$ rpki-client -vvf rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466653a3a2f34382d3438203d3e20323131353735.roa File: 326131343a373538333a663466653a3a2f34382d3438203d3e20323131353735.roa (raw, json) Hash identifier: wH6vXpKcTN8Ik5GzAVmczWQUA4XHfTxf/3ElN9HbJD0= Subject key identifier: 08:F5:12:83:1B:A9:BC:BA:BA:BA:F5:D1:96:8E:01:1E:0F:A9:41:59 Certificate issuer: /CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229 Certificate serial: 4FA504176D7C8F16CE7CDAD1841CF126400E9A90 Authority key identifier: E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer Subject info access: rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466653a3a2f34382d3438203d3e20323131353735.roa Signing time: Mon 22 Sep 2025 23:53:43 +0000 ROA not before: Mon 22 Sep 2025 23:48:43 +0000 ROA not after: Mon 21 Sep 2026 23:53:43 +0000 asID: 211575 IP address blocks: 2a14:7583:f4fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 17:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a5:04:17:6d:7c:8f:16:ce:7c:da:d1:84:1c:f1:26:40:0e:9a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229 Validity Not Before: Sep 22 23:48:43 2025 GMT Not After : Sep 21 23:53:43 2026 GMT Subject: CN=08F512831BA9BCBABABAF5D1968E011E0FA94159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:db:a2:e2:22:03:41:44:c7:04:22:ca:2d: ae:44:43:35:0d:ef:eb:97:6a:c6:52:05:ad:1e:34: 14:e5:52:da:18:47:61:b6:9d:fc:68:93:fb:b8:6d: 88:d4:63:49:c4:d9:50:88:57:12:d8:35:c8:a4:49: fb:87:18:52:d1:d4:66:e1:7e:03:97:b6:42:0d:05: 6a:4f:0c:d5:30:c6:0f:49:45:64:51:e9:3f:fc:b9: fe:11:13:71:6b:88:c6:b4:31:99:fe:86:77:d6:63: d1:5e:74:e3:c7:11:04:80:69:68:74:93:b7:95:28: 0e:66:28:0d:f8:3b:eb:36:eb:d1:76:6b:38:88:28: 3a:39:5c:66:7f:f7:ea:12:54:4e:31:e9:7f:c9:6f: 00:f1:7f:82:74:b7:88:40:aa:75:4a:50:2e:65:74: 96:94:58:13:ae:2f:60:1e:7c:ab:6e:09:3f:9c:ba: 73:a6:12:79:04:ee:17:b9:35:c0:d4:f2:30:15:f3: 07:0b:e3:48:d9:55:cb:f7:68:e8:d1:57:1c:ac:b8: b6:8d:b6:23:55:d9:26:6e:69:a4:2e:03:26:d0:8f: 31:ae:92:1d:f1:6d:0a:7f:99:cf:89:c7:76:9c:ec: 58:5d:55:69:c6:c4:29:32:cd:47:f4:46:b6:68:a5: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F5:12:83:1B:A9:BC:BA:BA:BA:F5:D1:96:8E:01:1E:0F:A9:41:59 X509v3 Authority Key Identifier: keyid:E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer Subject Information Access: Signed Object - URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466653a3a2f34382d3438203d3e20323131353735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f4fe::/48 Signature Algorithm: sha256WithRSAEncryption 5f:43:1f:4c:cb:65:df:c8:27:9f:98:98:88:f3:c5:09:e4:67: 64:ae:7b:87:1b:4d:ca:c3:cc:c0:02:23:51:4b:be:9a:67:5f: 77:4a:04:2c:6a:47:8e:cc:16:57:fd:0b:c2:91:7f:de:39:fc: 0d:ab:8f:20:af:fe:51:f7:86:75:34:23:8b:f4:36:0e:86:51: fb:74:44:22:c0:98:1c:d9:37:5a:5d:4f:34:6f:f8:10:c1:3e: e4:bb:7e:ad:30:5b:6b:d0:c2:86:65:30:c7:a4:47:b7:ba:13: b4:e1:8b:97:4f:e9:73:a7:0c:06:a3:4e:be:03:21:c3:e6:e5: 4f:d3:d5:7a:25:cf:ed:95:cd:42:19:e7:62:cc:31:e2:54:31: 0d:17:67:f5:e5:8b:aa:f3:83:a0:38:1a:fb:c7:07:ca:4a:c0: 31:16:7f:fb:4f:15:ae:56:d8:58:5c:97:8d:9c:25:87:8e:83: 55:bf:29:ba:db:45:30:ac:17:15:5a:a8:8b:b3:c8:49:e0:da: 00:7c:06:76:eb:6a:31:8d:cc:8e:cf:72:ba:87:47:15:e1:db: aa:93:11:93:cf:64:83:db:09:aa:be:61:cc:02:fb:78:6f:c9: a3:ea:bd:d1:4a:df:52:50:87:1a:8b:88:a7:04:ad:f1:ca:a3: 28:4a:cf:e4 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUT6UEF218jxbOfNrRhBzxJkAOmpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJEODA2M0MyMEM1RkYxQzFDMUFDQzNBRDRFOUQwQzBD ODY0ODIyOTAeFw0yNTA5MjIyMzQ4NDNaFw0yNjA5MjEyMzUzNDNaMDMxMTAvBgNV BAMTKDA4RjUxMjgzMUJBOUJDQkFCQUJBRjVEMTk2OEUwMTFFMEZBOTQxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuudui4iIDQUTHBCLKLa5EQzUN 7+uXasZSBa0eNBTlUtoYR2G2nfxok/u4bYjUY0nE2VCIVxLYNcikSfuHGFLR1Gbh fgOXtkINBWpPDNUwxg9JRWRR6T/8uf4RE3FriMa0MZn+hnfWY9FedOPHEQSAaWh0 k7eVKA5mKA34O+s269F2aziIKDo5XGZ/9+oSVE4x6X/JbwDxf4J0t4hAqnVKUC5l dJaUWBOuL2AefKtuCT+cunOmEnkE7he5NcDU8jAV8wcL40jZVcv3aOjRVxysuLaN tiNV2SZuaaQuAybQjzGukh3xbQp/mc+Jx3ac7FhdVWnGxCkyzUf0RrZopajpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUCPUSgxupvLq6uvXRlo4BHg+pQVkwHwYDVR0j BBgwFoAU4tgGPCDF/xwcGsw61OnQwMhkgikwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnBraS5ydWluZXQud29yay9yZXBvL0Nvd0dy YXNzbGFuZC8wL0UyRDgwNjNDMjBDNUZGMUMxQzFBQ0MzQUQ0RTlEMEMwQzg2NDgy MjkuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8v cnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4 ZS00YjgzLTk1ZTYtNGZmNGFiNzVjOWRjLzIvRTJEODA2M0MyMEM1RkYxQzFDMUFD QzNBRDRFOUQwQzBDODY0ODIyOS5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYB BQUHMAuGcXJzeW5jOi8vcnBraS5ydWluZXQud29yay9yZXBvL0Nvd0dyYXNzbGFu ZC8wLzMyNjEzMTM0M2EzNzM1MzgzMzNhNjYzNDY2NjUzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzMjMxMzEzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqFHWD9P4wDQYJKoZIhvcN AQELBQADggEBAF9DH0zLZd/IJ5+YmIjzxQnkZ2Sue4cbTcrDzMACI1FLvppnX3dK BCxqR47MFlf9C8KRf945/A2rjyCv/lH3hnU0I4v0Ng6GUft0RCLAmBzZN1pdTzRv +BDBPuS7fq0wW2vQwoZlMMekR7e6E7Thi5dP6XOnDAajTr4DIcPm5U/T1Xolz+2V zUIZ52LMMeJUMQ0XZ/Xli6rzg6A4GvvHB8pKwDEWf/tPFa5W2Fhcl42cJYeOg1W/ KbrbRTCsFxVaqIuzyEng2gB8BnbrajGNzI7PcrqHRxXh26qTEZPPZIPbCaq+YcwC +3hvyaPqvdFK31JQhxqLiKcErfHKoyhKz+Q= -----END CERTIFICATE-----Generated at Thu Oct 9 06:00:21 2025 by rpki-client