$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: +fGGZrWlnfQQmOHh82cPjXI/AqO47/pYdQ2wNZ+KDek= Subject key identifier: BC:43:D5:D7:A1:66:B1:01:A6:5A:E5:CD:1A:75:DA:40:28:83:8C:55 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 6D39AC528422457A1C950BAB1796CC0FB99E1363 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:35 +0000 ROA not before: Wed 10 Jun 2026 09:35:35 +0000 ROA not after: Wed 09 Jun 2027 09:40:35 +0000 asID: 203915 IP address blocks: 2a14:7580:ff72::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:39:ac:52:84:22:45:7a:1c:95:0b:ab:17:96:cc:0f:b9:9e:13:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:35 2026 GMT Not After : Jun 9 09:40:35 2027 GMT Subject: CN=BC43D5D7A166B101A65AE5CD1A75DA4028838C55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:ab:7a:74:44:3d:7c:60:fc:3f:27:00:6f: a0:f5:e4:a8:29:dd:10:05:88:f1:82:b1:a6:11:29: ce:dc:ac:26:9a:3d:d3:53:37:82:af:2a:11:19:3b: 24:64:a7:eb:24:dd:89:44:f7:c4:f3:8e:ec:24:87: a6:23:b8:17:f3:00:58:e3:07:af:64:9e:58:06:9a: 2a:f3:5c:a7:f0:c4:2f:f7:ce:3b:75:03:9d:48:39: 02:0d:1c:5c:af:d0:05:f6:c0:2f:28:79:a0:f8:f8: 89:9e:40:65:98:f5:59:1c:30:82:30:de:ac:3a:c9: 84:64:71:ef:da:06:3a:ab:0d:37:d7:eb:01:69:95: dc:b5:a4:9b:14:2d:25:04:95:7f:1d:f5:89:43:0c: f8:44:0b:cf:20:44:a1:33:ca:71:54:d6:07:b3:5e: dd:0a:df:f8:5e:55:37:fe:07:85:99:3b:e5:b7:2c: 68:27:fa:80:1d:bd:8e:47:c2:4e:5a:12:18:ff:b4: e9:30:97:71:15:b7:7f:d2:4e:52:90:6c:87:23:d5: 0e:eb:88:cb:09:62:14:59:c2:43:3e:c7:58:62:44: b5:c7:08:79:54:fe:60:f5:37:f7:75:aa:01:d9:be: 8e:42:f5:73:af:56:fc:13:d7:49:40:37:36:7d:d2: f0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:43:D5:D7:A1:66:B1:01:A6:5A:E5:CD:1A:75:DA:40:28:83:8C:55 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff72::/48 Signature Algorithm: sha256WithRSAEncryption 99:cd:5f:b3:3a:38:bc:da:de:c3:ad:ec:5c:c1:63:c7:74:85: fa:42:04:1a:5f:ac:78:b3:a3:a9:8d:49:8e:b6:4a:09:c2:14: 4c:6f:f8:25:54:19:77:bf:f2:44:9d:2f:eb:78:24:3f:c3:5c: cd:ff:02:e8:af:61:4f:8b:e9:5e:cd:d4:16:ed:42:5c:c5:98: eb:03:30:3f:01:a9:32:ca:29:44:2e:d5:ba:05:46:d5:af:f0: 79:42:97:b9:0b:07:96:ee:5d:78:dc:f0:e5:18:99:82:c8:98: 76:11:22:24:4d:a2:72:5a:55:45:4b:13:ab:de:4f:22:93:d6: d9:d0:63:26:9a:f3:ec:4d:6f:8f:6f:93:89:6e:7d:32:99:ec: e3:50:1a:89:e8:ad:d7:a5:bb:65:3d:02:6b:d5:64:a3:d9:1e: e8:2c:97:47:10:40:6b:70:79:30:38:b3:b3:7c:00:5a:0f:1a: c8:8d:86:81:b6:65:12:69:06:57:1a:f1:1a:62:a4:dc:56:dd: ed:14:60:cf:75:0e:37:9f:cb:9f:a8:97:b7:1d:07:43:98:5f: 8c:7e:2f:b2:9f:9a:fb:07:8a:ef:d8:65:c7:04:f4:15:74:74: 5a:90:f3:15:e5:ef:d7:9d:b5:75:fd:16:58:f3:22:9f:32:55: 39:60:00:5a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbTmsUoQiRXoclQurF5bMD7meE2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzVaFw0yNzA2MDkwOTQwMzVaMDMxMTAvBgNV BAMTKEJDNDNENUQ3QTE2NkIxMDFBNjVBRTVDRDFBNzVEQTQwMjg4MzhDNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTv6t6dEQ9fGD8PycAb6D15Kgp 3RAFiPGCsaYRKc7crCaaPdNTN4KvKhEZOyRkp+sk3YlE98Tzjuwkh6YjuBfzAFjj B69knlgGmirzXKfwxC/3zjt1A51IOQINHFyv0AX2wC8oeaD4+ImeQGWY9VkcMIIw 3qw6yYRkce/aBjqrDTfX6wFpldy1pJsULSUElX8d9YlDDPhEC88gRKEzynFU1gez Xt0K3/heVTf+B4WZO+W3LGgn+oAdvY5Hwk5aEhj/tOkwl3EVt3/STlKQbIcj1Q7r iMsJYhRZwkM+x1hiRLXHCHlU/mD1N/d1qgHZvo5C9XOvVvwT10lANzZ90vDfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUvEPV16FmsQGmWuXNGnXaQCiDjFUwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9yMA0GCSqGSIb3DQEBCwUAA4IBAQCZ zV+zOji82t7DrexcwWPHdIX6QgQaX6x4s6OpjUmOtkoJwhRMb/glVBl3v/JEnS/r eCQ/w1zN/wLor2FPi+lezdQW7UJcxZjrAzA/AakyyilELtW6BUbVr/B5Qpe5CweW 7l143PDlGJmCyJh2ESIkTaJyWlVFSxOr3k8ik9bZ0GMmmvPsTW+Pb5OJbn0ymezj UBqJ6K3XpbtlPQJr1WSj2R7oLJdHEEBrcHkwOLOzfABaDxrIjYaBtmUSaQZXGvEa YqTcVt3tFGDPdQ43n8ufqJe3HQdDmF+Mfi+yn5r7B4rv2GXHBPQVdHRakPMV5e/X nbV1/RZY8yKfMlU5YABa -----END CERTIFICATE-----Generated at Sun Jun 14 04:27:05 2026 by rpki-client