$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330323a3a2f34382d3438203d3e20323135343730.roa File: 326131343a373538303a663330323a3a2f34382d3438203d3e20323135343730.roa (raw, json) Hash identifier: cnH25DZSJN2OBLW6Zt+bGPFETNQaOmZLaMlgHZ7R4qw= Subject key identifier: 84:E6:93:27:C3:1C:68:7E:56:8C:0F:E9:A8:AB:57:63:8F:EC:E6:5E Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 304A71BA5F4A6596938591C878D3FC25E9432045 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330323a3a2f34382d3438203d3e20323135343730.roa Signing time: Sun 26 Oct 2025 13:46:38 +0000 ROA not before: Sun 26 Oct 2025 13:41:38 +0000 ROA not after: Sun 25 Oct 2026 13:46:38 +0000 asID: 215470 IP address blocks: 2a14:7580:f302::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4a:71:ba:5f:4a:65:96:93:85:91:c8:78:d3:fc:25:e9:43:20:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Oct 26 13:41:38 2025 GMT Not After : Oct 25 13:46:38 2026 GMT Subject: CN=84E69327C31C687E568C0FE9A8AB57638FECE65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:2c:81:d3:a0:84:91:be:ee:85:af:e4:ee: c1:88:e5:ee:d2:cb:cd:d8:4a:98:cf:82:9a:47:8c: 20:d0:70:e7:19:03:ed:3b:53:e1:02:d8:6c:03:34: ba:d9:cf:38:e8:0d:94:ed:58:0e:de:23:72:3f:06: 86:1a:49:6a:bc:4c:8a:2f:22:04:3d:5f:c8:7b:f1: a2:db:a6:09:e2:1c:45:d2:38:38:54:53:2f:fd:2a: 45:29:c6:cd:da:78:7e:45:56:58:d9:17:da:3c:94: ed:fb:86:01:b1:0f:5d:5d:1e:bc:18:bb:6a:e9:3c: 86:ff:d5:cc:bd:98:72:9b:e7:01:33:34:7f:cc:09: a4:5e:03:ac:c0:b7:43:87:62:02:08:b5:71:a6:3f: 4c:bb:17:38:80:81:7e:9c:e7:a8:6c:96:3b:21:d6: 47:41:42:07:dc:08:db:7f:41:fe:31:f3:dc:21:da: 96:17:15:2f:b4:02:ea:97:f5:66:ab:36:28:47:b4: d6:25:93:cc:39:53:95:28:18:33:7c:e6:26:4a:cb: cf:49:5e:7e:36:7d:79:2d:c8:02:13:10:69:b5:99: 9b:f6:eb:8c:2f:2e:43:a9:bb:af:c4:a2:d6:93:6c: c2:3e:ae:dc:19:b7:ca:65:ea:e6:57:6e:dd:30:b5: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E6:93:27:C3:1C:68:7E:56:8C:0F:E9:A8:AB:57:63:8F:EC:E6:5E X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663330323a3a2f34382d3438203d3e20323135343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f302::/48 Signature Algorithm: sha256WithRSAEncryption 92:d1:3c:61:f9:c8:db:90:b7:c4:91:fc:91:d4:fd:2e:88:cb: 27:ff:87:be:91:d9:33:ca:c4:21:08:f4:fc:23:e9:d1:3b:33: a4:45:f0:29:ff:aa:1a:35:83:59:a2:ed:f4:3b:7d:7e:b2:8c: cb:9e:74:2a:b9:af:c7:a0:08:e7:3a:8c:ff:59:7a:6e:44:87: 09:6e:84:82:6d:b0:3a:8e:63:30:66:b8:7d:f2:34:94:bd:b8: d3:c2:8a:2b:2f:52:d3:76:f2:d8:db:fe:46:ea:26:14:f6:cf: 7d:00:6d:25:2f:cf:7c:56:01:3f:c8:b8:e9:65:be:66:05:c1: 26:16:8e:9c:6c:32:9d:bf:95:46:21:65:f6:6b:3c:86:06:38: 2e:fb:10:11:f3:89:97:9e:a1:4c:59:e7:61:71:f1:f7:31:c6: e7:32:01:31:c5:c8:52:3b:d0:b4:2f:a1:d0:2c:12:18:57:dc: 0b:09:89:00:5b:a0:81:92:0e:d4:a8:57:5b:f2:37:5e:e7:a4: e7:06:7b:dc:23:80:64:64:c5:18:3d:12:c7:91:d6:6d:e2:70: 63:da:9b:1e:41:3f:12:16:f3:4a:d7:1b:1f:e3:eb:12:ad:0f: cb:22:17:41:a7:9e:23:82:25:bd:8a:d5:c3:a0:c8:68:c5:f7: ba:0c:a0:34 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMEpxul9KZZaThZHIeNP8JelDIEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTEwMjYxMzQxMzhaFw0yNjEwMjUxMzQ2MzhaMDMxMTAvBgNV BAMTKDg0RTY5MzI3QzMxQzY4N0U1NjhDMEZFOUE4QUI1NzYzOEZFQ0U2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxiyB06CEkb7uha/k7sGI5e7S y83YSpjPgppHjCDQcOcZA+07U+EC2GwDNLrZzzjoDZTtWA7eI3I/BoYaSWq8TIov IgQ9X8h78aLbpgniHEXSODhUUy/9KkUpxs3aeH5FVljZF9o8lO37hgGxD11dHrwY u2rpPIb/1cy9mHKb5wEzNH/MCaReA6zAt0OHYgIItXGmP0y7FziAgX6c56hsljsh 1kdBQgfcCNt/Qf4x89wh2pYXFS+0AuqX9WarNihHtNYlk8w5U5UoGDN85iZKy89J Xn42fXktyAITEGm1mZv264wvLkOpu6/EotaTbMI+rtwZt8pl6uZXbt0wtRbFAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUhOaTJ8McaH5WjA/pqKtXY4/s5l4wHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2MzMzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gPMCMA0GCSqGSIb3DQEBCwUAA4IBAQCS 0Txh+cjbkLfEkfyR1P0uiMsn/4e+kdkzysQhCPT8I+nROzOkRfAp/6oaNYNZou30 O31+sozLnnQqua/HoAjnOoz/WXpuRIcJboSCbbA6jmMwZrh98jSUvbjTwoorL1LT dvLY2/5G6iYU9s99AG0lL898VgE/yLjpZb5mBcEmFo6cbDKdv5VGIWX2azyGBjgu +xAR84mXnqFMWedhcfH3McbnMgExxchSO9C0L6HQLBIYV9wLCYkAW6CBkg7UqFdb 8jde56TnBnvcI4BkZMUYPRLHkdZt4nBj2pseQT8SFvNK1xsf4+sSrQ/LIhdBp54j giW9itXDoMhoxfe6DKA0 -----END CERTIFICATE-----Generated at Wed Nov 5 06:13:45 2025 by rpki-client