$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e203233343730.roa File: 326131343a373538333a663830303a3a2f34382d3438203d3e203233343730.roa (raw, json) Hash identifier: 0Ri2jrMFUbhMEHInPUFlKtKXVbjhL1Bc4fW5jxlgegE= Subject key identifier: 92:23:6A:AE:6C:5F:2C:FE:4C:09:AC:7C:2A:F4:E3:D7:3A:BB:80:EE Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Certificate serial: 4F7A6864758AB204732CA05AA218DD057F9CCD22 Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e203233343730.roa Signing time: Sun 02 Nov 2025 19:36:50 +0000 ROA not before: Sun 02 Nov 2025 19:31:50 +0000 ROA not after: Sun 01 Nov 2026 19:36:50 +0000 asID: 23470 IP address blocks: 2a14:7583:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 13:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7a:68:64:75:8a:b2:04:73:2c:a0:5a:a2:18:dd:05:7f:9c:cd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Validity Not Before: Nov 2 19:31:50 2025 GMT Not After : Nov 1 19:36:50 2026 GMT Subject: CN=92236AAE6C5F2CFE4C09AC7C2AF4E3D73ABB80EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:52:50:2b:e3:4f:6b:2a:7f:ec:41:bf:72:cf: 9a:57:aa:e7:e0:ac:85:b7:72:9b:94:61:cb:9e:a6: 2c:30:c4:55:65:d3:50:31:86:50:3f:34:eb:60:71: dd:8b:10:d7:ea:e3:e6:cd:8c:09:7a:cb:00:90:94: 1c:6a:38:45:80:bd:9f:94:7f:d9:2c:6c:7d:a6:22: 9e:77:42:e4:6b:eb:b9:37:6b:f4:89:65:fd:a6:38: ee:cf:69:c6:27:46:90:92:d5:0d:40:6c:4d:75:51: c9:24:10:71:82:c1:13:a1:6c:ee:e8:ee:fd:5f:73: 87:9c:ed:aa:b2:76:06:29:37:0e:58:cc:5c:f5:d6: a3:96:8e:4b:71:93:89:01:ee:a5:b7:cb:46:cd:58: f6:54:2f:e9:7e:ff:ed:1c:86:89:dc:2d:ff:92:54: ee:8e:25:c9:d0:c9:f3:31:61:a1:90:2f:7f:06:f7: 0a:b5:ec:c0:93:ec:32:b2:3a:2e:cb:e5:6e:53:d9: c0:e3:62:d2:4e:e3:60:c5:a3:39:e7:9e:20:a0:38: 42:fc:2c:85:9d:5f:0d:71:42:2b:3d:bd:40:33:28: 6a:52:f6:26:8f:df:9a:5b:59:a2:a2:9a:9f:48:10: 52:22:ad:d2:2e:04:70:89:ca:3d:c6:9d:70:25:b1: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:23:6A:AE:6C:5F:2C:FE:4C:09:AC:7C:2A:F4:E3:D7:3A:BB:80:EE X509v3 Authority Key Identifier: keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject Information Access: Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e203233343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f800::/48 Signature Algorithm: sha256WithRSAEncryption 67:b5:06:ca:da:84:cd:c1:91:5c:03:d3:c4:ca:a7:d1:4e:e3: 9a:b4:fd:dd:f9:dc:a0:ca:a2:a1:ed:6a:a0:52:33:ff:ef:c2: 55:eb:79:68:e3:c8:76:98:b3:29:6a:19:86:5e:67:53:a7:f8: ff:bf:91:84:57:b0:35:3e:90:92:1f:4b:c9:19:6a:8c:a2:ae: 7b:2c:81:db:48:9d:61:c8:0b:2b:c5:04:c5:82:6f:78:22:54: e2:ab:8f:73:31:5b:b4:c2:0b:75:8a:ee:3b:34:5f:09:5a:97: 4b:02:fb:17:ed:2b:87:2f:0a:f4:99:24:00:6a:ba:68:1a:c8: ac:30:44:03:80:4f:d9:a7:c9:56:ec:2f:73:61:f4:5f:c2:75: b3:d8:99:f8:ec:ca:1f:1f:26:00:9a:bb:28:c3:5c:08:43:5a: c7:e6:5e:b2:07:72:4b:5c:d4:d5:a0:b5:2f:15:75:a2:3f:0c: 2e:18:4a:0b:50:87:08:6d:e3:0e:6c:65:4c:bd:4b:01:8b:71: f0:1b:7f:66:b0:9b:06:ad:98:8c:0b:5a:d0:96:8f:e7:89:3c: 9d:1c:1b:b4:b0:f4:54:cb:2d:0b:70:f6:fe:94:87:03:f3:dd: f6:87:b0:37:d2:99:4c:5c:58:27:1a:3f:db:94:66:de:c9:fb: df:2b:2e:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUT3poZHWKsgRzLKBaohjdBX+czSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1 NDgwRjNEOTAeFw0yNTExMDIxOTMxNTBaFw0yNjExMDExOTM2NTBaMDMxMTAvBgNV BAMTKDkyMjM2QUFFNkM1RjJDRkU0QzA5QUM3QzJBRjRFM0Q3M0FCQjgwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdUlAr409rKn/sQb9yz5pXqufg rIW3cpuUYcuepiwwxFVl01AxhlA/NOtgcd2LENfq4+bNjAl6ywCQlBxqOEWAvZ+U f9ksbH2mIp53QuRr67k3a/SJZf2mOO7PacYnRpCS1Q1AbE11UckkEHGCwROhbO7o 7v1fc4ec7aqydgYpNw5YzFz11qOWjktxk4kB7qW3y0bNWPZUL+l+/+0choncLf+S VO6OJcnQyfMxYaGQL38G9wq17MCT7DKyOi7L5W5T2cDjYtJO42DFoznnniCgOEL8 LIWdXw1xQis9vUAzKGpS9iaP35pbWaKimp9IEFIirdIuBHCJyj3GnXAlseXhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkiNqrmxfLP5MCax8KvTj1zq7gO4wHwYDVR0j BBgwFoAUV2sdMMfWEv6C0uLFp47UFlSA89kwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3Bs YXNtYS1jYXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgw RjNEOS5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1h M2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC81NzZCMUQzMEM3RDYxMkZFODJE MkUyQzVBNzhFRDQxNjU0ODBGM0Q5LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9Bggr BgEFBQcwC4ZxcnN5bmM6Ly9ya2kucGxhc21hbm9kZXMuY29tL3JlcG8vcGxhc21h LWNhc3YvMS8zMjYxMzEzNDNhMzczNTM4MzMzYTY2MzgzMDMwM2EzYTJmMzQzODJk MzQzODIwM2QzZTIwMzIzMzM0MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYP4ADANBgkqhkiG 9w0BAQsFAAOCAQEAZ7UGytqEzcGRXAPTxMqn0U7jmrT93fncoMqioe1qoFIz/+/C Vet5aOPIdpizKWoZhl5nU6f4/7+RhFewNT6Qkh9LyRlqjKKueyyB20idYcgLK8UE xYJveCJU4quPczFbtMILdYruOzRfCVqXSwL7F+0rhy8K9JkkAGq6aBrIrDBEA4BP 2afJVuwvc2H0X8J1s9iZ+OzKHx8mAJq7KMNcCENax+ZesgdyS1zU1aC1LxV1oj8M LhhKC1CHCG3jDmxlTL1LAYtx8Bt/ZrCbBq2YjAta0JaP54k8nRwbtLD0VMstC3D2 /pSHA/Pd9oewN9KZTFxYJxo/25Rm3sn73ysu1w== -----END CERTIFICATE-----Generated at Tue Nov 4 05:43:39 2025 by rpki-client