$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa File: 326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa (raw, json) Hash identifier: iolIMZvypg6PJiuOU91pEjZF4Pb2HUYXupJxlSpEcl4= Subject key identifier: 17:FF:0A:D2:95:4A:16:0B:F5:02:FC:22:20:BF:B6:2C:CB:9A:F5:A6 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 7B31E0C1F5F88E748051B86D9A7FD240915FDC13 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa Signing time: Thu 17 Jul 2025 17:31:55 +0000 ROA not before: Thu 17 Jul 2025 17:26:55 +0000 ROA not after: Thu 16 Jul 2026 17:31:55 +0000 asID: 206444 IP address blocks: 2a06:1283:bc00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 03:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:31:e0:c1:f5:f8:8e:74:80:51:b8:6d:9a:7f:d2:40:91:5f:dc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jul 17 17:26:55 2025 GMT Not After : Jul 16 17:31:55 2026 GMT Subject: CN=17FF0AD2954A160BF502FC2220BFB62CCB9AF5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:0a:80:7f:79:ab:1b:34:89:68:c6:21:38: d5:7b:1b:1f:be:d5:cc:78:d4:cf:fd:5b:48:24:e2: 36:d3:14:70:00:f3:ea:6b:51:4f:8c:54:b1:a7:3f: 53:f4:39:21:2c:a9:76:05:8c:cb:32:81:04:01:13: 5c:54:7b:15:98:2d:2f:69:e8:e3:e2:1a:f5:70:36: 28:73:71:cb:27:50:51:74:2e:73:b3:f1:d1:77:49: 57:af:7c:f3:8f:8f:56:9d:51:b4:e7:67:48:da:a1: d6:f6:d0:e4:4c:38:08:24:f6:cd:89:c8:13:95:c3: d0:3e:8d:5d:ba:2e:c9:b4:8b:4c:9c:3e:0a:83:b6: b6:dc:fe:39:47:ef:84:c7:12:78:9a:67:99:d6:7a: c7:87:cb:47:04:60:97:de:7b:e4:ba:57:f1:5b:e6: 37:07:c8:31:2f:69:ab:ab:e0:a9:60:dc:55:bc:67: fd:47:0c:09:11:50:44:e9:3e:1e:8b:4e:df:71:b4: 83:29:88:ed:ca:07:f8:2c:5f:d1:b3:be:ec:23:84: 28:cf:81:1c:7c:ea:58:7d:ac:30:e0:87:23:81:93: 9e:eb:be:1f:f5:b5:45:81:85:86:7c:e4:b2:9d:0b: a4:3d:e9:34:2d:f9:c3:08:79:52:7d:c3:d4:01:c3: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FF:0A:D2:95:4A:16:0B:F5:02:FC:22:20:BF:B6:2C:CB:9A:F5:A6 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a626330303a3a2f34302d3430203d3e20323036343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:bc00::/40 Signature Algorithm: sha256WithRSAEncryption 53:24:e5:b0:fa:8b:bc:53:6b:23:14:f9:ca:cb:25:00:17:ed: 04:5a:79:cc:f8:39:e8:df:e0:41:1d:5e:0c:a9:ba:17:a1:b9: 04:05:1b:ff:72:bd:30:78:e0:df:76:47:50:f3:cc:b6:68:61: a9:27:91:56:ce:dc:02:af:24:b4:ce:f7:e6:c3:df:c4:6a:01: 84:8c:40:c6:2e:48:ca:a4:da:ff:94:df:b9:7d:05:2b:f8:7d: 24:71:e6:35:2f:3e:9e:ce:ef:3b:29:e4:2c:66:00:8b:02:8e: 65:0e:2b:b4:b2:98:f9:60:c7:cc:0f:07:e8:b0:ac:f5:cd:c8: e0:34:d2:90:27:54:9c:bc:64:12:1d:dc:1f:dd:c7:9b:a7:05: e5:e5:98:08:58:5e:29:83:75:88:ef:7f:de:1d:a5:0f:c5:a7: c4:8a:26:75:e3:60:1d:bb:ed:6d:96:6b:64:e9:cf:85:e6:be: 5c:c7:e4:28:49:91:2a:12:44:1a:4d:eb:1a:17:ae:35:2d:49: 7a:d5:64:c3:aa:72:0b:01:77:9c:3d:44:6f:46:ea:42:50:54: 7a:f2:8b:a0:fe:f2:e0:ed:7e:65:f5:a6:04:b7:dc:1f:e4:05: 56:a8:64:60:ee:15:c3:82:41:4d:2f:31:bb:81:4c:30:8e:80: d0:e7:7f:10 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUezHgwfX4jnSAUbhtmn/SQJFf3BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNTA3MTcxNzI2NTVaFw0yNjA3MTYxNzMxNTVaMDMxMTAvBgNV BAMTKDE3RkYwQUQyOTU0QTE2MEJGNTAyRkMyMjIwQkZCNjJDQ0I5QUY1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFAqAf3mrGzSJaMYhONV7Gx++ 1cx41M/9W0gk4jbTFHAA8+prUU+MVLGnP1P0OSEsqXYFjMsygQQBE1xUexWYLS9p 6OPiGvVwNihzccsnUFF0LnOz8dF3SVevfPOPj1adUbTnZ0jaodb20ORMOAgk9s2J yBOVw9A+jV26Lsm0i0ycPgqDtrbc/jlH74THEniaZ5nWeseHy0cEYJfee+S6V/Fb 5jcHyDEvaaur4Klg3FW8Z/1HDAkRUETpPh6LTt9xtIMpiO3KB/gsX9GzvuwjhCjP gRx86lh9rDDghyOBk57rvh/1tUWBhYZ85LKdC6Q96TQt+cMIeVJ9w9QBw2+hAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUF/8K0pVKFgv1AvwiIL+2LMua9aYwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzAzNjM0MzQzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoGEoO8MA0GCSqGSIb3DQEBCwUAA4IBAQBTJOWw+ou8U2sjFPnK yyUAF+0EWnnM+Dno3+BBHV4MqboXobkEBRv/cr0weODfdkdQ88y2aGGpJ5FWztwC ryS0zvfmw9/EagGEjEDGLkjKpNr/lN+5fQUr+H0kceY1Lz6ezu87KeQsZgCLAo5l Diu0spj5YMfMDwfosKz1zcjgNNKQJ1ScvGQSHdwf3cebpwXl5ZgIWF4pg3WI73/e HaUPxafEiiZ142Adu+1tlmtk6c+F5r5cx+QoSZEqEkQaTesaF641LUl61WTDqnIL AXecPURvRupCUFR68oug/vLg7X5l9aYEt9wf5AVWqGRg7hXDgkFNLzG7gUwwjoDQ 538Q -----END CERTIFICATE-----Generated at Sat Jul 26 20:12:03 2025 by rpki-client