$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa File: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (raw, json) Hash identifier: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk= Subject key identifier: 4F:F8:CA:FF:E7:29:6E:3E:1F:11:D4:FD:4B:56:27:E7:00:8B:69:15 Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 49BC799538A2259FA2743A55D6C42EC1769C2E57 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa Signing time: Sun 13 Apr 2025 17:14:40 +0000 ROA not before: Sun 13 Apr 2025 17:09:40 +0000 ROA not after: Sun 12 Apr 2026 17:14:40 +0000 asID: 203843 IP address blocks: 2a14:7580:902::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bc:79:95:38:a2:25:9f:a2:74:3a:55:d6:c4:2e:c1:76:9c:2e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Apr 13 17:09:40 2025 GMT Not After : Apr 12 17:14:40 2026 GMT Subject: CN=4FF8CAFFE7296E3E1F11D4FD4B5627E7008B6915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:a9:b1:63:eb:10:82:b7:d9:ef:c5:b0:18: e4:c5:af:81:d0:47:44:ce:52:b3:df:9b:0e:44:8c: 31:ea:00:f1:0c:82:80:f7:ef:88:7b:1a:2e:c6:c7: 0b:77:4d:70:4e:62:3d:91:91:1a:ad:6f:5a:cf:1a: 43:25:e9:2f:09:15:92:04:71:8e:24:6e:29:cc:15: ef:b1:1a:09:9c:60:7a:11:23:f7:5d:4e:6f:a2:2e: 0e:73:91:c4:6f:bb:48:c4:61:fc:53:d4:67:40:9f: 9c:2d:3a:85:ff:de:9e:83:cf:66:a3:12:49:1d:3b: 55:67:fc:66:dc:4f:cb:ce:e1:b9:68:2e:f2:40:49: 41:26:74:bb:25:9f:3c:05:3a:71:65:5b:6c:cd:22: a3:7d:42:f2:10:bb:d9:c1:01:a1:2c:93:e0:0c:c6: 2e:06:4c:43:b3:c9:a1:e3:c3:c4:83:c8:46:65:22: c8:41:11:99:cd:3c:f8:0a:cc:00:c9:33:73:96:6e: a6:5b:c2:dd:a6:57:14:4f:b5:46:7f:e0:13:35:c7: f6:2e:01:6e:b3:2e:74:02:ae:3d:e3:7c:a2:3a:86: 3b:c9:25:c6:30:a3:d3:88:dd:a8:53:c8:9d:12:87: bf:10:cc:74:b4:83:eb:33:b6:8a:2e:ea:d0:51:8f: a5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F8:CA:FF:E7:29:6E:3E:1F:11:D4:FD:4B:56:27:E7:00:8B:69:15 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:902::/48 Signature Algorithm: sha256WithRSAEncryption 39:21:14:7d:80:95:9c:a8:96:eb:bd:0f:82:9c:ae:57:ca:a4: 9b:ef:58:0f:5c:34:e0:ce:79:80:42:5c:fb:96:d5:3f:cc:2a: 90:0f:f4:35:8f:49:93:ba:cc:dc:0f:1d:c6:5b:6c:39:27:ed: ab:ae:f7:85:ff:a7:6e:98:77:42:01:e5:47:08:75:d5:04:97: 69:f0:e7:c3:58:b3:61:b6:a6:5e:13:64:90:b1:0d:e5:f9:12: c7:34:67:d8:6f:f2:50:39:b3:7d:87:09:13:b5:c6:15:00:8a: 4c:90:70:ef:6e:2e:1e:a9:97:5a:fa:d5:34:69:7e:72:dd:14: ae:d5:0a:6f:b7:5d:d4:36:45:88:69:81:9c:3d:9c:e9:81:a5: 29:82:77:8e:8c:35:74:46:e0:84:f1:12:2d:ad:9d:12:59:36: ee:15:25:fa:55:93:b3:87:6e:a1:a6:af:a0:a8:50:f3:92:ca: 06:58:bd:6c:92:b2:eb:6f:e2:bc:92:62:28:b9:e0:83:0c:d1: 1e:61:d2:e5:18:8b:f4:50:65:dc:e6:f9:6a:22:2a:4e:4f:87: 6f:e5:80:c6:7a:a6:73:18:ab:80:d9:66:d4:76:30:aa:cd:10: cf:28:ed:a9:a3:83:5e:e0:64:5f:47:24:0b:cb:32:80:c0:29: f9:db:4b:84 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUSbx5lTiiJZ+idDpV1sQuwXacLlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA0MTMxNzA5NDBaFw0yNjA0MTIxNzE0NDBaMDMxMTAvBgNV BAMTKDRGRjhDQUZGRTcyOTZFM0UxRjExRDRGRDRCNTYyN0U3MDA4QjY5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdKmxY+sQgrfZ78WwGOTFr4HQ R0TOUrPfmw5EjDHqAPEMgoD374h7Gi7Gxwt3TXBOYj2RkRqtb1rPGkMl6S8JFZIE cY4kbinMFe+xGgmcYHoRI/ddTm+iLg5zkcRvu0jEYfxT1GdAn5wtOoX/3p6Dz2aj EkkdO1Vn/GbcT8vO4bloLvJASUEmdLslnzwFOnFlW2zNIqN9QvIQu9nBAaEsk+AM xi4GTEOzyaHjw8SDyEZlIshBEZnNPPgKzADJM3OWbqZbwt2mVxRPtUZ/4BM1x/Yu AW6zLnQCrj3jfKI6hjvJJcYwo9OI3ahTyJ0Sh78QzHS0g+sztoou6tBRj6U9AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUT/jK/+cpbj4fEdT9S1Yn5wCLaRUwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xM2Y2ODU2MS0wYTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTM5MzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz MzM4MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYAJAjANBgkqhkiG9w0BAQsFAAOCAQEAOSEU fYCVnKiW670PgpyuV8qkm+9YD1w04M55gEJc+5bVP8wqkA/0NY9Jk7rM3A8dxlts OSftq673hf+nbph3QgHlRwh11QSXafDnw1izYbamXhNkkLEN5fkSxzRn2G/yUDmz fYcJE7XGFQCKTJBw724uHqmXWvrVNGl+ct0UrtUKb7dd1DZFiGmBnD2c6YGlKYJ3 jow1dEbghPESLa2dElk27hUl+lWTs4duoaavoKhQ85LKBli9bJKy62/ivJJiKLng gwzRHmHS5RiL9FBl3Ob5aiIqTk+Hb+WAxnqmcxirgNlm1HYwqs0QzyjtqaODXuBk X0ckC8sygMAp+dtLhA== -----END CERTIFICATE-----Generated at Fri Oct 24 16:39:57 2025 by rpki-client