$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: eyQ+EXgpe7ogjkdUwWOMZF84NoStyr6kSLUk4hmsjiU= Subject key identifier: 22:BC:64:59:63:20:2C:D0:DA:39:4A:60:0E:9C:13:E4:D6:25:8D:90 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 4AF82DE1DF975ADB135D8DAF432E8168AD67EF0E Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 10 Jun 2026 09:40:34 +0000 ROA not before: Wed 10 Jun 2026 09:35:34 +0000 ROA not after: Wed 09 Jun 2027 09:40:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f8:2d:e1:df:97:5a:db:13:5d:8d:af:43:2e:81:68:ad:67:ef:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jun 10 09:35:34 2026 GMT Not After : Jun 9 09:40:34 2027 GMT Subject: CN=22BC645963202CD0DA394A600E9C13E4D6258D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:cd:ca:0e:3e:83:de:1c:2d:df:94:9a:77: 0a:65:2f:01:2f:32:c3:ea:80:b2:d5:fa:c1:7d:7f: 57:5e:27:b7:d5:54:3b:2c:0f:37:7a:fa:6f:02:13: 97:72:7b:66:8d:e0:17:4d:72:83:78:ad:35:26:c1: e9:1e:ea:d5:10:3f:87:87:12:5f:7a:bc:45:8d:cf: 19:32:db:a3:84:6c:e4:2b:9d:a3:c2:48:2a:56:31: 13:4d:91:5a:ee:de:ed:72:90:f4:03:16:a0:a5:db: da:49:e7:73:e1:f8:9c:b6:9f:1d:f9:74:09:97:f3: e8:df:13:bd:d2:3f:4c:6e:9e:65:2f:bd:5a:b7:52: ad:1d:6e:c2:69:28:13:3d:01:a1:1e:05:0f:ad:35: f1:49:96:a2:a0:5b:50:4a:b7:0e:1c:56:18:0e:2b: 0b:91:fd:66:60:c3:f7:ae:b4:f4:f0:e6:f3:56:75: 65:b3:d5:be:75:94:d5:f9:67:e6:bf:2e:ce:b2:55: 51:db:39:7a:b5:f9:e1:2d:1c:c0:fd:22:ae:a8:b2: c9:eb:e9:8b:fd:55:0c:46:13:61:ac:68:1e:f0:97: ea:50:ef:b2:0d:4b:57:87:34:9c:cb:65:ea:38:ac: b8:cc:39:78:a5:0d:84:c0:12:bd:51:cf:9d:62:6a: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BC:64:59:63:20:2C:D0:DA:39:4A:60:0E:9C:13:E4:D6:25:8D:90 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7f::/48 Signature Algorithm: sha256WithRSAEncryption 06:1c:dd:c1:16:cb:b2:45:75:72:f5:d8:b5:db:4a:c1:e1:f0: f7:c3:ad:df:13:2e:70:ec:f7:4d:40:40:bf:fd:6c:3a:b9:46: d0:57:59:54:be:8c:c7:02:a9:2f:3b:05:f2:23:f0:a0:d8:91: 7c:7f:60:05:99:e2:3e:9d:db:6b:d7:77:81:0c:12:d3:48:41: 60:19:41:0a:93:3b:74:07:d3:d9:27:71:9d:65:5a:29:83:7a: 4c:7c:7e:b6:39:f9:af:a6:22:0a:02:d7:fd:f5:60:40:81:1e: b0:40:a5:15:ae:6a:89:75:bf:38:1a:ab:24:49:e4:77:a8:95: 0f:6b:c7:f5:72:24:65:ec:a7:c0:59:b5:90:b0:62:9c:63:c9: 9f:fc:64:20:38:64:e7:a4:68:c3:41:f3:92:8f:09:51:0f:a2: a4:2e:43:28:ff:e0:45:ef:0a:85:b6:f0:fd:34:6b:51:de:86: fb:23:3c:07:6a:66:04:61:bc:7a:bd:20:9a:bb:8b:26:ad:c4: c3:56:e4:d5:6a:0e:26:70:49:49:e5:1a:de:3d:48:3d:dd:81: 9d:3b:75:b5:58:52:46:ff:44:a7:9c:71:28:53:76:ff:db:d0: da:64:1d:d4:17:dd:b9:f4:6f:05:44:2d:c6:5c:ad:08:4b:a4: ed:bb:fc:a1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSvgt4d+XWtsTXY2vQy6BaK1n7w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA2MTAwOTM1MzRaFw0yNzA2MDkwOTQwMzRaMDMxMTAvBgNV BAMTKDIyQkM2NDU5NjMyMDJDRDBEQTM5NEE2MDBFOUMxM0U0RDYyNThEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMM3KDj6D3hwt35SadwplLwEv MsPqgLLV+sF9f1deJ7fVVDssDzd6+m8CE5dye2aN4BdNcoN4rTUmweke6tUQP4eH El96vEWNzxky26OEbOQrnaPCSCpWMRNNkVru3u1ykPQDFqCl29pJ53Ph+Jy2nx35 dAmX8+jfE73SP0xunmUvvVq3Uq0dbsJpKBM9AaEeBQ+tNfFJlqKgW1BKtw4cVhgO KwuR/WZgw/eutPTw5vNWdWWz1b51lNX5Z+a/Ls6yVVHbOXq1+eEtHMD9Iq6ossnr 6Yv9VQxGE2GsaB7wl+pQ77INS1eHNJzLZeo4rLjMOXilDYTAEr1Rz51iajYpAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUIrxkWWMgLNDaOUpgDpwT5NYljZAwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9/MA0GCSqGSIb3DQEBCwUAA4IBAQAG HN3BFsuyRXVy9di120rB4fD3w63fEy5w7PdNQEC//Ww6uUbQV1lUvozHAqkvOwXy I/Cg2JF8f2AFmeI+ndtr13eBDBLTSEFgGUEKkzt0B9PZJ3GdZVopg3pMfH62Ofmv piIKAtf99WBAgR6wQKUVrmqJdb84GqskSeR3qJUPa8f1ciRl7KfAWbWQsGKcY8mf /GQgOGTnpGjDQfOSjwlRD6KkLkMo/+BF7wqFtvD9NGtR3ob7IzwHamYEYbx6vSCa u4smrcTDVuTVag4mcElJ5RrePUg93YGdO3W1WFJG/0SnnHEoU3b/29DaZB3UF925 9G8FRC3GXK0IS6Ttu/yh -----END CERTIFICATE-----Generated at Sat Jun 13 23:24:28 2026 by rpki-client