$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa File: 326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa (raw, json) Hash identifier: gGGmoVRdDJpfumR8HrIQxuhNHolKOgXQjiMyUg//KAg= Subject key identifier: 1A:69:7D:89:CC:A5:32:9D:D3:7B:13:42:4F:82:11:1B:3E:AC:55:27 Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 4FECC3F3157BDEC8B2F27AB3BD652926D995ADCB Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa Signing time: Sat 14 Jun 2025 13:09:05 +0000 ROA not before: Sat 14 Jun 2025 13:04:05 +0000 ROA not after: Sat 13 Jun 2026 13:09:05 +0000 asID: 207695 IP address blocks: 2a06:1283:8b02::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 05:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ec:c3:f3:15:7b:de:c8:b2:f2:7a:b3:bd:65:29:26:d9:95:ad:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Jun 14 13:04:05 2025 GMT Not After : Jun 13 13:09:05 2026 GMT Subject: CN=1A697D89CCA5329DD37B13424F82111B3EAC5527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:e9:d3:d4:a1:6d:7f:02:d5:1a:a3:04:2b: 87:8d:fd:03:06:7f:d5:6e:a1:7b:cc:d5:d1:a1:a5: e7:a2:7c:9c:cd:ed:0e:20:c1:b3:4b:2c:52:5d:5f: c6:34:12:b8:57:ca:02:83:33:92:6e:94:b9:e4:b3: 43:92:10:c5:1c:bd:97:d3:45:79:a3:23:ae:58:5a: 64:4a:9e:ba:3e:6c:e7:8e:5e:be:ce:c4:73:b0:7b: 75:a0:f9:74:da:73:c7:09:f9:7f:95:e9:24:d4:6c: 80:50:ef:97:26:cf:87:3c:59:90:5d:27:35:a3:50: 79:48:8d:9e:ab:00:b2:1f:f4:87:e2:92:e1:0b:d2: 5e:1f:d1:93:de:78:76:37:68:b6:59:43:6f:1a:33: b1:0f:3e:db:d2:1a:46:e3:74:42:ef:a0:b7:c6:04: 30:a8:be:28:31:8b:42:74:64:4b:fb:9d:86:53:04: be:72:f7:91:33:d9:6e:4f:c5:46:8f:90:99:1e:a3: 2b:5f:a5:e5:23:47:60:e5:52:06:5c:af:4d:fc:a0: 38:db:c1:a5:84:4f:8c:84:5f:14:f7:d2:9f:88:54: 41:cc:25:cd:ac:c6:47:22:d1:b5:0f:e4:16:10:12: bc:52:e1:c1:7f:a0:ee:fa:09:51:f2:2c:de:4c:20: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:69:7D:89:CC:A5:32:9D:D3:7B:13:42:4F:82:11:1B:3E:AC:55:27 X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b02::/48 Signature Algorithm: sha256WithRSAEncryption 58:7d:76:e5:1a:7f:00:df:dc:b6:b3:2b:38:6d:c3:6b:9d:28: ff:71:27:4f:4c:d4:b1:24:7c:75:0b:8e:a6:80:57:a9:ce:ed: ad:94:32:bb:c4:25:08:9f:0f:5f:9d:fd:c7:91:d5:1a:67:e7: 7c:1d:55:ba:9e:d0:79:d3:98:b7:95:7f:dd:08:13:23:83:d2: ba:7e:db:c4:16:0c:15:66:42:75:cd:4e:1a:1c:cd:d7:1c:cf: 2c:67:35:84:3f:09:7e:2e:02:cc:05:f4:c2:6b:c0:0c:c6:66: a7:d9:19:d5:d2:15:56:1b:44:b3:87:f7:f5:71:7c:cb:5e:42: bc:c0:2a:db:12:ae:7b:9c:cb:57:93:96:09:54:c3:b5:ef:08: fe:7d:ba:fa:7e:ce:89:c2:23:0d:12:67:37:97:b1:9c:13:71: dd:67:26:72:4c:5d:8c:ff:bf:1f:dc:5a:17:92:6a:29:16:e9: b0:93:09:22:f9:0b:eb:9d:7b:dd:20:d9:ef:2b:86:cf:1e:8a: ca:b9:58:60:97:77:4c:5a:0c:6d:cb:e6:89:30:65:6d:b0:b9: 78:44:68:99:11:bf:be:20:4d:d6:7d:ef:34:eb:c7:62:1e:4d: 76:53:e8:50:46:c0:8d:82:1f:2c:8c:0c:3c:38:ed:98:b6:47: cb:47:92:84 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUT+zD8xV73siy8nqzvWUpJtmVrcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNTA2MTQxMzA0MDVaFw0yNjA2MTMxMzA5MDVaMDMxMTAvBgNV BAMTKDFBNjk3RDg5Q0NBNTMyOUREMzdCMTM0MjRGODIxMTFCM0VBQzU1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGOnT1KFtfwLVGqMEK4eN/QMG f9VuoXvM1dGhpeeifJzN7Q4gwbNLLFJdX8Y0ErhXygKDM5JulLnks0OSEMUcvZfT RXmjI65YWmRKnro+bOeOXr7OxHOwe3Wg+XTac8cJ+X+V6STUbIBQ75cmz4c8WZBd JzWjUHlIjZ6rALIf9IfikuEL0l4f0ZPeeHY3aLZZQ28aM7EPPtvSGkbjdELvoLfG BDCovigxi0J0ZEv7nYZTBL5y95Ez2W5PxUaPkJkeoytfpeUjR2DlUgZcr038oDjb waWET4yEXxT30p+IVEHMJc2sxkci0bUP5BYQErxS4cF/oO76CVHyLN5MIFp5AgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUGml9icylMp3TexNCT4IRGz6sVScwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzMDMyM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMwMzczNjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiwIwDQYJKoZIhvcNAQELBQADggEB AFh9duUafwDf3LazKzhtw2udKP9xJ09M1LEkfHULjqaAV6nO7a2UMrvEJQifD1+d /ceR1Rpn53wdVbqe0HnTmLeVf90IEyOD0rp+28QWDBVmQnXNThoczdcczyxnNYQ/ CX4uAswF9MJrwAzGZqfZGdXSFVYbRLOH9/VxfMteQrzAKtsSrnucy1eTlglUw7Xv CP59uvp+zonCIw0SZzeXsZwTcd1nJnJMXYz/vx/cWheSaikW6bCTCSL5C+ude90g 2e8rhs8eisq5WGCXd0xaDG3L5okwZW2wuXhEaJkRv74gTdZ97zTrx2IeTXZT6FBG wI2CHyyMDDw47Zi2R8tHkoQ= -----END CERTIFICATE-----Generated at Sun Jun 15 21:57:31 2025 by rpki-client