$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa File: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (raw, json) Hash identifier: cDRjR1Gs+0Iu9xhCGCcpko1viLmb0+uf6ywJ7Kgfxpo= Subject key identifier: B5:FD:25:BB:5D:3B:44:60:DE:01:F7:0A:53:E1:B1:4A:5E:E6:C4:75 Certificate issuer: /CN=AC2082F41576F66D1AA264309E33E738246AC454 Certificate serial: 4A691C8EF7525F082BB2C00DB1186539A294CF79 Authority key identifier: AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa Signing time: Thu 12 Jun 2025 16:38:15 +0000 ROA not before: Thu 12 Jun 2025 16:33:15 +0000 ROA not after: Thu 11 Jun 2026 16:38:15 +0000 asID: 211358 IP address blocks: 2a14:7584:4800::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 12:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:69:1c:8e:f7:52:5f:08:2b:b2:c0:0d:b1:18:65:39:a2:94:cf:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2082F41576F66D1AA264309E33E738246AC454 Validity Not Before: Jun 12 16:33:15 2025 GMT Not After : Jun 11 16:38:15 2026 GMT Subject: CN=B5FD25BB5D3B4460DE01F70A53E1B14A5EE6C475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:41:95:fe:c1:92:1e:3b:77:db:8c:6e:1f: dd:ae:d6:9c:03:4e:8f:5c:c1:78:1b:7b:70:33:69: 40:e4:09:81:49:86:de:f4:7a:a3:14:7e:1f:00:b0: 47:9f:93:63:07:03:ee:87:3f:48:fb:54:67:88:04: 3b:40:6f:9f:7a:b0:dd:47:56:54:1e:2f:6a:f7:03: ab:9f:f9:dd:79:98:98:b6:8c:9b:bc:19:e8:8e:6d: e7:a5:75:13:62:3f:9d:48:e0:d8:e9:14:06:77:fe: e5:7a:7c:85:c9:a5:18:71:9a:ab:70:91:b7:0e:f0: aa:c9:24:4b:cf:a1:cb:34:ec:c6:32:53:e5:71:3e: 77:d1:ea:48:3a:24:41:79:2b:70:83:9e:07:5d:fc: c4:e0:28:9d:fe:40:a1:ee:e1:76:05:e7:36:47:e9: db:ba:2c:2a:1a:a9:e5:ae:fd:06:f4:d2:ce:21:96: 58:61:29:b2:5c:bf:7f:46:19:8c:a6:2d:6e:90:df: a6:23:c9:01:2f:02:0e:58:fb:92:2a:48:2e:cc:5f: 8e:5b:d8:8d:04:b3:d7:e8:c0:cd:05:df:b9:f8:9d: e3:25:35:31:f3:da:85:3b:4d:40:b3:2e:26:23:4f: 0f:23:5a:bd:7d:50:d6:20:dd:24:dc:05:c7:c0:0a: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FD:25:BB:5D:3B:44:60:DE:01:F7:0A:53:E1:B1:4A:5E:E6:C4:75 X509v3 Authority Key Identifier: keyid:AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:4800::/48 Signature Algorithm: sha256WithRSAEncryption 6c:11:1d:9e:e9:53:99:8c:2d:28:e7:9d:05:a1:4d:f3:47:4b: 90:39:8f:08:1b:28:a7:05:29:56:93:72:d9:d3:bb:a5:b3:d1: 2b:c1:ce:0a:bb:d1:1e:16:3c:04:cd:16:f5:40:05:68:ea:4c: 98:02:50:3a:6d:ed:97:73:fa:d1:24:d4:4a:8a:5d:0e:67:b9: 6b:5b:6a:6a:f1:5c:d1:a9:16:39:0d:54:f8:4d:a7:9c:5a:63: 12:b5:bc:6e:bb:68:b0:a7:9d:d8:0c:ee:92:df:bf:e7:dd:f5: fd:03:57:3c:3c:59:47:4f:44:c3:e3:0c:73:3b:0f:32:08:66: 16:fb:86:84:9b:9b:3e:dd:aa:f0:1a:6f:07:48:6c:22:d9:4c: 9f:37:be:d8:93:1a:b3:45:47:4a:3b:03:d0:ad:c6:84:5a:c0: e5:f1:4a:09:ad:a1:12:da:5a:2c:ca:dc:a8:6b:c3:81:b7:f6: 38:cd:c0:79:c7:d2:a0:3c:a1:91:74:a2:6c:97:be:d6:99:cd: ba:3c:9d:bf:9c:3f:5d:fc:7b:19:ab:47:db:37:46:c7:88:e3: b6:00:0b:a7:cb:90:42:10:06:89:b9:bb:3b:15:eb:21:95:f2: 2e:21:b0:02:59:36:d0:9d:37:1e:5a:b8:6d:8e:89:3c:af:fd: c1:2b:ce:04 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSmkcjvdSXwgrssANsRhlOaKUz3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3Mzgy NDZBQzQ1NDAeFw0yNTA2MTIxNjMzMTVaFw0yNjA2MTExNjM4MTVaMDMxMTAvBgNV BAMTKEI1RkQyNUJCNUQzQjQ0NjBERTAxRjcwQTUzRTFCMTRBNUVFNkM0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLkGV/sGSHjt324xuH92u1pwD To9cwXgbe3AzaUDkCYFJht70eqMUfh8AsEefk2MHA+6HP0j7VGeIBDtAb596sN1H VlQeL2r3A6uf+d15mJi2jJu8GeiObeeldRNiP51I4NjpFAZ3/uV6fIXJpRhxmqtw kbcO8KrJJEvPocs07MYyU+VxPnfR6kg6JEF5K3CDngdd/MTgKJ3+QKHu4XYF5zZH 6du6LCoaqeWu/Qb00s4hllhhKbJcv39GGYymLW6Q36YjyQEvAg5Y+5IqSC7MX45b 2I0Es9fowM0F37n4neMlNTHz2oU7TUCzLiYjTw8jWr19UNYg3STcBcfACj3NAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUtf0lu107RGDeAfcKU+GxSl7mxHUwHwYDVR0j BBgwFoAUrCCC9BV29m0aomQwnjPnOCRqxFQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzIvQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3MzgyNDZBQzQ1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQzIwODJGNDE1NzZGNjZEMUFBMjY0MzA5 RTMzRTczODI0NkFDNDU0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81OWM4M2U1Yy00YjU1LTRhMWEtODAwMy0xYjdlY2M1MWQ0N2EvMi8zMjYxMzEz NDNhMzczNTM4MzQzYTM0MzgzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTMxMzMzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1hEgAMA0GCSqGSIb3DQEBCwUAA4IBAQBs ER2e6VOZjC0o550FoU3zR0uQOY8IGyinBSlWk3LZ07uls9Erwc4Ku9EeFjwEzRb1 QAVo6kyYAlA6be2Xc/rRJNRKil0OZ7lrW2pq8VzRqRY5DVT4TaecWmMStbxuu2iw p53YDO6S37/n3fX9A1c8PFlHT0TD4wxzOw8yCGYW+4aEm5s+3arwGm8HSGwi2Uyf N77YkxqzRUdKOwPQrcaEWsDl8UoJraES2losytyoa8OBt/Y4zcB5x9KgPKGRdKJs l77Wmc26PJ2/nD9d/HsZq0fbN0bHiOO2AAuny5BCEAaJubs7FeshlfIuIbACWTbQ nTceWrhtjok8r/3BK84E -----END CERTIFICATE-----Generated at Wed Jun 18 05:25:06 2025 by rpki-client