$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa File: 326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa (raw, json) Hash identifier: tY8TMn7RDjLhbLt1O8dtAl/92Jm+pyNOMcVZs74ZJhM= Subject key identifier: CE:7F:D8:91:AC:2C:27:62:C4:ED:1D:43:B4:FA:82:7D:0A:2F:A6:ED Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Certificate serial: 64DBA7763DDDFDF9DA2427159CA47F71FC022DDE Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa Signing time: Mon 27 Jul 2026 22:57:52 +0000 ROA not before: Mon 27 Jul 2026 22:52:52 +0000 ROA not after: Mon 26 Jul 2027 22:57:52 +0000 asID: 204085 IP address blocks: 2a06:a002:c15c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:db:a7:76:3d:dd:fd:f9:da:24:27:15:9c:a4:7f:71:fc:02:2d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676 Validity Not Before: Jul 27 22:52:52 2026 GMT Not After : Jul 26 22:57:52 2027 GMT Subject: CN=CE7FD891AC2C2762C4ED1D43B4FA827D0A2FA6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:98:07:f7:b4:ff:bb:eb:02:73:ed:2c:09: 25:47:e7:6a:e0:1d:90:c7:1a:2c:5c:8c:6c:1a:75: 1b:26:10:43:45:39:cc:f1:11:b3:ab:9b:dc:01:b4: 33:cf:fa:cf:38:6a:61:b5:df:87:a3:56:16:3a:f8: 35:83:fb:25:12:1a:e9:90:d8:9c:c9:83:b8:4e:8f: c2:51:5d:23:ca:4e:53:78:8a:64:e5:4e:ef:a7:62: 71:33:eb:c3:01:2f:c9:e8:ae:0e:23:d7:90:93:9b: 41:54:d5:23:a0:e5:93:7b:17:5d:6c:e2:ce:c0:8e: bf:51:2d:3d:d6:e6:e6:13:2b:7c:a7:c4:09:05:42: 1a:89:08:eb:cb:1c:72:9d:1f:e6:39:a9:b7:73:0b: 92:d1:ae:1e:52:90:c6:1e:eb:1b:7b:54:2c:2f:13: 51:8d:cc:35:22:88:f7:fd:b2:ed:83:31:58:1f:a0: c6:a2:ef:80:b3:7a:34:2d:e7:7a:63:a8:cc:01:79: 34:1d:b6:b2:58:fc:e7:ac:3d:12:83:be:a9:93:b9: 15:c0:d1:92:1d:a8:95:d9:a3:9d:8a:91:f9:2d:05: f7:f6:2b:af:4b:67:ea:f5:cc:aa:e3:9a:53:1b:2d: 33:be:8e:16:98:61:57:ff:2b:18:6d:ad:0d:eb:2f: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7F:D8:91:AC:2C:27:62:C4:ED:1D:43:B4:FA:82:7D:0A:2F:A6:ED X509v3 Authority Key Identifier: keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/326130363a613030323a633135633a3a2f34382d3438203d3e20323034303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a002:c15c::/48 Signature Algorithm: sha256WithRSAEncryption 11:40:57:c7:dd:3c:3e:4f:d0:7f:ea:ce:92:2c:45:44:ea:7d: 74:b3:e5:5d:d8:fe:c3:15:65:ef:89:da:d3:e2:50:ba:1b:81: 24:b1:13:09:42:bc:91:97:df:4d:a4:d3:8c:db:58:36:19:0d: 11:60:16:39:11:ec:cb:b3:c7:3e:04:9b:e4:cd:9c:40:0a:fe: b4:c7:42:dd:95:79:35:9a:9d:47:21:6d:a0:0a:6c:86:09:dc: db:16:c1:ef:ad:9e:c4:33:40:f3:f0:eb:d6:34:79:53:fb:04: f5:36:cd:19:ce:13:fe:29:5a:95:d5:65:10:f0:44:f3:33:f9: e4:96:97:44:b4:c4:cb:01:ed:a7:29:50:3f:2a:49:88:57:b2: eb:cc:9c:f8:c6:87:df:c0:6f:29:89:57:8e:b4:93:b1:de:ef: 0d:f6:36:4d:48:e3:ac:74:df:e0:59:6f:77:b2:49:55:68:23: c2:11:a4:0f:50:c9:ed:d3:f8:d4:a4:0a:60:aa:f3:b7:56:a0: ea:42:da:bf:c1:e3:24:97:96:92:d0:20:c4:55:1b:bb:54:b7: 8f:2a:cf:08:cd:02:02:c9:d7:7c:50:06:75:dc:d9:64:02:18: 58:57:92:ff:86:c4:c4:12:4b:ae:79:ff:2e:fa:2d:40:eb:fa: 14:fc:d3:ce -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUZNundj3d/fnaJCcVnKR/cfwCLd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3 NDAxRTY3NjAeFw0yNjA3MjcyMjUyNTJaFw0yNzA3MjYyMjU3NTJaMDMxMTAvBgNV BAMTKENFN0ZEODkxQUMyQzI3NjJDNEVEMUQ0M0I0RkE4MjdEMEEyRkE2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTp5gH97T/u+sCc+0sCSVH52rg HZDHGixcjGwadRsmEENFOczxEbOrm9wBtDPP+s84amG134ejVhY6+DWD+yUSGumQ 2JzJg7hOj8JRXSPKTlN4imTlTu+nYnEz68MBL8norg4j15CTm0FU1SOg5ZN7F11s 4s7Ajr9RLT3W5uYTK3ynxAkFQhqJCOvLHHKdH+Y5qbdzC5LRrh5SkMYe6xt7VCwv E1GNzDUiiPf9su2DMVgfoMai74CzejQt53pjqMwBeTQdtrJY/OesPRKDvqmTuRXA 0ZIdqJXZo52KkfktBff2K69LZ+r1zKrjmlMbLTO+jhaYYVf/KxhtrQ3rLwRfAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUzn/YkawsJ2LE7R1DtPqCfQovpu0wHwYDVR0j BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx RTY3Ni5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgt MjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2ZDAzLzMvMzI2MTMwMzYzYTYxMzAzMDMy M2E2MzMxMzU2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDMwMzgzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGoALBXDANBgkqhkiG9w0BAQsFAAOCAQEAEUBXx908Pk/Qf+rO kixFROp9dLPlXdj+wxVl74na0+JQuhuBJLETCUK8kZffTaTTjNtYNhkNEWAWORHs y7PHPgSb5M2cQAr+tMdC3ZV5NZqdRyFtoApshgnc2xbB762exDNA8/Dr1jR5U/sE 9TbNGc4T/ilaldVlEPBE8zP55JaXRLTEywHtpylQPypJiFey68yc+MaH38BvKYlX jrSTsd7vDfY2TUjjrHTf4Flvd7JJVWgjwhGkD1DJ7dP41KQKYKrzt1ag6kLav8Hj JJeWktAgxFUbu1S3jyrPCM0CAsnXfFAGddzZZAIYWFeS/4bExBJLrnn/LvotQOv6 FPzTzg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:24:46 2026 by rpki-client