$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: Fqd3S2MbsOHclWEZXlewpnT8bnKZVvDGIgL3ze+YoHU= Subject key identifier: 5F:C6:0E:B7:40:AA:3A:53:E2:19:98:4B:02:E1:18:FE:70:2F:B2:24 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 1EEE5DD14F80F136EDBA02BB656B029716A1D71D Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:34 +0000 ROA not before: Wed 10 Jun 2026 09:35:34 +0000 ROA not after: Wed 09 Jun 2027 09:40:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff71::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ee:5d:d1:4f:80:f1:36:ed:ba:02:bb:65:6b:02:97:16:a1:d7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:34 2026 GMT Not After : Jun 9 09:40:34 2027 GMT Subject: CN=5FC60EB740AA3A53E219984B02E118FE702FB224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a5:c1:d9:31:3d:c6:ae:5c:44:d7:b3:89:d6: 92:d3:b9:a6:d2:ff:92:a4:dc:92:33:c6:72:e7:95: 81:60:a2:6e:1e:55:4d:4b:dd:3f:58:c3:e3:33:5b: 49:6c:07:ec:4b:09:0b:cf:45:7a:f1:05:ec:4f:de: 30:c9:64:b4:44:90:c6:bc:62:bc:ed:85:b6:d5:83: b3:32:2d:f7:d5:ce:92:a7:d4:91:cc:99:36:39:05: 77:b1:23:3f:90:36:41:5e:7b:f4:ea:7a:d8:e6:9d: b3:2c:58:dc:30:8a:88:84:5c:ca:70:1a:db:6b:25: 0d:b2:9f:30:08:1a:9e:c8:a9:14:1d:0b:a2:bb:ef: c6:92:14:9b:b4:b5:99:11:9c:83:03:30:81:a8:70: 74:6c:f5:19:89:ea:45:f6:f3:e6:c0:2d:09:05:86: 5c:f2:29:77:23:2f:1c:e4:5c:4f:75:b8:8c:5e:0e: 92:c8:1d:03:1d:be:f4:79:6d:b2:b5:58:58:bd:d4: ad:51:66:ee:a7:d5:a0:4c:9a:54:bb:c7:ad:81:fe: 40:fe:47:7d:62:59:5c:c2:15:13:39:ae:18:c5:73: 5d:ec:b8:c5:1e:ad:4e:ae:f6:19:ec:b4:eb:d5:d0: 49:82:cb:60:91:62:56:9f:26:39:9e:90:79:28:05: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C6:0E:B7:40:AA:3A:53:E2:19:98:4B:02:E1:18:FE:70:2F:B2:24 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff71::/48 Signature Algorithm: sha256WithRSAEncryption 9d:16:be:79:0f:2d:b8:50:72:fa:49:79:d3:b5:2c:61:14:ab: 63:52:0e:1a:b9:b5:0c:78:fe:d1:51:07:ce:fe:79:30:c5:5a: 52:44:2b:97:a8:25:26:51:8c:c5:d2:3f:41:df:64:fc:52:7e: 2e:00:a6:23:1e:42:27:84:be:14:e8:44:f5:3e:3a:a2:c5:26: dc:62:79:46:a6:6e:7a:9a:29:e9:76:72:be:8e:4a:82:fd:7a: 4e:27:6d:10:99:5a:15:76:b4:48:a7:00:cf:36:4c:a6:2f:a9: 68:48:20:1c:1d:c5:52:e8:06:35:c4:51:e9:9e:c7:eb:7a:78: 3e:30:7c:61:4f:2b:5d:92:5f:19:03:4f:1f:d1:89:0d:e5:9d: 78:c3:82:09:97:ce:3b:1e:e5:1e:94:44:4f:c7:1a:37:87:14: e1:4a:e6:ab:f8:a1:7e:2e:c8:4e:8a:66:58:71:72:77:3d:7f: 73:62:06:d7:4b:58:16:f3:bc:e6:19:d3:1a:c0:05:ec:7a:eb: 02:5d:47:fd:e6:e4:63:23:35:26:ce:9c:03:51:ae:81:74:5e: 6c:58:e9:d1:bc:71:22:66:d6:80:95:f7:a0:0c:24:26:60:83: ca:11:e8:b8:67:4d:42:34:80:ee:d6:30:98:2d:85:c6:eb:65: 33:76:20:e3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHu5d0U+A8TbtugK7ZWsClxah1x0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzRaFw0yNzA2MDkwOTQwMzRaMDMxMTAvBgNV BAMTKDVGQzYwRUI3NDBBQTNBNTNFMjE5OTg0QjAyRTExOEZFNzAyRkIyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSpcHZMT3GrlxE17OJ1pLTuabS /5Kk3JIzxnLnlYFgom4eVU1L3T9Yw+MzW0lsB+xLCQvPRXrxBexP3jDJZLREkMa8 YrzthbbVg7MyLffVzpKn1JHMmTY5BXexIz+QNkFee/TqetjmnbMsWNwwioiEXMpw GttrJQ2ynzAIGp7IqRQdC6K778aSFJu0tZkRnIMDMIGocHRs9RmJ6kX28+bALQkF hlzyKXcjLxzkXE91uIxeDpLIHQMdvvR5bbK1WFi91K1RZu6n1aBMmlS7x62B/kD+ R31iWVzCFRM5rhjFc13suMUerU6u9hnstOvV0EmCy2CRYlafJjmekHkoBYVHAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUX8YOt0CqOlPiGZhLAuEY/nAvsiQwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9xMA0GCSqGSIb3DQEBCwUAA4IBAQCd Fr55Dy24UHL6SXnTtSxhFKtjUg4aubUMeP7RUQfO/nkwxVpSRCuXqCUmUYzF0j9B 32T8Un4uAKYjHkInhL4U6ET1PjqixSbcYnlGpm56minpdnK+jkqC/XpOJ20QmVoV drRIpwDPNkymL6loSCAcHcVS6AY1xFHpnsfreng+MHxhTytdkl8ZA08f0YkN5Z14 w4IJl847HuUelERPxxo3hxThSuar+KF+LshOimZYcXJ3PX9zYgbXS1gW87zmGdMa wAXseusCXUf95uRjIzUmzpwDUa6BdF5sWOnRvHEiZtaAlfegDCQmYIPKEei4Z01C NIDu1jCYLYXG62UzdiDj -----END CERTIFICATE-----Generated at Sun Jun 14 03:07:40 2026 by rpki-client