2: be:8b:4a:5d:09:63:e2:6c:79:9a:e4:92:03:fa:a3: 8c:d3:e5:f5:68:13:21:b0:00:94:b4:9f:a3:b2:4a: c4:4b:77:65:22:9c:e5:13:6a:5d:54:5b:f3:95:50: 9d:6e:e6:35:9b:7e:f9:38:fd:d1:c5:ae:1f:30:73: 8d:23:61:68:2b:f3:ba:b5:c6:ce:d3:a4:ab:0a:ab: 63:ac:a7:d4:70:8e:17:7d:07:f9:c7:b7:7a:87:12: bf:66:09:8f:ac:fb:27:76:0b:0d:b8:c7:85:8e:fc: 43:ef:bd:99:62:90:3e:c6:17:46:04:f5:cf:f5:18: eb:db:2a:7e:37:15:b1:f5:cd:9b:a6:24:59:3d:5d: 18:87:69:70:75:64:1a:9f:20:fa:22:ea:f2:d0:3f: 73:2e:b4:11:f7:08:44:a8:12:fd:98:54:08:09:b1: af:07:6a:1f:b9:9f:66:27:dd:00:31:03:3b:51:0c: bd:6e:5b:37:b8:ea:6c:0f:0e:63:3b:a2:00:0a:c8: 51:6e:71:74:29:80:50:e4:d0:e6:41:c2:e2:91:9f: 79:54:22:ed:3f:ec:75:00:fd:25:7c:cf:58:68:2a: f3:8a:51:1c:00:ed:35:ee:1e:1a:e7:83:4d:24:98: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D1:F8:A5:92:0D:5D:74:DF:EA:AE:15:42:E5:B1:61:B5:71:59:9B X509v3 Authority Key Identifier: keyid:C7:3F:B7:03:3F:23:C9:59:58:FC:FB:E5:0E:4C:65:AA:95:C0:3E:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/C73FB7033F23C95958FCFBE50E4C65AA95C03EF0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/99f808d2-1f15-4df3-b51e-d55c523b62fc/1/326130623a346530373a62323a3a2f34382d3438203d3e20323031333938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:b2::/48 Signature Algorithm: sha256WithRSAEncryption c9:23:4d:74:9a:46:7d:c7:b3:5a:81:1c:0e:63:89:82:08:ad: 84:59:2b:c3:c1:2a:e1:d6:b1:20:d4:e9:c0:a9:1e:ca:4e:39: 72:f1:dd:80:9d:22:a2:c4:ed:7a:ad:e5:95:3e:0a:58:d5:26: 01:48:fe:c4:2d:a8:a6:7e:76:ff:4d:bf:73:79:5a:df:46:2a: c6:0f:f0:8f:a4:f1:d9:f8:f1:df:57:6a:4c:98:f2:6a:84:16: 56:fd:68:43:96:be:73:e7:b9:8d:cd:3e:6e:20:ca:8e:08:d6: 57:32:11:0c:d0:78:f0:82:ff:2f:d4:09:d9:b8:8a:34:c8:47: 86:1e:ec:7a:34:11:f8:49:8d:78:fe:71:cf:c3:1e:d4:31:c9: 6f:4e:10:38:87:de:eb:91:6f:84:48:50:1e:9c:19:db:c2:84: 8e:46:95:c9:ae:79:8f:85:29:19:34:9e:a7:d3:63:c6:db:81: 87:dc:af:b6:e3:7a:75:a6:b6:79:ad:d8:3e:9f:8c:15:b0:52: e1:15:27:23:2a:a4:5b:e4:23:ce:ed:5d:19:94:7e:3a:8a:f9: 6d:ec:97:7e:7c:b6:47:f4:f5:32:ce:58:e4:bf:a5:85:ce:aa: a2:07:e6:4f:4d:af:10:00:53:7b:66:ec:a4:dd:13:a4:75:11: 29:26:70:56 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUDXVklvenSJm+EfY7w1G9GDMjwMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5 NUMwM0VGMDAeFw0yNjAyMjMwODU0NTBaFw0yNzAyMjIwODU5NTBaMDMxMTAvBgNV BAMTKDhGRDFGOEE1OTIwRDVENzRERkVBQUUxNTQyRTVCMTYxQjU3MTU5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QQP5FsORw54EhXrV8r6LSl0J Y+JseZrkkgP6o4zT5fVoEyGwAJS0n6OySsRLd2UinOUTal1UW/OVUJ1u5jWbfvk4 /dHFrh8wc40jYWgr87q1xs7TpKsKq2Osp9Rwjhd9B/nHt3qHEr9mCY+s+yd2Cw24 x4WO/EPvvZlikD7GF0YE9c/1GOvbKn43FbH1zZumJFk9XRiHaXB1ZBqfIPoi6vLQ P3MutBH3CESoEv2YVAgJsa8Hah+5n2Yn3QAxAztRDL1uWze46mwPDmM7ogAKyFFu cXQpgFDk0OZBwuKRn3lUIu0/7HUA/SV8z1hoKvOKURwA7TXuHhrng00kmHwPAgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUj9H4pZINXXTf6q4VQuWxYbVxWZswHwYDVR0j BBgwFoAUxz+3Az8jyVlY/PvlDkxlqpXAPvAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTlmODA4ZDItMWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2 MmZjLzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMwM0VGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvQzczRkI3MDMzRjIzQzk1OTU4RkNGQkU1MEU0QzY1QUE5NUMw M0VGMC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTlmODA4ZDIt MWYxNS00ZGYzLWI1MWUtZDU1YzUyM2I2MmZjLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MjMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDMxMzMzOTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAKgtOBwCyMA0GCSqGSIb3DQEBCwUAA4IBAQDJI010mkZ9x7NagRwOY4mC CK2EWSvDwSrh1rEg1OnAqR7KTjly8d2AnSKixO16reWVPgpY1SYBSP7ELaimfnb/ Tb9zeVrfRirGD/CPpPHZ+PHfV2pMmPJqhBZW/WhDlr5z57mNzT5uIMqOCNZXMhEM 0Hjwgv8v1AnZuIo0yEeGHux6NBH4SY14/nHPwx7UMclvThA4h97rkW+ESFAenBnb woSORpXJrnmPhSkZNJ6n02PG24GH3K+243p1prZ5rdg+n4wVsFLhFScjKqRb5CPO 7V0ZlH46ivlt7Jd+fLZH9PUyzljkv6WFzqqiB+ZPTa8QAFN7Zuyk3ROkdREpJnBW -----END CERTIFICATE-----Generated at Sun Mar 1 18:16:50 2026 by rpki-client