$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa File: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (raw, json) Hash identifier: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4= Subject key identifier: 0E:D5:C7:99:92:30:2E:14:9C:82:EA:CD:96:26:DB:37:BA:31:06:3A Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 61E8B56A76EE3E8AD42A727480A381C6A0C929BC Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa Signing time: Fri 24 Oct 2025 12:30:27 +0000 ROA not before: Fri 24 Oct 2025 12:25:27 +0000 ROA not after: Fri 23 Oct 2026 12:30:27 +0000 asID: 214720 IP address blocks: 2a14:7583:f460::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e8:b5:6a:76:ee:3e:8a:d4:2a:72:74:80:a3:81:c6:a0:c9:29:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Oct 24 12:25:27 2025 GMT Not After : Oct 23 12:30:27 2026 GMT Subject: CN=0ED5C79992302E149C82EACD9626DB37BA31063A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2a:c1:49:75:78:f2:6f:f9:28:df:36:ac:dd: 7b:18:ad:31:80:eb:68:c5:77:fb:b3:f5:72:6e:ae: 51:9d:e1:95:3e:09:16:cf:db:ba:4e:58:46:f1:cd: 7a:1b:11:80:1a:ea:9c:ee:08:7b:9d:09:2e:81:0f: 7b:14:c2:7e:56:d5:03:7b:47:6b:08:19:3f:61:39: 28:15:40:47:00:50:6f:54:33:75:14:66:d6:d9:c2: 61:d8:47:d8:5a:d2:0d:67:a2:e1:f0:18:92:7e:32: 56:6e:38:2e:d1:72:66:8b:32:3e:13:f1:17:23:8c: ca:20:3e:92:ba:00:7e:97:5b:cc:14:3e:5d:56:b8: fb:ba:3c:48:b8:5e:62:df:e1:2a:91:f4:d3:34:b7: 54:ca:e4:83:bf:72:e3:cb:f9:60:81:12:4a:b7:3e: 54:c5:42:aa:08:ee:57:35:44:9d:c8:85:6b:c7:86: 9e:f1:04:86:4e:da:9b:51:d4:e7:bd:46:35:da:c4: 2d:02:bd:fa:af:c6:67:46:f8:2c:83:9e:c7:77:ae: 1f:27:b6:af:08:7d:18:32:64:df:b1:97:63:d9:3e: 8b:50:dc:c8:af:9e:65:58:d7:c8:b7:26:7c:ea:a7: 5e:2d:94:3a:21:24:d7:f5:39:a4:39:19:c6:85:f7: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D5:C7:99:92:30:2E:14:9C:82:EA:CD:96:26:DB:37:BA:31:06:3A X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f460::/44 Signature Algorithm: sha256WithRSAEncryption 97:98:0a:1c:70:c9:d7:19:ba:dd:10:67:b7:c6:45:4b:21:ec: bd:88:e0:90:f3:6b:a1:51:0b:c6:b8:0f:cf:d9:78:51:a9:08: 63:87:1e:9b:47:0e:3a:2d:8c:72:91:3f:13:eb:48:83:d6:4c: 8f:d4:0a:42:27:b6:02:17:d8:89:45:83:0f:a0:79:19:6a:c6: 38:b0:33:77:af:e2:25:a2:71:58:4a:94:02:57:67:9a:10:40: eb:89:85:47:cf:b6:85:bd:16:31:73:d1:a0:22:51:11:9b:12: 31:12:84:e4:65:c3:f8:ea:93:31:64:ca:f0:dc:54:47:8d:55: 72:32:f7:0c:e9:11:93:a9:2c:5c:8e:de:30:e1:07:57:56:0a: 73:24:81:e3:17:5f:64:10:8f:fa:03:61:ca:c8:0e:bd:4a:76: 0a:79:f3:a7:0f:21:fa:33:90:26:02:9d:0b:ae:0f:78:7f:46: 32:a6:fa:b1:98:f0:2f:20:82:b5:6a:a5:7f:7c:48:68:8b:f0: 0d:74:97:26:14:99:b2:e5:f8:3b:cb:84:dc:f7:03:56:4e:d5: 82:a6:60:54:44:58:73:4d:08:05:7d:4d:2b:f5:bb:cf:d7:ce: af:41:e8:7f:eb:3f:97:33:e5:8a:86:ee:82:1e:8a:cf:94:63: f8:ef:23:5b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYei1anbuPorUKnJ0gKOBxqDJKbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTEwMjQxMjI1MjdaFw0yNjEwMjMxMjMwMjdaMDMxMTAvBgNV BAMTKDBFRDVDNzk5OTIzMDJFMTQ5QzgyRUFDRDk2MjZEQjM3QkEzMTA2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKsFJdXjyb/ko3zas3XsYrTGA 62jFd/uz9XJurlGd4ZU+CRbP27pOWEbxzXobEYAa6pzuCHudCS6BD3sUwn5W1QN7 R2sIGT9hOSgVQEcAUG9UM3UUZtbZwmHYR9ha0g1nouHwGJJ+MlZuOC7RcmaLMj4T 8RcjjMogPpK6AH6XW8wUPl1WuPu6PEi4XmLf4SqR9NM0t1TK5IO/cuPL+WCBEkq3 PlTFQqoI7lc1RJ3IhWvHhp7xBIZO2ptR1Oe9RjXaxC0CvfqvxmdG+CyDnsd3rh8n tq8IfRgyZN+xl2PZPotQ3MivnmVY18i3Jnzqp14tlDohJNf1OaQ5GcaF99S7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUDtXHmZIwLhScgurNlibbN7oxBjowHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ODFmOTc4Mi04OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzQzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzczMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1g/RgMA0GCSqGSIb3DQEBCwUAA4IBAQCX mAoccMnXGbrdEGe3xkVLIey9iOCQ82uhUQvGuA/P2XhRqQhjhx6bRw46LYxykT8T 60iD1kyP1ApCJ7YCF9iJRYMPoHkZasY4sDN3r+IlonFYSpQCV2eaEEDriYVHz7aF vRYxc9GgIlERmxIxEoTkZcP46pMxZMrw3FRHjVVyMvcM6RGTqSxcjt4w4QdXVgpz JIHjF19kEI/6A2HKyA69SnYKefOnDyH6M5AmAp0Lrg94f0YypvqxmPAvIIK1aqV/ fEhoi/ANdJcmFJmy5fg7y4Tc9wNWTtWCpmBURFhzTQgFfU0r9bvP186vQeh/6z+X M+WKhu6CHorPlGP47yNb -----END CERTIFICATE-----Generated at Tue Nov 4 15:04:18 2025 by rpki-client