$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa File: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (raw, json) Hash identifier: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw= Subject key identifier: BD:B7:32:BD:FB:DA:69:91:EA:47:0D:25:E6:31:92:9F:AD:32:52:C2 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 5DE383C852CB53C780E29AFE85EA9FC65F1F79FC Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa Signing time: Fri 13 Jun 2025 06:28:34 +0000 ROA not before: Fri 13 Jun 2025 06:23:34 +0000 ROA not after: Fri 12 Jun 2026 06:28:34 +0000 asID: 215364 IP address blocks: 2a14:7581:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 11:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e3:83:c8:52:cb:53:c7:80:e2:9a:fe:85:ea:9f:c6:5f:1f:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jun 13 06:23:34 2025 GMT Not After : Jun 12 06:28:34 2026 GMT Subject: CN=BDB732BDFBDA6991EA470D25E631929FAD3252C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:65:e7:cd:da:c2:f6:26:8b:a1:82:90:17: 2c:32:07:67:77:06:49:7a:40:4f:fa:92:4b:3e:cf: bf:e8:fe:93:ea:fa:1e:1d:f4:a8:c1:0c:c2:7e:24: 0c:01:a1:e1:0c:16:aa:7e:40:71:4f:b5:92:6d:7b: 5f:a8:f6:80:ed:d8:2c:80:e9:2a:4c:80:aa:96:0f: f9:ae:a3:ac:85:5e:89:79:03:94:0c:22:17:c5:84: 70:5b:8a:c5:fc:55:ac:d8:11:04:50:ec:ca:85:be: be:bf:32:7c:25:1a:85:1b:02:c8:a0:8e:dd:b6:a0: f9:ff:05:3b:8f:39:f6:52:a6:94:79:f7:7b:a6:78: c5:57:56:94:8d:46:35:76:4e:a9:4b:25:89:bd:71: 86:e1:f9:a2:3c:b5:87:72:e1:5d:d3:6f:16:9c:20: 44:e7:06:ea:bd:2d:f7:79:1f:f9:22:cf:7a:d7:e6: da:fc:45:3b:e9:37:bd:34:5e:a5:af:cf:3c:20:94: 3a:9c:ab:07:25:a5:25:90:11:ac:f9:4a:59:65:eb: 14:9f:1b:72:65:90:05:c3:de:de:07:0b:c5:ed:20: d7:fc:c6:b1:71:ff:b2:d1:89:f8:85:fb:52:49:a5: 74:0d:2c:90:16:57:b0:c4:f4:76:45:e9:18:c9:7e: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B7:32:BD:FB:DA:69:91:EA:47:0D:25:E6:31:92:9F:AD:32:52:C2 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9000::/38 Signature Algorithm: sha256WithRSAEncryption b3:b5:74:0a:97:5e:fc:ad:b6:ff:2e:a4:0a:dd:c9:97:86:96: 3c:cd:09:ed:eb:30:0e:50:dd:9b:f5:3c:25:6b:69:c9:ab:18: 4a:54:50:86:0a:a3:48:3c:30:b5:56:cc:69:46:94:a4:cb:90: 3c:43:98:a3:84:eb:4b:ee:3e:01:06:5a:af:14:bd:dd:cf:77: 55:c7:07:f7:18:85:f8:86:70:5b:0e:b2:63:6e:e0:43:3d:4b: 2e:15:6f:10:eb:0c:0f:d6:b9:2b:58:98:fc:89:34:ad:d2:9b: bd:ec:fe:96:d5:8b:34:4b:a5:47:b3:57:74:c2:54:e3:95:f8: 37:26:9b:78:36:5a:08:3c:cf:a6:59:73:7e:5d:d9:d3:30:03: b3:7f:5a:51:00:3b:af:8f:12:34:8a:e8:4e:e4:84:9e:cf:4f: be:b2:1c:d4:b1:43:65:09:c9:0f:9b:be:59:59:ac:fd:30:94: 3c:18:1f:a7:5f:28:31:ce:10:96:f6:58:bf:9b:7e:cf:19:0a: a7:8f:a0:f2:63:8d:f2:ad:4b:fc:85:97:12:74:2a:17:96:8c: 6c:15:11:db:0b:00:8c:25:22:ff:34:3e:d3:bc:32:54:72:31: 5c:6b:fa:97:d2:5e:ad:ea:7e:a5:f6:10:6a:4e:28:eb:80:a9: 3d:4d:1d:81 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUXeODyFLLU8eA4pr+heqfxl8fefwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA2MTMwNjIzMzRaFw0yNjA2MTIwNjI4MzRaMDMxMTAvBgNV BAMTKEJEQjczMkJERkJEQTY5OTFFQTQ3MEQyNUU2MzE5MjlGQUQzMjUyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6GXnzdrC9iaLoYKQFywyB2d3 Bkl6QE/6kks+z7/o/pPq+h4d9KjBDMJ+JAwBoeEMFqp+QHFPtZJte1+o9oDt2CyA 6SpMgKqWD/muo6yFXol5A5QMIhfFhHBbisX8VazYEQRQ7MqFvr6/MnwlGoUbAsig jt22oPn/BTuPOfZSppR593umeMVXVpSNRjV2TqlLJYm9cYbh+aI8tYdy4V3Tbxac IETnBuq9Lfd5H/kiz3rX5tr8RTvpN700XqWvzzwglDqcqwclpSWQEaz5Slll6xSf G3JlkAXD3t4HC8XtINf8xrFx/7LRifiF+1JJpXQNLJAWV7DE9HZF6RjJft6nAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUvbcyvfvaaZHqRw0l5jGSn60yUsIwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84NTVjN2Q1YS0xNWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzAzMDMwM2EzYTJmMzMzODJkMzMzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYCKhR1gZAwDQYJKoZIhvcNAQELBQADggEBALO1 dAqXXvyttv8upArdyZeGljzNCe3rMA5Q3Zv1PCVracmrGEpUUIYKo0g8MLVWzGlG lKTLkDxDmKOE60vuPgEGWq8Uvd3Pd1XHB/cYhfiGcFsOsmNu4EM9Sy4VbxDrDA/W uStYmPyJNK3Sm73s/pbVizRLpUezV3TCVOOV+Dcmm3g2Wgg8z6ZZc35d2dMwA7N/ WlEAO6+PEjSK6E7khJ7PT76yHNSxQ2UJyQ+bvllZrP0wlDwYH6dfKDHOEJb2WL+b fs8ZCqePoPJjjfKtS/yFlxJ0KheWjGwVEdsLAIwlIv80PtO8MlRyMVxr+pfSXq3q fqX2EGpOKOuAqT1NHYE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:45:38 2025 by rpki-client