$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa File: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (raw, json) Hash identifier: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc= Subject key identifier: 9D:A4:27:61:3E:95:A5:F4:F2:D7:4D:00:54:3F:3A:FC:DC:9E:F8:30 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 779C8ACB9C5C8B38B91BB7CC7188DA77B57D5F3F Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa Signing time: Thu 24 Jul 2025 11:05:13 +0000 ROA not before: Thu 24 Jul 2025 11:00:13 +0000 ROA not after: Thu 23 Jul 2026 11:05:13 +0000 asID: 214809 IP address blocks: 2a0a:6044:b300::/42 maxlen: 42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9c:8a:cb:9c:5c:8b:38:b9:1b:b7:cc:71:88:da:77:b5:7d:5f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Jul 24 11:00:13 2025 GMT Not After : Jul 23 11:05:13 2026 GMT Subject: CN=9DA427613E95A5F4F2D74D00543F3AFCDC9EF830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:8c:5e:a2:a5:df:29:16:ce:d8:8b:2e:39: a5:6d:00:9e:2a:29:f3:08:48:ef:94:92:03:d3:c8: 55:04:56:24:de:88:a4:40:70:bf:7f:20:4b:98:40: d0:8d:49:40:03:46:78:81:f8:5a:f3:48:81:32:20: 4e:f0:08:9c:9a:dc:d7:92:2e:65:58:2d:69:0e:56: 8d:c5:6e:65:45:f7:7a:1a:79:7c:35:3e:38:8d:7a: a6:7a:b9:d9:93:f4:fd:a3:e1:3b:0d:25:26:ab:79: 9c:93:d3:ec:09:94:c4:97:57:f9:e5:74:e3:0c:c9: cc:e0:43:e3:e1:f2:b4:72:0f:8a:4b:98:16:f6:0f: 1c:43:77:28:af:75:1f:05:46:33:19:e0:06:5b:4a: 3a:cb:fe:5f:30:20:83:60:71:9d:3d:62:55:cb:4b: ad:01:06:45:80:b8:69:dc:e0:37:ee:a3:81:8e:95: 78:28:2a:9e:6e:ca:4c:36:1c:c9:cd:3e:2e:13:d1: 88:13:9e:7b:13:ce:5a:cc:d3:53:96:a3:fb:d3:2c: 52:8e:6b:24:66:36:61:d2:2c:96:2c:2d:d8:60:05: cc:f7:c2:a6:df:ee:1d:95:94:cf:7d:db:fe:54:2e: 70:2f:5d:3f:07:9a:7e:4e:61:7e:40:e1:54:34:0c: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A4:27:61:3E:95:A5:F4:F2:D7:4D:00:54:3F:3A:FC:DC:9E:F8:30 X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b300::/42 Signature Algorithm: sha256WithRSAEncryption 05:3d:6b:4d:1d:f0:b7:b7:46:86:61:67:84:ee:18:51:8b:23: 6e:dc:03:a8:86:b4:c5:17:41:dd:af:d7:46:18:e3:a1:f5:c1: 80:3c:25:30:ba:22:cf:6e:7f:a4:9f:c9:c6:c0:44:ec:87:f3: df:6d:bd:6d:87:55:e4:f4:b9:ab:6c:d5:97:29:ea:2d:b2:96: e2:a4:2e:b9:b6:af:72:db:8b:7f:56:ae:15:da:62:fc:29:c3: 95:99:65:0b:75:19:76:e2:42:ca:0c:a0:ee:15:11:ea:ad:b8: 8c:74:7f:24:c7:d9:56:30:fd:c3:0c:38:c2:00:e6:dd:81:0e: 5f:c3:2a:4d:ad:fe:0f:e7:2d:9f:d1:ab:89:4a:99:f6:28:34: 23:7b:6f:be:d8:20:71:22:c5:c7:2e:b5:23:0a:87:c6:ee:c5: 1e:60:a2:a5:53:6e:dd:c3:a5:86:08:ba:e8:7c:b3:de:a1:1a: 4c:8a:64:a2:d5:df:35:ba:3b:85:53:5c:0a:df:c6:5b:0f:30: 29:d6:ae:db:73:31:98:18:13:dc:7e:c6:d4:7b:44:e1:d7:39: 02:87:eb:98:ba:b4:6d:28:e8:72:95:fa:f2:de:c5:b1:dc:67: c5:2f:fc:64:f2:06:de:8b:70:f9:2f:cc:1d:e5:a1:9c:84:13: 27:61:9c:15 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIUd5yKy5xcizi5G7fMcYjad7V9Xz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTA3MjQxMTAwMTNaFw0yNjA3MjMxMTA1MTNaMDMxMTAvBgNV BAMTKDlEQTQyNzYxM0U5NUE1RjRGMkQ3NEQwMDU0M0YzQUZDREM5RUY4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOR4xeoqXfKRbO2IsuOaVtAJ4q KfMISO+UkgPTyFUEViTeiKRAcL9/IEuYQNCNSUADRniB+FrzSIEyIE7wCJya3NeS LmVYLWkOVo3FbmVF93oaeXw1PjiNeqZ6udmT9P2j4TsNJSareZyT0+wJlMSXV/nl dOMMyczgQ+Ph8rRyD4pLmBb2DxxDdyivdR8FRjMZ4AZbSjrL/l8wIINgcZ09YlXL S60BBkWAuGnc4Dfuo4GOlXgoKp5uykw2HMnNPi4T0YgTnnsTzlrM01OWo/vTLFKO ayRmNmHSLJYsLdhgBcz3wqbf7h2VlM992/5ULnAvXT8Hmn5OYX5A4VQ0DPvlAgMB AAGjggJVMIICUTAdBgNVHQ4EFgQUnaQnYT6VpfTy100AVD86/Nye+DAwHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MTA5OGMyMy1hOTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyMzMzMDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIz MTM0MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcGKgpgRLMAMA0GCSqGSIb3DQEBCwUAA4IBAQAF PWtNHfC3t0aGYWeE7hhRiyNu3AOohrTFF0Hdr9dGGOOh9cGAPCUwuiLPbn+kn8nG wETsh/Pfbb1th1Xk9LmrbNWXKeotspbipC65tq9y24t/Vq4V2mL8KcOVmWULdRl2 4kLKDKDuFRHqrbiMdH8kx9lWMP3DDDjCAObdgQ5fwypNrf4P5y2f0auJSpn2KDQj e2++2CBxIsXHLrUjCofG7sUeYKKlU27dw6WGCLrofLPeoRpMimSi1d81ujuFU1wK 38ZbDzAp1q7bczGYGBPcfsbUe0Th1zkCh+uYurRtKOhylfry3sWx3GfFL/xk8gbe i3D5L8wd5aGchBMnYZwV -----END CERTIFICATE-----Generated at Sun Jul 27 01:28:09 2025 by rpki-client