$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa File: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (raw, json) Hash identifier: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4= Subject key identifier: 06:68:1B:E5:8C:02:D6:CE:C4:64:77:9B:FF:41:BE:29:C5:C6:1C:9B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 039F7BFB1B800D53D0C4155EB0EC3571413A0B45 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa Signing time: Sat 05 Jul 2025 07:50:17 +0000 ROA not before: Sat 05 Jul 2025 07:45:17 +0000 ROA not after: Sat 04 Jul 2026 07:50:17 +0000 asID: 46766 IP address blocks: 2a07:54c1:4261::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9f:7b:fb:1b:80:0d:53:d0:c4:15:5e:b0:ec:35:71:41:3a:0b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Jul 5 07:45:17 2025 GMT Not After : Jul 4 07:50:17 2026 GMT Subject: CN=06681BE58C02D6CEC464779BFF41BE29C5C61C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:90:d9:eb:e3:e4:f2:7b:28:45:b2:92:4b: 80:4f:07:ce:3c:fb:82:cf:9a:7a:c4:b6:ac:c5:d4: 4f:56:5e:8e:d8:6e:e8:cc:c6:33:b9:3a:4f:2a:46: fa:2d:d3:f0:99:cc:e9:c0:a3:f9:d6:cf:8b:6e:b3: 90:05:5f:3d:6c:25:f2:fe:a7:ef:50:88:e7:27:cd: c6:0f:3b:6e:54:ec:89:24:e3:5d:c0:ec:11:73:92: a2:31:3c:42:ad:8d:c2:18:5c:d8:98:87:15:19:29: d7:c6:89:d5:96:fe:1c:5d:3b:39:51:e8:2e:35:5a: d3:16:79:a0:75:72:84:c7:f4:49:4e:e6:88:f0:9e: 7f:c3:32:c8:1f:34:76:05:dd:23:3a:11:8b:3c:5e: bd:54:7e:69:92:ca:33:e9:d4:41:73:09:0e:0c:e7: b4:82:13:ba:87:04:88:56:70:93:1c:04:4c:44:01: 4f:e3:00:50:08:80:8f:33:f9:97:17:d6:32:8a:4e: 93:6d:9a:cb:56:84:53:7b:1a:a6:35:8d:c8:0d:1d: 2a:63:ab:f6:d2:4f:fb:49:fc:0d:bb:85:72:8b:2a: 66:83:62:e6:41:49:8e:af:dd:47:30:bc:69:76:12: 41:af:a3:8e:ed:a0:4c:70:44:24:88:5a:3f:ea:7f: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:68:1B:E5:8C:02:D6:CE:C4:64:77:9B:FF:41:BE:29:C5:C6:1C:9B X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:4261::/48 Signature Algorithm: sha256WithRSAEncryption 01:ad:15:96:e0:89:e8:21:b9:3a:55:f6:77:1e:3f:1e:5c:07: d0:d2:66:1a:c5:9b:a5:9e:9a:57:b7:7d:30:f5:da:4c:74:36: f0:02:35:f1:15:46:1f:1a:e7:49:b4:a7:32:ed:1d:cc:b3:cb: 3e:65:18:44:9e:71:04:d8:4d:63:32:1b:1d:02:c6:0d:3a:ee: 08:02:6e:8c:43:75:64:da:0e:1c:fb:6d:01:b3:db:30:88:63: b3:64:07:34:6e:a9:42:3c:25:9c:2a:a8:ce:e0:71:53:8d:91: 60:6d:b9:2f:82:06:f7:99:c2:e8:b8:b3:f8:42:63:57:08:80: db:aa:3d:b5:20:8e:c6:54:ac:e2:82:70:6b:e8:2c:fa:97:ad: 29:f7:dd:eb:06:46:a1:f3:0c:9d:3b:8a:cb:4f:61:9b:4c:60: df:a1:7e:7b:69:89:ac:dc:0c:b9:76:2b:b1:ed:a5:c3:9d:7d: 3a:83:6f:ad:d6:91:d7:93:53:4d:5c:70:ce:3e:aa:9f:d8:af: f4:2c:b0:47:da:05:0b:d3:98:0a:df:7d:dc:a0:01:c6:50:f3: 78:e9:66:81:78:b3:7f:d0:59:c6:f2:b9:20:ba:78:6b:c4:0c: 1e:a7:48:1f:57:ab:7d:bb:e5:9e:df:fa:f4:3d:63:03:e5:ce: 3a:db:9c:0f -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUA597+xuADVPQxBVesOw1cUE6C0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNTA3MDUwNzQ1MTdaFw0yNjA3MDQwNzUwMTdaMDMxMTAvBgNV BAMTKDA2NjgxQkU1OEMwMkQ2Q0VDNDY0Nzc5QkZGNDFCRTI5QzVDNjFDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYJDZ6+Pk8nsoRbKSS4BPB848 +4LPmnrEtqzF1E9WXo7YbujMxjO5Ok8qRvot0/CZzOnAo/nWz4tus5AFXz1sJfL+ p+9QiOcnzcYPO25U7Ikk413A7BFzkqIxPEKtjcIYXNiYhxUZKdfGidWW/hxdOzlR 6C41WtMWeaB1coTH9ElO5ojwnn/DMsgfNHYF3SM6EYs8Xr1UfmmSyjPp1EFzCQ4M 57SCE7qHBIhWcJMcBExEAU/jAFAIgI8z+ZcX1jKKTpNtmstWhFN7GqY1jcgNHSpj q/bST/tJ/A27hXKLKmaDYuZBSY6v3UcwvGl2EkGvo47toExwRCSIWj/qf9NTAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUBmgb5YwC1s7EZHeb/0G+KcXGHJswHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCBowYIKwYB BQUHMAuGgZZyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC8zMjYx MzAzNzNhMzUzNDYzMzEzYTM0MzIzNjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw MzQzNjM3MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMFCYTANBgkqhkiG9w0BAQsFAAOCAQEA Aa0VluCJ6CG5OlX2dx4/HlwH0NJmGsWbpZ6aV7d9MPXaTHQ28AI18RVGHxrnSbSn Mu0dzLPLPmUYRJ5xBNhNYzIbHQLGDTruCAJujEN1ZNoOHPttAbPbMIhjs2QHNG6p QjwlnCqozuBxU42RYG25L4IG95nC6Liz+EJjVwiA26o9tSCOxlSs4oJwa+gs+pet Kffd6wZGofMMnTuKy09hm0xg36F+e2mJrNwMuXYrse2lw519OoNvrdaR15NTTVxw zj6qn9iv9CywR9oFC9OYCt993KABxlDzeOlmgXizf9BZxvK5ILp4a8QMHqdIH1er fbvlnt/69D1jA+XOOtucDw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:24:50 2025 by rpki-client