$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: ZdaCYsoHSSWR/I5PfpXTEC74LAUCu/IQxWtNDjeYaUc= Subject key identifier: E1:FD:16:19:1E:2C:64:96:DE:C4:39:20:18:04:C6:0C:FD:B4:42:A3 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 2ABBB7BA432F81811F4DCB04C7BDDC5DD3DA5201 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:35 +0000 ROA not before: Wed 10 Jun 2026 09:35:35 +0000 ROA not after: Wed 09 Jun 2027 09:40:35 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bb:b7:ba:43:2f:81:81:1f:4d:cb:04:c7:bd:dc:5d:d3:da:52:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:35 2026 GMT Not After : Jun 9 09:40:35 2027 GMT Subject: CN=E1FD16191E2C6496DEC439201804C60CFDB442A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:31:e0:30:46:d1:f1:6d:62:21:07:7b:46: c6:98:93:ec:c6:d4:a0:7e:98:e6:a9:48:4c:c5:9d: 9e:94:77:ac:85:bf:90:27:40:5a:cd:d8:ca:8b:92: 54:86:a4:53:fd:f9:19:47:32:96:74:d5:9d:c3:38: 4e:28:6d:63:6a:dd:07:b0:87:3f:cf:31:e6:c5:6a: fe:09:96:db:34:bc:e7:e6:5c:1d:74:c1:91:58:06: 71:64:65:ab:11:13:0d:1e:16:55:e5:66:f8:f8:81: 77:8d:33:29:ac:af:b4:bb:03:6d:d1:cb:3f:93:aa: 7c:0b:24:35:ef:56:27:35:7c:67:a2:e5:28:c3:52: c7:a6:e7:93:65:36:2e:27:91:e1:42:3a:8e:bb:78: 49:a7:b8:6d:d5:d9:ea:00:07:dd:cf:a6:23:d4:80: d3:c2:65:f9:15:b4:42:e4:e9:56:88:9a:bf:10:66: 46:30:09:e2:cf:a0:63:2a:9e:e0:c2:c9:cf:eb:29: f9:19:f7:e2:ea:58:70:0f:e8:c5:25:a7:61:c4:92: d2:e5:b1:36:a7:b3:18:b9:14:87:8a:27:85:06:a7: 06:37:58:dd:d1:1a:ad:ba:c6:cf:c3:51:e8:91:42: 73:13:a9:fe:a0:b9:44:61:1d:10:32:05:65:fc:87: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FD:16:19:1E:2C:64:96:DE:C4:39:20:18:04:C6:0C:FD:B4:42:A3 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7d::/48 Signature Algorithm: sha256WithRSAEncryption c3:de:3b:21:42:0e:73:17:90:2d:02:52:72:38:af:f4:0f:be: a4:fb:4a:1d:84:a2:db:3b:51:28:38:ab:b7:aa:68:95:45:dc: 8c:5d:6d:65:84:cf:f4:a1:03:cf:7f:5c:37:88:0d:df:fa:d1: 42:90:82:96:e3:c4:80:a9:42:a3:4c:24:a3:c0:96:a5:2d:54: e8:db:53:54:b7:23:72:13:c9:90:38:a2:77:b8:41:b6:01:a8: 88:e1:15:32:0f:91:28:a9:d1:2c:f7:ad:97:4e:f1:e1:69:be: c9:27:7b:3e:37:4b:4d:34:89:72:73:51:82:a7:be:a8:6c:10: ec:e9:07:96:dc:f6:de:a4:b1:ed:7e:2f:83:f2:c5:ef:29:2e: d0:93:96:1c:59:7c:c6:a8:6a:06:71:2e:92:49:69:a5:89:70: d4:e9:fb:81:ae:50:94:53:65:94:cc:d4:6c:25:70:c6:e6:c3: 37:c4:9d:bc:37:ad:7e:c9:38:8b:4d:fc:9a:6b:c7:90:25:75: ba:4a:9a:dd:93:c2:2e:2e:8a:ac:8e:be:30:8a:3b:fc:03:f6: a8:37:75:71:32:cd:ed:82:4f:b7:06:cf:82:30:d9:a6:0d:07: df:62:81:14:59:7d:83:c6:55:62:a9:4e:e8:1e:34:82:cf:0f: ea:3b:16:aa -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUKru3ukMvgYEfTcsEx73cXdPaUgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzVaFw0yNzA2MDkwOTQwMzVaMDMxMTAvBgNV BAMTKEUxRkQxNjE5MUUyQzY0OTZERUM0MzkyMDE4MDRDNjBDRkRCNDQyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKzHgMEbR8W1iIQd7RsaYk+zG 1KB+mOapSEzFnZ6Ud6yFv5AnQFrN2MqLklSGpFP9+RlHMpZ01Z3DOE4obWNq3Qew hz/PMebFav4Jlts0vOfmXB10wZFYBnFkZasREw0eFlXlZvj4gXeNMymsr7S7A23R yz+TqnwLJDXvVic1fGei5SjDUsem55NlNi4nkeFCOo67eEmnuG3V2eoAB93PpiPU gNPCZfkVtELk6VaImr8QZkYwCeLPoGMqnuDCyc/rKfkZ9+LqWHAP6MUlp2HEktLl sTansxi5FIeKJ4UGpwY3WN3RGq26xs/DUeiRQnMTqf6guURhHRAyBWX8h7+lAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU4f0WGR4sZJbexDkgGATGDP20QqMwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP99MA0GCSqGSIb3DQEBCwUAA4IBAQDD 3jshQg5zF5AtAlJyOK/0D76k+0odhKLbO1EoOKu3qmiVRdyMXW1lhM/0oQPPf1w3 iA3f+tFCkIKW48SAqUKjTCSjwJalLVTo21NUtyNyE8mQOKJ3uEG2AaiI4RUyD5Eo qdEs962XTvHhab7JJ3s+N0tNNIlyc1GCp76obBDs6QeW3PbepLHtfi+D8sXvKS7Q k5YcWXzGqGoGcS6SSWmliXDU6fuBrlCUU2WUzNRsJXDG5sM3xJ28N61+yTiLTfya a8eQJXW6Sprdk8IuLoqsjr4wijv8A/aoN3VxMs3tgk+3Bs+CMNmmDQffYoEUWX2D xlViqU7oHjSCzw/qOxaq -----END CERTIFICATE-----Generated at Sat Jun 13 23:23:50 2026 by rpki-client