$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa File: 326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa (raw, json) Hash identifier: BwWttvdgE87UTe5eUGryLDR20yKZtRoPBaxCc1jPa9E= Subject key identifier: 5F:58:4F:5D:8A:7D:71:3F:96:0F:26:F6:7A:F2:18:C5:DD:70:D1:B8 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 5DD496D7E4F375682A5BAF889D034928F568C47A Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa Signing time: Fri 18 Jul 2025 22:21:28 +0000 ROA not before: Fri 18 Jul 2025 22:16:28 +0000 ROA not after: Fri 17 Jul 2026 22:21:28 +0000 asID: 213413 IP address blocks: 2a06:1283:8b05::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d4:96:d7:e4:f3:75:68:2a:5b:af:88:9d:03:49:28:f5:68:c4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 18 22:16:28 2025 GMT Not After : Jul 17 22:21:28 2026 GMT Subject: CN=5F584F5D8A7D713F960F26F67AF218C5DD70D1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:6a:34:c4:e8:ae:0d:98:90:d6:7c:74:56: 09:b1:2a:79:d3:3f:d3:35:5b:bf:52:63:f3:0a:ae: 4e:a9:a2:8d:3d:35:2a:f9:02:72:08:12:1d:0b:f8: 84:f3:ab:1d:47:40:95:48:1f:5b:ff:63:c9:ed:50: 3e:3d:50:c4:b5:22:3d:6b:39:b7:ed:65:00:6f:be: 58:12:89:53:18:73:95:fd:e0:f2:60:43:ef:dd:ed: 4a:05:f2:84:a4:8e:27:f8:3f:8c:34:0c:88:58:48: 01:13:d8:92:7f:26:75:a8:a0:b2:13:bc:af:0b:08: b8:70:15:75:a3:d0:f1:db:80:ed:e1:96:25:53:c8: a9:e4:f7:23:c0:c4:f8:bb:86:1f:9f:a6:39:67:ce: ea:14:69:12:c9:6f:2f:a2:1e:5b:18:fe:ee:c4:1e: 6e:7f:84:99:b7:4e:61:4d:8d:42:b2:c8:d6:9d:49: 1a:0d:00:fa:e8:80:41:08:66:9c:ad:f2:37:76:a9: 5d:72:b2:4d:4b:2b:56:cc:4c:90:9c:2a:f3:c8:89: 68:14:bc:c5:a2:98:8d:10:ae:df:f8:4f:9e:66:65: 55:33:3e:03:90:8e:80:8c:07:fe:19:d9:27:95:67: d5:5b:71:d2:09:cf:b7:04:0f:c9:8f:6c:a8:6a:42: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:58:4F:5D:8A:7D:71:3F:96:0F:26:F6:7A:F2:18:C5:DD:70:D1:B8 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b05::/48 Signature Algorithm: sha256WithRSAEncryption ab:4f:b7:7c:80:44:b8:7d:c8:c1:bd:55:5e:c9:68:79:b1:55: 1d:a3:b3:11:ed:b9:68:5b:df:6b:ca:f4:8e:aa:a0:fd:b4:f7: 1b:a8:fa:d3:fb:29:8c:8f:e1:9d:fe:d8:d9:0d:57:2c:cb:85: 86:5c:e6:5b:16:a0:48:ac:0a:48:78:45:21:97:cd:86:fc:d3: bc:9d:61:44:3f:3e:37:bc:38:1b:9d:8e:16:90:62:a4:06:5c: 51:86:ef:73:f2:3f:1e:db:e5:cf:c3:7c:b4:1c:22:56:f7:b2: 5e:68:76:c6:c3:6f:17:02:2c:3d:05:58:52:fc:74:37:6d:c2: 00:96:d7:71:ca:ba:7b:a1:08:40:4d:44:53:49:3b:68:46:15: 18:97:88:0d:00:bb:f2:a3:19:a9:1b:e6:a7:e4:23:d4:80:7a: 8d:dc:e1:53:d8:86:e1:bf:d7:39:2d:a8:b8:74:19:91:21:08: 4e:1a:4c:b9:50:59:8c:2a:77:04:f6:4f:a1:ff:4c:ad:fa:94: a6:9f:71:ed:48:64:f1:ac:28:c2:c7:ed:71:6f:dc:3c:62:0d: 51:fb:41:04:2a:1b:1d:cc:78:e3:52:ff:62:2b:b6:55:23:94: b4:77:aa:f6:46:86:5e:47:e6:8c:51:49:ac:7b:19:18:d0:57: 81:c8:0d:03 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUXdSW1+TzdWgqW6+InQNJKPVoxHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MTgyMjE2MjhaFw0yNjA3MTcyMjIxMjhaMDMxMTAvBgNV BAMTKDVGNTg0RjVEOEE3RDcxM0Y5NjBGMjZGNjdBRjIxOEM1REQ3MEQxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrhGo0xOiuDZiQ1nx0VgmxKnnT P9M1W79SY/MKrk6poo09NSr5AnIIEh0L+ITzqx1HQJVIH1v/Y8ntUD49UMS1Ij1r ObftZQBvvlgSiVMYc5X94PJgQ+/d7UoF8oSkjif4P4w0DIhYSAET2JJ/JnWooLIT vK8LCLhwFXWj0PHbgO3hliVTyKnk9yPAxPi7hh+fpjlnzuoUaRLJby+iHlsY/u7E Hm5/hJm3TmFNjUKyyNadSRoNAProgEEIZpyt8jd2qV1ysk1LK1bMTJCcKvPIiWgU vMWimI0Qrt/4T55mZVUzPgOQjoCMB/4Z2SeVZ9VbcdIJz7cED8mPbKhqQjjjAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUX1hPXYp9cT+WDyb2evIYxd1w0bgwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzMDM1M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzMzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiwUwDQYJKoZIhvcNAQELBQADggEB AKtPt3yARLh9yMG9VV7JaHmxVR2jsxHtuWhb32vK9I6qoP209xuo+tP7KYyP4Z3+ 2NkNVyzLhYZc5lsWoEisCkh4RSGXzYb807ydYUQ/Pje8OBudjhaQYqQGXFGG73Py Px7b5c/DfLQcIlb3sl5odsbDbxcCLD0FWFL8dDdtwgCW13HKunuhCEBNRFNJO2hG FRiXiA0Au/KjGakb5qfkI9SAeo3c4VPYhuG/1zktqLh0GZEhCE4aTLlQWYwqdwT2 T6H/TK36lKafce1IZPGsKMLH7XFv3DxiDVH7QQQqGx3MeONS/2IrtlUjlLR3qvZG hl5H5oxRSax7GRjQV4HIDQM= -----END CERTIFICATE-----Generated at Mon Jul 21 21:27:24 2025 by rpki-client