$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4= Subject key identifier: B4:41:90:A7:06:1E:57:BF:21:D5:71:F3:79:1B:52:C2:9B:43:F8:BE Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 03029B60C1AFF9574239E5786A3BEFCEF88CEF71 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:32:14 +0000 ROA not before: Wed 09 Jul 2025 09:27:14 +0000 ROA not after: Wed 08 Jul 2026 09:32:14 +0000 asID: 203915 IP address blocks: 2a14:7580:ff70::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:02:9b:60:c1:af:f9:57:42:39:e5:78:6a:3b:ef:ce:f8:8c:ef:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:27:14 2025 GMT Not After : Jul 8 09:32:14 2026 GMT Subject: CN=B44190A7061E57BF21D571F3791B52C29B43F8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:24:2e:c7:ae:1c:c6:ac:48:f6:ee:13:99: 9f:a3:fb:ec:6d:b7:b5:e2:78:50:97:54:9c:49:4b: 32:7c:29:bc:89:0b:ee:56:b5:0d:b7:06:de:81:dc: 06:d5:4d:2e:35:51:56:81:42:09:d7:3e:f9:71:6c: a1:26:c9:6d:b7:ec:88:84:29:d5:22:89:10:a8:24: 81:bb:97:c4:bc:a3:56:4b:42:b3:77:41:92:4c:dd: 7f:70:f7:4c:5f:5a:95:63:8f:5c:c5:e0:52:78:e2: ba:b1:0b:5a:e5:c4:5d:14:02:5c:4e:d7:7f:d2:7c: f9:06:ec:1f:dc:1e:e5:57:76:01:00:a5:99:2a:8b: 51:1b:34:25:33:0a:3a:9a:e3:45:1b:3d:43:34:ca: 32:5c:05:25:25:1a:d1:35:97:44:67:2a:7a:33:09: 38:a1:6a:25:ce:b0:7f:56:b5:7b:35:ad:c1:db:d4: c7:e6:20:94:e9:35:bf:32:f5:30:d0:f0:ec:5e:da: dc:06:95:2b:06:56:a9:51:99:ea:cc:b3:2d:0f:fa: 9c:d7:a7:0c:7c:b4:ad:8a:53:4b:ec:2a:12:0b:d0: d9:f8:5d:f1:da:61:b8:f9:93:49:e5:a6:cf:9f:cc: 65:a0:d3:f4:f5:1c:cc:8f:d9:fd:4c:20:0e:4e:42: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:90:A7:06:1E:57:BF:21:D5:71:F3:79:1B:52:C2:9B:43:F8:BE X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff70::/48 Signature Algorithm: sha256WithRSAEncryption 59:f5:b5:50:68:3e:b6:e0:0a:52:df:6d:b7:5a:e3:2a:a8:a2: 27:89:15:7f:7c:9d:99:a3:06:ea:cb:bb:8e:fa:61:d8:f8:3c: 42:7f:87:30:ca:23:db:fa:4e:a4:c0:8f:c5:eb:b0:1b:b6:c1: f0:41:dc:0e:5b:55:9d:44:02:7f:6b:5b:e8:59:f5:16:b1:47: 62:04:ff:1e:11:19:87:84:81:4c:88:de:b0:99:f0:c4:58:8d: 26:0b:ec:a2:cd:4d:07:50:5b:8b:fd:50:91:c5:3f:d8:e1:8f: 70:8b:39:68:72:cf:d9:f4:0b:90:50:78:0c:93:76:3c:8e:ca: 09:d7:84:d9:97:ed:24:f4:ec:b4:6b:ed:ec:0d:ab:f0:55:a5: a2:6e:04:eb:36:58:a4:93:65:77:38:b3:f6:d8:79:7e:5a:c5: 57:39:48:76:14:98:a1:c3:01:e3:64:31:66:62:fb:dd:2a:93: 54:86:67:33:62:56:e6:41:ad:f0:ca:0c:28:1c:cd:f2:d0:e8: 4e:93:97:f5:c1:31:6a:25:08:79:3d:f7:76:a9:65:72:ac:3e: 08:c0:60:6f:b1:b8:ce:48:f5:77:6b:a6:e1:3c:db:8d:41:b9: 7b:7e:b9:ea:5f:8c:f5:95:8f:72:87:26:e3:31:b9:12:15:35: 82:98:ce:83 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAwKbYMGv+VdCOeV4ajvvzviM73EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTI3MTRaFw0yNjA3MDgwOTMyMTRaMDMxMTAvBgNV BAMTKEI0NDE5MEE3MDYxRTU3QkYyMUQ1NzFGMzc5MUI1MkMyOUI0M0Y4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOyQux64cxqxI9u4TmZ+j++xt t7XieFCXVJxJSzJ8KbyJC+5WtQ23Bt6B3AbVTS41UVaBQgnXPvlxbKEmyW237IiE KdUiiRCoJIG7l8S8o1ZLQrN3QZJM3X9w90xfWpVjj1zF4FJ44rqxC1rlxF0UAlxO 13/SfPkG7B/cHuVXdgEApZkqi1EbNCUzCjqa40UbPUM0yjJcBSUlGtE1l0RnKnoz CTihaiXOsH9WtXs1rcHb1MfmIJTpNb8y9TDQ8Oxe2twGlSsGVqlRmerMsy0P+pzX pwx8tK2KU0vsKhIL0Nn4XfHaYbj5k0nlps+fzGWg0/T1HMyP2f1MIA5OQlrhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUtEGQpwYeV78h1XHzeRtSwptD+L4wHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9wMA0GCSqGSIb3DQEBCwUAA4IBAQBZ 9bVQaD624ApS3223WuMqqKIniRV/fJ2Zowbqy7uO+mHY+DxCf4cwyiPb+k6kwI/F 67AbtsHwQdwOW1WdRAJ/a1voWfUWsUdiBP8eERmHhIFMiN6wmfDEWI0mC+yizU0H UFuL/VCRxT/Y4Y9wizlocs/Z9AuQUHgMk3Y8jsoJ14TZl+0k9Oy0a+3sDavwVaWi bgTrNlikk2V3OLP22Hl+WsVXOUh2FJihwwHjZDFmYvvdKpNUhmczYlbmQa3wygwo HM3y0OhOk5f1wTFqJQh5Pfd2qWVyrD4IwGBvsbjOSPV3a6bhPNuNQbl7frnqX4z1 lY9yhybjMbkSFTWCmM6D -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:27 2025 by rpki-client