$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: /TSCFxq1k6Mu748jZoN0Eo5Sjpn+cziXXXUhsucoLNg= Subject key identifier: 77:C3:34:D5:34:18:37:F8:A6:29:87:F0:2C:28:7E:D9:4C:38:6A:35 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 68210999A5424EE344DF0986A9C46C34070C06F3 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:34 +0000 ROA not before: Wed 10 Jun 2026 09:35:34 +0000 ROA not after: Wed 09 Jun 2027 09:40:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff70::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:21:09:99:a5:42:4e:e3:44:df:09:86:a9:c4:6c:34:07:0c:06:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:34 2026 GMT Not After : Jun 9 09:40:34 2027 GMT Subject: CN=77C334D5341837F8A62987F02C287ED94C386A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:2b:b4:6f:07:af:58:23:eb:c1:f7:52:a0: 32:2b:77:e7:bd:1c:46:8e:4e:db:cc:f5:c1:c7:29: 7b:1a:c3:97:8c:a8:c2:6b:1c:6a:0e:ee:38:9f:41: 6c:f1:2f:a7:1e:88:f4:11:82:d0:36:ac:06:22:2d: d8:b2:aa:cb:15:c0:c6:28:6b:37:0e:c6:b1:df:cc: f0:c0:6c:41:3a:d4:80:61:81:50:88:8a:a7:ce:6b: 8f:8d:ce:b1:7c:c5:aa:e3:ec:9d:18:a1:f4:f3:38: c0:2d:94:96:c6:94:a4:fb:25:fd:08:9a:94:dd:c8: 2a:67:5a:9e:f6:19:96:10:c6:ec:ab:55:cc:bb:a2: 91:29:92:2b:04:0d:d6:c0:1c:a2:6e:82:87:d8:41: bc:42:d5:7f:a7:8f:6d:5b:de:9d:38:5a:68:29:f1: 0b:c5:9b:f7:fb:32:7d:c9:35:7b:94:8b:02:37:65: 15:97:3c:8e:63:29:4a:aa:75:f3:99:12:e9:63:0e: ad:60:8c:e1:1e:1e:f9:9f:ca:b9:a6:07:8f:c7:82: 70:34:93:ea:0f:8d:fc:46:c3:93:04:fc:93:4d:63: b1:27:40:b7:76:98:f2:7a:63:f4:a7:4d:8e:b5:8b: e7:4e:10:a6:4a:bf:96:9e:cf:45:8c:4a:61:69:c2: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C3:34:D5:34:18:37:F8:A6:29:87:F0:2C:28:7E:D9:4C:38:6A:35 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff70::/48 Signature Algorithm: sha256WithRSAEncryption 1c:b3:5d:bc:0c:fc:d7:6f:0b:69:e7:4d:73:19:2f:6b:ab:25: 68:bf:c2:98:1f:48:0d:dc:2e:f2:3d:36:13:3a:b4:bd:8f:5a: 4b:8e:89:1f:8f:d6:c7:93:c2:62:d1:64:e1:35:db:4c:c5:c4: 82:d9:5f:f6:fa:09:59:cd:4e:eb:7e:a6:f1:9f:5d:10:39:b8: 64:b8:8c:42:d4:af:d5:f7:73:53:f9:a4:f4:a6:3d:e4:cd:f3: ed:af:91:cb:a5:af:b0:12:63:d8:97:df:0c:c8:8a:96:96:91: aa:e2:a2:7a:9e:99:24:3d:ab:3e:eb:07:f5:86:91:03:ca:cb: 66:0a:ad:75:c6:97:0b:70:d3:ac:0a:7c:29:a8:bb:02:ca:24: fd:e6:32:4f:98:00:de:fa:b6:14:d2:d2:80:9d:c8:62:a4:b9: 40:2d:74:9d:ae:59:95:10:b7:b7:fb:0e:cb:ee:ca:dc:92:fe: 11:2f:33:73:0f:fb:61:7b:40:5d:40:04:ac:67:21:e3:6b:25: 5a:89:45:fe:e3:8b:1c:e6:21:d4:53:81:5c:76:34:25:af:57: e0:b4:36:fe:57:d7:9e:1c:2e:1f:14:49:39:86:33:80:d3:c8: 30:a8:ff:92:47:cf:10:a2:2c:f3:1f:f4:46:9b:1e:5c:01:64: 61:db:51:fe -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUaCEJmaVCTuNE3wmGqcRsNAcMBvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzRaFw0yNzA2MDkwOTQwMzRaMDMxMTAvBgNV BAMTKDc3QzMzNEQ1MzQxODM3RjhBNjI5ODdGMDJDMjg3RUQ5NEMzODZBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayyu0bwevWCPrwfdSoDIrd+e9 HEaOTtvM9cHHKXsaw5eMqMJrHGoO7jifQWzxL6ceiPQRgtA2rAYiLdiyqssVwMYo azcOxrHfzPDAbEE61IBhgVCIiqfOa4+NzrF8xarj7J0YofTzOMAtlJbGlKT7Jf0I mpTdyCpnWp72GZYQxuyrVcy7opEpkisEDdbAHKJugofYQbxC1X+nj21b3p04Wmgp 8QvFm/f7Mn3JNXuUiwI3ZRWXPI5jKUqqdfOZEuljDq1gjOEeHvmfyrmmB4/HgnA0 k+oPjfxGw5ME/JNNY7EnQLd2mPJ6Y/SnTY61i+dOEKZKv5aez0WMSmFpwlKJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUd8M01TQYN/imKYfwLCh+2Uw4ajUwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9wMA0GCSqGSIb3DQEBCwUAA4IBAQAc s128DPzXbwtp501zGS9rqyVov8KYH0gN3C7yPTYTOrS9j1pLjokfj9bHk8Ji0WTh NdtMxcSC2V/2+glZzU7rfqbxn10QObhkuIxC1K/V93NT+aT0pj3kzfPtr5HLpa+w EmPYl98MyIqWlpGq4qJ6npkkPas+6wf1hpEDystmCq11xpcLcNOsCnwpqLsCyiT9 5jJPmADe+rYU0tKAnchipLlALXSdrlmVELe3+w7L7srckv4RLzNzD/the0BdQASs ZyHjayVaiUX+44sc5iHUU4FcdjQlr1fgtDb+V9eeHC4fFEk5hjOA08gwqP+SR88Q oizzH/RGmx5cAWRh21H+ -----END CERTIFICATE-----Generated at Sun Jun 14 03:13:22 2026 by rpki-client