$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA= Subject key identifier: 2B:D8:0A:EA:85:52:D0:AC:CA:48:5A:3C:F9:93:E3:1C:35:14:3B:BA Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 2E8EDE228A505110D6A75EFEED7B92C322016CB3 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:33:09 +0000 ROA not before: Wed 09 Jul 2025 09:28:09 +0000 ROA not after: Wed 08 Jul 2026 09:33:09 +0000 asID: 203915 IP address blocks: 2a14:7580:ff72::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8e:de:22:8a:50:51:10:d6:a7:5e:fe:ed:7b:92:c3:22:01:6c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:28:09 2025 GMT Not After : Jul 8 09:33:09 2026 GMT Subject: CN=2BD80AEA8552D0ACCA485A3CF993E31C35143BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:9e:97:4e:aa:8f:dc:7b:0b:61:d3:f7:90: 6f:cb:e4:fc:aa:d7:04:1f:6d:87:39:d3:a8:b3:05: f3:f0:75:87:0a:d4:e7:67:7b:26:cd:d0:4d:18:4f: 2e:25:12:0d:e6:f7:3f:3b:07:ed:57:3f:27:e2:30: 16:70:0d:b5:0c:1f:06:b7:6f:24:6a:bb:50:64:5d: 19:2f:12:74:ae:ea:99:fc:32:a9:62:3d:19:dd:ad: c7:6e:32:54:9e:af:f6:0c:1c:60:d2:2a:b7:3e:57: ac:ce:5c:d0:7f:4b:f6:2a:ae:f8:da:b4:2b:da:b5: 11:c5:5a:08:51:a4:37:36:d7:a6:fb:73:e9:ef:6e: 95:99:e6:5f:f9:be:dc:92:58:c3:3a:cb:8a:6e:17: 4c:a9:6e:d7:1d:5d:6b:76:bc:56:64:5f:bc:68:47: 4a:62:ed:60:3f:ae:57:5d:de:8e:59:9d:a8:61:b7: be:f9:ca:13:28:db:42:48:75:f9:96:96:d9:d9:cd: a7:c4:f6:32:77:bb:b9:68:c6:b6:8f:f5:c2:0e:e8: 83:07:e4:3a:b1:ed:ba:62:85:4f:70:ae:a7:bf:08: 09:5d:1e:61:4f:a6:eb:7c:64:dc:bf:11:5a:ab:60: 13:68:a7:c0:ba:1d:27:90:b6:d0:7b:18:a7:2e:a0: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D8:0A:EA:85:52:D0:AC:CA:48:5A:3C:F9:93:E3:1C:35:14:3B:BA X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff72::/48 Signature Algorithm: sha256WithRSAEncryption 5e:4c:bc:02:e2:f3:f6:b1:fb:a8:ba:42:57:45:22:74:44:ae: 7d:13:c0:91:39:22:87:db:e7:5b:ba:57:1e:95:e5:e2:4b:6e: 22:df:ba:20:a2:72:27:41:db:3a:05:86:58:4f:c6:0b:61:26: dc:47:17:ed:1e:32:3f:a1:c3:1c:1e:27:34:0d:33:19:5d:bc: dc:a5:28:3f:94:c5:8d:db:98:0b:ca:7e:17:c4:2e:5a:e9:9b: a5:d1:4a:e7:d7:77:c1:7b:a4:e7:74:e2:a6:d1:10:79:88:a5: d6:8c:ce:ae:65:4f:2d:56:63:b0:ab:cb:af:5a:f6:4e:0e:50: 85:31:7a:02:f7:70:15:cf:32:f4:72:2b:36:22:21:1b:24:86: ef:22:d9:b5:10:46:93:ae:c6:93:66:57:fe:30:2d:b7:dd:fc: 2e:81:2d:4f:33:b0:30:e2:b6:b1:69:c2:4d:b0:37:03:44:f8: 0f:84:94:ac:8f:35:99:15:6e:10:ca:59:5f:46:c3:bd:69:dd: a4:7b:0b:5d:d4:93:09:4a:0a:f1:dc:51:e4:6a:56:81:8b:7c: 64:82:3d:69:c8:d1:c0:ad:f1:46:a4:73:80:60:bf:58:bb:75: ab:f7:e8:37:1e:74:9a:34:9b:db:ac:24:56:0d:a3:4f:a5:33: 30:80:c6:f8 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULo7eIopQURDWp17+7XuSwyIBbLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTI4MDlaFw0yNjA3MDgwOTMzMDlaMDMxMTAvBgNV BAMTKDJCRDgwQUVBODU1MkQwQUNDQTQ4NUEzQ0Y5OTNFMzFDMzUxNDNCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRZ6XTqqP3HsLYdP3kG/L5Pyq 1wQfbYc506izBfPwdYcK1OdneybN0E0YTy4lEg3m9z87B+1XPyfiMBZwDbUMHwa3 byRqu1BkXRkvEnSu6pn8MqliPRndrcduMlSer/YMHGDSKrc+V6zOXNB/S/Yqrvja tCvatRHFWghRpDc216b7c+nvbpWZ5l/5vtySWMM6y4puF0ypbtcdXWt2vFZkX7xo R0pi7WA/rldd3o5Znahht775yhMo20JIdfmWltnZzafE9jJ3u7loxraP9cIO6IMH 5Dqx7bpihU9wrqe/CAldHmFPput8ZNy/EVqrYBNop8C6HSeQttB7GKcuoKrhAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUK9gK6oVS0KzKSFo8+ZPjHDUUO7owHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9yMA0GCSqGSIb3DQEBCwUAA4IBAQBe TLwC4vP2sfuoukJXRSJ0RK59E8CROSKH2+dbulceleXiS24i37ogonInQds6BYZY T8YLYSbcRxftHjI/ocMcHic0DTMZXbzcpSg/lMWN25gLyn4XxC5a6Zul0Urn13fB e6TndOKm0RB5iKXWjM6uZU8tVmOwq8uvWvZODlCFMXoC93AVzzL0cis2IiEbJIbv Itm1EEaTrsaTZlf+MC233fwugS1PM7Aw4raxacJNsDcDRPgPhJSsjzWZFW4Qyllf RsO9ad2kewtd1JMJSgrx3FHkalaBi3xkgj1pyNHArfFGpHOAYL9Yu3Wr9+g3HnSa NJvbrCRWDaNPpTMwgMb4 -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:31 2025 by rpki-client