$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa File: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (raw, json) Hash identifier: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU= Subject key identifier: 9D:4F:D1:9C:0D:8C:DA:C8:A5:C4:0C:BE:17:A8:4B:9C:69:DB:7B:F5 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 0227A82169DDD66AB3010D2C942C1B245E2D490E Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa Signing time: Sat 02 Aug 2025 11:42:10 +0000 ROA not before: Sat 02 Aug 2025 11:37:10 +0000 ROA not after: Sat 01 Aug 2026 11:42:10 +0000 asID: 215577 IP address blocks: 2a07:54c7:5ffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 23:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:27:a8:21:69:dd:d6:6a:b3:01:0d:2c:94:2c:1b:24:5e:2d:49:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Aug 2 11:37:10 2025 GMT Not After : Aug 1 11:42:10 2026 GMT Subject: CN=9D4FD19C0D8CDAC8A5C40CBE17A84B9C69DB7BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:d1:5f:11:f4:ce:67:7d:07:90:ba:4c:b9: f9:44:93:cd:ae:e2:2d:7a:78:50:c2:16:b1:01:87: b0:8a:69:fd:23:ee:e5:df:41:fc:69:b0:59:26:bd: ad:03:98:02:ba:3c:97:e0:54:9b:c7:50:5d:07:71: 3c:ea:7f:18:e9:e5:01:2e:0e:4d:04:db:18:65:83: a1:af:39:90:6b:86:91:6b:c0:a3:c4:0f:2c:97:73: fe:8e:f2:74:c1:96:6b:66:66:70:56:8a:f7:b0:57: 76:79:33:b0:09:c7:17:e2:66:ad:01:0b:4a:35:ac: 64:a6:9c:16:d6:f9:30:b4:58:ed:7e:b7:99:d7:c5: 89:f2:5f:cf:d3:d0:26:41:d1:21:37:84:6f:3b:a7: 26:11:44:d7:df:d2:34:3a:cf:cb:7f:e4:7a:32:9a: fd:d7:c3:e4:29:14:73:c6:2f:f8:60:8d:9d:34:c0: d1:d8:93:92:82:4b:3c:0a:71:f0:ee:5a:51:33:12: 0a:d0:7e:08:97:19:98:9e:fc:0e:6a:64:f2:2a:8d: 0f:b1:a3:c1:35:8f:a5:c8:3d:89:cb:3f:bd:54:96: 26:1a:8a:36:6c:be:69:df:1d:cb:9c:f6:1f:d6:a3: 4f:63:cc:c2:66:af:fb:0a:a2:6e:d7:e1:ac:15:55: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4F:D1:9C:0D:8C:DA:C8:A5:C4:0C:BE:17:A8:4B:9C:69:DB:7B:F5 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c7:5ffe::/48 Signature Algorithm: sha256WithRSAEncryption 9c:cf:34:4c:24:1c:31:7a:2c:4d:81:e7:b4:2d:d8:80:e1:42: 10:a3:8b:7b:cf:3e:cf:10:2e:2d:cb:c1:6b:a7:50:f8:30:f5: df:d7:b2:d8:a4:b5:12:a0:87:d6:03:92:70:69:0c:bc:13:6d: dd:34:62:8b:0d:58:c0:7f:4f:c6:30:c7:dd:fc:f2:1a:8a:f9: 84:ca:f4:cb:bc:1e:98:0f:1f:c7:9f:b5:10:99:55:63:3e:4f: 49:4e:4a:19:6b:86:4a:26:5c:9d:4b:b4:dc:f8:29:1d:df:1e: 08:45:86:8b:41:0e:81:bd:cf:dc:97:89:e5:f2:93:a4:a3:31: 89:95:04:15:56:52:ea:61:66:2e:c5:39:95:0a:a5:18:8f:29: 5d:fe:f1:70:41:93:34:30:2b:57:ec:5c:26:91:94:91:56:f2: 60:9d:74:ff:49:a6:df:60:d9:0d:82:16:d6:d9:70:92:d5:73: ee:c5:1b:45:db:a1:16:b0:35:9d:0a:4b:2f:80:5d:5b:85:50: 0e:af:85:87:6a:9b:b6:29:91:29:18:97:85:c6:32:0b:52:dd: 93:1a:c4:a6:b5:80:a5:89:57:77:c8:cf:fc:4c:46:d4:f4:d3: 8c:b5:1d:f5:e8:80:9e:e1:ba:be:ba:a1:c5:ad:64:ae:19:8c: 66:a1:5d:26 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAieoIWnd1mqzAQ0slCwbJF4tSQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTA4MDIxMTM3MTBaFw0yNjA4MDExMTQyMTBaMDMxMTAvBgNV BAMTKDlENEZEMTlDMEQ4Q0RBQzhBNUM0MENCRTE3QTg0QjlDNjlEQjdCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAdFfEfTOZ30HkLpMuflEk82u 4i16eFDCFrEBh7CKaf0j7uXfQfxpsFkmva0DmAK6PJfgVJvHUF0HcTzqfxjp5QEu Dk0E2xhlg6GvOZBrhpFrwKPEDyyXc/6O8nTBlmtmZnBWivewV3Z5M7AJxxfiZq0B C0o1rGSmnBbW+TC0WO1+t5nXxYnyX8/T0CZB0SE3hG87pyYRRNff0jQ6z8t/5Hoy mv3Xw+QpFHPGL/hgjZ00wNHYk5KCSzwKcfDuWlEzEgrQfgiXGZie/A5qZPIqjQ+x o8E1j6XIPYnLP71UliYaijZsvmnfHcuc9h/Wo09jzMJmr/sKom7X4awVVcw3AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUnU/RnA2M2silxAy+F6hLnGnbe/UwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvMi8zMjYxMzAz NzNhMzUzNDYzMzczYTM1NjY2NjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUx1/+MA0GCSqGSIb3DQEBCwUAA4IBAQCc zzRMJBwxeixNgee0LdiA4UIQo4t7zz7PEC4ty8Frp1D4MPXf17LYpLUSoIfWA5Jw aQy8E23dNGKLDVjAf0/GMMfd/PIaivmEyvTLvB6YDx/Hn7UQmVVjPk9JTkoZa4ZK JlydS7Tc+Ckd3x4IRYaLQQ6Bvc/cl4nl8pOkozGJlQQVVlLqYWYuxTmVCqUYjyld /vFwQZM0MCtX7FwmkZSRVvJgnXT/SabfYNkNghbW2XCS1XPuxRtF26EWsDWdCksv gF1bhVAOr4WHapu2KZEpGJeFxjILUt2TGsSmtYCliVd3yM/8TEbU9NOMtR316ICe 4bq+uqHFrWSuGYxmoV0m -----END CERTIFICATE-----Generated at Mon Aug 4 16:01:45 2025 by rpki-client