$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6138333a3a2f34382d3438203d3e20323036363034.roa File: 326130623a346530373a6138333a3a2f34382d3438203d3e20323036363034.roa (raw, json) Hash identifier: mJzqR/fpijtPp4VFm79QmiYW4kUZt+TI1uOvw8S0gkU= Subject key identifier: 36:28:4D:49:6C:B5:3A:51:C8:94:CD:BB:44:E8:B3:52:AA:1F:87:C6 Certificate issuer: /CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917 Certificate serial: 360D142D01E4C30B7B22A60F76500B41121C8B0F Authority key identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6138333a3a2f34382d3438203d3e20323036363034.roa Signing time: Tue 29 Jul 2025 15:51:21 +0000 ROA not before: Tue 29 Jul 2025 15:46:21 +0000 ROA not after: Tue 28 Jul 2026 15:51:21 +0000 asID: 206604 IP address blocks: 2a0b:4e07:a83::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 21:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0d:14:2d:01:e4:c3:0b:7b:22:a6:0f:76:50:0b:41:12:1c:8b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917 Validity Not Before: Jul 29 15:46:21 2025 GMT Not After : Jul 28 15:51:21 2026 GMT Subject: CN=36284D496CB53A51C894CDBB44E8B352AA1F87C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:09:18:d5:f6:4d:a3:18:df:5e:1e:be:f9: 2d:01:8c:25:55:c2:48:4e:85:44:ec:c1:61:51:88: b8:c6:2f:8b:c3:e2:58:05:bf:f5:d1:ce:21:29:55: 26:1b:d4:f3:71:1b:eb:97:f7:c8:b2:9b:2a:ec:7c: 0b:5e:19:b5:17:08:be:b1:09:2c:49:55:08:1f:c5: 4e:5b:b9:59:ba:e7:55:fd:0a:69:8c:df:e4:b1:2c: a9:da:db:4a:48:2a:31:41:05:5d:76:25:bf:7d:1d: da:6d:07:4e:96:eb:b1:1a:43:d2:46:5e:dd:d0:87: 67:e8:a5:cd:6a:11:70:da:cc:61:da:2d:1e:0b:d2: ab:0a:0a:19:23:94:01:8c:08:5c:b0:4e:d8:4f:a6: a8:e4:69:6d:81:d3:02:47:97:2a:eb:fa:a1:d5:db: eb:d3:37:c9:99:92:4d:0c:71:52:df:e4:7e:78:e0: c1:43:d5:81:be:2c:8c:6b:2b:03:dd:50:8e:e6:1f: 70:d1:4f:79:b6:c1:f2:ab:28:27:c8:08:86:b5:19: 32:f0:d8:2d:3f:88:d9:de:7a:89:19:9a:f3:b9:5a: cc:bb:d8:c9:cb:61:fd:c1:58:60:cc:5f:eb:a2:2c: 10:06:ba:05:6e:f9:a6:49:c5:5f:7f:82:4f:79:7a: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:28:4D:49:6C:B5:3A:51:C8:94:CD:BB:44:E8:B3:52:AA:1F:87:C6 X509v3 Authority Key Identifier: keyid:96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/326130623a346530373a6138333a3a2f34382d3438203d3e20323036363034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a83::/48 Signature Algorithm: sha256WithRSAEncryption 6f:fc:53:f1:d0:ec:95:2e:af:8f:fe:01:b6:7d:f8:0a:6f:b6: aa:c2:9e:ab:40:cc:2b:d8:dd:75:ef:4b:9f:75:ef:57:eb:44: c4:0a:8a:ee:2f:6e:94:78:af:ff:62:ad:13:5d:50:c5:69:58: 39:40:3d:b1:06:f6:d5:e4:d1:f9:7f:ae:5b:78:ae:c6:96:a6: 72:6e:fd:a0:98:ba:57:bb:7b:27:50:5f:6e:e6:21:c7:47:fe: ac:39:ef:41:03:d7:c7:f1:23:aa:d9:24:a1:07:c7:6d:09:93: 7d:c6:de:2a:00:7b:77:d5:03:16:28:10:57:9a:d2:54:74:bd: 28:94:fe:7b:0d:64:09:2a:31:90:6e:9f:2f:ae:c2:3d:ca:70: 14:61:e6:36:ee:28:39:0c:b6:8a:75:74:00:83:70:14:9a:a6: 73:b0:fb:6b:07:1d:51:ec:3d:85:ae:c4:7d:ed:f8:2a:6f:89: 12:66:c8:c0:0c:2b:fa:13:6b:0f:71:cb:b1:93:b9:38:4d:e2: 74:04:6d:fc:cd:73:b6:2d:91:0a:b3:97:68:ff:cb:ad:01:60: 71:c3:ad:1d:37:3e:8e:fa:45:32:e9:5d:86:13:d5:d6:1d:93: ed:af:85:75:95:4c:5b:e1:a1:3b:b5:46:11:f8:f6:52:9d:2b: fa:df:b6:47 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNg0ULQHkwwt7IqYPdlALQRIciw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4 QkQxRjkxNzAeFw0yNTA3MjkxNTQ2MjFaFw0yNjA3MjgxNTUxMjFaMDMxMTAvBgNV BAMTKDM2Mjg0RDQ5NkNCNTNBNTFDODk0Q0RCQjQ0RThCMzUyQUExRjg3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8AkY1fZNoxjfXh6++S0BjCVV wkhOhUTswWFRiLjGL4vD4lgFv/XRziEpVSYb1PNxG+uX98iymyrsfAteGbUXCL6x CSxJVQgfxU5buVm651X9CmmM3+SxLKna20pIKjFBBV12Jb99HdptB06W67EaQ9JG Xt3Qh2fopc1qEXDazGHaLR4L0qsKChkjlAGMCFywTthPpqjkaW2B0wJHlyrr+qHV 2+vTN8mZkk0McVLf5H544MFD1YG+LIxrKwPdUI7mH3DRT3m2wfKrKCfICIa1GTLw 2C0/iNneeokZmvO5Wsy72MnLYf3BWGDMX+uiLBAGugVu+aZJxV9/gk95evjPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUNihNSWy1OlHIlM27ROizUqofh8YwHwYDVR0j BBgwFoAUlmQnhp/K0V7L5PHHej+zxovR+RcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM3ZDI1MTItZTRiZi00MTFiLWIwMGEtZTc5ZTNhMzc4 YjQ2LzEvOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4QkQxRjkxNy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4QkQx RjkxNy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWM3ZDI1MTIt ZTRiZi00MTFiLWIwMGEtZTc5ZTNhMzc4YjQ2LzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTM4MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzYzNjMwMzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04HCoMwDQYJKoZIhvcNAQELBQADggEBAG/8U/HQ7JUur4/+AbZ9 +ApvtqrCnqtAzCvY3XXvS59171frRMQKiu4vbpR4r/9irRNdUMVpWDlAPbEG9tXk 0fl/rlt4rsaWpnJu/aCYule7eydQX27mIcdH/qw570ED18fxI6rZJKEHx20Jk33G 3ioAe3fVAxYoEFea0lR0vSiU/nsNZAkqMZBuny+uwj3KcBRh5jbuKDkMtop1dACD cBSapnOw+2sHHVHsPYWuxH3t+CpviRJmyMAMK/oTaw9xy7GTuThN4nQEbfzNc7Yt kQqzl2j/y60BYHHDrR03Po76RTLpXYYT1dYdk+2vhXWVTFvhoTu1RhH49lKdK/rf tkc= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:14 2025 by rpki-client