$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa File: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (raw, json) Hash identifier: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc= Subject key identifier: 2F:AC:E3:C0:86:12:F1:B6:FC:40:B1:97:56:05:C6:EA:60:99:59:A4 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 7B6EC4AA430FF9C31E5A7AD323B9377BC6EF88F4 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa Signing time: Sat 02 Aug 2025 15:06:16 +0000 ROA not before: Sat 02 Aug 2025 15:01:16 +0000 ROA not after: Sat 01 Aug 2026 15:06:16 +0000 asID: 149690 IP address blocks: 2a14:7581:4710::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 16:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6e:c4:aa:43:0f:f9:c3:1e:5a:7a:d3:23:b9:37:7b:c6:ef:88:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Aug 2 15:01:16 2025 GMT Not After : Aug 1 15:06:16 2026 GMT Subject: CN=2FACE3C08612F1B6FC40B1975605C6EA609959A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:a6:c5:20:3e:32:2e:b3:8b:e8:47:20:75: de:fa:02:6d:8f:6e:32:c2:7b:a8:de:8f:e6:da:e7: fb:bf:dd:ce:aa:92:b9:88:ec:3e:dd:30:06:f0:04: 31:af:81:6b:e9:67:1e:c5:87:b0:da:4d:d9:46:9c: be:20:80:21:70:01:f9:5b:dc:67:a0:04:2e:42:c0: 99:bc:51:ed:c4:ae:3a:6f:84:12:60:b0:c1:fb:14: 1c:6b:53:ec:4f:2d:da:d6:78:b3:e1:de:63:89:9e: 51:35:d1:33:5f:87:93:6e:81:8a:e0:a2:f3:c2:c2: 5e:3a:7e:f5:cb:55:30:d5:c8:a9:91:f0:c5:2b:7d: e5:85:fb:30:56:04:ce:79:f4:b6:83:3d:60:8b:38: a6:17:f9:34:f2:d4:04:55:51:a9:5d:53:de:32:d3: 07:53:b9:9e:59:c9:e3:e2:45:21:5e:b2:67:91:c6: 16:3c:d5:29:5a:46:19:6b:b7:44:69:04:39:3e:a5: 9f:26:19:f1:24:31:ec:03:f5:7e:13:a8:07:32:5e: a1:92:ec:31:e0:b2:22:f5:61:09:1b:ba:a0:4a:c1: af:4c:4a:00:11:1e:37:52:a6:11:71:4f:40:90:5d: e9:cc:47:65:9e:42:89:3f:c8:14:d6:00:1e:6b:06: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AC:E3:C0:86:12:F1:B6:FC:40:B1:97:56:05:C6:EA:60:99:59:A4 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4710::/44 Signature Algorithm: sha256WithRSAEncryption ac:96:57:ac:97:bb:88:e2:1a:d6:0c:71:19:2a:e1:b8:07:2a: c1:7c:a6:6e:b4:af:71:85:f4:f7:95:8f:22:24:ed:df:15:27: 17:6a:37:57:18:ae:d5:75:59:58:8f:94:55:5c:f1:da:ca:2c: d8:ff:96:c0:6b:4b:5b:52:29:09:37:84:a4:3f:0d:72:84:5e: 31:96:ca:f6:eb:d8:d4:fb:a0:34:81:95:2c:47:cc:22:ef:c5: 2a:f3:98:4d:a0:f5:5c:8c:12:ad:e7:db:75:ea:98:b2:70:bd: 5b:77:01:7d:25:8f:9d:55:2a:01:0a:55:97:0e:80:af:83:95: 54:fb:49:bd:e2:25:20:ae:95:6f:41:de:b0:bb:71:a0:77:e1: e5:49:85:13:31:6e:29:ee:ed:b6:67:21:a3:3f:e6:a7:b9:a7: 7e:ab:ce:06:0a:c4:b2:8f:bf:48:2f:56:6a:ef:fc:6b:b3:95: c1:88:f4:21:f0:8c:9f:13:b3:62:fd:db:bf:2e:28:41:f5:bf: bb:4d:c4:e4:7c:05:62:76:4b:56:7f:52:6a:d5:f9:bc:bb:2e: 83:6d:62:5f:07:95:c5:7d:24:85:b3:04:a3:76:4c:5c:9c:53: d1:34:d6:ab:b3:08:c9:db:01:87:d8:6d:79:59:0f:1d:b9:47: bb:96:65:0a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUe27EqkMP+cMeWnrTI7k3e8bviPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTA4MDIxNTAxMTZaFw0yNjA4MDExNTA2MTZaMDMxMTAvBgNV BAMTKDJGQUNFM0MwODYxMkYxQjZGQzQwQjE5NzU2MDVDNkVBNjA5OTU5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJqbFID4yLrOL6Ecgdd76Am2P bjLCe6jej+ba5/u/3c6qkrmI7D7dMAbwBDGvgWvpZx7Fh7DaTdlGnL4ggCFwAflb 3GegBC5CwJm8Ue3ErjpvhBJgsMH7FBxrU+xPLdrWeLPh3mOJnlE10TNfh5NugYrg ovPCwl46fvXLVTDVyKmR8MUrfeWF+zBWBM559LaDPWCLOKYX+TTy1ARVUaldU94y 0wdTuZ5ZyePiRSFesmeRxhY81SlaRhlrt0RpBDk+pZ8mGfEkMewD9X4TqAcyXqGS 7DHgsiL1YQkbuqBKwa9MSgARHjdSphFxT0CQXenMR2WeQok/yBTWAB5rBmr9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUL6zjwIYS8bb8QLGXVgXG6mCZWaQwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzczMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz NDM5MzYzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUcQMA0GCSqGSIb3DQEBCwUAA4IBAQCs llesl7uI4hrWDHEZKuG4ByrBfKZutK9xhfT3lY8iJO3fFScXajdXGK7VdVlYj5RV XPHayizY/5bAa0tbUikJN4SkPw1yhF4xlsr269jU+6A0gZUsR8wi78Uq85hNoPVc jBKt59t16piycL1bdwF9JY+dVSoBClWXDoCvg5VU+0m94iUgrpVvQd6wu3Ggd+Hl SYUTMW4p7u22ZyGjP+anuad+q84GCsSyj79IL1Zq7/xrs5XBiPQh8IyfE7Ni/du/ LihB9b+7TcTkfAVidktWf1Jq1fm8uy6DbWJfB5XFfSSFswSjdkxcnFPRNNarswjJ 2wGH2G15WQ8duUe7lmUK -----END CERTIFICATE-----Generated at Thu Aug 7 07:19:14 2025 by rpki-client