$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa File: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (raw, json) Hash identifier: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ= Subject key identifier: 6B:4B:EA:6A:43:DF:12:E5:FA:29:80:40:A3:11:E8:4D:03:06:B2:02 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 1CE84FE877639949F281A380FE5BE6F3479448F9 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa Signing time: Fri 31 Oct 2025 15:49:20 +0000 ROA not before: Fri 31 Oct 2025 15:44:20 +0000 ROA not after: Fri 30 Oct 2026 15:49:20 +0000 asID: 207299 IP address blocks: 2a14:7581:30b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e8:4f:e8:77:63:99:49:f2:81:a3:80:fe:5b:e6:f3:47:94:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Oct 31 15:44:20 2025 GMT Not After : Oct 30 15:49:20 2026 GMT Subject: CN=6B4BEA6A43DF12E5FA298040A311E84D0306B202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:c7:8b:22:44:02:e5:a3:2d:d2:d1:db:c7: 12:f6:7e:20:23:b2:7b:e7:ce:11:4f:5e:ee:9d:47: a0:8c:00:bd:b5:ce:2c:58:0f:c2:d1:a0:ac:dd:2f: a8:80:3a:8e:4a:35:c8:d3:05:2f:22:b3:b9:64:88: a9:3c:a1:5a:d0:84:9b:7e:10:b5:17:e1:47:1f:5c: 4b:34:79:6a:59:7f:71:14:46:d3:47:17:36:ce:bd: 1a:91:28:d5:ee:81:20:52:23:fb:ac:8d:59:b2:b6: 2c:3c:f7:4b:dc:3e:1d:ee:b2:c6:6b:df:15:46:f4: 86:a8:e4:6f:41:5f:1d:5c:2a:dc:ef:d2:52:f5:aa: 1b:01:c0:f2:ac:14:72:0f:a8:1d:d1:bd:12:d1:6f: d6:f9:fb:ec:72:1a:72:68:a8:24:f7:86:be:72:b0: 10:39:99:9e:2e:ec:37:de:e9:65:5b:d2:2c:ae:ad: 65:d5:11:97:72:ec:85:1c:a6:48:c6:63:80:f4:37: 8c:a2:83:3b:ef:22:7e:53:ff:f3:98:1f:68:9f:d2: aa:f5:10:bd:52:4a:83:a5:0d:b4:1e:6b:e9:79:1e: 95:9f:2b:00:2b:9d:c2:6e:ca:bf:9a:88:25:b4:65: 36:c4:60:fb:b7:b8:58:fb:5f:05:dd:e6:33:ae:10: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4B:EA:6A:43:DF:12:E5:FA:29:80:40:A3:11:E8:4D:03:06:B2:02 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:30b6::/48 Signature Algorithm: sha256WithRSAEncryption 94:f5:c0:25:2b:ed:ae:10:c3:92:ed:7c:dd:cf:a6:90:cc:ed: 2e:58:25:73:fc:9e:b4:bf:9a:3d:c1:10:b2:da:18:b8:8b:bd: a1:b9:a8:d4:49:24:b8:7a:c4:31:32:91:12:5d:0a:06:35:b5: 36:46:15:15:d6:53:f8:87:f4:0a:bd:4b:c1:8b:47:20:cd:cb: c8:b2:84:85:4f:d6:92:25:14:52:44:e1:27:2e:5b:6b:17:3b: c8:97:f3:d3:15:af:5f:eb:fe:47:8f:1a:59:bd:d4:9f:b2:ab: bb:6f:af:02:43:b1:53:b2:b9:27:53:64:db:44:97:9d:82:40: ad:9e:68:06:26:dd:ed:42:b3:53:a8:53:6e:b9:b6:c4:1b:42: 04:18:35:4a:84:70:97:93:6e:8b:8d:50:5f:ee:01:9d:f4:ff: 76:3d:82:28:59:7e:11:f0:5a:a5:89:05:fd:1f:f6:9e:9a:ce: 8c:b7:30:7e:25:07:c2:39:5d:fb:92:51:60:b9:ee:9b:c9:0a: 9c:ef:b7:ac:e0:06:ae:c5:ea:31:cf:a6:4c:54:ad:0a:97:1a: 18:8e:4a:de:6c:7e:87:f5:7b:ad:bb:08:8d:33:ff:77:db:a9: 78:fb:f5:f1:8b:46:53:9c:44:ba:78:f2:c4:45:f0:55:5e:35: f1:ff:2f:32 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHOhP6HdjmUnygaOA/lvm80eUSPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTEwMzExNTQ0MjBaFw0yNjEwMzAxNTQ5MjBaMDMxMTAvBgNV BAMTKDZCNEJFQTZBNDNERjEyRTVGQTI5ODA0MEEzMTFFODREMDMwNkIyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKR8eLIkQC5aMt0tHbxxL2fiAj snvnzhFPXu6dR6CMAL21zixYD8LRoKzdL6iAOo5KNcjTBS8is7lkiKk8oVrQhJt+ ELUX4UcfXEs0eWpZf3EURtNHFzbOvRqRKNXugSBSI/usjVmytiw890vcPh3ussZr 3xVG9Iao5G9BXx1cKtzv0lL1qhsBwPKsFHIPqB3RvRLRb9b5++xyGnJoqCT3hr5y sBA5mZ4u7Dfe6WVb0iyurWXVEZdy7IUcpkjGY4D0N4yigzvvIn5T//OYH2if0qr1 EL1SSoOlDbQea+l5HpWfKwArncJuyr+aiCW0ZTbEYPu3uFj7XwXd5jOuELLXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUa0vqakPfEuX6KYBAoxHoTQMGsgIwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRiYmE1ZTU3YmIvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMzMzA2MjM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM3MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTC2MA0GCSqGSIb3DQEBCwUAA4IBAQCU 9cAlK+2uEMOS7Xzdz6aQzO0uWCVz/J60v5o9wRCy2hi4i72huajUSSS4esQxMpES XQoGNbU2RhUV1lP4h/QKvUvBi0cgzcvIsoSFT9aSJRRSROEnLltrFzvIl/PTFa9f 6/5HjxpZvdSfsqu7b68CQ7FTsrknU2TbRJedgkCtnmgGJt3tQrNTqFNuubbEG0IE GDVKhHCXk26LjVBf7gGd9P92PYIoWX4R8FqliQX9H/aems6MtzB+JQfCOV37klFg ue6byQqc77es4Aauxeoxz6ZMVK0KlxoYjkrebH6H9XutuwiNM/9326l4+/Xxi0ZT nES6ePLERfBVXjXx/y8y -----END CERTIFICATE-----Generated at Tue Nov 4 20:36:09 2025 by rpki-client