$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa File: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (raw, json) Hash identifier: OJ83dTsr9Gt4avvo3q3A4eeFV71yGziVsKE7L0soTmM= Subject key identifier: 21:59:B1:C5:E6:5B:34:E0:50:C3:5E:09:53:7E:36:0E:5B:E5:E9:F7 Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 113647CD9CD099E9A8860AB1E51F3E239ED25F9D Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa Signing time: Thu 04 Jun 2026 19:37:43 +0000 ROA not before: Thu 04 Jun 2026 19:32:43 +0000 ROA not after: Thu 03 Jun 2027 19:37:43 +0000 asID: 214723 IP address blocks: 2a06:9f41:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:36:47:cd:9c:d0:99:e9:a8:86:0a:b1:e5:1f:3e:23:9e:d2:5f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jun 4 19:32:43 2026 GMT Not After : Jun 3 19:37:43 2027 GMT Subject: CN=2159B1C5E65B34E050C35E09537E360E5BE5E9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:4c:51:3a:13:10:2c:7f:78:5a:f4:98:99: a9:44:84:58:35:f1:d9:c1:d9:46:27:7a:a0:fb:0e: 7f:98:69:39:1a:38:34:7c:c7:86:5d:91:63:0a:b2: 1e:62:c7:2d:c1:6f:fe:e4:e4:07:8e:78:bd:b1:ab: e3:c5:a0:d3:aa:17:14:81:98:fc:eb:08:a1:6d:dc: 93:fa:b9:b2:0b:7e:59:44:9b:3f:d0:6d:9c:f5:83: e2:20:d3:e9:a5:da:7f:70:a3:d3:c2:2e:ff:54:af: 46:c8:ca:ec:01:e9:f0:85:f3:69:e4:0c:0f:11:ea: cb:bb:14:09:3d:5a:d3:a1:fb:c4:a1:4e:07:4e:28: e7:8a:b9:40:c0:8c:cb:c3:62:db:94:90:54:54:9e: 2e:4e:6e:65:9e:12:9a:8d:58:09:1a:47:f4:34:31: e0:85:f5:0e:ad:53:bd:ff:4c:c0:55:e5:b9:57:29: 1c:f3:9c:08:32:b7:51:59:79:28:3a:ce:dd:49:e0: bc:d5:17:6d:5d:73:6c:78:0a:28:6f:83:54:25:03: 15:f9:02:f9:69:ab:7b:a4:e6:db:9c:87:95:af:7b: 9c:6b:a7:09:cd:f8:76:4c:b3:26:8e:8e:d1:89:f4: 1d:4b:52:7c:f2:ef:c6:62:df:4e:f3:3d:bf:21:d1: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:59:B1:C5:E6:5B:34:E0:50:C3:5E:09:53:7E:36:0E:5B:E5:E9:F7 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f41:100::/40 Signature Algorithm: sha256WithRSAEncryption 34:3b:53:bf:70:7d:d0:26:a4:d1:27:4b:86:6f:a2:57:95:dd: 4d:d5:0d:7c:a2:a1:0b:85:2b:5e:a6:37:b6:c3:76:7b:89:84: 83:04:ea:af:f9:64:54:75:b5:9b:1d:41:46:a8:4a:ba:19:a0: 1c:c5:50:b4:90:7e:1b:71:8e:06:33:17:cb:ca:68:a3:b3:1c: 50:6a:76:f6:0e:b5:e8:94:21:e4:c9:6e:41:83:04:ec:ac:d4: 46:3b:90:1d:9d:56:b3:f6:6b:03:7a:42:1e:86:3d:a6:a8:0c: ed:c8:0f:52:c0:81:84:00:1e:40:6a:ad:58:a4:fa:6b:8b:1a: 04:9d:0b:5c:a6:a5:ac:16:f2:93:f4:6d:ff:6e:8b:b9:f4:05: d8:61:40:a0:28:ee:98:f0:c6:1d:dd:8b:68:f2:4f:e2:22:8a: 8f:01:d1:1d:3c:36:54:46:42:43:c3:0f:c3:46:40:8a:b2:91: 40:4b:1a:39:a0:65:51:7b:40:ad:f3:7f:88:9f:89:08:6b:c8: 5c:e3:57:22:ff:71:ed:57:a7:89:49:d5:e3:7c:61:49:60:8b: 82:76:77:13:c2:66:cb:5a:6e:13:5a:82:04:41:26:ad:33:53: c5:97:6b:7c:0c:63:16:65:76:a5:20:55:f0:7b:f8:09:e7:46: 94:61:ad:26 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUETZHzZzQmemohgqx5R8+I57SX50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNjA2MDQxOTMyNDNaFw0yNzA2MDMxOTM3NDNaMDMxMTAvBgNV BAMTKDIxNTlCMUM1RTY1QjM0RTA1MEMzNUUwOTUzN0UzNjBFNUJFNUU5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaUxROhMQLH94WvSYmalEhFg1 8dnB2UYneqD7Dn+YaTkaODR8x4ZdkWMKsh5ixy3Bb/7k5AeOeL2xq+PFoNOqFxSB mPzrCKFt3JP6ubILfllEmz/QbZz1g+Ig0+ml2n9wo9PCLv9Ur0bIyuwB6fCF82nk DA8R6su7FAk9WtOh+8ShTgdOKOeKuUDAjMvDYtuUkFRUni5ObmWeEpqNWAkaR/Q0 MeCF9Q6tU73/TMBV5blXKRzznAgyt1FZeSg6zt1J4LzVF21dc2x4Cihvg1QlAxX5 Avlpq3uk5tuch5Wve5xrpwnN+HZMsyaOjtGJ9B1LUnzy78Zi307zPb8h0ei3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIVmxxeZbNOBQw14JU342Dlvl6fcwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvNS8zMjYxMzAz NjNhMzk2NjM0MzEzYTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzEz NDM3MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoGn0EBMA0GCSqGSIb3DQEBCwUAA4IBAQA0O1O/ cH3QJqTRJ0uGb6JXld1N1Q18oqELhStepje2w3Z7iYSDBOqv+WRUdbWbHUFGqEq6 GaAcxVC0kH4bcY4GMxfLymijsxxQanb2DrXolCHkyW5BgwTsrNRGO5AdnVaz9msD ekIehj2mqAztyA9SwIGEAB5Aaq1YpPprixoEnQtcpqWsFvKT9G3/bou59AXYYUCg KO6Y8MYd3Yto8k/iIoqPAdEdPDZURkJDww/DRkCKspFASxo5oGVRe0Ct83+In4kI a8hc41ci/3HtV6eJSdXjfGFJYIuCdncTwmbLWm4TWoIEQSatM1PFl2t8DGMWZXal IFXwe/gJ50aUYa0m -----END CERTIFICATE-----Generated at Sat Jun 13 07:34:57 2026 by rpki-client