$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao= Subject key identifier: F5:EC:D2:A0:93:32:A4:C1:1D:B4:63:10:AF:C4:96:78:18:A4:0B:CE Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 3B1CB9A82B1079C281ADBEEEA65D38CB6052F625 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:37:59 +0000 ROA not before: Wed 09 Jul 2025 09:32:59 +0000 ROA not after: Wed 08 Jul 2026 09:37:59 +0000 asID: 203915 IP address blocks: 2a14:7580:ff74::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1c:b9:a8:2b:10:79:c2:81:ad:be:ee:a6:5d:38:cb:60:52:f6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:32:59 2025 GMT Not After : Jul 8 09:37:59 2026 GMT Subject: CN=F5ECD2A09332A4C11DB46310AFC4967818A40BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:5a:e3:25:a3:06:a4:48:39:57:c8:1b:81: 5c:93:fc:a4:c8:8d:0c:d0:ca:79:02:49:f4:f3:6c: c6:1d:a7:a4:12:41:e1:4c:79:70:3c:2a:bb:1a:c6: 57:4f:8a:8e:0e:7e:d8:80:74:18:b7:89:f2:c5:2b: 4b:9a:b9:ec:bc:28:f0:b9:9e:b7:7d:65:fb:17:29: c1:a7:e5:e8:0c:f9:b1:62:40:b8:ee:df:ce:11:09: 2b:59:1a:86:d1:ef:24:86:51:bb:38:df:ea:c6:0d: 36:3f:f6:44:90:06:02:41:ca:34:33:ee:02:57:83: 65:58:26:1c:c6:3b:c3:89:d0:1d:c8:45:63:41:4a: 0d:e8:15:bb:70:08:7e:d7:2a:f7:52:10:74:82:d7: 56:b8:46:35:60:b1:ab:25:49:26:a3:00:30:56:45: 7a:1a:11:1e:19:03:46:e4:3d:70:02:c5:87:6d:73: f5:d5:f7:8a:b1:38:0d:44:35:a4:62:f1:1b:3a:41: 63:9f:2c:d1:b7:9b:d2:0b:55:77:ec:38:8f:d6:05: cf:6b:de:35:63:04:f1:ff:32:10:71:31:d5:7c:4f: 3b:52:e2:37:21:a1:cf:52:fd:6d:c5:a4:b7:24:5b: 66:b7:02:5e:be:cb:82:74:37:ea:52:29:7f:14:a5: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EC:D2:A0:93:32:A4:C1:1D:B4:63:10:AF:C4:96:78:18:A4:0B:CE X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff74::/48 Signature Algorithm: sha256WithRSAEncryption c9:b5:7f:7e:fb:4c:ce:c8:ee:61:8d:25:44:64:4a:06:6e:44: 21:af:ad:f9:0d:7a:04:20:df:0c:fa:f3:11:44:52:84:38:c4: 80:88:cf:6a:f9:21:04:9f:96:32:d7:63:74:73:76:c7:b6:f6: b6:bd:16:62:70:88:fb:2b:48:d2:0c:01:c4:98:b5:21:fa:75: 5e:bd:aa:b6:eb:c8:5e:ad:62:18:3e:52:a3:00:5b:e0:85:5f: bf:fd:1b:28:3f:25:7b:1a:9c:45:6b:1a:66:52:60:1a:a7:d9: 80:2d:28:db:be:cc:f6:f9:07:b5:a4:70:09:f2:ce:43:4d:ca: ca:cc:4f:5f:51:31:e2:75:1b:2b:cf:c5:9d:20:26:1d:62:8e: 1e:25:d6:b8:40:03:b2:4a:a4:99:a8:6a:60:11:5e:5c:6d:5d: c2:d3:e5:35:0d:6c:37:87:af:74:d4:00:b8:aa:b1:9f:0d:58: 9d:61:f9:09:2e:7b:ff:3a:7f:71:2c:43:11:24:f1:7b:02:f2: 16:37:6b:00:49:a5:f8:1a:3e:78:ac:af:cc:98:26:45:d1:2c: c9:4f:69:43:96:8e:48:70:7f:da:f3:40:79:ee:7e:e3:ee:92: f4:0c:17:f3:6a:4b:a9:74:00:0c:70:4e:6f:60:d8:62:ba:be: 12:c3:a3:db -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOxy5qCsQecKBrb7upl04y2BS9iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTMyNTlaFw0yNjA3MDgwOTM3NTlaMDMxMTAvBgNV BAMTKEY1RUNEMkEwOTMzMkE0QzExREI0NjMxMEFGQzQ5Njc4MThBNDBCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrY1rjJaMGpEg5V8gbgVyT/KTI jQzQynkCSfTzbMYdp6QSQeFMeXA8KrsaxldPio4OftiAdBi3ifLFK0uauey8KPC5 nrd9ZfsXKcGn5egM+bFiQLju384RCStZGobR7ySGUbs43+rGDTY/9kSQBgJByjQz 7gJXg2VYJhzGO8OJ0B3IRWNBSg3oFbtwCH7XKvdSEHSC11a4RjVgsaslSSajADBW RXoaER4ZA0bkPXACxYdtc/XV94qxOA1ENaRi8Rs6QWOfLNG3m9ILVXfsOI/WBc9r 3jVjBPH/MhBxMdV8TztS4jchoc9S/W3FpLckW2a3Al6+y4J0N+pSKX8UpSTfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU9ezSoJMypMEdtGMQr8SWeBikC84wHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP90MA0GCSqGSIb3DQEBCwUAA4IBAQDJ tX9++0zOyO5hjSVEZEoGbkQhr635DXoEIN8M+vMRRFKEOMSAiM9q+SEEn5Yy12N0 c3bHtva2vRZicIj7K0jSDAHEmLUh+nVevaq268herWIYPlKjAFvghV+//RsoPyV7 GpxFaxpmUmAap9mALSjbvsz2+Qe1pHAJ8s5DTcrKzE9fUTHidRsrz8WdICYdYo4e Jda4QAOySqSZqGpgEV5cbV3C0+U1DWw3h6901AC4qrGfDVidYfkJLnv/On9xLEMR JPF7AvIWN2sASaX4Gj54rK/MmCZF0SzJT2lDlo5IcH/a80B57n7j7pL0DBfzakup dAAMcE5vYNhiur4Sw6Pb -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:32 2025 by rpki-client