$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa File: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (raw, json) Hash identifier: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM= Subject key identifier: 55:2C:C9:4D:14:14:55:14:BB:E1:B5:E6:61:3D:EB:1A:58:82:EF:F8 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 3B4C7528103A2FE1868688D964962E5A5A9BC1C8 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa Signing time: Sat 02 Aug 2025 11:42:02 +0000 ROA not before: Sat 02 Aug 2025 11:37:02 +0000 ROA not after: Sat 01 Aug 2026 11:42:02 +0000 asID: 215577 IP address blocks: 2a07:54c7:5f00::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 23:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4c:75:28:10:3a:2f:e1:86:86:88:d9:64:96:2e:5a:5a:9b:c1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Aug 2 11:37:02 2025 GMT Not After : Aug 1 11:42:02 2026 GMT Subject: CN=552CC94D14145514BBE1B5E6613DEB1A5882EFF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:11:e9:b8:5f:5a:37:98:4c:cc:18:78:80: 18:9a:8f:3e:ff:1b:14:7c:10:7a:76:a0:28:97:06: c9:81:0c:c1:ab:f2:75:77:11:99:ae:8c:8e:81:d4: d2:5a:61:6a:8c:46:d2:3f:41:0c:f6:8b:fc:33:36: b7:97:63:9c:84:04:de:a4:0e:2b:c8:65:78:1d:28: ff:af:d1:87:79:43:c6:cf:dc:c7:df:26:f6:93:f1: b7:2b:a8:da:fb:66:c9:81:0e:67:b4:7a:37:f6:f5: 47:d9:b4:b2:15:b1:45:d7:a3:d6:de:19:00:d6:ce: 73:12:31:ef:6f:84:96:a5:40:6b:8b:da:da:1e:87: 21:7e:a6:c1:ae:ef:ad:67:65:96:4f:1f:a1:0c:77: 2c:ef:6f:5a:37:6b:10:1e:26:fa:83:84:73:f1:bd: 03:f3:1d:28:ac:eb:98:a9:2c:22:6d:3f:80:66:94: 7f:9e:90:a1:74:19:d8:58:03:c6:b5:d1:68:e9:1d: 5c:43:f1:cd:a9:5e:c8:31:1f:b9:cf:5a:65:88:66: 1f:ca:0b:0c:d8:5b:87:19:e0:ab:42:02:bf:6b:f8: 5b:ad:3a:e2:25:22:f9:98:f1:19:eb:10:88:29:db: dc:c8:f5:b5:68:eb:62:2e:48:7f:87:43:97:6b:b7: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2C:C9:4D:14:14:55:14:BB:E1:B5:E6:61:3D:EB:1A:58:82:EF:F8 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5f00::/44 Signature Algorithm: sha256WithRSAEncryption 15:3e:a8:ac:85:b1:a8:5c:b8:65:c8:bd:40:04:a2:dd:7e:0c: 07:00:55:88:5c:b4:f8:3e:09:b4:e8:5b:34:c8:c6:0e:77:a8: 3f:94:da:20:b1:fe:a0:bc:e5:e3:62:6d:31:5a:13:66:0b:b9: 9a:e1:52:88:87:ea:f0:6c:60:41:27:5a:03:18:2e:0c:52:96: bc:22:5e:22:98:f6:14:30:76:c3:50:fb:cd:3d:98:1f:22:fd: 99:f1:9a:c8:9c:e8:0b:0c:e5:af:a6:46:0c:2b:0c:7c:9f:5e: 02:a8:9c:7d:85:59:19:ee:ea:6f:dd:6a:c9:bb:7f:aa:dc:5e: 42:82:f5:81:3d:80:62:bb:ae:e1:c7:9c:e7:5a:78:f7:08:c2: ef:94:66:ee:49:61:59:19:82:30:3b:11:f6:eb:a0:0d:54:4e: cb:4c:db:ed:5a:64:ac:7e:d4:98:3e:4e:25:ff:1c:a9:09:4d: c0:0d:7b:ef:ff:93:e5:bb:aa:fc:ee:00:40:4e:86:c1:3a:9e: a9:5d:09:10:dd:33:f6:5d:64:bc:70:36:c3:18:62:fa:97:c8: 53:d8:41:36:ac:b1:51:b5:cb:ec:36:40:27:4e:2c:e4:24:0b: 5e:f0:0d:e3:a0:9b:de:22:56:08:93:69:92:12:4c:65:bb:a8: 19:51:72:30 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUO0x1KBA6L+GGhojZZJYuWlqbwcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTA4MDIxMTM3MDJaFw0yNjA4MDExMTQyMDJaMDMxMTAvBgNV BAMTKDU1MkNDOTREMTQxNDU1MTRCQkUxQjVFNjYxM0RFQjFBNTg4MkVGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BRHpuF9aN5hMzBh4gBiajz7/ GxR8EHp2oCiXBsmBDMGr8nV3EZmujI6B1NJaYWqMRtI/QQz2i/wzNreXY5yEBN6k DivIZXgdKP+v0Yd5Q8bP3MffJvaT8bcrqNr7ZsmBDme0ejf29UfZtLIVsUXXo9be GQDWznMSMe9vhJalQGuL2toehyF+psGu761nZZZPH6EMdyzvb1o3axAeJvqDhHPx vQPzHSis65ipLCJtP4BmlH+ekKF0GdhYA8a10WjpHVxD8c2pXsgxH7nPWmWIZh/K CwzYW4cZ4KtCAr9r+FutOuIlIvmY8RnrEIgp29zI9bVo62IuSH+HQ5drt57dAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUVSzJTRQUVRS74bXmYT3rGliC7/gwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvMi8zMjYxMzAz NzNhMzUzNDYzMzczYTM1NjYzMDMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM1MzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgdUx18AMA0GCSqGSIb3DQEBCwUAA4IBAQAV PqishbGoXLhlyL1ABKLdfgwHAFWIXLT4Pgm06Fs0yMYOd6g/lNogsf6gvOXjYm0x WhNmC7ma4VKIh+rwbGBBJ1oDGC4MUpa8Il4imPYUMHbDUPvNPZgfIv2Z8ZrInOgL DOWvpkYMKwx8n14CqJx9hVkZ7upv3WrJu3+q3F5CgvWBPYBiu67hx5znWnj3CMLv lGbuSWFZGYIwOxH266ANVE7LTNvtWmSsftSYPk4l/xypCU3ADXvv/5Plu6r87gBA TobBOp6pXQkQ3TP2XWS8cDbDGGL6l8hT2EE2rLFRtcvsNkAnTizkJAte8A3joJve IlYIk2mSEkxlu6gZUXIw -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:07 2025 by rpki-client