$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA= Subject key identifier: 8A:D1:4F:64:98:46:42:6E:02:87:32:A4:6B:1C:7F:52:1E:C2:24:F9 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 7A38E85FD12400EEA86FBF13FE0E81C249046550 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa Signing time: Sat 01 Nov 2025 14:55:13 +0000 ROA not before: Sat 01 Nov 2025 14:50:13 +0000 ROA not after: Sat 31 Oct 2026 14:55:13 +0000 asID: 209710 IP address blocks: 2a14:7580:ff56::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 19:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:38:e8:5f:d1:24:00:ee:a8:6f:bf:13:fe:0e:81:c2:49:04:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Nov 1 14:50:13 2025 GMT Not After : Oct 31 14:55:13 2026 GMT Subject: CN=8AD14F649846426E028732A46B1C7F521EC224F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:87:8f:82:04:4b:1c:67:0d:c7:e0:5e:46: 23:67:f0:ef:99:23:2b:e0:f5:41:62:73:26:a5:d7: 9c:8e:81:82:95:94:ee:46:19:ef:f1:af:37:65:7e: d5:f9:5f:31:6c:0f:73:34:1d:59:8c:74:f6:cd:64: 03:a9:db:60:49:b4:fd:97:c9:84:b9:4d:31:17:b6: 4e:79:0f:6a:de:bc:33:9e:2f:b0:0a:06:13:d3:65: 3a:ee:bf:08:e8:42:3e:22:5b:7d:a5:48:9e:43:64: 7b:e5:1e:a3:dc:6a:72:b8:c7:83:c3:a9:33:cc:3c: ba:54:9c:68:c5:9e:5e:f7:2d:0e:96:93:ea:69:61: cd:1a:0d:33:0a:37:29:92:88:5e:ac:b3:82:3f:ca: 90:a3:95:a9:f0:39:73:8c:e7:d7:8b:75:f4:91:f6: 42:80:70:a8:4a:08:88:ed:0c:90:ba:f0:2b:e2:2a: 42:e3:56:08:60:85:e3:3c:63:db:a2:ff:1e:b4:2d: 0c:f4:eb:73:7e:60:1a:de:08:0c:08:b2:ae:6e:97: f6:1a:26:77:c9:69:f1:1c:63:69:e5:ee:dd:28:50: 3c:4e:3b:79:1f:b5:33:af:88:88:8d:03:c3:dc:b9: f7:0a:f2:72:e5:61:49:fe:75:76:5b:29:6e:89:db: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D1:4F:64:98:46:42:6E:02:87:32:A4:6B:1C:7F:52:1E:C2:24:F9 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff56::/48 Signature Algorithm: sha256WithRSAEncryption 9f:15:ca:06:7e:b2:0a:7e:7f:6c:31:7c:5e:58:ed:e5:a4:85: 98:cd:1e:ff:23:f3:98:e9:b7:75:38:d0:fa:bc:12:cb:34:e1: 1d:62:37:dc:c1:a1:28:f2:bd:86:d9:c7:d3:bc:70:03:b5:cc: f5:bf:a7:53:bc:d9:ca:c1:01:93:f5:48:2f:45:42:74:c7:66: 46:74:66:df:b4:99:23:30:40:80:70:b6:7d:ba:ba:47:35:e6: 38:be:c6:a5:3c:04:e0:b7:4d:91:64:7f:93:25:a5:81:f7:ee: f3:01:ef:1b:e4:06:bf:3c:ef:65:06:5c:4d:0c:40:a4:70:05: 27:81:6c:a5:73:e7:69:4a:ce:8c:1b:bc:e3:99:3c:fe:24:10: 4e:4d:3f:1d:d7:24:28:d2:44:b1:62:1e:e7:f1:11:03:cc:e2: e3:67:8f:af:ed:9d:b3:76:1d:5a:a5:11:de:b0:d6:a0:2a:f9: 65:e9:22:7f:ee:ed:e9:f8:90:ac:b3:78:03:41:6a:78:7d:9b: 8b:da:41:0e:34:56:94:72:d0:a8:68:d8:87:60:a8:d4:0c:1e: ec:5e:6c:8a:a3:ce:3b:10:95:32:2a:96:bd:f8:34:64:cc:6d: 20:83:1d:e2:77:36:97:ce:bb:b4:cc:ed:ee:6c:3c:1b:fe:d3: 0a:24:5f:bc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUejjoX9EkAO6ob78T/g6BwkkEZVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTExMDExNDUwMTNaFw0yNjEwMzExNDU1MTNaMDMxMTAvBgNV BAMTKDhBRDE0RjY0OTg0NjQyNkUwMjg3MzJBNDZCMUM3RjUyMUVDMjI0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GYePggRLHGcNx+BeRiNn8O+Z Iyvg9UFicyal15yOgYKVlO5GGe/xrzdlftX5XzFsD3M0HVmMdPbNZAOp22BJtP2X yYS5TTEXtk55D2revDOeL7AKBhPTZTruvwjoQj4iW32lSJ5DZHvlHqPcanK4x4PD qTPMPLpUnGjFnl73LQ6Wk+ppYc0aDTMKNymSiF6ss4I/ypCjlanwOXOM59eLdfSR 9kKAcKhKCIjtDJC68CviKkLjVghgheM8Y9ui/x60LQz063N+YBreCAwIsq5ul/Ya JnfJafEcY2nl7t0oUDxOO3kftTOviIiNA8PcufcK8nLlYUn+dXZbKW6J23HrAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUitFPZJhGQm4ChzKkaxx/Uh7CJPkwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9WMA0GCSqGSIb3DQEBCwUAA4IBAQCf FcoGfrIKfn9sMXxeWO3lpIWYzR7/I/OY6bd1OND6vBLLNOEdYjfcwaEo8r2G2cfT vHADtcz1v6dTvNnKwQGT9UgvRUJ0x2ZGdGbftJkjMECAcLZ9urpHNeY4vsalPATg t02RZH+TJaWB9+7zAe8b5Aa/PO9lBlxNDECkcAUngWylc+dpSs6MG7zjmTz+JBBO TT8d1yQo0kSxYh7n8REDzOLjZ4+v7Z2zdh1apRHesNagKvll6SJ/7u3p+JCss3gD QWp4fZuL2kEONFaUctCoaNiHYKjUDB7sXmyKo847EJUyKpa9+DRkzG0ggx3idzaX zru0zO3ubDwb/tMKJF+8 -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:25 2025 by rpki-client