$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa File: 326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa (raw, json) Hash identifier: 6akZ76xc8TUp4h4v2+1J9UTOFvzSXYR8sBgcIPy6fb4= Subject key identifier: B8:E5:1F:1B:4F:C8:E0:43:05:21:19:63:EE:4B:75:6A:78:F8:68:1F Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 42DD4B03F6BAE73EB02758A228BA4B6B0E11887E Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa Signing time: Mon 21 Jul 2025 16:27:06 +0000 ROA not before: Mon 21 Jul 2025 16:22:06 +0000 ROA not after: Mon 20 Jul 2026 16:27:06 +0000 asID: 206604 IP address blocks: 2a06:1283:8b30::/44 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 00:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:dd:4b:03:f6:ba:e7:3e:b0:27:58:a2:28:ba:4b:6b:0e:11:88:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 21 16:22:06 2025 GMT Not After : Jul 20 16:27:06 2026 GMT Subject: CN=B8E51F1B4FC8E04305211963EE4B756A78F8681F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:e9:a6:ee:49:0d:9e:3f:61:ac:31:2a:44: 73:f9:8f:e6:23:7d:fd:fd:5f:09:54:be:67:ca:1c: 48:fb:1a:fa:21:4d:9f:fc:b7:4e:5e:67:6d:d1:1b: 8c:d0:7a:d2:d6:69:9b:3b:4c:d7:47:11:a5:55:bf: 50:19:b7:33:aa:41:64:06:25:18:7c:28:05:ef:e6: 09:eb:68:5a:fa:c3:ca:09:ac:c4:55:e0:95:10:f2: 89:b0:ee:c3:7a:24:52:64:48:d2:5f:1e:17:9c:02: 4c:0a:48:16:2a:fb:5f:67:79:11:72:62:1e:e5:fb: 74:a6:c9:3b:a1:bb:50:6a:d5:96:ed:ed:42:2a:5d: fb:7d:75:53:6e:16:1d:69:d5:3a:f2:7a:7e:c0:7c: fb:a8:33:79:ed:a5:a1:4d:14:48:39:56:41:a5:6d: 28:ac:30:7f:3b:2f:45:fc:77:b1:d2:29:4c:9c:44: 3f:13:95:67:d6:5d:2b:66:f6:2b:87:d9:31:28:01: 61:71:5b:73:e3:29:04:13:09:fb:cb:06:aa:f6:46: b6:dd:d1:b2:1b:62:df:c3:5e:b0:ee:da:fd:3b:d2: 0e:62:7f:a2:35:bd:10:59:ee:11:a8:0f:b5:2b:66: 8c:00:40:e7:3d:7e:0b:95:90:22:fe:97:e0:12:13: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:1F:1B:4F:C8:E0:43:05:21:19:63:EE:4B:75:6A:78:F8:68:1F X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b30::/44 Signature Algorithm: sha256WithRSAEncryption 38:ac:51:5d:75:3d:a3:03:af:f7:e8:cc:bf:93:7f:a9:43:24: 41:1d:97:ad:b5:32:0d:87:76:91:cf:69:82:bd:c6:b8:0c:8d: 2c:81:cb:08:dc:33:23:aa:d5:f3:6f:99:31:be:7a:12:d1:dd: c8:38:e0:b5:14:b8:1f:51:17:f7:10:01:de:c6:1c:8c:53:9d: fe:b5:ac:59:9d:a4:8a:30:6d:5f:24:96:52:2c:06:4f:3c:56: a8:fe:ae:7f:92:d1:f5:f5:0f:86:a4:7b:3c:6c:0a:3e:ed:05: ab:6a:34:27:37:3e:c8:13:91:e6:fd:46:11:c5:7a:ec:1f:19: 1a:2f:ae:35:19:44:78:fa:e5:79:93:58:fe:63:b5:a6:51:ea: 99:ca:9b:20:b9:25:c8:ad:08:ba:fc:12:d7:f7:77:46:7f:f5: 96:d6:88:8a:b0:f8:0e:4b:00:d8:df:e6:ef:55:e2:7c:c2:2f: b7:18:1c:89:da:22:d9:0d:ce:86:07:4b:ab:cf:83:07:55:e3: 57:a3:0f:d8:39:20:cc:7e:77:b6:e0:65:4d:1d:1b:14:c0:cc: 2a:4f:d7:e8:e4:b2:a5:c3:29:e5:f7:19:5e:54:79:f5:60:58: 91:6e:05:e0:25:19:83:c2:df:34:a2:68:f5:b8:2d:f4:4e:96: 2f:85:e4:46 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUQt1LA/a65z6wJ1iiKLpLaw4RiH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MjExNjIyMDZaFw0yNjA3MjAxNjI3MDZaMDMxMTAvBgNV BAMTKEI4RTUxRjFCNEZDOEUwNDMwNTIxMTk2M0VFNEI3NTZBNzhGODY4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfemm7kkNnj9hrDEqRHP5j+Yj ff39XwlUvmfKHEj7GvohTZ/8t05eZ23RG4zQetLWaZs7TNdHEaVVv1AZtzOqQWQG JRh8KAXv5gnraFr6w8oJrMRV4JUQ8omw7sN6JFJkSNJfHhecAkwKSBYq+19neRFy Yh7l+3SmyTuhu1Bq1Zbt7UIqXft9dVNuFh1p1Tryen7AfPuoM3ntpaFNFEg5VkGl bSisMH87L0X8d7HSKUycRD8TlWfWXStm9iuH2TEoAWFxW3PjKQQTCfvLBqr2Rrbd 0bIbYt/DXrDu2v070g5if6I1vRBZ7hGoD7UrZowAQOc9fguVkCL+l+ASEzFPAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUuOUfG0/I4EMFIRlj7kt1anj4aB8wHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzMzMwM2EzYTJmMzQzNDJkMzEzMjM4MjAzZDNlMjAz MjMwMzYzNjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBhKDizAwDQYJKoZIhvcNAQELBQADggEB ADisUV11PaMDr/fozL+Tf6lDJEEdl621Mg2HdpHPaYK9xrgMjSyBywjcMyOq1fNv mTG+ehLR3cg44LUUuB9RF/cQAd7GHIxTnf61rFmdpIowbV8kllIsBk88Vqj+rn+S 0fX1D4akezxsCj7tBatqNCc3PsgTkeb9RhHFeuwfGRovrjUZRHj65XmTWP5jtaZR 6pnKmyC5JcitCLr8Etf3d0Z/9ZbWiIqw+A5LANjf5u9V4nzCL7cYHInaItkNzoYH S6vPgwdV41ejD9g5IMx+d7bgZU0dGxTAzCpP1+jksqXDKeX3GV5UefVgWJFuBeAl GYPC3zSiaPW4LfROli+F5EY= -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:48 2025 by rpki-client