$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47326.roa File: AS47326.roa (raw, json) Hash identifier: boFFslywuccUGBcZ06pViq/KefyYBO/1ly6Ke/zZalc= Subject key identifier: 85:7B:27:46:F6:A4:AA:B4:9F:63:14:99:67:5E:4D:58:2B:AE:69:34 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 55E9CDCEAFA9343D847081479B4828960EC61354 Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47326.roa Signing time: Fri 05 Jun 2026 08:45:52 +0000 ROA not before: Fri 05 Jun 2026 08:40:52 +0000 ROA not after: Fri 04 Jun 2027 08:45:52 +0000 asID: 47326 IP address blocks: 2a07:54c6::/32 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e9:cd:ce:af:a9:34:3d:84:70:81:47:9b:48:28:96:0e:c6:13:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jun 5 08:40:52 2026 GMT Not After : Jun 4 08:45:52 2027 GMT Subject: CN=857B2746F6A4AAB49F631499675E4D582BAE6934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:d3:cf:ef:2e:7a:33:e3:cd:77:7e:6f:6d: 2f:b4:cd:ba:b0:ab:ae:c7:dd:ac:64:f9:9a:2b:1e: 82:58:28:d5:d5:69:0e:9b:56:21:50:c7:3b:af:7a: 72:95:3c:23:7c:83:62:db:7d:f6:5f:79:f4:24:2b: d3:e1:fd:35:14:ee:85:35:7c:82:e5:85:94:d9:0d: b6:8f:1a:87:57:c8:87:1c:5d:0e:72:27:a0:15:db: b0:5a:ec:3f:0c:94:8d:1e:a1:52:dd:89:78:b2:88: 41:44:aa:e8:99:48:b0:88:b9:0c:c0:da:7e:cd:a2: 8d:c8:80:c2:54:df:3d:64:b0:13:8a:9e:d7:e9:ca: f4:73:f9:aa:3c:91:86:ae:23:fb:ef:bb:95:95:99: f0:48:39:b6:13:4b:59:a0:34:a4:8a:ea:f6:25:da: 2e:bf:d7:cd:e2:f6:d6:2b:d2:ec:fa:fb:a4:22:ff: 0c:2b:1d:09:c3:c4:fc:7e:b2:00:51:56:ac:27:58: cf:26:eb:fa:49:67:70:ef:84:84:c1:81:75:91:13: 5b:b7:70:ce:55:7c:97:71:50:51:40:16:eb:52:a9: df:ab:c1:02:ad:71:80:00:f4:98:b2:80:3c:2c:9d: d3:b0:20:62:ca:d6:31:80:2f:1f:b5:4c:a4:b4:c7: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7B:27:46:F6:A4:AA:B4:9F:63:14:99:67:5E:4D:58:2B:AE:69:34 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS47326.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c6::/32 Signature Algorithm: sha256WithRSAEncryption 54:06:88:13:44:01:8f:29:f9:9f:17:04:dc:3a:8e:b6:42:c9: 47:84:e0:9f:8d:d2:51:f0:1d:55:13:95:80:4b:a0:5c:a8:db: 18:9c:fd:ff:20:de:3e:43:0c:df:51:97:ea:f1:81:4b:25:e4: b3:20:5d:a4:d3:24:1f:70:72:b5:ee:48:e5:90:02:9f:cd:5d: 18:24:35:17:ca:c3:5d:79:6f:38:7a:c1:7b:29:2f:5b:1e:71: 43:46:26:8b:3b:4b:52:76:20:6a:b0:4f:07:00:15:7f:2e:05: d3:25:ed:6f:0c:29:11:fa:25:6b:d4:cb:46:23:b6:a8:68:58: 39:ea:91:76:88:bb:e7:8b:6e:be:bb:3b:3c:ae:12:61:e5:98: 64:da:51:ba:32:d7:89:74:76:69:22:88:c7:cf:20:8f:78:ce: 10:da:6a:ce:4e:e2:d5:a7:fc:5e:bb:48:06:9d:00:6b:4e:38: e5:3a:07:89:fc:ff:57:cc:ea:fe:ff:55:62:87:07:65:33:c1: 12:f3:c3:43:93:3b:62:ec:4e:c9:cd:69:8c:f1:0c:c3:9f:56: d7:cd:22:63:79:08:32:17:98:b2:a1:3b:7a:f7:be:81:3d:5d: 00:c9:b0:24:e6:4f:76:fb:9e:2c:e1:21:c0:38:09:4c:30:e8: b3:ec:35:5d -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUVenNzq+pND2EcIFHm0golg7GE1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV BAMTKDg1N0IyNzQ2RjZBNEFBQjQ5RjYzMTQ5OTY3NUU0RDU4MkJBRTY5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83dPP7y56M+PNd35vbS+0zbqw q67H3axk+ZorHoJYKNXVaQ6bViFQxzuvenKVPCN8g2LbffZfefQkK9Ph/TUU7oU1 fILlhZTZDbaPGodXyIccXQ5yJ6AV27Ba7D8MlI0eoVLdiXiyiEFEquiZSLCIuQzA 2n7Noo3IgMJU3z1ksBOKntfpyvRz+ao8kYauI/vvu5WVmfBIObYTS1mgNKSK6vYl 2i6/183i9tYr0uz6+6Qi/wwrHQnDxPx+sgBRVqwnWM8m6/pJZ3DvhITBgXWRE1u3 cM5VfJdxUFFAFutSqd+rwQKtcYAA9JiygDwsndOwIGLK1jGALx+1TKS0x42tAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUhXsnRvakqrSfYxSZZ15NWCuuaTQwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNDczMjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqB1TG MA0GCSqGSIb3DQEBCwUAA4IBAQBUBogTRAGPKfmfFwTcOo62QslHhOCfjdJR8B1V E5WAS6BcqNsYnP3/IN4+QwzfUZfq8YFLJeSzIF2k0yQfcHK17kjlkAKfzV0YJDUX ysNdeW84esF7KS9bHnFDRiaLO0tSdiBqsE8HABV/LgXTJe1vDCkR+iVr1MtGI7ao aFg56pF2iLvni26+uzs8rhJh5Zhk2lG6MteJdHZpIojHzyCPeM4Q2mrOTuLVp/xe u0gGnQBrTjjlOgeJ/P9XzOr+/1VihwdlM8ES88NDkzti7E7JzWmM8QzDn1bXzSJj eQgyF5iyoTt6976BPV0AybAk5k92+54s4SHAOAlMMOiz7DVd -----END CERTIFICATE-----Generated at Sat Jun 13 09:26:12 2026 by rpki-client