$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa File: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (raw, json) Hash identifier: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ= Subject key identifier: F8:05:4C:A3:68:BF:51:22:E6:55:5D:33:43:E4:76:A4:14:58:4E:D0 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 7EE9A537C62247CA00E74610FC25CF78D2E631FE Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa Signing time: Wed 08 Apr 2026 10:19:31 +0000 ROA not before: Wed 08 Apr 2026 10:14:31 +0000 ROA not after: Wed 07 Apr 2027 10:19:31 +0000 asID: 16509 IP address blocks: 2a0f:1cc5:c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 14:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e9:a5:37:c6:22:47:ca:00:e7:46:10:fc:25:cf:78:d2:e6:31:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Apr 8 10:14:31 2026 GMT Not After : Apr 7 10:19:31 2027 GMT Subject: CN=F8054CA368BF5122E6555D3343E476A414584ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:3a:5a:13:e1:1a:0c:82:0d:f0:f8:7e:d2: 22:b1:2c:ba:0b:a9:c2:a0:71:08:a5:39:c9:38:14: 0e:ec:09:8a:c2:12:9b:1e:e9:25:58:b0:61:51:04: 6f:d3:8a:af:e2:00:5b:34:53:32:6c:2a:e9:57:9c: ac:e1:c1:27:3f:d5:26:27:7f:89:3a:a4:e2:0f:4d: ee:4e:96:03:31:8e:18:92:d0:bc:a9:23:87:dc:74: 15:23:3a:28:e9:1b:7f:4c:a7:db:fb:ed:d9:a5:f8: 51:87:30:6a:fc:1f:f0:c2:06:16:a2:d4:de:b6:ce: 67:77:73:f0:3b:2b:dc:1f:62:25:68:b7:85:2d:59: f2:a3:19:98:5b:5b:a4:25:0d:c4:81:34:31:f5:2f: 76:8c:50:23:65:19:a4:c7:7e:ec:bf:f5:5c:68:fe: ba:59:5f:9c:8c:3b:56:b8:37:fe:06:60:e1:8b:13: 8e:ef:bf:e1:56:50:bc:b0:62:ed:ed:19:bf:0e:1e: b7:be:36:06:5f:d0:24:f3:81:fa:10:f6:fe:ba:41: d1:14:71:b9:b8:e0:b2:29:8e:67:9b:30:b6:7a:08: 2d:2e:d1:7a:7a:8a:43:de:0c:d9:f4:88:b4:83:c6: 44:1d:eb:46:4c:2a:86:16:9e:89:ec:65:2d:06:c5: 3d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:05:4C:A3:68:BF:51:22:E6:55:5D:33:43:E4:76:A4:14:58:4E:D0 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:c01::/48 Signature Algorithm: sha256WithRSAEncryption bc:80:d6:f6:c0:aa:56:b3:fb:80:2c:6e:db:62:16:c6:fe:54: b8:26:7a:3e:8c:15:29:37:17:d8:8e:e2:a6:e0:ec:8c:33:24: 23:15:64:5f:96:87:80:89:0f:98:72:56:f6:34:bd:ee:b4:81: 4b:d4:b8:05:8e:fe:3c:2c:6a:24:da:b1:b7:31:37:c6:18:40: bf:4d:2f:1d:26:87:25:1d:c7:c1:44:a0:1d:97:c8:7c:6e:00: 53:4d:76:b0:a1:34:c5:d4:1c:c1:cc:0b:e3:8d:42:ce:35:78: 16:f7:4c:d5:be:0b:3d:d3:ca:4d:ec:04:df:43:9e:76:23:c9: 0e:98:96:ae:ba:ab:6a:1f:d1:c8:e0:31:e7:4e:27:44:58:db: 1d:1d:d5:33:06:23:31:10:bf:08:4b:0e:bf:a6:14:f0:18:82: 35:b4:34:6b:5f:1d:9f:3f:3c:bb:b4:54:cf:af:f9:03:51:7e: 7f:e6:4f:0b:b6:3e:b3:0c:1c:7d:c6:7e:9b:57:33:7f:8b:eb: 7e:04:89:23:ad:17:a0:d5:c2:7f:9b:b2:8a:bf:9c:eb:73:94: 5a:78:32:34:00:ad:78:73:97:43:b4:75:97:48:84:7b:b6:8e: 35:c6:19:6a:43:a5:99:be:3d:f7:01:79:60:29:69:3f:51:89: 22:e3:08:0e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUfumlN8YiR8oA50YQ/CXPeNLmMf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA0MDgxMDE0MzFaFw0yNzA0MDcxMDE5MzFaMDMxMTAvBgNV BAMTKEY4MDU0Q0EzNjhCRjUxMjJFNjU1NUQzMzQzRTQ3NkE0MTQ1ODRFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEDpaE+EaDIIN8Ph+0iKxLLoL qcKgcQilOck4FA7sCYrCEpse6SVYsGFRBG/Tiq/iAFs0UzJsKulXnKzhwSc/1SYn f4k6pOIPTe5OlgMxjhiS0LypI4fcdBUjOijpG39Mp9v77dml+FGHMGr8H/DCBhai 1N62zmd3c/A7K9wfYiVot4UtWfKjGZhbW6QlDcSBNDH1L3aMUCNlGaTHfuy/9Vxo /rpZX5yMO1a4N/4GYOGLE47vv+FWULywYu3tGb8OHre+NgZf0CTzgfoQ9v66QdEU cbm44LIpjmebMLZ6CC0u0Xp6ikPeDNn0iLSDxkQd60ZMKoYWnonsZS0GxT01AgMB AAGjggKBMIICfTAdBgNVHQ4EFgQU+AVMo2i/USLmVV0zQ+R2pBRYTtAwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mODEyZDNlZi1jNWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMi8zMjYxMzA2 NjNhMzE2MzYzMzUzYTYzMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzYz NTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqDxzFDAEwDQYJKoZIhvcNAQELBQADggEBALyA1vbA qlaz+4AsbttiFsb+VLgmej6MFSk3F9iO4qbg7IwzJCMVZF+Wh4CJD5hyVvY0ve60 gUvUuAWO/jwsaiTasbcxN8YYQL9NLx0mhyUdx8FEoB2XyHxuAFNNdrChNMXUHMHM C+ONQs41eBb3TNW+Cz3Tyk3sBN9DnnYjyQ6Ylq66q2of0cjgMedOJ0RY2x0d1TMG IzEQvwhLDr+mFPAYgjW0NGtfHZ8/PLu0VM+v+QNRfn/mTwu2PrMMHH3GfptXM3+L 634EiSOtF6DVwn+bsoq/nOtzlFp4MjQArXhzl0O0dZdIhHu2jjXGGWpDpZm+PfcB eWApaT9RiSLjCA4= -----END CERTIFICATE-----Generated at Fri Apr 17 03:37:52 2026 by rpki-client