$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY= Subject key identifier: 4C:CB:B2:88:21:3A:57:6D:72:81:B6:2A:DE:52:61:9F:21:BD:2D:8D Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 5EF5FCA07ADEE1CC34A8EA88F3F1548945293A3E Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa Signing time: Fri 01 Aug 2025 10:45:01 +0000 ROA not before: Fri 01 Aug 2025 10:40:01 +0000 ROA not after: Fri 31 Jul 2026 10:45:01 +0000 asID: 215242 IP address blocks: 2a0f:85c1:3a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f5:fc:a0:7a:de:e1:cc:34:a8:ea:88:f3:f1:54:89:45:29:3a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Aug 1 10:40:01 2025 GMT Not After : Jul 31 10:45:01 2026 GMT Subject: CN=4CCBB288213A576D7281B62ADE52619F21BD2D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:2a:4b:c5:31:31:7d:c4:94:49:fb:41:78: 2c:a1:46:a4:a0:aa:11:dc:cd:ca:71:78:8d:a8:07: 30:5e:a9:06:f3:f0:e9:68:41:81:13:de:5e:c1:89: d4:77:83:2f:8b:c7:1c:93:aa:6d:5b:29:4e:48:d6: 9c:c1:b1:d7:6b:d4:62:46:84:e5:00:82:37:d6:b3: ba:78:39:06:15:cd:23:31:2b:69:4a:3a:c7:c2:7a: 07:2d:17:b5:9d:25:16:bf:fc:23:1d:8f:4b:ec:5f: b5:eb:b0:3a:a1:81:7d:65:e0:d0:8f:f4:51:8c:cb: 34:89:31:03:b3:e1:91:c3:a6:ae:48:e8:df:e4:d9: 16:e9:a7:2d:87:e4:01:af:6b:25:f3:5c:bb:f9:bf: 64:b7:aa:a0:e7:ab:3d:42:40:e9:25:bb:f5:fc:b0: 7c:db:fe:b6:16:07:4b:f5:23:f1:e2:ad:c3:e1:9b: ed:3f:2c:fe:6f:e2:69:9b:74:70:fe:65:9f:8a:55: bf:dd:d9:b9:ef:3e:9c:d8:7e:ba:e2:a0:11:dd:87: 27:22:d2:47:0a:c1:a9:32:82:e5:8c:30:b4:3a:1c: e6:5c:c4:ed:90:8e:43:09:4d:cb:02:8a:57:dd:ec: 88:ab:c4:c1:5a:d9:d0:96:84:7d:f4:d3:e8:51:31: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CB:B2:88:21:3A:57:6D:72:81:B6:2A:DE:52:61:9F:21:BD:2D:8D X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:3a2::/48 Signature Algorithm: sha256WithRSAEncryption b2:80:97:4a:e6:c6:d2:57:61:ba:c9:67:a5:98:a2:66:e3:74: 02:b0:80:f1:b6:49:92:f9:c0:dc:5e:67:7e:dd:6f:43:a8:76: dd:67:d2:d9:02:08:1a:d1:d2:f2:02:34:8b:ab:4c:52:fa:fb: e3:e9:7c:b7:a9:c0:b2:8f:de:11:e9:55:ae:66:aa:ac:77:39: 2f:bf:65:8f:41:4b:23:70:aa:e7:3a:8b:65:8a:4e:17:f8:21: 44:de:bf:c5:43:f9:6a:56:2c:07:4e:20:71:b4:21:e3:e9:1c: 45:1d:23:9d:97:a0:3d:4c:e6:24:07:6e:31:a2:a1:b2:29:f8: 3f:1e:19:54:b8:39:83:3a:eb:14:80:7e:a6:39:9c:17:c7:6a: 1b:bd:26:f2:63:f3:bc:11:c3:8a:80:12:41:99:1d:15:08:3c: f2:e8:49:7c:24:fb:36:8f:79:8c:d1:87:f4:99:32:5e:c5:72: 63:da:e8:7f:eb:86:bd:a1:d1:77:c0:ef:ed:48:df:5a:8c:29: 3b:67:3e:cd:12:c7:58:52:ca:f7:69:de:a9:b1:79:d1:6d:35: e0:bf:8a:ed:1e:cb:51:a6:cf:1e:af:1c:50:4f:bc:73:3e:20: e2:30:a0:76:27:9c:bc:21:a5:6f:f4:1f:67:d9:44:9b:07:0a: 91:3f:61:c6 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUXvX8oHre4cw0qOqI8/FUiUUpOj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA4MDExMDQwMDFaFw0yNjA3MzExMDQ1MDFaMDMxMTAvBgNV BAMTKDRDQ0JCMjg4MjEzQTU3NkQ3MjgxQjYyQURFNTI2MTlGMjFCRDJEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCStipLxTExfcSUSftBeCyhRqSg qhHczcpxeI2oBzBeqQbz8OloQYET3l7BidR3gy+LxxyTqm1bKU5I1pzBsddr1GJG hOUAgjfWs7p4OQYVzSMxK2lKOsfCegctF7WdJRa//CMdj0vsX7XrsDqhgX1l4NCP 9FGMyzSJMQOz4ZHDpq5I6N/k2Rbppy2H5AGvayXzXLv5v2S3qqDnqz1CQOklu/X8 sHzb/rYWB0v1I/HircPhm+0/LP5v4mmbdHD+ZZ+KVb/d2bnvPpzYfrrioBHdhyci 0kcKwakyguWMMLQ6HOZcxO2QjkMJTcsCilfd7IirxMFa2dCWhH300+hRMTdhAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUTMuyiCE6V21ygbYq3lJhnyG9LY0wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzNjEzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDojANBgkqhkiG9w0BAQsFAAOCAQEAsoCX SubG0ldhuslnpZiiZuN0ArCA8bZJkvnA3F5nft1vQ6h23WfS2QIIGtHS8gI0i6tM Uvr74+l8t6nAso/eEelVrmaqrHc5L79lj0FLI3Cq5zqLZYpOF/ghRN6/xUP5alYs B04gcbQh4+kcRR0jnZegPUzmJAduMaKhsin4Px4ZVLg5gzrrFIB+pjmcF8dqG70m 8mPzvBHDioASQZkdFQg88uhJfCT7No95jNGH9JkyXsVyY9rof+uGvaHRd8Dv7Ujf WowpO2c+zRLHWFLK92neqbF50W014L+K7R7LUabPHq8cUE+8cz4g4jCgdiecvCGl b/QfZ9lEmwcKkT9hxg== -----END CERTIFICATE-----Generated at Wed Aug 6 08:00:42 2025 by rpki-client