$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa File: 326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa (raw, json) Hash identifier: GUNeH2+z36sgZCQMq+A5pgqJOguwWigWE6rIJbRVE7Q= Subject key identifier: 26:DF:58:EE:BC:C0:45:CC:18:20:F0:0E:02:1E:FF:15:AC:16:3A:CB Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 3E83CDAC827C81F5F7680F9FC857FD9C2BDF7F78 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa Signing time: Sat 07 Jun 2025 13:34:17 +0000 ROA not before: Sat 07 Jun 2025 13:29:17 +0000 ROA not after: Sat 06 Jun 2026 13:34:17 +0000 asID: 209693 IP address blocks: 2a09:54c6:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:83:cd:ac:82:7c:81:f5:f7:68:0f:9f:c8:57:fd:9c:2b:df:7f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 7 13:29:17 2025 GMT Not After : Jun 6 13:34:17 2026 GMT Subject: CN=26DF58EEBCC045CC1820F00E021EFF15AC163ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:d4:bf:e0:27:e0:f6:8c:f6:6a:6d:98:83: 3a:66:33:e7:4b:c6:16:56:fb:a1:1b:f1:cc:14:a5: 51:54:01:a7:7a:d1:d9:25:c5:c3:86:45:cf:1b:1f: 56:cb:90:17:da:e8:d8:26:53:ce:4f:68:bc:47:17: d7:10:99:9c:a5:76:41:15:36:18:75:e0:d1:d3:74: a8:2e:3c:37:aa:f9:64:85:ed:fa:64:b7:37:a1:91: 0b:2b:cf:d9:7d:e4:da:b6:b3:a2:31:a8:4e:eb:75: 13:f0:95:d3:aa:63:64:aa:bc:3b:77:16:b9:09:7e: 95:c4:36:aa:10:f1:c1:51:98:25:d0:4d:21:ed:41: ae:a6:e8:05:d3:95:d5:9a:2a:78:83:5c:60:53:03: 2c:43:4f:a4:a9:bd:a7:52:a0:79:3e:2c:63:23:89: 7e:ea:bd:4a:b6:65:11:2d:c2:7e:04:cd:d7:ce:91: 55:f5:eb:bf:27:e6:a6:c5:6f:75:f8:7a:4f:ef:c2: ad:98:77:ed:1b:5f:75:bc:60:62:2b:54:c4:18:30: 74:4f:d8:20:3f:26:81:33:37:53:85:40:47:3a:44: 5c:24:e6:82:39:37:9e:63:59:48:53:dc:ce:df:f6: a5:e3:3b:99:a5:8c:7f:27:c0:6d:e3:fa:b0:45:6d: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DF:58:EE:BC:C0:45:CC:18:20:F0:0E:02:1E:FF:15:AC:16:3A:CB X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463363a353030303a3a2f33362d3438203d3e20323039363933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:5000::/36 Signature Algorithm: sha256WithRSAEncryption 89:09:61:fb:fa:b3:3b:83:40:e2:81:8f:9f:26:b0:a8:54:c7: 9c:b4:13:ed:f2:30:f1:7f:03:99:44:78:be:f2:bb:04:c6:9b: c4:f4:7b:57:eb:76:89:be:a9:2d:61:4f:f4:18:cf:1d:0e:84: e3:9f:49:fe:45:05:ca:ab:ec:53:a1:82:39:5d:c6:19:2b:52: a1:55:d0:1f:5f:8e:08:4f:a6:db:25:d1:74:07:07:da:0f:99: 7f:04:e1:8f:9e:d4:47:a9:9f:24:cf:27:b6:2f:64:20:34:a2: c3:6b:63:c1:55:37:3e:a1:4f:24:80:58:bc:15:66:c1:ce:cd: df:e6:73:20:6f:6b:6c:e4:11:10:e4:a2:d9:a1:b9:49:84:3c: 17:28:14:30:e4:5c:60:82:44:3a:ff:bb:ac:82:55:f0:9e:19: b6:02:ac:e8:90:e2:67:04:4b:9e:b5:81:d0:84:b0:74:10:f3: f0:33:89:3a:56:97:7b:76:53:59:ae:b6:a3:ad:35:97:d1:f8: d2:52:6b:d3:d8:2d:1c:bb:a3:b7:3c:c1:02:b8:da:88:e0:4d: d4:e9:3a:39:07:60:c4:8b:e3:12:01:23:ea:f8:ef:19:34:91: ea:bb:96:7c:21:67:65:9c:1c:ff:33:29:46:31:82:32:5e:d1: 3f:9e:f1:a7 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUPoPNrIJ8gfX3aA+fyFf9nCvff3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MDcxMzI5MTdaFw0yNjA2MDYxMzM0MTdaMDMxMTAvBgNV BAMTKDI2REY1OEVFQkNDMDQ1Q0MxODIwRjAwRTAyMUVGRjE1QUMxNjNBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZdS/4Cfg9oz2am2YgzpmM+dL xhZW+6Eb8cwUpVFUAad60dklxcOGRc8bH1bLkBfa6NgmU85PaLxHF9cQmZyldkEV Nhh14NHTdKguPDeq+WSF7fpktzehkQsrz9l95Nq2s6IxqE7rdRPwldOqY2SqvDt3 FrkJfpXENqoQ8cFRmCXQTSHtQa6m6AXTldWaKniDXGBTAyxDT6SpvadSoHk+LGMj iX7qvUq2ZREtwn4EzdfOkVX1678n5qbFb3X4ek/vwq2Yd+0bX3W8YGIrVMQYMHRP 2CA/JoEzN1OFQEc6RFwk5oI5N55jWUhT3M7f9qXjO5mljH8nwG3j+rBFbeIVAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUJt9Y7rzARcwYIPAOAh7/FawWOsswHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzkzYTM1MzQ2MzM2 M2EzNTMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzAzOTM2MzkzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGBCoJVMZQMA0GCSqGSIb3DQEBCwUAA4IBAQCJCWH7+rM7g0DigY+f JrCoVMectBPt8jDxfwOZRHi+8rsExpvE9HtX63aJvqktYU/0GM8dDoTjn0n+RQXK q+xToYI5XcYZK1KhVdAfX44IT6bbJdF0BwfaD5l/BOGPntRHqZ8kzye2L2QgNKLD a2PBVTc+oU8kgFi8FWbBzs3f5nMgb2ts5BEQ5KLZoblJhDwXKBQw5FxggkQ6/7us glXwnhm2AqzokOJnBEuetYHQhLB0EPPwM4k6Vpd7dlNZrrajrTWX0fjSUmvT2C0c u6O3PMECuNqI4E3U6To5B2DEi+MSASPq+O8ZNJHqu5Z8IWdlnBz/MylGMYIyXtE/ nvGn -----END CERTIFICATE-----Generated at Sun Jun 15 17:28:12 2025 by rpki-client