$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa File: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (raw, json) Hash identifier: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4= Subject key identifier: E0:8D:0B:08:F3:56:1A:7F:4C:7B:F3:22:37:EF:ED:12:6F:D8:DB:90 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 4F2FFE198ED9B4B778B7FE1584368A991295BCE2 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa Signing time: Sat 25 Oct 2025 22:57:40 +0000 ROA not before: Sat 25 Oct 2025 22:52:40 +0000 ROA not after: Sat 24 Oct 2026 22:57:40 +0000 asID: 214033 IP address blocks: 2a06:1283:8905::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2f:fe:19:8e:d9:b4:b7:78:b7:fe:15:84:36:8a:99:12:95:bc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Oct 25 22:52:40 2025 GMT Not After : Oct 24 22:57:40 2026 GMT Subject: CN=E08D0B08F3561A7F4C7BF32237EFED126FD8DB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:6d:39:c7:2d:6b:55:b8:66:8d:c3:1c:51: 1e:46:f6:99:55:ba:27:f5:41:ec:f4:ce:a6:86:90: 80:e2:80:a1:c2:74:56:21:03:dc:5c:52:49:4f:91: 5a:32:e1:9b:41:a3:95:d7:d7:d7:f1:5e:ae:1a:ed: 38:ee:33:b3:a7:54:dd:f2:fb:1f:ca:4f:14:fa:94: 87:19:b8:74:a1:5e:29:0a:f3:5e:5a:1a:30:cc:02: 6d:78:c0:93:8b:86:1a:36:e9:ab:68:e8:45:39:73: 90:b3:5b:2d:02:43:4c:77:9a:68:bf:e2:43:b7:1e: 30:b1:cd:bc:30:84:fe:ac:f7:21:24:f6:2f:1a:81: bc:56:16:0b:9a:bd:92:92:89:ed:df:85:8c:11:c7: 62:fb:87:e0:3c:08:a4:dd:5a:ab:ed:4f:15:37:78: 3d:6b:29:46:33:5a:8e:ff:00:1a:37:57:a7:61:41: 55:82:56:f2:f3:1e:fe:6d:e8:26:45:a3:a9:27:bb: aa:67:b9:ec:2e:4c:2c:93:2c:ea:ad:42:23:32:94: 74:82:c9:66:4a:87:b8:0d:ba:d5:80:66:bf:a8:3e: d9:cc:d3:30:4d:35:d5:2a:90:d6:b6:fe:81:5c:67: 57:70:7a:08:12:04:ec:1a:0d:b8:53:99:16:3b:f5: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8D:0B:08:F3:56:1A:7F:4C:7B:F3:22:37:EF:ED:12:6F:D8:DB:90 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8905::/48 Signature Algorithm: sha256WithRSAEncryption 8e:dc:40:71:e7:09:9b:51:a7:94:cd:c5:f7:ad:ea:ff:32:a6: b6:38:54:3d:27:91:22:f6:0a:e4:39:de:49:73:d8:43:ae:ea: ed:6d:b7:25:12:b0:e0:94:b7:9f:cc:d0:26:ea:7e:83:25:aa: 70:94:a4:0d:b3:09:be:fa:1c:91:28:ff:ab:a3:f3:ba:15:f3: af:14:e4:27:49:7f:59:22:79:2c:30:8d:f9:33:5d:dd:b8:ce: 04:1d:da:78:1d:c8:12:c5:6e:dd:45:63:8c:e8:5c:3c:8e:a9: cd:da:75:ec:10:cd:b1:04:24:3e:30:ca:96:01:15:d0:96:db: df:d1:ff:31:43:93:f4:44:26:3a:91:f9:1d:cb:af:ef:cd:f8: b2:28:11:d7:6f:a0:47:42:ef:30:ef:77:62:cc:02:22:0d:76: 34:b5:e7:e3:1a:2e:92:d4:8c:20:a9:ae:5c:ab:e9:5a:fa:1d: f2:88:06:c9:0f:fb:cb:8c:cd:cb:2a:f8:f4:78:14:59:14:1a: 86:ce:15:0e:43:d3:09:a0:92:8f:3f:33:8a:cd:e9:f5:7d:69: 21:a4:d0:9b:d1:2a:d1:df:40:d4:b0:f9:5e:e0:05:52:65:da: 2f:f2:d8:69:30:37:79:c6:c9:8a:ce:32:7a:a3:74:32:bb:f7: cd:db:06:92 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUTy/+GY7ZtLd4t/4VhDaKmRKVvOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTEwMjUyMjUyNDBaFw0yNjEwMjQyMjU3NDBaMDMxMTAvBgNV BAMTKEUwOEQwQjA4RjM1NjFBN0Y0QzdCRjMyMjM3RUZFRDEyNkZEOERCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfG05xy1rVbhmjcMcUR5G9plV uif1Qez0zqaGkIDigKHCdFYhA9xcUklPkVoy4ZtBo5XX19fxXq4a7TjuM7OnVN3y +x/KTxT6lIcZuHShXikK815aGjDMAm14wJOLhho26ato6EU5c5CzWy0CQ0x3mmi/ 4kO3HjCxzbwwhP6s9yEk9i8agbxWFguavZKSie3fhYwRx2L7h+A8CKTdWqvtTxU3 eD1rKUYzWo7/ABo3V6dhQVWCVvLzHv5t6CZFo6knu6pnuewuTCyTLOqtQiMylHSC yWZKh7gNutWAZr+oPtnM0zBNNdUqkNa2/oFcZ1dweggSBOwaDbhTmRY79Wg5AgMB AAGjggKHMIICgzAdBgNVHQ4EFgQU4I0LCPNWGn9Me/MiN+/tEm/Y25AwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzkzMDM1M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzQzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiQUwDQYJKoZIhvcNAQELBQADggEB AI7cQHHnCZtRp5TNxfet6v8yprY4VD0nkSL2CuQ53klz2EOu6u1ttyUSsOCUt5/M 0CbqfoMlqnCUpA2zCb76HJEo/6uj87oV868U5CdJf1kieSwwjfkzXd24zgQd2ngd yBLFbt1FY4zoXDyOqc3adewQzbEEJD4wypYBFdCW29/R/zFDk/REJjqR+R3Lr+/N +LIoEddvoEdC7zDvd2LMAiINdjS15+MaLpLUjCCprlyr6Vr6HfKIBskP+8uMzcsq +PR4FFkUGobOFQ5D0wmgko8/M4rN6fV9aSGk0JvRKtHfQNSw+V7gBVJl2i/y2Gkw N3nGyYrOMnqjdDK7983bBpI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:57:48 2025 by rpki-client