$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw= Subject key identifier: 96:E8:BB:2B:F5:6C:16:94:69:DA:41:65:74:E2:A0:E1:D0:AD:3F:AF Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 3278DB59F3F2B9240243C5D2B754C2CEA4E5F2D8 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:33:07 +0000 ROA not before: Wed 09 Jul 2025 09:28:07 +0000 ROA not after: Wed 08 Jul 2026 09:33:07 +0000 asID: 203915 IP address blocks: 2a14:7580:ff71::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:78:db:59:f3:f2:b9:24:02:43:c5:d2:b7:54:c2:ce:a4:e5:f2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:28:07 2025 GMT Not After : Jul 8 09:33:07 2026 GMT Subject: CN=96E8BB2BF56C169469DA416574E2A0E1D0AD3FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:21:f1:5e:dd:57:2d:e7:fb:cd:87:93:37:72: 18:ff:9a:c5:2f:6f:69:57:16:59:49:67:7f:16:2c: fa:64:79:48:9f:8a:93:1f:f0:3b:84:fe:d1:66:85: b3:16:e4:7a:65:07:a3:d3:4c:8a:1b:d0:aa:2e:35: 16:1e:bd:a2:bd:c0:ff:1a:97:b5:19:39:e7:96:1f: 60:c0:8b:d5:a5:06:34:80:45:fe:b7:81:7f:3b:75: 93:82:46:27:85:04:72:82:3c:b7:49:81:3b:3a:3f: 47:9c:77:06:00:fc:da:dc:a3:07:23:8c:6d:71:50: 97:6f:ad:27:5b:03:30:e6:33:fe:9d:75:85:28:8a: 7a:bd:92:2e:ad:57:1e:e1:f4:50:bd:33:2f:db:ff: 8b:82:ae:f3:6a:47:96:ce:7f:c2:08:79:67:53:95: cd:b6:53:81:db:ce:a9:75:92:dc:7c:95:cf:d2:6e: 55:f2:2b:6f:8e:60:ae:2d:9d:04:06:22:4a:b7:59: 41:f4:cf:89:89:18:70:80:9b:5d:b2:ef:02:31:8a: d2:4e:0f:19:68:92:34:f0:94:83:d3:3b:76:77:7f: e6:1e:38:bf:3e:c3:55:c3:61:31:5e:27:8f:32:35: 0e:95:0a:62:a6:91:cf:a4:37:c2:0b:6a:be:25:2c: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E8:BB:2B:F5:6C:16:94:69:DA:41:65:74:E2:A0:E1:D0:AD:3F:AF X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff71::/48 Signature Algorithm: sha256WithRSAEncryption 82:fd:0b:50:65:c1:d5:a1:c1:e6:c2:dc:00:ee:31:15:f5:89: 65:73:f4:4f:fb:d9:43:71:ce:26:d1:54:4f:f6:5a:3f:89:29: 88:ff:7b:14:e2:3a:cd:82:6a:9d:d3:68:2f:34:df:0c:ba:87: d7:d7:94:ff:0d:a0:69:49:a2:84:da:05:73:72:98:55:c8:db: b0:4a:77:c9:44:c4:ba:2b:54:30:af:08:0b:9b:9d:46:2a:e4: 54:a5:9e:27:9c:ee:d8:9e:1f:74:a1:14:53:6e:f2:eb:e8:55: e0:3b:21:fc:30:34:7b:a1:e1:5d:44:84:9e:e3:86:09:cc:2f: 39:7c:2c:ae:7d:36:d5:27:d9:2a:df:35:b7:84:96:68:f7:00: b9:d7:17:e4:00:1d:d5:2b:b5:ea:4a:72:41:f0:b9:53:cb:a9: c4:2a:5f:7d:f0:f4:84:66:56:37:5e:fc:cf:1d:4a:36:6c:c8: ad:80:38:09:c5:8b:51:20:55:96:a9:e5:c1:a8:dc:f6:1d:19: 89:82:e8:6b:6c:23:7a:eb:19:67:f5:9c:e9:a6:07:82:2c:2d: f4:c5:5b:7b:03:c8:92:6c:6e:2e:a2:00:f1:9c:a2:85:a5:a3: fa:38:1e:3f:bf:f1:de:32:c8:f3:61:72:91:3a:10:fa:52:8e: a7:67:03:05 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMnjbWfPyuSQCQ8XSt1TCzqTl8tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTI4MDdaFw0yNjA3MDgwOTMzMDdaMDMxMTAvBgNV BAMTKDk2RThCQjJCRjU2QzE2OTQ2OURBNDE2NTc0RTJBMEUxRDBBRDNGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLIfFe3Vct5/vNh5M3chj/msUv b2lXFllJZ38WLPpkeUifipMf8DuE/tFmhbMW5HplB6PTTIob0KouNRYevaK9wP8a l7UZOeeWH2DAi9WlBjSARf63gX87dZOCRieFBHKCPLdJgTs6P0ecdwYA/Nrcowcj jG1xUJdvrSdbAzDmM/6ddYUoinq9ki6tVx7h9FC9My/b/4uCrvNqR5bOf8IIeWdT lc22U4Hbzql1ktx8lc/SblXyK2+OYK4tnQQGIkq3WUH0z4mJGHCAm12y7wIxitJO DxlokjTwlIPTO3Z3f+YeOL8+w1XDYTFeJ48yNQ6VCmKmkc+kN8ILar4lLBu5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUlui7K/VsFpRp2kFldOKg4dCtP68wHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9xMA0GCSqGSIb3DQEBCwUAA4IBAQCC /QtQZcHVocHmwtwA7jEV9Yllc/RP+9lDcc4m0VRP9lo/iSmI/3sU4jrNgmqd02gv NN8MuofX15T/DaBpSaKE2gVzcphVyNuwSnfJRMS6K1QwrwgLm51GKuRUpZ4nnO7Y nh90oRRTbvLr6FXgOyH8MDR7oeFdRISe44YJzC85fCyufTbVJ9kq3zW3hJZo9wC5 1xfkAB3VK7XqSnJB8LlTy6nEKl998PSEZlY3XvzPHUo2bMitgDgJxYtRIFWWqeXB qNz2HRmJguhrbCN66xln9ZzppgeCLC30xVt7A8iSbG4uogDxnKKFpaP6OB4/v/He MsjzYXKROhD6Uo6nZwMF -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:33 2025 by rpki-client