$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: pYAR74KeV/ydFt3H/yMvWyWHHe92bO+vR47SO89EW90= Subject key identifier: 26:E7:2E:91:5D:85:16:48:3E:2B:2F:B1:24:E2:A2:6A:EB:B4:B4:AB Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 2452B51F4E6DC96454EA7CCBF7B758A5DC064B03 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:34 +0000 ROA not before: Wed 10 Jun 2026 09:35:34 +0000 ROA not after: Wed 09 Jun 2027 09:40:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff79::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:52:b5:1f:4e:6d:c9:64:54:ea:7c:cb:f7:b7:58:a5:dc:06:4b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:34 2026 GMT Not After : Jun 9 09:40:34 2027 GMT Subject: CN=26E72E915D8516483E2B2FB124E2A26AEBB4B4AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d8:9d:0d:53:d6:8e:72:3c:c5:b0:dd:3d:73: 14:0a:0b:b4:b3:74:38:57:97:3c:cf:98:26:7b:6b: 0f:71:0b:dc:57:b6:b4:c7:bd:eb:07:60:75:3d:a6: 76:50:f8:0a:35:e5:f5:bf:5b:80:e8:d8:45:d9:d5: 97:00:3a:09:e6:e8:93:a7:d9:1c:39:c2:7c:bd:d9: b4:f1:ab:09:21:15:d3:3e:61:c1:6b:b1:8f:a7:43: e1:83:17:02:7d:68:1d:b0:bb:b2:5c:33:a9:2b:6a: 6a:7d:00:7c:02:67:bb:6b:08:4f:05:1b:35:b9:17: 97:73:bb:51:fd:dd:9e:0f:5f:ce:d5:3d:ad:00:55: 63:db:98:79:42:be:32:3f:35:52:fe:a2:23:4b:bf: 96:5b:26:ed:d9:a2:ed:15:a8:8a:6d:0b:fb:5c:31: 54:b5:af:2b:26:52:c8:5f:02:d1:c2:3e:5d:43:51: 50:61:c3:93:fc:27:48:49:d1:c2:e4:61:c7:fc:a3: 2d:a1:f8:cc:85:c3:95:0c:7a:f4:9b:9f:af:4b:34: 97:0f:e1:17:13:51:b7:7d:ff:8d:86:f0:9e:02:60: 55:c9:8b:ca:93:f7:28:fc:9b:61:cb:f0:3c:0b:b2: 86:9f:b9:f8:51:8d:40:df:fa:9c:6f:bc:10:b0:c8: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E7:2E:91:5D:85:16:48:3E:2B:2F:B1:24:E2:A2:6A:EB:B4:B4:AB X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff79::/48 Signature Algorithm: sha256WithRSAEncryption 13:88:50:1d:5b:5f:10:17:cd:87:80:68:7a:f1:51:9b:e4:6e: 68:75:33:b7:8a:04:0b:e5:0f:b5:92:fe:83:33:55:e1:c7:85: a1:95:41:57:ec:e5:c1:14:3f:b6:22:7a:ce:46:ea:c8:67:7e: ef:75:59:f3:91:90:0e:32:fc:d6:4b:11:01:d6:de:b8:ed:28: eb:87:77:fc:a4:a5:c5:34:38:2f:e9:a7:94:bd:56:1f:65:05: 68:56:7a:02:bc:90:5a:28:b1:35:9f:11:cd:99:c0:07:7e:3b: 13:ff:7f:3f:99:33:4d:04:b2:e5:0a:f1:69:67:94:b3:1e:0d: 8b:7b:ab:3a:71:71:cb:1d:1b:b6:73:d4:f9:d7:5f:ee:7e:ae: e4:ae:9d:19:96:9d:82:72:b3:23:9b:d9:ac:2c:d0:a7:d6:bf: 53:8f:f9:ab:d2:6c:9e:41:5c:62:02:17:a0:7b:82:50:43:74: b6:53:e8:98:89:65:0a:ce:36:17:7d:bc:92:1d:7c:07:3e:fe: 86:5d:fc:3a:9b:e8:29:02:64:4a:11:38:de:1a:68:a6:a2:31: fe:f0:d9:93:b3:ec:d0:59:1d:ec:4e:90:93:4f:36:91:f6:58: de:bd:5b:65:1f:ef:e4:74:39:03:22:0a:27:b5:c1:6a:54:a5: a4:f6:c6:65 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJFK1H05tyWRU6nzL97dYpdwGSwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzRaFw0yNzA2MDkwOTQwMzRaMDMxMTAvBgNV BAMTKDI2RTcyRTkxNUQ4NTE2NDgzRTJCMkZCMTI0RTJBMjZBRUJCNEI0QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2J0NU9aOcjzFsN09cxQKC7Sz dDhXlzzPmCZ7aw9xC9xXtrTHvesHYHU9pnZQ+Ao15fW/W4Do2EXZ1ZcAOgnm6JOn 2Rw5wny92bTxqwkhFdM+YcFrsY+nQ+GDFwJ9aB2wu7JcM6kramp9AHwCZ7trCE8F GzW5F5dzu1H93Z4PX87VPa0AVWPbmHlCvjI/NVL+oiNLv5ZbJu3Zou0VqIptC/tc MVS1rysmUshfAtHCPl1DUVBhw5P8J0hJ0cLkYcf8oy2h+MyFw5UMevSbn69LNJcP 4RcTUbd9/42G8J4CYFXJi8qT9yj8m2HL8DwLsoafufhRjUDf+pxvvBCwyGoNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUJucukV2FFkg+Ky+xJOKiauu0tKswHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP95MA0GCSqGSIb3DQEBCwUAA4IBAQAT iFAdW18QF82HgGh68VGb5G5odTO3igQL5Q+1kv6DM1Xhx4WhlUFX7OXBFD+2InrO RurIZ37vdVnzkZAOMvzWSxEB1t647Sjrh3f8pKXFNDgv6aeUvVYfZQVoVnoCvJBa KLE1nxHNmcAHfjsT/38/mTNNBLLlCvFpZ5SzHg2Le6s6cXHLHRu2c9T511/ufq7k rp0Zlp2CcrMjm9msLNCn1r9Tj/mr0myeQVxiAhege4JQQ3S2U+iYiWUKzjYXfbyS HXwHPv6GXfw6m+gpAmRKETjeGmimojH+8NmTs+zQWR3sTpCTTzaR9ljevVtlH+/k dDkDIgontcFqVKWk9sZl -----END CERTIFICATE-----Generated at Sun Jun 14 00:15:57 2026 by rpki-client