$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa File: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (raw, json) Hash identifier: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8= Subject key identifier: 9A:2D:4B:CD:89:23:57:96:7E:B4:FA:F7:5E:95:BC:A6:07:F8:73:DE Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 61958877ED7402AE353AB7EBFFEA4EB983E943B5 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa Signing time: Fri 13 Jun 2025 06:28:34 +0000 ROA not before: Fri 13 Jun 2025 06:23:34 +0000 ROA not after: Fri 12 Jun 2026 06:28:34 +0000 asID: 140915 IP address blocks: 2a14:7581:9010::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 11:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:95:88:77:ed:74:02:ae:35:3a:b7:eb:ff:ea:4e:b9:83:e9:43:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jun 13 06:23:34 2025 GMT Not After : Jun 12 06:28:34 2026 GMT Subject: CN=9A2D4BCD892357967EB4FAF75E95BCA607F873DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:66:69:ea:96:92:2f:10:9d:4b:5f:7b:2d: 44:55:23:f3:2d:d4:9f:a7:43:fd:94:d2:4c:0f:ac: 88:92:63:61:cc:39:fe:56:f1:cd:cc:d0:d1:4f:1d: 6c:f8:eb:62:4e:09:98:ac:be:77:95:fc:58:eb:35: 1b:5d:3c:12:8d:d2:32:93:3d:8a:a1:7f:e8:73:91: ce:f5:bd:42:66:15:a7:21:c7:da:a6:46:08:cf:74: bd:c7:04:4b:a1:e4:bf:b0:d2:35:b4:bb:2e:19:df: ff:d4:b0:f1:c1:bf:e4:b7:c7:45:d2:aa:e3:2a:87: 96:0c:38:f3:72:fa:f1:72:11:69:c7:81:51:98:8b: 39:70:2b:6a:cb:9b:d5:54:5c:e5:59:88:a8:f3:8f: f1:12:a2:8a:4b:6b:a2:88:ce:9e:c5:45:b3:13:90: c3:cd:9f:f7:75:bf:ae:68:5d:3c:4c:05:a3:a9:35: cb:0c:a1:c5:b2:07:2d:52:b7:f3:ed:6b:e5:db:41: db:aa:37:28:58:17:37:c8:ee:0e:f3:21:6e:2b:68: 0c:5c:a2:56:7f:0e:a4:d1:d7:e1:f3:20:9c:96:6d: b0:f3:f8:63:48:03:3d:46:d4:e9:b5:7b:77:92:5b: 49:6b:37:2c:5d:b7:a7:65:10:c7:27:e3:d2:89:a3: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2D:4B:CD:89:23:57:96:7E:B4:FA:F7:5E:95:BC:A6:07:F8:73:DE X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9010::/44 Signature Algorithm: sha256WithRSAEncryption 00:27:1d:75:73:dc:66:d8:ec:3f:01:0b:49:30:75:f8:dd:86: 42:da:40:0a:7c:5a:3d:34:2d:66:4a:6e:c2:4b:6d:2d:7a:cf: 08:9d:3a:c9:2a:61:7a:b4:61:c3:6d:b7:e0:ac:84:11:81:72: 9a:36:e3:33:6f:ef:eb:4d:d2:b0:a5:0e:94:a7:ed:20:c8:0b: 56:1b:bd:d8:44:98:15:f8:3d:3c:8a:fb:ba:e0:cf:58:af:6b: ba:c9:da:5e:d8:2c:98:8b:7d:90:a9:c7:b3:ca:13:f7:06:13: 11:e6:21:2c:6a:97:b5:80:d0:46:ab:a7:58:1e:a1:25:98:7c: 1d:9b:ef:b9:71:78:ad:4b:c9:5d:96:9a:4d:f3:84:83:18:20: 59:aa:f3:e1:d1:01:a0:e2:3d:ac:55:f0:2e:fd:17:68:c5:4c: ed:fb:3b:72:43:34:e9:01:18:d8:e1:25:3c:25:1c:c6:4c:3b: f8:16:73:1f:2d:5e:de:20:16:4b:aa:f0:a9:6e:c1:80:a0:af: 46:0e:95:15:72:ea:35:fe:e8:c8:5d:de:b1:3a:5d:02:b6:4b: 82:39:be:86:d4:3d:0f:4d:ab:91:53:43:0a:e8:2a:6e:eb:d9: f7:e5:68:a9:6a:8f:8f:0e:4d:b8:1b:10:63:03:88:d9:b7:39: 84:6a:59:96 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYZWId+10Aq41Orfr/+pOuYPpQ7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA2MTMwNjIzMzRaFw0yNjA2MTIwNjI4MzRaMDMxMTAvBgNV BAMTKDlBMkQ0QkNEODkyMzU3OTY3RUI0RkFGNzVFOTVCQ0E2MDdGODczREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hGZp6paSLxCdS197LURVI/Mt 1J+nQ/2U0kwPrIiSY2HMOf5W8c3M0NFPHWz462JOCZisvneV/FjrNRtdPBKN0jKT PYqhf+hzkc71vUJmFachx9qmRgjPdL3HBEuh5L+w0jW0uy4Z3//UsPHBv+S3x0XS quMqh5YMOPNy+vFyEWnHgVGYizlwK2rLm9VUXOVZiKjzj/ESoopLa6KIzp7FRbMT kMPNn/d1v65oXTxMBaOpNcsMocWyBy1St/Pta+XbQduqNyhYFzfI7g7zIW4raAxc olZ/DqTR1+HzIJyWbbDz+GNIAz1G1Om1e3eSW0lrNyxdt6dlEMcn49KJozgzAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUmi1LzYkjV5Z+tPr3XpW8pgf4c94wHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84NTVjN2Q1YS0xNWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzAzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz NDMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZAQMA0GCSqGSIb3DQEBCwUAA4IBAQAA Jx11c9xm2Ow/AQtJMHX43YZC2kAKfFo9NC1mSm7CS20tes8InTrJKmF6tGHDbbfg rIQRgXKaNuMzb+/rTdKwpQ6Up+0gyAtWG73YRJgV+D08ivu64M9Yr2u6ydpe2CyY i32QqcezyhP3BhMR5iEsape1gNBGq6dYHqElmHwdm++5cXitS8ldlppN84SDGCBZ qvPh0QGg4j2sVfAu/RdoxUzt+ztyQzTpARjY4SU8JRzGTDv4FnMfLV7eIBZLqvCp bsGAoK9GDpUVcuo1/ujIXd6xOl0CtkuCOb6G1D0PTauRU0MK6Cpu69n35Wipao+P Dk24GxBjA4jZtzmEalmW -----END CERTIFICATE-----Generated at Sun Jun 15 19:11:20 2025 by rpki-client