$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa File: 326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa (raw, json) Hash identifier: d6zE0vPcP8Hi7fB0sWHhmkUIMAYTtQOCQQODiEd8kFk= Subject key identifier: 3B:34:C3:FF:48:02:1E:BE:2C:B9:00:19:B6:B4:36:D1:E5:B4:76:AC Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 4A8D2EDC8F16D73E7CEEFF46AFF23FDC6F1530D3 Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa Signing time: Sat 14 Jun 2025 13:08:50 +0000 ROA not before: Sat 14 Jun 2025 13:03:50 +0000 ROA not after: Sat 13 Jun 2026 13:08:50 +0000 asID: 207695 IP address blocks: 2a06:1283:8b01::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 20:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8d:2e:dc:8f:16:d7:3e:7c:ee:ff:46:af:f2:3f:dc:6f:15:30:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Jun 14 13:03:50 2025 GMT Not After : Jun 13 13:08:50 2026 GMT Subject: CN=3B34C3FF48021EBE2CB90019B6B436D1E5B476AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:f0:25:c4:2a:68:aa:26:c2:7d:6e:f3:e4: 69:95:f6:d6:0e:56:82:48:c3:40:7b:ed:26:a5:2c: 8b:cd:bb:ad:a1:b7:66:02:4a:95:fe:1d:f3:6b:b6: 11:a9:11:78:83:6b:6c:78:a9:23:ee:cd:c9:4e:18: 04:b5:84:5e:30:64:ba:d3:99:4c:51:d0:cd:70:ef: 26:bd:b3:f2:1e:0a:95:3f:0c:07:3e:15:b2:40:bd: 78:a5:95:aa:5e:23:3d:5b:bd:af:d5:2e:d3:f3:a9: 5d:8e:a5:73:c8:ff:c6:91:23:7c:dc:f7:40:fb:98: 93:40:a9:7a:e6:a3:dc:c6:81:e6:bc:1c:a1:24:c6: 3c:38:9b:de:61:5c:db:4a:81:2c:28:fd:1d:79:fc: 77:92:87:51:0a:b8:08:6d:68:b0:6f:a2:22:aa:ca: 26:bb:7a:54:89:86:c5:2a:55:59:6e:af:a2:f9:0b: 1d:bf:ba:27:50:ab:bb:ca:69:4d:12:be:f0:1c:9a: 27:45:4a:7b:df:7d:7a:85:e5:89:ee:62:3e:78:fe: 9f:87:3a:08:f0:bf:73:1b:de:07:d9:12:fa:d4:95: 64:6a:0f:ba:72:3a:93:9e:53:e0:de:75:f9:4d:c6: f6:46:c4:eb:3f:9b:4b:40:14:17:7e:5a:d6:e3:cf: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:34:C3:FF:48:02:1E:BE:2C:B9:00:19:B6:B4:36:D1:E5:B4:76:AC X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b01::/48 Signature Algorithm: sha256WithRSAEncryption 5f:6c:53:9f:be:fc:4f:6b:19:96:76:0a:bc:4e:1d:86:d9:af: b1:f9:f4:a0:00:bf:57:06:95:2d:a2:a2:10:ed:69:32:ad:a4: 98:51:df:09:8f:62:f2:09:79:9a:c7:f3:ae:4a:c2:ad:cb:4f: 76:b0:2e:38:e3:c4:2d:13:58:db:14:5a:45:e2:e5:5f:d2:c7: f9:e8:d4:91:df:b0:62:97:7a:c3:f1:56:bf:bd:0a:3f:89:4b: 87:0a:00:1b:49:1f:31:c3:a3:ce:21:d6:7c:77:5f:bb:4b:d1: 70:83:c3:fd:94:04:9b:06:c9:61:a6:f6:74:57:26:77:ad:d9: 39:d5:7e:bc:80:9b:9e:0b:97:14:91:54:3a:93:be:eb:a7:f7: 3f:f8:1f:a5:d5:a7:c6:79:69:4e:11:12:f8:9e:f9:54:2e:dd: 73:94:c3:44:05:00:1b:3b:ca:e1:f2:f1:50:ec:b9:b7:eb:3a: 90:a2:40:49:ca:52:75:49:67:84:3f:38:8d:1e:b2:d4:65:ce: a5:f8:e1:bb:de:fc:f2:5a:65:f9:b4:9e:6f:09:c5:94:2a:4a: 6d:34:0e:7a:4a:c2:25:5a:8f:27:01:90:b5:c2:2d:e8:15:91: 79:2f:13:c0:fd:ce:5f:84:59:89:68:90:7f:62:37:5e:9d:31: a3:99:1f:cf -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUSo0u3I8W1z587v9Gr/I/3G8VMNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNTA2MTQxMzAzNTBaFw0yNjA2MTMxMzA4NTBaMDMxMTAvBgNV BAMTKDNCMzRDM0ZGNDgwMjFFQkUyQ0I5MDAxOUI2QjQzNkQxRTVCNDc2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVvAlxCpoqibCfW7z5GmV9tYO VoJIw0B77SalLIvNu62ht2YCSpX+HfNrthGpEXiDa2x4qSPuzclOGAS1hF4wZLrT mUxR0M1w7ya9s/IeCpU/DAc+FbJAvXillapeIz1bva/VLtPzqV2OpXPI/8aRI3zc 90D7mJNAqXrmo9zGgea8HKEkxjw4m95hXNtKgSwo/R15/HeSh1EKuAhtaLBvoiKq yia7elSJhsUqVVlur6L5Cx2/uidQq7vKaU0SvvAcmidFSnvffXqF5YnuYj54/p+H Ogjwv3Mb3gfZEvrUlWRqD7pyOpOeU+DedflNxvZGxOs/m0tAFBd+Wtbjz/sdAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUOzTD/0gCHr4suQAZtrQ20eW0dqwwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzMDMxM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMwMzczNjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiwEwDQYJKoZIhvcNAQELBQADggEB AF9sU5++/E9rGZZ2CrxOHYbZr7H59KAAv1cGlS2iohDtaTKtpJhR3wmPYvIJeZrH 865Kwq3LT3awLjjjxC0TWNsUWkXi5V/Sx/no1JHfsGKXesPxVr+9Cj+JS4cKABtJ HzHDo84h1nx3X7tL0XCDw/2UBJsGyWGm9nRXJnet2TnVfryAm54LlxSRVDqTvuun 9z/4H6XVp8Z5aU4REvie+VQu3XOUw0QFABs7yuHy8VDsubfrOpCiQEnKUnVJZ4Q/ OI0estRlzqX44bve/PJaZfm0nm8JxZQqSm00DnpKwiVajycBkLXCLegVkXkvE8D9 zl+EWYlokH9iN16dMaOZH88= -----END CERTIFICATE-----Generated at Sun Jun 15 13:21:48 2025 by rpki-client