$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: WwRRTirG7edW5+geax/8pXpN1dZiLKdB/tgwh/uOeTM= Subject key identifier: F6:FB:D5:7B:9F:A5:DF:D1:20:F8:E9:70:02:70:61:1C:96:A2:29:E5 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 74775D350FABB47674DA465056001B44BFC7AA72 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa Signing time: Fri 31 Oct 2025 14:17:38 +0000 ROA not before: Fri 31 Oct 2025 14:12:38 +0000 ROA not after: Fri 30 Oct 2026 14:17:38 +0000 asID: 214344 IP address blocks: 2a14:7581:99f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:77:5d:35:0f:ab:b4:76:74:da:46:50:56:00:1b:44:bf:c7:aa:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Oct 31 14:12:38 2025 GMT Not After : Oct 30 14:17:38 2026 GMT Subject: CN=F6FBD57B9FA5DFD120F8E9700270611C96A229E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:24:b5:53:77:16:2f:08:21:95:e2:e8:fa: a7:41:51:7d:d6:52:ec:a7:6a:81:73:06:ee:ea:10: 43:fc:f5:af:3e:48:ef:91:53:2d:00:cc:19:33:0c: 38:a4:46:29:c0:d7:d5:3c:08:f9:17:80:22:a4:35: f1:c9:a9:64:42:8b:46:b7:07:d3:88:cd:fa:01:2c: d9:88:b8:81:0a:3e:76:3f:a8:c9:36:25:72:37:36: 35:81:58:69:83:f8:cc:b4:1d:a8:89:0d:e7:2e:8f: db:1b:0f:2d:ab:c3:66:45:fe:6a:f4:9d:96:31:87: c0:0f:30:12:25:46:63:72:59:d7:d8:02:52:1d:74: ac:2a:ad:07:bb:b4:43:99:1e:f9:23:68:81:f0:bb: 22:5d:ce:0c:b8:d3:97:02:60:0c:c9:96:ba:a5:27: 2c:64:9f:77:83:ce:40:48:27:80:36:53:51:e3:b3: 76:c7:b6:ff:7e:ad:f8:1f:d1:d3:f1:34:d8:22:75: 45:8c:ce:21:81:7d:1a:fc:f0:7e:30:83:ea:06:ec: dd:12:82:98:81:d9:66:2c:64:36:f7:ae:3e:9f:b8: 5f:0b:8e:e0:a1:9d:cb:58:84:53:d4:2e:2c:21:f2: 86:e6:77:cd:d7:3d:3b:48:e9:34:41:72:f9:8b:e4: b9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FB:D5:7B:9F:A5:DF:D1:20:F8:E9:70:02:70:61:1C:96:A2:29:E5 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:99f5::/48 Signature Algorithm: sha256WithRSAEncryption 66:af:89:64:56:8b:68:49:f3:10:c8:ef:37:b3:89:92:d4:fa: 11:76:3c:9c:48:56:f9:54:42:f3:27:88:33:9b:33:c4:d1:ec: 23:7d:d5:cb:15:bb:5f:12:9f:07:ff:6f:a6:08:6a:5e:6a:41: 15:7f:53:e9:81:96:b1:cb:a1:c1:9e:a7:f1:ab:90:57:00:09: 32:2a:20:34:63:50:d9:f5:a2:e2:96:d6:0a:75:09:67:0d:e2: 6e:67:4e:00:1b:38:f0:5b:3c:75:db:25:f1:ca:11:72:11:a2: 9f:ad:8f:7c:c7:9e:3f:b7:f2:c2:a6:3a:dd:a5:03:1e:f1:7c: 01:d2:e5:e7:df:b0:66:11:9b:3c:da:0a:cb:d0:7e:ad:e9:7d: f8:72:d8:49:45:be:73:13:73:fe:58:a1:76:5a:93:8f:bc:75: bc:1c:56:13:b5:b8:05:e4:25:95:62:98:3f:a9:f9:f2:da:13: 6f:1a:47:3a:fe:b6:fd:57:3c:11:04:f4:62:3e:68:04:65:e4: c7:ea:ee:57:8e:d8:29:a0:3c:bc:eb:77:2a:73:05:66:21:a5: 3d:43:d0:20:a1:fe:80:f3:ad:36:81:95:07:29:cf:cd:77:3a: 87:d0:56:c2:97:b2:ad:cd:c1:b8:0d:ff:99:14:3b:45:b0:e9: 98:44:1f:2a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUdHddNQ+rtHZ02kZQVgAbRL/HqnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTEwMzExNDEyMzhaFw0yNjEwMzAxNDE3MzhaMDMxMTAvBgNV BAMTKEY2RkJENTdCOUZBNURGRDEyMEY4RTk3MDAyNzA2MTFDOTZBMjI5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1SS1U3cWLwghleLo+qdBUX3W UuynaoFzBu7qEEP89a8+SO+RUy0AzBkzDDikRinA19U8CPkXgCKkNfHJqWRCi0a3 B9OIzfoBLNmIuIEKPnY/qMk2JXI3NjWBWGmD+My0HaiJDecuj9sbDy2rw2ZF/mr0 nZYxh8APMBIlRmNyWdfYAlIddKwqrQe7tEOZHvkjaIHwuyJdzgy405cCYAzJlrql Jyxkn3eDzkBIJ4A2U1Hjs3bHtv9+rfgf0dPxNNgidUWMziGBfRr88H4wg+oG7N0S gpiB2WYsZDb3rj6fuF8LjuChnctYhFPULiwh8obmd83XPTtI6TRBcvmL5Lk5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU9vvVe5+l39Eg+OlwAnBhHJaiKeUwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5Mzk2NjM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZn1MA0GCSqGSIb3DQEBCwUAA4IBAQBm r4lkVotoSfMQyO83s4mS1PoRdjycSFb5VELzJ4gzmzPE0ewjfdXLFbtfEp8H/2+m CGpeakEVf1PpgZaxy6HBnqfxq5BXAAkyKiA0Y1DZ9aLiltYKdQlnDeJuZ04AGzjw Wzx12yXxyhFyEaKfrY98x54/t/LCpjrdpQMe8XwB0uXn37BmEZs82grL0H6t6X34 cthJRb5zE3P+WKF2WpOPvHW8HFYTtbgF5CWVYpg/qfny2hNvGkc6/rb9VzwRBPRi PmgEZeTH6u5XjtgpoDy863cqcwVmIaU9Q9Agof6A8602gZUHKc/NdzqH0FbCl7Kt zcG4Df+ZFDtFsOmYRB8q -----END CERTIFICATE-----Generated at Tue Nov 4 23:04:40 2025 by rpki-client