$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa File: 326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (raw, json) Hash identifier: 9kZUXgWMqye7ZXT/x/7wHr1j02GNGx8/gYHoXgHQMXw= Subject key identifier: 18:A6:09:E6:9D:1E:DE:BF:A3:36:AB:CF:97:B5:2F:21:FB:19:CD:F2 Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 2EB0098B03D952E4920A8DE06E4B9219B3CC0550 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa Signing time: Fri 31 Oct 2025 16:39:00 +0000 ROA not before: Fri 31 Oct 2025 16:34:00 +0000 ROA not after: Fri 30 Oct 2026 16:39:00 +0000 asID: 213891 IP address blocks: 2a14:7580:770::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b0:09:8b:03:d9:52:e4:92:0a:8d:e0:6e:4b:92:19:b3:cc:05:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Oct 31 16:34:00 2025 GMT Not After : Oct 30 16:39:00 2026 GMT Subject: CN=18A609E69D1EDEBFA336ABCF97B52F21FB19CDF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:57:d5:dc:fb:dc:85:75:44:47:14:79:75:c0: c4:f6:61:30:5e:97:19:22:55:11:8e:dc:30:02:c3: 0d:55:42:f7:1b:b4:0b:f3:ac:ec:f4:d8:6c:db:81: 8b:0a:7f:c1:bb:8b:c7:c3:4a:ee:15:04:aa:09:6b: b2:20:ae:4c:13:5a:cf:8b:5d:c1:b4:4d:76:d3:72: 53:a7:14:89:1d:75:57:95:5c:a0:b7:fd:af:93:78: a0:24:25:e6:b5:e4:18:24:c3:38:ce:b2:68:a4:36: 28:d4:e6:80:30:1a:3f:bb:1d:d3:d9:3b:84:9e:b8: 95:1e:71:52:27:e5:ab:5a:aa:df:84:54:30:ea:03: 2e:d9:ca:38:0b:bf:69:c7:57:94:c8:1c:33:e6:f2: 61:af:6c:c1:70:dd:0a:82:7b:c5:39:38:b7:cc:bc: 44:02:5e:33:6c:35:7c:b5:7b:73:0e:10:2f:9e:63: 5c:8a:40:66:da:38:b0:01:3e:32:8b:98:bc:14:7f: 6b:68:67:72:29:48:f2:94:b5:9e:18:5a:c0:3f:47: e5:fd:5c:0c:0a:27:3b:c6:d9:2e:c8:24:d8:14:f4: bc:e4:06:e8:b2:9e:fe:0b:ce:37:0b:12:84:91:71: ee:cf:da:b8:8d:db:86:a4:15:12:51:c1:2d:2e:72: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A6:09:E6:9D:1E:DE:BF:A3:36:AB:CF:97:B5:2F:21:FB:19:CD:F2 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:770::/44 Signature Algorithm: sha256WithRSAEncryption 0b:be:33:e7:19:c1:3d:af:d2:a5:39:c5:dd:dd:28:34:10:5a: 41:05:4d:1e:dd:b9:be:a2:a7:41:01:45:35:c6:21:44:2f:c1: 47:bf:93:20:c9:f6:13:24:0f:14:0c:5f:4d:4a:44:37:28:e8: f0:0d:e4:c6:0c:8c:71:16:90:80:77:e4:6a:46:72:84:21:21: b9:71:3a:60:b6:ce:f3:66:24:66:6b:05:10:cc:98:48:65:fc: 4f:ef:a2:45:f9:90:97:7d:da:7d:5f:d2:ad:93:bc:fe:8e:21: ae:0f:88:35:01:4b:58:ba:b6:28:46:cc:6e:05:90:80:94:58: 33:96:11:98:49:61:ae:b7:d4:a6:a1:42:66:8b:ae:5a:77:5c: 98:3e:21:e0:7f:42:0c:99:6c:c9:0b:df:a2:3e:84:9a:c1:1a: e2:1f:62:d7:ad:5b:11:49:b2:a0:fb:9a:0f:d4:6f:2c:ca:2d: 60:b1:be:55:62:a5:df:56:a9:3e:1f:30:e8:59:ce:57:61:d1: 61:9e:9f:d7:d9:45:50:7c:27:94:95:a5:cb:8a:ee:e4:57:f7: de:97:63:9a:b0:6c:25:33:e0:f7:92:ad:7f:03:ca:d9:6b:45: 28:16:10:4d:40:7c:93:2b:5b:99:86:85:a3:09:b0:c7:f1:a0: d5:eb:de:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIULrAJiwPZUuSSCo3gbkuSGbPMBVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTEwMzExNjM0MDBaFw0yNjEwMzAxNjM5MDBaMDMxMTAvBgNV BAMTKDE4QTYwOUU2OUQxRURFQkZBMzM2QUJDRjk3QjUyRjIxRkIxOUNERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpV9Xc+9yFdURHFHl1wMT2YTBe lxkiVRGO3DACww1VQvcbtAvzrOz02GzbgYsKf8G7i8fDSu4VBKoJa7IgrkwTWs+L XcG0TXbTclOnFIkddVeVXKC3/a+TeKAkJea15BgkwzjOsmikNijU5oAwGj+7HdPZ O4SeuJUecVIn5ataqt+EVDDqAy7ZyjgLv2nHV5TIHDPm8mGvbMFw3QqCe8U5OLfM vEQCXjNsNXy1e3MOEC+eY1yKQGbaOLABPjKLmLwUf2toZ3IpSPKUtZ4YWsA/R+X9 XAwKJzvG2S7IJNgU9LzkBuiynv4LzjcLEoSRce7P2riN24akFRJRwS0ucvltAgMB AAGjggJYMIICVDAdBgNVHQ4EFgQUGKYJ5p0e3r+jNqvPl7UvIfsZzfIwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYI KwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5LzAzZmQwYjc2LTcyNDMtNGIyNi05NzYwLWNjMDdiOTRiZmUyMy8xLzMy NjEzMTM0M2EzNzM1MzgzMDNhMzczNzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw MzIzMTMzMzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gAdwMA0GCSqGSIb3DQEBCwUAA4IB AQALvjPnGcE9r9KlOcXd3Sg0EFpBBU0e3bm+oqdBAUU1xiFEL8FHv5MgyfYTJA8U DF9NSkQ3KOjwDeTGDIxxFpCAd+RqRnKEISG5cTpgts7zZiRmawUQzJhIZfxP76JF +ZCXfdp9X9Ktk7z+jiGuD4g1AUtYurYoRsxuBZCAlFgzlhGYSWGut9SmoUJmi65a d1yYPiHgf0IMmWzJC9+iPoSawRriH2LXrVsRSbKg+5oP1G8syi1gsb5VYqXfVqk+ HzDoWc5XYdFhnp/X2UVQfCeUlaXLiu7kV/fel2OasGwlM+D3kq1/A8rZa0UoFhBN QHyTK1uZhoWjCbDH8aDV697z -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:11 2025 by rpki-client