$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/326131343a373538313a396663303a3a2f34342d3434203d3e20313338393937.roa File: 326131343a373538313a396663303a3a2f34342d3434203d3e20313338393937.roa (raw, json) Hash identifier: MP3BXH+cEdg2jDul1eXBObK+VY5O3nkvLjmhV1shnog= Subject key identifier: 44:8C:16:C2:33:2A:3A:62:8A:8B:46:53:08:FA:7E:14:13:4E:8C:25 Certificate issuer: /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Certificate serial: 18D6C63434DAAAD5FE7D678DD04174F522A547CB Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/326131343a373538313a396663303a3a2f34342d3434203d3e20313338393937.roa Signing time: Tue 05 Aug 2025 05:30:07 +0000 ROA not before: Tue 05 Aug 2025 05:25:07 +0000 ROA not after: Tue 04 Aug 2026 05:30:07 +0000 asID: 138997 IP address blocks: 2a14:7581:9fc0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d6:c6:34:34:da:aa:d5:fe:7d:67:8d:d0:41:74:f5:22:a5:47:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5 Validity Not Before: Aug 5 05:25:07 2025 GMT Not After : Aug 4 05:30:07 2026 GMT Subject: CN=448C16C2332A3A628A8B465308FA7E14134E8C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:7e:44:0f:8a:61:a0:31:d4:f4:3d:99:fb: 88:79:27:cd:03:24:24:04:63:ad:ca:95:e6:f6:ef: 81:e0:ff:a3:fe:46:aa:7c:0f:36:bc:08:f2:33:12: da:4b:c6:49:5c:81:05:17:fc:9a:7e:11:e9:16:cb: 6f:8d:3f:2f:46:6e:3a:21:e5:88:9c:2e:66:ec:74: fb:7c:80:f0:cb:77:72:b0:70:47:28:b9:4b:50:9a: f6:8d:f4:cd:27:b5:d0:6f:52:d0:89:e7:f1:69:52: f9:bd:7d:72:21:e6:a2:8b:9a:8a:17:f8:ef:0c:ad: d4:42:c0:93:5b:42:78:4d:50:bd:8d:f8:db:b7:1d: ad:ea:72:e9:7c:f3:a5:73:8e:0e:70:0f:03:eb:38: c5:21:f5:92:41:2f:3b:8a:9f:a3:54:b6:1c:80:5d: 14:2e:c1:a9:d3:44:97:95:0f:a2:51:2e:27:90:95: 03:21:cd:7c:f6:e7:28:50:2f:c7:23:85:e1:84:0c: 1e:54:f1:ee:0a:f0:b0:86:f8:c3:30:f3:91:71:96: 72:84:0f:9f:e1:14:5f:14:91:35:ce:68:f6:2e:da: ce:24:4c:d7:4c:c8:27:1a:6f:10:b5:85:1c:44:f0: 8c:df:f6:9c:76:65:58:a2:af:ea:c3:15:84:6b:0d: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:16:C2:33:2A:3A:62:8A:8B:46:53:08:FA:7E:14:13:4E:8C:25 X509v3 Authority Key Identifier: keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/326131343a373538313a396663303a3a2f34342d3434203d3e20313338393937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:9fc0::/44 Signature Algorithm: sha256WithRSAEncryption 47:27:87:8e:34:93:19:15:75:1e:34:f6:dc:ab:85:f6:89:0a: fe:ec:fd:ea:69:4b:80:fb:68:6b:3f:d5:9c:53:9b:5c:4e:d5: dd:53:d5:42:af:4f:3b:ab:9d:c5:b2:7d:f9:2a:7d:74:97:70: 23:24:8f:a0:7c:e7:76:26:8f:0e:99:c8:83:f9:ed:cd:dc:d6: 64:0f:3c:32:cd:54:f5:30:c4:bc:89:7f:8b:8e:50:e4:87:83: 2d:23:88:f8:a2:26:9e:a1:ae:db:b2:27:10:7a:dd:49:66:6a: 37:75:c7:1c:e0:c7:6d:32:e1:10:41:69:4c:1f:0a:5f:69:b8: c5:82:3e:6a:05:cd:f2:93:1b:71:96:6c:53:82:5b:64:de:87: ad:a3:e4:74:d5:c8:ec:7f:0c:5d:88:5e:3f:91:de:28:0a:6f: e1:46:ac:fe:d7:7a:ba:4d:71:c2:e9:91:b3:a6:fa:94:cd:65: 6d:21:1b:c0:53:58:8e:7d:c1:e6:9a:93:b9:86:5d:bb:7e:2f: 46:dd:69:17:25:73:e8:af:7c:40:47:20:6b:02:ae:d7:45:49: ef:8a:6e:e1:6e:db:9e:e1:fc:37:64:1b:2c:d3:47:da:df:23: a7:02:73:2a:75:87:e3:a3:a7:0d:4c:fa:50:61:46:5c:df:44: a8:03:6c:d7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUGNbGNDTaqtX+fWeN0EF09SKlR8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIx NTRENzZDNTAeFw0yNTA4MDUwNTI1MDdaFw0yNjA4MDQwNTMwMDdaMDMxMTAvBgNV BAMTKDQ0OEMxNkMyMzMyQTNBNjI4QThCNDY1MzA4RkE3RTE0MTM0RThDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8n5ED4phoDHU9D2Z+4h5J80D JCQEY63Kleb274Hg/6P+Rqp8Dza8CPIzEtpLxklcgQUX/Jp+EekWy2+NPy9Gbjoh 5YicLmbsdPt8gPDLd3KwcEcouUtQmvaN9M0ntdBvUtCJ5/FpUvm9fXIh5qKLmooX +O8MrdRCwJNbQnhNUL2N+Nu3Ha3qcul886Vzjg5wDwPrOMUh9ZJBLzuKn6NUthyA XRQuwanTRJeVD6JRLieQlQMhzXz25yhQL8cjheGEDB5U8e4K8LCG+MMw85FxlnKE D5/hFF8UkTXOaPYu2s4kTNdMyCcabxC1hRxE8Izf9px2ZViir+rDFYRrDYWNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQURIwWwjMqOmKKi0ZTCPp+FBNOjCUwHwYDVR0j BBgwFoAUFbzXXgLghesIo9LyLIcpchVNdsUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjY3NDY5MDEtMjNkMy00MzAxLWIyOGQtOGIwOTgyYjA2 YzA4LzEvMTVCQ0Q3NUUwMkUwODVFQjA4QTNEMkYyMkM4NzI5NzIxNTRENzZDNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xNUJDRDc1RTAyRTA4NUVCMDhBM0QyRjIy Qzg3Mjk3MjE1NEQ3NkM1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iNjc0NjkwMS0yM2QzLTQzMDEtYjI4ZC04YjA5ODJiMDZjMDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5NjY2MzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzEz MzM4MzkzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gZ/AMA0GCSqGSIb3DQEBCwUAA4IBAQBH J4eONJMZFXUeNPbcq4X2iQr+7P3qaUuA+2hrP9WcU5tcTtXdU9VCr087q53Fsn35 Kn10l3AjJI+gfOd2Jo8OmciD+e3N3NZkDzwyzVT1MMS8iX+LjlDkh4MtI4j4oiae oa7bsicQet1JZmo3dccc4MdtMuEQQWlMHwpfabjFgj5qBc3ykxtxlmxTgltk3oet o+R01cjsfwxdiF4/kd4oCm/hRqz+13q6TXHC6ZGzpvqUzWVtIRvAU1iOfcHmmpO5 hl27fi9G3WkXJXPor3xARyBrAq7XRUnvim7hbtue4fw3ZBss00fa3yOnAnMqdYfj o6cNTPpQYUZc30SoA2zX -----END CERTIFICATE-----Generated at Thu Aug 7 07:30:03 2025 by rpki-client