$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: 8og23EO/3Ia44WrUwjHaKKbFmQpT/jNLPSJPJq4zzQo= Subject key identifier: 93:BE:DC:30:3C:61:89:78:F3:90:88:60:54:E6:10:55:DC:D4:94:77 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 282D92732B3BEF6D6203B8C42302B1D70FB095EF Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:34 +0000 ROA not before: Wed 10 Jun 2026 09:35:34 +0000 ROA not after: Wed 09 Jun 2027 09:40:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2d:92:73:2b:3b:ef:6d:62:03:b8:c4:23:02:b1:d7:0f:b0:95:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:34 2026 GMT Not After : Jun 9 09:40:34 2027 GMT Subject: CN=93BEDC303C618978F390886054E61055DCD49477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:e2:b1:6b:53:6d:80:fd:d1:09:f1:79:47: 8b:56:d6:fd:57:48:3f:75:69:84:56:ea:92:9f:50: c2:0f:fd:26:78:d2:f7:27:bf:06:15:3a:b3:ba:09: 05:0d:e1:23:48:19:58:c2:8c:7a:1e:5c:b1:28:42: ff:75:5b:16:25:f0:fa:62:ec:86:42:f5:ca:04:cc: fb:77:84:a0:5e:db:31:e2:25:2e:02:44:ac:08:67: 65:1a:ce:fd:ae:23:14:a1:27:65:22:c7:b8:5f:d3: 9e:71:d6:c4:80:29:72:6d:07:89:6f:da:17:3a:6e: da:b9:27:60:d2:c4:18:b2:29:5d:83:d0:82:af:65: c0:56:9e:15:20:d8:1f:59:03:83:52:da:0f:74:4b: 5d:36:5e:e3:91:d4:43:e3:6c:18:56:c3:c5:b6:f5: 65:04:fc:6d:51:02:52:87:b1:34:e0:59:f9:5a:42: 5c:6d:26:3c:c6:df:16:22:94:50:ad:83:4a:53:d9: ed:4c:6e:58:c7:33:7a:21:96:d6:b3:6c:53:f0:22: 1e:e7:1f:a6:14:9b:ac:c3:b9:3c:f9:09:53:86:e3: bc:38:ef:fa:98:5f:67:9f:7f:53:87:43:71:85:38: 78:30:a5:2a:78:e8:74:3f:f9:57:a1:ad:8e:fa:7d: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:DC:30:3C:61:89:78:F3:90:88:60:54:E6:10:55:DC:D4:94:77 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7b::/48 Signature Algorithm: sha256WithRSAEncryption bf:56:f9:7f:cd:33:d6:93:6c:e2:2d:71:83:e2:ba:3f:e2:56: 1f:38:6b:de:10:88:ee:5e:e0:d6:7a:65:d0:f7:b7:45:85:13: e8:e8:4e:ba:6b:42:54:34:72:c4:08:34:d1:ed:48:77:68:6b: d2:51:e2:ba:ed:7c:34:7e:1e:a4:9b:86:0c:66:f4:db:b0:a4: 40:a5:88:67:1b:1a:e4:7b:1e:f2:00:84:ee:56:98:3b:1a:a6: 8f:33:35:f8:6d:77:78:50:4c:7c:4b:ae:3f:7a:25:4e:a5:0a: d0:6a:d2:2c:2a:a4:24:ab:c6:ec:29:23:af:81:8b:bd:e0:8e: b2:e8:5b:9f:38:06:1a:7e:dc:c6:bb:8d:4a:b0:16:5b:57:61: 24:05:42:90:22:81:b5:c6:df:80:6e:ce:a4:fc:7e:22:3b:89: f1:25:ee:db:b5:49:a3:08:91:37:cf:28:63:18:df:41:8a:74: 45:d0:b0:f6:ee:f8:4e:4d:c0:77:ff:34:42:a5:50:74:2d:c0: bf:52:2b:01:b8:a9:ee:51:1a:86:56:7d:8a:57:8b:bf:92:09: 9a:24:d0:68:91:e8:cc:d5:c2:0d:0e:72:02:2f:58:9e:ef:02: 7c:86:c3:98:6b:ef:08:01:92:8c:0e:56:07:c0:50:80:da:a5: 46:b8:54:36 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUKC2Scys7721iA7jEIwKx1w+wle8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzRaFw0yNzA2MDkwOTQwMzRaMDMxMTAvBgNV BAMTKDkzQkVEQzMwM0M2MTg5NzhGMzkwODg2MDU0RTYxMDU1RENENDk0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAy+Kxa1NtgP3RCfF5R4tW1v1X SD91aYRW6pKfUMIP/SZ40vcnvwYVOrO6CQUN4SNIGVjCjHoeXLEoQv91WxYl8Ppi 7IZC9coEzPt3hKBe2zHiJS4CRKwIZ2Uazv2uIxShJ2Uix7hf055x1sSAKXJtB4lv 2hc6btq5J2DSxBiyKV2D0IKvZcBWnhUg2B9ZA4NS2g90S102XuOR1EPjbBhWw8W2 9WUE/G1RAlKHsTTgWflaQlxtJjzG3xYilFCtg0pT2e1MbljHM3ohltazbFPwIh7n H6YUm6zDuTz5CVOG47w47/qYX2eff1OHQ3GFOHgwpSp46HQ/+VehrY76fcH1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUk77cMDxhiXjzkIhgVOYQVdzUlHcwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP97MA0GCSqGSIb3DQEBCwUAA4IBAQC/ Vvl/zTPWk2ziLXGD4ro/4lYfOGveEIjuXuDWemXQ97dFhRPo6E66a0JUNHLECDTR 7Uh3aGvSUeK67Xw0fh6km4YMZvTbsKRApYhnGxrkex7yAITuVpg7GqaPMzX4bXd4 UEx8S64/eiVOpQrQatIsKqQkq8bsKSOvgYu94I6y6FufOAYaftzGu41KsBZbV2Ek BUKQIoG1xt+Abs6k/H4iO4nxJe7btUmjCJE3zyhjGN9BinRF0LD27vhOTcB3/zRC pVB0LcC/UisBuKnuURqGVn2KV4u/kgmaJNBokejM1cINDnICL1ie7wJ8hsOYa+8I AZKMDlYHwFCA2qVGuFQ2 -----END CERTIFICATE-----Generated at Sun Jun 14 01:41:03 2026 by rpki-client