$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os= Subject key identifier: 4F:55:61:C7:5B:2C:C9:5C:86:7D:51:01:A4:41:5D:70:D2:52:EA:6B Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 2ED348453967BAF2D6CA2002D9A8C6D7EC02EF38 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:37:41 +0000 ROA not before: Wed 09 Jul 2025 09:32:41 +0000 ROA not after: Wed 08 Jul 2026 09:37:41 +0000 asID: 203915 IP address blocks: 2a14:7580:ff73::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d3:48:45:39:67:ba:f2:d6:ca:20:02:d9:a8:c6:d7:ec:02:ef:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:32:41 2025 GMT Not After : Jul 8 09:37:41 2026 GMT Subject: CN=4F5561C75B2CC95C867D5101A4415D70D252EA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:59:71:98:eb:04:fb:0d:01:c4:3f:b1:0e: 6d:d5:b2:74:97:48:3c:e2:be:0f:35:6f:c6:f5:4b: 70:93:25:86:8d:5b:98:2c:cb:00:f5:91:df:42:8f: 03:de:7a:34:97:4e:4c:98:23:9a:0d:1e:b8:47:d9: fd:c9:32:b1:8e:f3:55:3b:f7:a7:ff:02:20:5d:15: 47:28:35:30:4f:38:5f:7a:9a:50:ca:df:99:85:06: 8c:97:c7:ae:1a:2a:30:05:54:10:99:66:06:7f:77: 71:ba:5b:fa:1e:16:f9:97:77:9d:65:57:e3:90:08: f7:ca:64:1a:b1:b0:cb:59:e2:be:8d:f1:7f:07:af: 55:9e:99:f1:7f:5f:c1:e9:c0:60:5a:5a:d6:5e:eb: 66:79:9f:44:66:ac:5c:ce:47:30:e5:d9:30:aa:b2: 9f:55:03:67:b4:76:d5:17:e4:c3:15:2c:ad:4c:07: 42:cb:82:f0:27:d4:f1:c8:3b:ee:f3:7a:c0:86:6b: fa:36:f6:12:be:ca:ac:6d:6f:8f:27:db:98:de:02: ce:67:8d:86:7c:90:08:04:a2:35:87:51:02:eb:45: d4:ff:a9:62:d3:30:e4:42:4b:fd:6a:48:d0:35:c9: ca:32:88:c3:e9:d4:a8:66:5c:2e:05:09:99:3b:3a: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:55:61:C7:5B:2C:C9:5C:86:7D:51:01:A4:41:5D:70:D2:52:EA:6B X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff73::/48 Signature Algorithm: sha256WithRSAEncryption 60:e7:1d:5f:86:62:12:83:d3:6b:80:10:3f:ef:c5:13:e0:0c: a5:da:c1:0e:26:8b:52:f3:9a:36:7f:e0:83:3a:1a:ed:f4:ec: 0c:73:75:5d:b3:50:f4:6f:e0:e2:2c:26:c8:7c:f6:85:cf:6a: ce:34:23:64:50:67:8a:ed:ac:cb:a3:17:89:56:81:81:07:24: da:c9:10:ab:39:a1:ca:4a:6c:76:d6:2f:b2:2f:a6:6f:9b:25: d2:77:35:2c:8f:8f:c8:a8:4a:57:80:b6:70:fd:05:44:01:55: cd:03:34:1e:80:7f:e6:9e:b6:69:ae:d8:3c:f8:eb:ca:33:a9: ec:d7:2c:74:2e:68:5c:fd:16:f3:15:ca:bd:64:10:9c:26:f4: 4f:1a:85:29:fd:3d:3c:00:0e:4f:79:29:58:71:a8:7f:21:d4: d6:e6:d0:b6:38:0c:f7:d9:d5:ee:ee:e5:80:28:fc:e2:65:2d: b6:1e:e7:28:64:23:e1:4b:73:f8:2d:b2:14:30:2d:28:d5:e6: d0:19:ba:f9:cf:cc:af:d8:63:5b:f4:35:8b:4f:c3:cb:a5:70: c2:1c:06:4f:4e:63:ff:58:1c:47:22:91:fb:2e:58:a1:73:4f: 1e:a6:3b:16:fa:43:b9:42:a9:8e:bd:3f:c0:3d:7c:c3:57:ff: a3:6b:aa:5b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULtNIRTlnuvLWyiAC2ajG1+wC7zgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTMyNDFaFw0yNjA3MDgwOTM3NDFaMDMxMTAvBgNV BAMTKDRGNTU2MUM3NUIyQ0M5NUM4NjdENTEwMUE0NDE1RDcwRDI1MkVBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNVlxmOsE+w0BxD+xDm3VsnSX SDzivg81b8b1S3CTJYaNW5gsywD1kd9CjwPeejSXTkyYI5oNHrhH2f3JMrGO81U7 96f/AiBdFUcoNTBPOF96mlDK35mFBoyXx64aKjAFVBCZZgZ/d3G6W/oeFvmXd51l V+OQCPfKZBqxsMtZ4r6N8X8Hr1WemfF/X8HpwGBaWtZe62Z5n0RmrFzORzDl2TCq sp9VA2e0dtUX5MMVLK1MB0LLgvAn1PHIO+7zesCGa/o29hK+yqxtb48n25jeAs5n jYZ8kAgEojWHUQLrRdT/qWLTMORCS/1qSNA1ycoyiMPp1KhmXC4FCZk7Oq6FAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUT1Vhx1ssyVyGfVEBpEFdcNJS6mswHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9zMA0GCSqGSIb3DQEBCwUAA4IBAQBg 5x1fhmISg9NrgBA/78UT4Ayl2sEOJotS85o2f+CDOhrt9OwMc3Vds1D0b+DiLCbI fPaFz2rONCNkUGeK7azLoxeJVoGBByTayRCrOaHKSmx21i+yL6ZvmyXSdzUsj4/I qEpXgLZw/QVEAVXNAzQegH/mnrZprtg8+OvKM6ns1yx0Lmhc/RbzFcq9ZBCcJvRP GoUp/T08AA5PeSlYcah/IdTW5tC2OAz32dXu7uWAKPziZS22HucoZCPhS3P4LbIU MC0o1ebQGbr5z8yv2GNb9DWLT8PLpXDCHAZPTmP/WBxHIpH7Llihc08epjsW+kO5 QqmOvT/APXzDV/+ja6pb -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:31 2025 by rpki-client