$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa File: 326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa (raw, json) Hash identifier: HsNbgm9FBwJQ40ostKOzEgW08QTmjfOdpd4P4HHKnxc= Subject key identifier: 6C:00:B8:F3:B3:92:17:69:64:4B:BA:B4:00:D5:06:F2:85:6A:7D:AB Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 6CB618FD25C0C98CE9C1404922543A273CB60B25 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa Signing time: Tue 07 Apr 2026 10:22:25 +0000 ROA not before: Tue 07 Apr 2026 10:17:25 +0000 ROA not after: Tue 06 Apr 2027 10:22:25 +0000 asID: 209565 IP address blocks: 2a14:7586:6310::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b6:18:fd:25:c0:c9:8c:e9:c1:40:49:22:54:3a:27:3c:b6:0b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Apr 7 10:17:25 2026 GMT Not After : Apr 6 10:22:25 2027 GMT Subject: CN=6C00B8F3B3921769644BBAB400D506F2856A7DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:6b:cc:c2:58:9f:be:f4:2d:42:0d:05:7e: d3:41:b7:d2:ee:68:a7:cf:fc:a3:21:54:6c:64:0f: ed:bf:32:2c:4c:ba:17:51:75:66:73:7c:44:3b:74: cd:0c:ea:6d:ba:9f:e9:d0:b6:f9:6d:98:07:47:bb: d9:b2:0f:c6:67:67:fd:78:8b:9b:61:cb:53:94:98: a1:f9:af:3c:cc:85:84:66:6d:e3:cb:c3:49:72:58: 32:fb:b4:ce:4f:65:ad:91:21:0d:d2:de:c8:35:6c: b2:d6:4a:56:e7:80:7d:49:84:b5:c3:f0:59:a9:31: 94:74:86:ca:50:c7:26:61:ac:43:c4:39:02:e8:0c: 62:ae:b3:50:47:6d:42:68:bf:90:5c:e6:6c:ac:e6: c9:95:ee:64:36:17:9a:aa:ec:14:4a:d6:aa:15:29: e9:36:d3:66:6d:46:6d:2e:99:1d:aa:26:51:6d:4e: 48:b6:ef:aa:c5:10:7b:a1:88:7d:d8:2e:f0:a0:e7: 9f:b4:33:76:76:7e:89:16:04:68:28:ad:be:30:05: 03:a6:03:b7:9b:06:01:fa:7a:2d:f0:6d:e6:e0:a9: 83:cf:c3:e0:57:cf:97:e9:b5:0c:58:81:e9:c7:c7: f4:cf:01:32:7f:a3:84:45:e1:5e:06:38:62:52:bd: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:00:B8:F3:B3:92:17:69:64:4B:BA:B4:00:D5:06:F2:85:6A:7D:AB X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6310::/44 Signature Algorithm: sha256WithRSAEncryption 09:39:68:9c:df:fa:d5:44:b7:d4:2f:3e:03:ef:fb:57:b8:7f: 58:56:29:ef:55:ed:29:48:ae:27:17:89:d2:a0:66:15:5e:ec: 1b:72:7d:9c:73:8f:69:de:b3:8e:48:54:1f:22:3c:48:16:ba: b1:9d:a4:71:1f:10:5e:cc:9d:14:8b:ff:91:6c:9a:87:66:5d: d8:12:0f:dc:1d:a6:9d:25:60:a7:69:67:f3:f5:0b:43:b9:4a: 3b:b6:c5:d0:2b:6c:99:12:f6:c1:8c:f9:9e:d0:48:22:be:23: a4:fd:7a:a0:e8:a7:94:10:fe:7a:77:7f:6b:c9:11:ee:9d:98: 00:ee:2b:10:23:a1:32:88:f8:e8:49:e6:00:a3:1a:23:30:b7: 57:58:5f:0c:94:61:3e:b8:ce:68:56:3b:66:2b:ba:9b:e3:89: 60:03:8c:ba:d3:2d:db:42:e9:c4:3c:dc:44:99:02:50:8f:7c: ba:1d:ad:33:2d:49:f2:54:74:44:38:53:05:aa:96:0f:71:31: d1:bc:79:2d:89:8b:f4:0a:e9:93:aa:40:b0:91:54:3f:4d:d2: 5c:cb:19:f8:71:13:1f:b3:da:c6:ae:fe:e1:ca:e4:5e:4c:98: aa:35:11:56:af:35:62:f0:0b:07:82:f4:11:ff:ba:99:6a:7b: d0:58:fd:39 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbLYY/SXAyYzpwUBJIlQ6Jzy2CyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA0MDcxMDE3MjVaFw0yNzA0MDYxMDIyMjVaMDMxMTAvBgNV BAMTKDZDMDBCOEYzQjM5MjE3Njk2NDRCQkFCNDAwRDUwNkYyODU2QTdEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JWvMwlifvvQtQg0FftNBt9Lu aKfP/KMhVGxkD+2/MixMuhdRdWZzfEQ7dM0M6m26n+nQtvltmAdHu9myD8ZnZ/14 i5thy1OUmKH5rzzMhYRmbePLw0lyWDL7tM5PZa2RIQ3S3sg1bLLWSlbngH1JhLXD 8FmpMZR0hspQxyZhrEPEOQLoDGKus1BHbUJov5Bc5mys5smV7mQ2F5qq7BRK1qoV Kek202ZtRm0umR2qJlFtTki276rFEHuhiH3YLvCg55+0M3Z2fokWBGgorb4wBQOm A7ebBgH6ei3wbebgqYPPw+BXz5fptQxYgenHx/TPATJ/o4RF4V4GOGJSvUiJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUbAC487OSF2lkS7q0ANUG8oVqfaswHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYjgwNjk3OC01NTcxLTRkYzktYTg3Mi05MjM5N2M0Yzg4ODAvMC8zMjYxMzEz NDNhMzczNTM4MzYzYTM2MzMzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM5MzUzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1hmMQMA0GCSqGSIb3DQEBCwUAA4IBAQAJ OWic3/rVRLfULz4D7/tXuH9YVinvVe0pSK4nF4nSoGYVXuwbcn2cc49p3rOOSFQf IjxIFrqxnaRxHxBezJ0Ui/+RbJqHZl3YEg/cHaadJWCnaWfz9QtDuUo7tsXQK2yZ EvbBjPme0EgiviOk/Xqg6KeUEP56d39ryRHunZgA7isQI6EyiPjoSeYAoxojMLdX WF8MlGE+uM5oVjtmK7qb44lgA4y60y3bQunEPNxEmQJQj3y6Ha0zLUnyVHREOFMF qpYPcTHRvHktiYv0CumTqkCwkVQ/TdJcyxn4cRMfs9rGrv7hyuReTJiqNRFWrzVi 8AsHgvQR/7qZanvQWP05 -----END CERTIFICATE-----Generated at Fri Apr 17 19:41:45 2026 by rpki-client