$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0= Subject key identifier: 05:B3:3A:64:A6:07:88:1A:FE:A4:93:F4:A8:E3:4B:C2:FA:D0:D2:AD Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 37FBAD6BA7C1707B3ECD499F1D6B420D06DB5799 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:38:50 +0000 ROA not before: Wed 09 Jul 2025 09:33:50 +0000 ROA not after: Wed 08 Jul 2026 09:38:50 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fb:ad:6b:a7:c1:70:7b:3e:cd:49:9f:1d:6b:42:0d:06:db:57:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:33:50 2025 GMT Not After : Jul 8 09:38:50 2026 GMT Subject: CN=05B33A64A607881AFEA493F4A8E34BC2FAD0D2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c5:92:2a:61:df:e9:9c:33:65:e8:a4:46:8d: 0f:3a:1f:0a:99:ae:81:ec:b7:41:03:4c:5a:ea:df: f7:7f:69:48:0f:8a:5d:30:60:d0:e7:c3:f5:a3:7a: dc:8a:80:27:d0:03:bc:4a:34:e9:39:b3:40:17:26: d0:31:28:94:95:05:8c:fa:a1:9b:06:99:94:bf:99: 32:44:7b:35:88:05:34:89:e5:49:09:6f:05:a2:00: 6b:dc:51:5f:49:af:44:07:ad:3c:b3:f1:2f:dc:03: 1a:a1:78:cb:cf:8b:c4:e2:9f:04:b1:2a:ab:8d:eb: d0:6f:a4:f5:cc:0e:73:9c:67:65:11:b7:f7:ce:95: a9:84:df:2f:47:69:26:06:40:d5:6e:46:04:81:9e: e0:b8:a8:02:4e:05:c8:b3:33:f9:70:a8:4e:a2:88: 85:b9:8d:3e:2a:62:f6:d2:3f:d9:61:58:95:f1:7e: ed:3e:22:7b:0f:b3:77:2d:47:3e:7b:b9:dd:58:94: a1:f7:22:d6:0f:11:66:33:71:fd:a3:6b:d8:06:48: cb:9a:72:8f:5d:1d:76:26:f2:55:b9:c0:08:9e:6d: 1c:79:21:d1:c2:d8:54:51:31:c2:ed:25:3a:c3:01: 1b:92:4c:50:41:c6:e8:4d:d8:dd:6e:55:e8:a6:df: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B3:3A:64:A6:07:88:1A:FE:A4:93:F4:A8:E3:4B:C2:FA:D0:D2:AD X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7c::/48 Signature Algorithm: sha256WithRSAEncryption c6:59:ee:e9:80:b9:72:91:af:0b:58:9a:0e:01:d8:56:4f:b0: b8:fa:80:d3:d8:a0:21:7c:fd:ba:ba:bf:93:43:d6:9b:84:1c: 2c:32:80:6d:6e:86:ba:b6:ae:81:00:93:fc:31:8b:60:58:12: 27:87:0c:7a:09:8f:29:59:5a:f5:9e:99:18:e9:8d:2d:c3:6b: d7:05:21:7f:2c:a3:d7:11:91:6b:c3:bb:5b:db:63:81:1a:ea: 7a:e0:ad:78:7b:62:e7:f5:13:c9:78:cd:96:38:c2:e0:9a:1b: b5:a4:14:41:a5:9a:79:40:29:dd:87:25:37:ae:7d:be:cc:91: 4d:5a:4c:a0:c9:34:93:af:89:ee:d2:97:ae:e4:7b:48:2b:d8: 00:93:f5:57:a9:bf:ad:ca:5c:44:ba:f2:57:bc:c0:31:7b:f8: dc:8c:a6:c2:4a:6d:76:e0:12:4c:26:d6:c6:8c:df:96:fe:fd: 12:f4:3f:f9:79:ba:76:79:88:c3:24:bd:58:95:3a:40:66:e2: c1:c2:74:fe:8b:3e:06:5a:71:2e:94:2d:cc:ce:e6:28:86:0f: c6:52:b9:48:0c:7d:50:b1:53:bc:7e:13:64:bc:3d:fe:8e:db: 72:e0:b4:6a:12:af:f9:02:0a:aa:33:1e:47:14:cb:00:0e:00: d0:b2:f4:15 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUN/uta6fBcHs+zUmfHWtCDQbbV5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTMzNTBaFw0yNjA3MDgwOTM4NTBaMDMxMTAvBgNV BAMTKDA1QjMzQTY0QTYwNzg4MUFGRUE0OTNGNEE4RTM0QkMyRkFEMEQyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrxZIqYd/pnDNl6KRGjQ86HwqZ roHst0EDTFrq3/d/aUgPil0wYNDnw/WjetyKgCfQA7xKNOk5s0AXJtAxKJSVBYz6 oZsGmZS/mTJEezWIBTSJ5UkJbwWiAGvcUV9Jr0QHrTyz8S/cAxqheMvPi8TinwSx KquN69BvpPXMDnOcZ2URt/fOlamE3y9HaSYGQNVuRgSBnuC4qAJOBcizM/lwqE6i iIW5jT4qYvbSP9lhWJXxfu0+InsPs3ctRz57ud1YlKH3ItYPEWYzcf2ja9gGSMua co9dHXYm8lW5wAiebRx5IdHC2FRRMcLtJTrDARuSTFBBxuhN2N1uVeim3+U5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUBbM6ZKYHiBr+pJP0qONLwvrQ0q0wHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP98MA0GCSqGSIb3DQEBCwUAA4IBAQDG We7pgLlyka8LWJoOAdhWT7C4+oDT2KAhfP26ur+TQ9abhBwsMoBtboa6tq6BAJP8 MYtgWBInhwx6CY8pWVr1npkY6Y0tw2vXBSF/LKPXEZFrw7tb22OBGup64K14e2Ln 9RPJeM2WOMLgmhu1pBRBpZp5QCndhyU3rn2+zJFNWkygyTSTr4nu0peu5HtIK9gA k/VXqb+tylxEuvJXvMAxe/jcjKbCSm124BJMJtbGjN+W/v0S9D/5ebp2eYjDJL1Y lTpAZuLBwnT+iz4GWnEulC3MzuYohg/GUrlIDH1QsVO8fhNkvD3+jtty4LRqEq/5 AgqqMx5HFMsADgDQsvQV -----END CERTIFICATE-----Generated at Sun Jul 20 20:11:03 2025 by rpki-client