$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa File: 326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (raw, json) Hash identifier: r9X5RrRgRpcWg3o0DruFRABIQJqS6HSEppSZqEX6zcQ= Subject key identifier: 19:8D:34:AA:8C:7F:6B:36:92:28:21:8E:E9:5F:4B:BE:FE:14:27:1A Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 2280A68F97BE6BDEDA89A83DC751B63A2311CBA5 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa Signing time: Fri 04 Jul 2025 16:48:01 +0000 ROA not before: Fri 04 Jul 2025 16:43:01 +0000 ROA not after: Fri 03 Jul 2026 16:48:01 +0000 asID: 211066 IP address blocks: 2a06:1283:8f00::/40 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 12:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:80:a6:8f:97:be:6b:de:da:89:a8:3d:c7:51:b6:3a:23:11:cb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:01 2025 GMT Not After : Jul 3 16:48:01 2026 GMT Subject: CN=198D34AA8C7F6B369228218EE95F4BBEFE14271A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7a:4b:09:27:52:ab:63:53:90:c4:f2:64:e3: dd:b6:91:cf:66:16:cf:18:31:eb:19:99:3e:02:09: 3b:11:82:6e:2b:39:fc:34:ea:b2:0d:73:cb:63:96: a6:4c:76:ac:0d:11:fb:84:ed:fd:ac:3c:79:ec:1a: 0b:3e:51:52:2c:74:5d:99:cb:f0:bd:88:bc:f9:57: 93:a6:7c:b8:79:f8:4a:5a:ae:ca:b7:83:2c:b5:da: d1:12:df:65:88:4c:6f:ee:77:09:bc:a9:3f:3b:31: 5c:85:11:1e:df:26:12:8f:5a:50:f2:c7:ab:69:5d: e8:08:e5:21:e1:c3:b3:5d:31:fe:34:e1:6a:eb:31: 27:45:e8:f5:01:b4:19:fb:23:b3:b9:54:37:59:5f: 5b:1b:a0:a5:29:b3:fb:27:1f:ab:5c:62:ab:a6:78: 55:f2:95:02:42:9c:58:47:c7:a9:b5:2f:22:cc:58: 65:e7:33:c2:a3:45:ae:36:f7:25:3c:fc:ff:5b:ed: 09:91:dd:86:79:c4:f8:27:43:6e:1b:d5:94:f0:2e: ec:a6:35:d5:cc:13:ac:aa:ba:04:2a:15:cd:0b:03: b2:85:85:ac:30:1f:c1:be:b2:db:8d:c6:25:3d:c1: a4:fe:01:b4:79:16:9a:80:aa:a3:16:80:01:85:cd: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8D:34:AA:8C:7F:6B:36:92:28:21:8E:E9:5F:4B:BE:FE:14:27:1A X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8f00::/40 Signature Algorithm: sha256WithRSAEncryption 3d:7c:d4:13:48:f9:b9:75:b1:51:56:dd:95:d4:dd:e4:9e:46: b8:2b:c9:d6:d9:2e:92:10:1e:7e:50:da:1b:50:8d:d6:ae:3f: ce:d3:fb:bb:a6:f9:3f:21:16:59:fb:06:de:c5:66:d9:8d:c3: 67:32:ad:ec:23:60:0b:71:3d:ca:4b:d9:1f:b7:1c:40:c4:df: 46:0d:6e:ba:39:04:8e:53:de:8d:8f:0f:36:c7:6c:0b:b7:b0: 90:91:21:de:1a:a1:1a:d7:de:e2:ea:50:cc:6d:7b:e6:6b:2d: 1d:da:b9:a4:ed:29:78:1d:c2:6b:20:a2:11:86:53:a1:7e:28: 86:29:b7:50:32:7b:e9:fe:a2:cd:20:e1:02:d5:ee:bf:71:0d: f8:5f:2c:75:cc:44:0f:ec:b8:27:7a:1e:c7:61:41:f0:50:da: a2:44:e2:90:5f:4d:5e:87:17:bf:7d:01:33:6a:92:2a:ce:81: 09:ab:cb:74:8e:36:92:7a:49:55:d7:85:05:30:64:af:77:e9: ac:10:ef:28:ce:45:11:fe:29:bb:c6:35:02:e8:7d:bc:87:b7: 08:89:ee:b4:76:b8:83:54:35:94:68:01:1e:ee:f0:45:37:4f: cc:e5:74:51:dc:70:b6:1b:a9:e0:0a:ec:84:07:1e:0e:74:0f: b8:d7:ae:4a -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUIoCmj5e+a97aiag9x1G2OiMRy6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDFaFw0yNjA3MDMxNjQ4MDFaMDMxMTAvBgNV BAMTKDE5OEQzNEFBOEM3RjZCMzY5MjI4MjE4RUU5NUY0QkJFRkUxNDI3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkeksJJ1KrY1OQxPJk4922kc9m Fs8YMesZmT4CCTsRgm4rOfw06rINc8tjlqZMdqwNEfuE7f2sPHnsGgs+UVIsdF2Z y/C9iLz5V5OmfLh5+Eparsq3gyy12tES32WITG/udwm8qT87MVyFER7fJhKPWlDy x6tpXegI5SHhw7NdMf404WrrMSdF6PUBtBn7I7O5VDdZX1sboKUps/snH6tcYqum eFXylQJCnFhHx6m1LyLMWGXnM8KjRa429yU8/P9b7QmR3YZ5xPgnQ24b1ZTwLuym NdXME6yqugQqFc0LA7KFhawwH8G+stuNxiU9waT+AbR5FpqAqqMWgAGFzQq5AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUGY00qox/azaSKCGO6V9Lvv4UJxowHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjYzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNlMjAz MjMxMzEzMDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqBhKDjzANBgkqhkiG9w0BAQsFAAOCAQEA PXzUE0j5uXWxUVbdldTd5J5GuCvJ1tkukhAeflDaG1CN1q4/ztP7u6b5PyEWWfsG 3sVm2Y3DZzKt7CNgC3E9ykvZH7ccQMTfRg1uujkEjlPejY8PNsdsC7ewkJEh3hqh Gtfe4upQzG175mstHdq5pO0peB3CayCiEYZToX4ohim3UDJ76f6izSDhAtXuv3EN +F8sdcxED+y4J3oex2FB8FDaokTikF9NXocXv30BM2qSKs6BCavLdI42knpJVdeF BTBkr3fprBDvKM5FEf4pu8Y1Auh9vIe3CInutHa4g1Q1lGgBHu7wRTdPzOV0Udxw thup4ArshAceDnQPuNeuSg== -----END CERTIFICATE-----Generated at Wed Nov 5 00:47:44 2025 by rpki-client