$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa File: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (raw, json) Hash identifier: mky/ldC1XpVEwoLHqIyOpw4wZEQNfx0y97P4Ne2BiJs= Subject key identifier: 8F:CD:D2:8E:EE:EA:4E:55:6D:9F:1E:E2:63:93:9F:97:9B:82:23:72 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 38CC18CBEBFE138CE44BCA760E86908B16D9C424 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa Signing time: Mon 27 Oct 2025 23:31:33 +0000 ROA not before: Mon 27 Oct 2025 23:26:33 +0000 ROA not after: Mon 26 Oct 2026 23:31:33 +0000 asID: 215470 IP address blocks: 2a0f:85c1:390::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 21:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cc:18:cb:eb:fe:13:8c:e4:4b:ca:76:0e:86:90:8b:16:d9:c4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Oct 27 23:26:33 2025 GMT Not After : Oct 26 23:31:33 2026 GMT Subject: CN=8FCDD28EEEEA4E556D9F1EE263939F979B822372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:4c:af:87:a5:96:29:c6:b9:4f:c5:3b:31: 9a:84:3a:24:f7:27:64:4a:a9:4e:5f:4f:61:0a:21: ea:d1:4d:ce:11:88:33:0b:14:ef:d1:7b:18:0c:eb: 38:11:74:84:13:40:18:ac:dc:60:5d:c8:26:97:63: 51:91:d1:5c:cd:49:48:05:d4:16:ac:7b:a1:f9:02: 90:01:a1:92:df:7f:1d:01:51:e4:c2:7f:ea:49:38: 13:42:ac:d0:0b:9c:bb:4f:c9:a8:e4:2a:cf:ee:08: fa:fd:99:fa:c4:bd:00:58:aa:8e:1c:a4:b3:2c:af: d4:70:a0:ea:56:67:04:08:34:8f:c7:06:92:a8:a8: d7:62:16:1a:c4:80:1e:bd:2c:3c:0a:1e:e7:13:ce: 52:73:5e:1c:0f:9e:5e:5b:e9:7c:1b:0c:8d:ca:94: 0f:a6:17:c4:82:ba:70:f5:a0:2f:f9:72:80:10:9f: 3b:0a:8b:69:5b:38:02:0e:b8:0e:b1:69:95:5b:90: 7b:d5:a0:12:5c:a5:a0:fc:63:26:07:46:fe:c7:47: 32:90:0a:96:52:53:39:88:1b:95:57:a8:ba:54:3c: c4:00:de:6c:7f:78:e1:1d:0d:10:95:2a:a1:ab:d0: 11:40:87:57:ae:b2:e5:ac:99:ce:1b:e2:20:8c:ad: 60:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CD:D2:8E:EE:EA:4E:55:6D:9F:1E:E2:63:93:9F:97:9B:82:23:72 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:390::/48 Signature Algorithm: sha256WithRSAEncryption a0:5e:e9:c2:c7:5c:85:2e:bf:11:96:6d:7b:08:ad:8b:cf:ea: bc:00:eb:e5:97:bf:ee:95:ea:43:41:82:a6:03:b3:26:0b:4b: db:35:cb:0f:6c:51:5f:46:ae:d2:65:be:5d:8c:49:80:98:83: fe:e9:cb:94:39:70:f4:76:99:f7:26:ee:0d:c3:6d:16:08:f8: 3a:ed:77:c9:ad:d7:3e:4f:94:95:27:ba:f7:6c:2f:01:e3:f1: 74:e6:b3:66:8b:0c:5b:77:db:08:1a:c1:cc:4e:79:dc:87:75: bc:01:5c:a5:ac:b9:2b:15:68:d5:65:36:f4:1e:22:f5:d7:8a: db:17:48:77:be:16:09:40:bd:d8:47:da:ba:93:4e:48:d7:e9: 45:1f:77:83:ed:17:50:4e:99:f3:eb:f9:0d:ee:05:9d:08:ae: 67:57:f0:41:91:88:7b:21:d4:dd:00:4b:61:12:bf:65:08:e2: fa:5b:ac:4f:1a:06:b6:96:c1:ac:ca:2a:12:7c:59:b9:b0:5b: b0:98:03:14:61:e1:7f:eb:5e:2b:cc:41:55:77:26:4f:b4:7c: 5e:8c:af:30:e3:b6:f7:10:82:91:52:0c:09:6e:2c:6a:e5:74: 9c:34:45:5f:ee:0d:14:04:e2:28:44:25:e0:21:dd:6b:35:ce: a3:6b:00:b2 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUOMwYy+v+E4zkS8p2DoaQixbZxCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTEwMjcyMzI2MzNaFw0yNjEwMjYyMzMxMzNaMDMxMTAvBgNV BAMTKDhGQ0REMjhFRUVFQTRFNTU2RDlGMUVFMjYzOTM5Rjk3OUI4MjIzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HUyvh6WWKca5T8U7MZqEOiT3 J2RKqU5fT2EKIerRTc4RiDMLFO/RexgM6zgRdIQTQBis3GBdyCaXY1GR0VzNSUgF 1Base6H5ApABoZLffx0BUeTCf+pJOBNCrNALnLtPyajkKs/uCPr9mfrEvQBYqo4c pLMsr9RwoOpWZwQINI/HBpKoqNdiFhrEgB69LDwKHucTzlJzXhwPnl5b6XwbDI3K lA+mF8SCunD1oC/5coAQnzsKi2lbOAIOuA6xaZVbkHvVoBJcpaD8YyYHRv7HRzKQ CpZSUzmIG5VXqLpUPMQA3mx/eOEdDRCVKqGr0BFAh1eusuWsmc4b4iCMrWB9AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUj83Sju7qTlVtnx7iY5Ofl5uCI3IwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzMzkzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM0MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDkDANBgkqhkiG9w0BAQsFAAOCAQEAoF7p wsdchS6/EZZtewiti8/qvADr5Ze/7pXqQ0GCpgOzJgtL2zXLD2xRX0au0mW+XYxJ gJiD/unLlDlw9HaZ9ybuDcNtFgj4Ou13ya3XPk+UlSe692wvAePxdOazZosMW3fb CBrBzE553Id1vAFcpay5KxVo1WU29B4i9deK2xdId74WCUC92EfaupNOSNfpRR93 g+0XUE6Z8+v5De4FnQiuZ1fwQZGIeyHU3QBLYRK/ZQji+lusTxoGtpbBrMoqEnxZ ubBbsJgDFGHhf+teK8xBVXcmT7R8XoyvMOO29xCCkVIMCW4sauV0nDRFX+4NFATi KEQl4CHdazXOo2sAsg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:39 2025 by rpki-client