$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw= Subject key identifier: 12:C7:EC:38:E2:80:B3:21:D9:2F:34:76:79:03:92:1B:58:89:46:59 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 714AA57C5EC9ACB279CFE25C2C3A236A8DC759B7 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:39:07 +0000 ROA not before: Wed 09 Jul 2025 09:34:07 +0000 ROA not after: Wed 08 Jul 2026 09:39:07 +0000 asID: 203915 IP address blocks: 2a14:7580:ff7f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4a:a5:7c:5e:c9:ac:b2:79:cf:e2:5c:2c:3a:23:6a:8d:c7:59:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:34:07 2025 GMT Not After : Jul 8 09:39:07 2026 GMT Subject: CN=12C7EC38E280B321D92F34767903921B58894659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:4d:5f:15:3c:da:a0:83:f3:6a:d5:41:30: fb:99:6d:ed:70:67:55:d1:49:fe:14:88:c6:56:57: 0a:f5:a1:cb:c0:55:09:15:d0:c5:b2:0c:01:70:b6: 5c:61:b1:4c:23:42:5d:11:6f:27:16:8f:62:c4:41: e0:60:d7:ee:c5:44:b9:02:be:f6:4d:49:24:f9:26: 02:c1:c8:ea:a7:86:f6:b4:a3:18:1b:43:47:c5:38: 4e:d0:71:e6:b1:33:7f:a6:3a:96:d2:8f:7d:89:3c: 17:fc:67:12:c7:65:62:b9:13:8b:cd:16:b9:70:22: e7:50:7b:3d:0c:fa:9b:6f:22:84:e0:a6:83:a1:0f: 4d:06:0f:52:46:54:fc:2c:05:d4:07:31:49:1c:c9: 02:da:46:c3:e6:ec:3c:4c:65:86:85:7f:bd:62:4c: e2:2d:59:7a:7c:21:75:1a:b5:c9:a6:64:ed:51:cc: 78:d0:77:8c:9b:5e:21:6c:58:74:d4:aa:b7:d7:9e: b6:3b:28:29:f9:b9:98:4c:b0:92:59:29:7a:ba:6a: c7:35:8a:82:8d:a8:67:3f:f1:be:54:b8:9a:e4:9d: d4:df:7a:36:67:c4:66:d9:26:dc:3f:4c:5c:9f:d1: 13:14:3a:d6:40:cc:ed:95:22:2b:b4:ce:d1:84:85: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C7:EC:38:E2:80:B3:21:D9:2F:34:76:79:03:92:1B:58:89:46:59 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff7f::/48 Signature Algorithm: sha256WithRSAEncryption 36:b5:00:86:ba:a0:d6:0a:83:49:64:d7:c1:56:5e:4d:94:fd: 2b:d1:0c:b0:12:0b:10:4f:a2:30:f3:b3:1b:2f:cd:10:0b:d4: 1a:da:13:43:7f:28:cf:fe:03:a8:cd:10:e1:f4:9c:73:e0:2c: 3c:a9:97:1b:cf:2c:11:08:9b:8a:de:81:58:9c:26:59:54:59: 09:ef:ef:5d:ff:c8:c7:ff:99:ea:85:5a:d3:95:c4:63:11:55: a6:ce:6b:29:b2:ad:d8:8f:22:f3:b2:e2:ab:c6:e1:8f:71:b2: c1:0f:53:47:92:91:d0:d1:55:6d:2a:f8:4f:6c:c7:64:09:65: 4a:a8:9a:0f:ef:e0:0f:80:a8:6c:56:f2:28:fd:83:fd:19:f1: 30:77:6d:e5:3e:ba:e4:44:9a:2b:3f:d6:33:ab:2b:85:c4:f8: fc:d1:d8:5c:9e:af:d8:8a:5a:7e:7f:ee:0d:be:00:f5:e5:ba: d0:7a:f1:56:77:56:e7:56:3b:e4:f2:c0:bc:17:c6:44:33:f2: d6:5d:ae:09:29:4f:90:f5:f3:10:a2:1d:84:2a:5b:c2:b0:6e: 01:df:f2:00:d6:94:d3:22:12:e2:56:05:78:4c:69:ca:f6:5a: 28:b3:b5:25:d5:de:17:90:ac:d8:bf:ec:c7:c7:00:b4:58:28: 9f:f1:ea:75 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcUqlfF7JrLJ5z+JcLDojao3HWbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTM0MDdaFw0yNjA3MDgwOTM5MDdaMDMxMTAvBgNV BAMTKDEyQzdFQzM4RTI4MEIzMjFEOTJGMzQ3Njc5MDM5MjFCNTg4OTQ2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rE1fFTzaoIPzatVBMPuZbe1w Z1XRSf4UiMZWVwr1ocvAVQkV0MWyDAFwtlxhsUwjQl0RbycWj2LEQeBg1+7FRLkC vvZNSST5JgLByOqnhva0oxgbQ0fFOE7QceaxM3+mOpbSj32JPBf8ZxLHZWK5E4vN FrlwIudQez0M+ptvIoTgpoOhD00GD1JGVPwsBdQHMUkcyQLaRsPm7DxMZYaFf71i TOItWXp8IXUatcmmZO1RzHjQd4ybXiFsWHTUqrfXnrY7KCn5uZhMsJJZKXq6asc1 ioKNqGc/8b5UuJrkndTfejZnxGbZJtw/TFyf0RMUOtZAzO2VIiu0ztGEhaopAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUEsfsOOKAsyHZLzR2eQOSG1iJRlkwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9/MA0GCSqGSIb3DQEBCwUAA4IBAQA2 tQCGuqDWCoNJZNfBVl5NlP0r0QywEgsQT6Iw87MbL80QC9Qa2hNDfyjP/gOozRDh 9Jxz4Cw8qZcbzywRCJuK3oFYnCZZVFkJ7+9d/8jH/5nqhVrTlcRjEVWmzmspsq3Y jyLzsuKrxuGPcbLBD1NHkpHQ0VVtKvhPbMdkCWVKqJoP7+APgKhsVvIo/YP9GfEw d23lPrrkRJorP9YzqyuFxPj80dhcnq/Yilp+f+4NvgD15brQevFWd1bnVjvk8sC8 F8ZEM/LWXa4JKU+Q9fMQoh2EKlvCsG4B3/IA1pTTIhLiVgV4TGnK9loos7Ul1d4X kKzYv+zHxwC0WCif8ep1 -----END CERTIFICATE-----Generated at Sun Jul 20 20:12:35 2025 by rpki-client