$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: oYu59g7cKHhApVpkgqRTnw9jfrdNbp5kP9+u0to/GDc= Subject key identifier: 5A:57:B5:47:FA:6C:AA:90:49:1B:DD:31:E1:1F:FF:CF:C8:88:B6:BD Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 3CCE3AF1C181C4CE599CF176C8753BE5FBE01819 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:34 +0000 ROA not before: Wed 10 Jun 2026 09:35:34 +0000 ROA not after: Wed 09 Jun 2027 09:40:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ce:3a:f1:c1:81:c4:ce:59:9c:f1:76:c8:75:3b:e5:fb:e0:18:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:34 2026 GMT Not After : Jun 9 09:40:34 2027 GMT Subject: CN=5A57B547FA6CAA90491BDD31E11FFFCFC888B6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:88:00:3b:81:9c:e1:18:ab:59:41:b2:f2: 39:5c:f7:4e:37:8e:43:d0:ae:cc:6c:bf:59:ce:87: 33:48:63:b8:a3:7a:85:00:97:1c:f7:f8:75:e6:3c: 20:e8:25:17:f5:3e:d7:de:5d:8d:bd:1c:14:9e:77: 4c:2f:24:8f:72:33:16:52:6b:db:9c:d7:84:9e:07: 84:3b:d4:31:6c:3d:d4:04:b8:f0:89:a6:62:d8:57: 0f:6c:a4:a2:c3:c9:79:e3:65:9f:74:b0:41:11:a4: 94:25:37:43:4e:f6:6f:9c:9a:51:c4:f6:79:d6:5f: 9f:3a:76:5c:3b:eb:57:3a:26:2e:2e:14:41:3b:93: d9:f8:d4:9e:b3:eb:9a:30:21:93:95:b1:21:ff:df: 14:0f:bf:94:21:38:40:10:98:a3:fa:aa:b9:34:44: 07:e6:b1:35:42:75:2c:e4:c6:b5:1b:6c:b2:85:3f: 08:0a:99:e0:15:89:56:dd:c6:e5:3e:0d:9d:7d:ab: 6e:08:8c:38:87:74:78:ab:d8:54:16:99:b1:4a:66: 56:ed:af:d2:25:f5:d7:61:31:f2:70:35:26:19:3c: d9:e9:08:75:d4:19:b3:87:61:7c:b7:07:6e:fd:81: ef:1c:0c:ec:62:28:c9:a1:bf:70:bf:58:ec:8d:54: 9e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:57:B5:47:FA:6C:AA:90:49:1B:DD:31:E1:1F:FF:CF:C8:88:B6:BD X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7c::/48 Signature Algorithm: sha256WithRSAEncryption 81:40:ad:53:69:d8:67:35:d7:a0:83:e0:3e:11:ad:4a:f2:30: cf:73:90:89:98:2f:cc:c0:61:8e:16:ca:f7:ca:5d:2e:d5:8d: 68:3e:a7:ff:8c:a6:23:ed:3c:de:33:da:df:4d:68:51:47:6d: 4c:ef:84:d4:7c:54:ec:c7:e5:68:e4:20:ca:56:26:8c:91:25: 74:c6:4a:3d:38:a1:c2:bc:05:b4:6b:b7:bc:29:24:58:ee:79: eb:c7:b1:4e:17:b5:f0:f6:93:4b:bc:da:05:61:64:bb:c9:92: b0:48:8c:4d:f0:4e:a4:8e:ff:4b:7d:e3:22:9d:b3:a7:5c:fa: 7f:76:ff:e9:84:17:dc:29:5a:cc:73:e5:7e:37:36:28:40:41: cd:48:cf:97:40:c3:b6:d3:2b:78:96:88:9b:c3:cb:97:49:74: 5a:a1:20:c6:7e:68:c3:01:1f:98:67:90:11:e1:10:05:a1:e2: 5c:e9:86:69:1f:53:a8:b8:04:0f:e9:5c:ee:54:c8:c7:c1:cb: d5:5e:cd:55:9e:d9:1c:82:26:c0:3a:93:ab:2f:c8:98:00:0e: 2b:b3:bb:2b:99:b7:6b:a7:61:31:5c:ee:41:ef:45:0d:39:cc: e3:3f:a9:bc:fe:bc:a8:b9:f0:15:36:04:cb:ec:d7:60:6e:f8: fa:c7:8d:bf -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPM468cGBxM5ZnPF2yHU75fvgGBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzRaFw0yNzA2MDkwOTQwMzRaMDMxMTAvBgNV BAMTKDVBNTdCNTQ3RkE2Q0FBOTA0OTFCREQzMUUxMUZGRkNGQzg4OEI2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQYgAO4Gc4RirWUGy8jlc9043 jkPQrsxsv1nOhzNIY7ijeoUAlxz3+HXmPCDoJRf1PtfeXY29HBSed0wvJI9yMxZS a9uc14SeB4Q71DFsPdQEuPCJpmLYVw9spKLDyXnjZZ90sEERpJQlN0NO9m+cmlHE 9nnWX586dlw761c6Ji4uFEE7k9n41J6z65owIZOVsSH/3xQPv5QhOEAQmKP6qrk0 RAfmsTVCdSzkxrUbbLKFPwgKmeAViVbdxuU+DZ19q24IjDiHdHir2FQWmbFKZlbt r9Il9ddhMfJwNSYZPNnpCHXUGbOHYXy3B279ge8cDOxiKMmhv3C/WOyNVJ5zAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUWle1R/psqpBJG90x4R//z8iItr0wHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP98MA0GCSqGSIb3DQEBCwUAA4IBAQCB QK1TadhnNdegg+A+Ea1K8jDPc5CJmC/MwGGOFsr3yl0u1Y1oPqf/jKYj7TzeM9rf TWhRR21M74TUfFTsx+Vo5CDKViaMkSV0xko9OKHCvAW0a7e8KSRY7nnrx7FOF7Xw 9pNLvNoFYWS7yZKwSIxN8E6kjv9LfeMinbOnXPp/dv/phBfcKVrMc+V+NzYoQEHN SM+XQMO20yt4loibw8uXSXRaoSDGfmjDAR+YZ5AR4RAFoeJc6YZpH1OouAQP6Vzu VMjHwcvVXs1VntkcgibAOpOrL8iYAA4rs7srmbdrp2ExXO5B70UNOczjP6m8/ryo ufAVNgTL7Ndgbvj6x42/ -----END CERTIFICATE-----Generated at Sat Jun 13 23:11:13 2026 by rpki-client