$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: pc5v6qtoIv5YaFeB01kPphqJyZS0iflHilTdG3JkLMM= Subject key identifier: 51:A4:E2:C0:9C:93:1A:0A:95:74:5A:49:1C:46:F5:68:C1:7B:A8:0B Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 244916333F6857D7F23052DDD20D46A28337109C Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:34 +0000 ROA not before: Wed 10 Jun 2026 09:35:34 +0000 ROA not after: Wed 09 Jun 2027 09:40:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:49:16:33:3f:68:57:d7:f2:30:52:dd:d2:0d:46:a2:83:37:10:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:34 2026 GMT Not After : Jun 9 09:40:34 2027 GMT Subject: CN=51A4E2C09C931A0A95745A491C46F568C17BA80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:23:8b:31:46:6c:4a:d4:3c:71:39:3d:fd: 38:31:34:b0:4c:ec:ba:7a:19:66:4e:b4:87:74:91: f6:0d:9c:d8:41:ad:8f:b7:c8:1f:87:5e:43:b5:6f: 9d:a2:c2:b1:ed:87:10:71:c3:32:56:72:3c:b7:b0: f2:28:45:85:53:64:c3:37:c9:a2:02:5f:a5:79:4f: c1:e2:bc:a9:e2:86:a4:ca:c7:e5:6c:36:56:9f:a4: f3:3e:db:de:fb:97:d3:ea:75:dd:e1:b4:95:a3:77: 28:d9:80:6f:33:23:88:16:03:79:46:71:eb:35:e1: f1:36:f3:8c:40:87:2f:bc:12:f2:17:aa:e7:fb:f4: 0c:0f:6b:24:ca:b0:95:83:fe:7d:66:aa:62:bc:1f: 98:98:4a:fc:43:29:d8:b1:45:fe:3e:7e:6b:79:62: e9:e2:fe:f8:81:56:8d:60:5b:fd:3e:ef:56:4c:42: e3:55:0b:88:5b:93:4f:7e:81:ea:5e:9c:0e:29:73: 0b:7d:9a:3c:64:f1:7c:8a:74:38:68:7e:88:53:a6: 27:15:5c:a9:35:a3:fc:e1:5d:5a:66:87:ea:d8:2f: 2f:8a:25:61:89:d7:e3:df:18:9f:b5:74:f4:c9:43: f8:68:a4:f4:c9:4c:90:fc:76:ed:4f:45:65:c6:9c: 8d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A4:E2:C0:9C:93:1A:0A:95:74:5A:49:1C:46:F5:68:C1:7B:A8:0B X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7e::/48 Signature Algorithm: sha256WithRSAEncryption 81:c9:e7:9f:c8:a9:28:37:c1:e8:0a:f3:a3:46:02:94:46:c8: 04:37:12:a5:0d:7b:32:84:9e:52:40:15:81:c7:b5:37:26:c2: 05:c2:46:f8:2c:5e:4c:63:5b:1c:23:c6:61:a4:99:a7:c9:ff: 8a:22:e9:cf:a9:a8:70:87:aa:b8:77:67:84:14:b0:45:13:81: 4c:08:20:0b:b1:7a:de:70:4d:2f:5c:97:68:36:db:1a:ca:02: 15:26:4a:56:bd:ea:c3:de:a5:e4:34:b3:6b:3d:93:6b:cc:2e: dd:ff:81:e2:8c:3f:a5:31:b3:d7:fc:de:9e:0c:f4:e9:90:cb: 1c:49:2b:cb:aa:19:7d:02:46:13:cf:53:25:c3:d5:31:d5:4e: 49:7f:eb:90:9a:8b:52:df:da:7b:d8:a6:fb:bc:bd:e8:5f:ff: 2e:6b:36:a3:ea:4a:f1:fa:f5:02:9c:50:3f:24:10:3e:bf:ba: 19:71:2d:25:59:4d:a7:a9:bf:8d:36:7c:91:66:e8:2c:a8:32: 52:19:50:3d:05:3e:b3:88:c3:d5:99:a3:ad:41:20:04:14:06: 5d:f3:9f:67:5e:f7:ea:d6:20:3f:78:89:c0:68:10:4f:cf:9a: 3c:97:f3:e7:91:fc:61:54:76:10:6c:f7:c0:5a:66:f4:8b:21: c8:c3:15:5c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJEkWMz9oV9fyMFLd0g1GooM3EJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzRaFw0yNzA2MDkwOTQwMzRaMDMxMTAvBgNV BAMTKDUxQTRFMkMwOUM5MzFBMEE5NTc0NUE0OTFDNDZGNTY4QzE3QkE4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnCOLMUZsStQ8cTk9/TgxNLBM 7Lp6GWZOtId0kfYNnNhBrY+3yB+HXkO1b52iwrHthxBxwzJWcjy3sPIoRYVTZMM3 yaICX6V5T8HivKnihqTKx+VsNlafpPM+2977l9Pqdd3htJWjdyjZgG8zI4gWA3lG ces14fE284xAhy+8EvIXquf79AwPayTKsJWD/n1mqmK8H5iYSvxDKdixRf4+fmt5 Yuni/viBVo1gW/0+71ZMQuNVC4hbk09+gepenA4pcwt9mjxk8XyKdDhofohTpicV XKk1o/zhXVpmh+rYLy+KJWGJ1+PfGJ+1dPTJQ/hopPTJTJD8du1PRWXGnI09AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUUaTiwJyTGgqVdFpJHEb1aMF7qAswHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9+MA0GCSqGSIb3DQEBCwUAA4IBAQCB yeefyKkoN8HoCvOjRgKURsgENxKlDXsyhJ5SQBWBx7U3JsIFwkb4LF5MY1scI8Zh pJmnyf+KIunPqahwh6q4d2eEFLBFE4FMCCALsXrecE0vXJdoNtsaygIVJkpWverD 3qXkNLNrPZNrzC7d/4HijD+lMbPX/N6eDPTpkMscSSvLqhl9AkYTz1Mlw9Ux1U5J f+uQmotS39p72Kb7vL3oX/8uazaj6krx+vUCnFA/JBA+v7oZcS0lWU2nqb+NNnyR ZugsqDJSGVA9BT6ziMPVmaOtQSAEFAZd859nXvfq1iA/eInAaBBPz5o8l/Pnkfxh VHYQbPfAWmb0iyHIwxVc -----END CERTIFICATE-----Generated at Sun Jun 14 00:08:55 2026 by rpki-client