$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa File: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (raw, json) Hash identifier: FemJ+80fd71XEtyMVGoBFKhnKHjJGamQyy+E//E8CQM= Subject key identifier: E8:66:3D:46:0B:AE:C0:E0:67:50:E4:66:C1:28:B9:D9:7F:23:0B:FF Certificate issuer: /CN=AC2082F41576F66D1AA264309E33E738246AC454 Certificate serial: 52186C206970B0E88AB1737342B20567FF036286 Authority key identifier: AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa Signing time: Thu 12 Jun 2025 16:39:18 +0000 ROA not before: Thu 12 Jun 2025 16:34:18 +0000 ROA not after: Thu 11 Jun 2026 16:39:18 +0000 asID: 6517 IP address blocks: 2a14:7584:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 11:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:18:6c:20:69:70:b0:e8:8a:b1:73:73:42:b2:05:67:ff:03:62:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2082F41576F66D1AA264309E33E738246AC454 Validity Not Before: Jun 12 16:34:18 2025 GMT Not After : Jun 11 16:39:18 2026 GMT Subject: CN=E8663D460BAEC0E06750E466C128B9D97F230BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:fd:91:d1:3f:2e:e2:ee:71:1f:8f:3e:9b: 3d:8c:d4:bd:7e:5a:81:a2:f5:90:99:e3:03:4f:94: 81:5b:89:20:f2:39:b5:10:fd:ef:2f:ff:d9:e3:e3: 46:22:d1:61:37:28:a4:52:8b:c2:c3:ca:f6:67:a6: fe:32:78:c0:ba:83:fa:83:fd:cd:1a:1c:d7:8c:c2: bf:87:58:ce:14:1f:72:6a:6f:75:8a:8f:a2:83:64: 5b:5d:37:d7:d4:09:00:2b:3c:3c:19:ef:07:4f:6f: 82:43:d7:51:4e:9a:ba:06:b9:c0:78:ab:ad:62:fa: e0:03:0f:1a:95:b9:2b:9a:11:5d:b0:02:7b:eb:81: ff:2f:03:0d:04:04:35:ed:61:b1:af:e0:33:b8:c8: 62:1f:ba:ce:d0:b3:60:42:c8:1d:e4:0c:92:76:ea: 57:6f:3d:1e:ac:b5:d6:00:a3:77:5d:b2:69:40:c6: 18:12:13:61:0f:33:20:0c:4e:21:fe:35:7c:01:76: e8:e9:92:f6:d9:e7:bd:1b:d2:9c:b7:c3:4e:d3:06: 1e:21:7a:0b:10:a0:32:71:0a:43:36:4d:f6:cb:7f: 7e:67:0f:6a:88:ff:06:1e:b8:0e:11:2b:4c:94:33: 68:3c:a9:34:f7:e1:ff:c9:0b:80:77:a0:ba:13:de: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:66:3D:46:0B:AE:C0:E0:67:50:E4:66:C1:28:B9:D9:7F:23:0B:FF X509v3 Authority Key Identifier: keyid:AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:4000::/36 Signature Algorithm: sha256WithRSAEncryption 76:fb:29:21:33:d4:61:0c:e2:d5:27:62:8e:54:7d:be:55:9e: 20:4e:de:a5:1c:67:0b:45:03:0f:3b:fe:27:86:f4:58:8c:10: 9c:1c:a4:c7:9d:07:80:d2:0c:f7:72:a1:2b:e7:64:d7:e7:e8: fb:b3:69:f5:53:d0:6e:98:b7:6d:e3:2d:e7:3a:9d:2d:ee:61: 99:3b:98:48:eb:4c:b4:47:c2:e4:f1:4c:ab:47:30:81:51:e7: 09:57:aa:bc:bc:94:35:1d:51:38:8d:e7:a8:a7:32:45:ae:59: c4:ab:84:87:72:cf:f3:84:87:7a:14:63:4f:d9:c0:9e:24:56: e6:0f:92:6a:6c:17:12:4a:e3:48:ca:51:11:59:6b:d9:ff:13: 5c:7f:3e:4f:38:43:43:7e:73:46:39:78:f3:d9:b5:52:3c:2a: 7d:36:1c:21:dd:f2:b3:0a:a1:40:9a:0a:7f:b8:1b:d3:a0:a1: 17:50:d7:5c:f4:6a:b0:bc:e0:a2:a7:0c:9b:04:dd:f5:d0:d6: 34:00:95:d5:fe:b0:21:38:e4:cc:94:a8:9c:08:a2:81:36:99: 58:d4:fa:3e:14:da:47:27:90:5d:9f:99:e0:ad:6c:9d:97:30: 6c:31:6b:a0:64:4c:b0:3b:14:e7:b1:99:76:42:db:f9:be:de: b4:25:29:9b -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIUUhhsIGlwsOiKsXNzQrIFZ/8DYoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3Mzgy NDZBQzQ1NDAeFw0yNTA2MTIxNjM0MThaFw0yNjA2MTExNjM5MThaMDMxMTAvBgNV BAMTKEU4NjYzRDQ2MEJBRUMwRTA2NzUwRTQ2NkMxMjhCOUQ5N0YyMzBCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCv2R0T8u4u5xH48+mz2M1L1+ WoGi9ZCZ4wNPlIFbiSDyObUQ/e8v/9nj40Yi0WE3KKRSi8LDyvZnpv4yeMC6g/qD /c0aHNeMwr+HWM4UH3Jqb3WKj6KDZFtdN9fUCQArPDwZ7wdPb4JD11FOmroGucB4 q61i+uADDxqVuSuaEV2wAnvrgf8vAw0EBDXtYbGv4DO4yGIfus7Qs2BCyB3kDJJ2 6ldvPR6stdYAo3ddsmlAxhgSE2EPMyAMTiH+NXwBdujpkvbZ570b0py3w07TBh4h egsQoDJxCkM2TfbLf35nD2qI/wYeuA4RK0yUM2g8qTT34f/JC4B3oLoT3pLxAgMB AAGjggKAMIICfDAdBgNVHQ4EFgQU6GY9RguuwOBnUORmwSi52X8jC/8wHwYDVR0j BBgwFoAUrCCC9BV29m0aomQwnjPnOCRqxFQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzIvQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3MzgyNDZBQzQ1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQzIwODJGNDE1NzZGNjZEMUFBMjY0MzA5 RTMzRTczODI0NkFDNDU0LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81OWM4M2U1Yy00YjU1LTRhMWEtODAwMy0xYjdlY2M1MWQ0N2EvMi8zMjYxMzEz NDNhMzczNTM4MzQzYTM0MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzYz NTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQqFHWEQDANBgkqhkiG9w0BAQsFAAOCAQEAdvspITPU YQzi1SdijlR9vlWeIE7epRxnC0UDDzv+J4b0WIwQnBykx50HgNIM93KhK+dk1+fo +7Np9VPQbpi3beMt5zqdLe5hmTuYSOtMtEfC5PFMq0cwgVHnCVeqvLyUNR1ROI3n qKcyRa5ZxKuEh3LP84SHehRjT9nAniRW5g+SamwXEkrjSMpREVlr2f8TXH8+TzhD Q35zRjl489m1UjwqfTYcId3yswqhQJoKf7gb06ChF1DXXPRqsLzgoqcMmwTd9dDW NACV1f6wITjkzJSonAiigTaZWNT6PhTaRyeQXZ+Z4K1snZcwbDFroGRMsDsU57GZ dkLb+b7etCUpmw== -----END CERTIFICATE-----Generated at Mon Jun 16 00:42:29 2025 by rpki-client