$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa File: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (raw, json) Hash identifier: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE= Subject key identifier: CC:0A:1A:1E:A5:FB:EC:FB:C7:6B:87:DB:E1:99:86:A0:5F:15:1D:02 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 29649039936641D7D7A6B5F2DD96493E4868BB1E Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa Signing time: Fri 13 Jun 2025 06:28:33 +0000 ROA not before: Fri 13 Jun 2025 06:23:33 +0000 ROA not after: Fri 12 Jun 2026 06:28:33 +0000 asID: 215364 IP address blocks: 2a14:7581:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 11:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:64:90:39:93:66:41:d7:d7:a6:b5:f2:dd:96:49:3e:48:68:bb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jun 13 06:23:33 2025 GMT Not After : Jun 12 06:28:33 2026 GMT Subject: CN=CC0A1A1EA5FBECFBC76B87DBE19986A05F151D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:b5:8b:4b:3c:5b:e3:a2:68:1c:80:24:27: 8f:cb:b7:a9:bc:43:83:ea:13:8e:5b:41:82:fd:04: 0d:cf:1e:98:08:95:c0:2a:84:e6:af:a9:67:f0:f3: 43:88:20:7c:df:dd:65:4b:29:e1:78:6a:79:73:55: ea:06:77:d2:6e:df:9c:c6:d8:dd:a1:88:9b:97:c8: 46:5e:1b:29:50:94:bc:75:23:29:09:71:57:1c:06: 6c:24:01:c6:00:2e:c9:1c:ef:b8:9e:8f:17:7c:8a: 5d:fc:b6:9d:5b:f3:5b:b1:88:cd:e4:1e:f0:ea:ac: 80:06:bf:5f:4c:53:76:84:d5:56:66:32:ae:4f:32: 50:9d:d0:5f:b3:ee:ee:38:7f:62:89:a7:fc:8a:81: 44:da:9e:2b:28:ed:df:d5:8e:fd:10:2d:c4:34:91: 89:e1:ea:9d:11:c1:8a:c7:a7:3a:d4:23:db:7d:86: 1e:5a:3e:6f:e7:a2:92:d9:87:d7:e7:3a:9b:55:ba: db:6d:95:ac:d4:2c:de:92:78:06:79:95:59:69:06: 67:fd:52:49:3b:58:4c:4c:c7:c5:9f:ee:c4:bc:fa: c7:94:88:8f:bf:7e:d4:9f:b9:e2:cb:28:a9:12:da: 2b:f2:93:38:40:8c:dc:64:53:34:ad:fc:6b:f6:e5: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0A:1A:1E:A5:FB:EC:FB:C7:6B:87:DB:E1:99:86:A0:5F:15:1D:02 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9000::/44 Signature Algorithm: sha256WithRSAEncryption 80:e0:45:36:ad:5c:4c:a0:28:b3:2a:bf:7b:1b:fb:39:59:fa: fe:b5:6a:ba:a1:8f:0f:82:f5:cc:3e:46:af:26:f0:10:27:f9: 0a:4d:cd:4b:f0:81:89:0a:aa:6e:7b:54:83:fc:b7:0d:7b:46: e5:ac:b0:0a:37:91:e2:e6:19:8f:38:2d:e6:d2:da:d1:53:0a: 16:f7:0b:28:13:93:9f:0a:b2:be:25:d4:c5:1e:d4:12:9b:09: f8:a2:43:54:de:b1:9d:d7:b3:45:24:5c:67:0e:8a:46:57:98: 16:4e:21:63:a6:8d:9c:de:8f:5f:39:72:12:46:11:d4:40:50: 4f:d3:ba:d1:6d:3e:e0:48:72:b6:8b:54:ca:e0:e4:cb:70:4f: f8:de:2d:8c:41:d1:73:a7:68:b7:1f:9b:77:cf:6b:74:d4:09: f3:86:2d:14:d9:b5:3a:81:31:f1:b6:12:59:bd:bd:6f:bd:e5: 18:e2:3a:b5:38:c8:7f:77:fb:96:d6:27:41:fc:98:4d:f7:51: a3:db:79:cb:85:5a:08:b4:0e:74:5a:db:a3:97:41:17:0d:52: 30:01:3c:cf:49:f7:f3:61:25:21:3a:cd:eb:88:5b:7c:bd:a9: 0a:8e:27:b7:02:54:e1:c0:29:6e:5c:67:d0:70:61:db:53:c0: 77:b8:50:36 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUKWSQOZNmQdfXprXy3ZZJPkhoux4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA2MTMwNjIzMzNaFw0yNjA2MTIwNjI4MzNaMDMxMTAvBgNV BAMTKENDMEExQTFFQTVGQkVDRkJDNzZCODdEQkUxOTk4NkEwNUYxNTFEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZ7WLSzxb46JoHIAkJ4/Lt6m8 Q4PqE45bQYL9BA3PHpgIlcAqhOavqWfw80OIIHzf3WVLKeF4anlzVeoGd9Ju35zG 2N2hiJuXyEZeGylQlLx1IykJcVccBmwkAcYALskc77iejxd8il38tp1b81uxiM3k HvDqrIAGv19MU3aE1VZmMq5PMlCd0F+z7u44f2KJp/yKgUTaniso7d/Vjv0QLcQ0 kYnh6p0RwYrHpzrUI9t9hh5aPm/nopLZh9fnOptVutttlazULN6SeAZ5lVlpBmf9 Ukk7WExMx8Wf7sS8+seUiI+/ftSfueLLKKkS2ivykzhAjNxkUzSt/Gv25f0bAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUzAoaHqX77PvHa4fb4ZmGoF8VHQIwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84NTVjN2Q1YS0xNWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzAzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZAAMA0GCSqGSIb3DQEBCwUAA4IBAQCA 4EU2rVxMoCizKr97G/s5Wfr+tWq6oY8PgvXMPkavJvAQJ/kKTc1L8IGJCqpue1SD /LcNe0blrLAKN5Hi5hmPOC3m0trRUwoW9wsoE5OfCrK+JdTFHtQSmwn4okNU3rGd 17NFJFxnDopGV5gWTiFjpo2c3o9fOXISRhHUQFBP07rRbT7gSHK2i1TK4OTLcE/4 3i2MQdFzp2i3H5t3z2t01Anzhi0U2bU6gTHxthJZvb1vveUY4jq1OMh/d/uW1idB /JhN91Gj23nLhVoItA50Wtujl0EXDVIwATzPSffzYSUhOs3riFt8vakKjie3AlTh wCluXGfQcGHbU8B3uFA2 -----END CERTIFICATE-----Generated at Sun Jun 15 17:41:33 2025 by rpki-client