$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa File: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (raw, json) Hash identifier: tytw/whu3Cal8fEpNZNkq3aQf4vARomvus40Tku1K6M= Subject key identifier: 73:00:23:AB:1B:1A:2D:AF:06:2E:10:57:F9:04:C8:C8:1B:6A:18:6D Certificate issuer: /CN=82DFDBC2299142D57F36C3896EE6073C080234FF Certificate serial: 0E18CBEA852E27E72C1049D4C2EBF317A2FFA183 Authority key identifier: 82:DF:DB:C2:29:91:42:D5:7F:36:C3:89:6E:E6:07:3C:08:02:34:FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/82DFDBC2299142D57F36C3896EE6073C080234FF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa Signing time: Fri 29 Aug 2025 14:45:54 +0000 ROA not before: Fri 29 Aug 2025 14:40:54 +0000 ROA not after: Fri 28 Aug 2026 14:45:54 +0000 asID: 210352 IP address blocks: 2a14:7583:f400::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.crl rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/82DFDBC2299142D57F36C3896EE6073C080234FF.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:18:cb:ea:85:2e:27:e7:2c:10:49:d4:c2:eb:f3:17:a2:ff:a1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82DFDBC2299142D57F36C3896EE6073C080234FF Validity Not Before: Aug 29 14:40:54 2025 GMT Not After : Aug 28 14:45:54 2026 GMT Subject: CN=730023AB1B1A2DAF062E1057F904C8C81B6A186D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:60:14:a9:1e:12:9f:03:11:28:4a:94:a0:a8: 0c:84:57:be:1b:cd:4e:f7:0b:12:85:3a:dc:12:a1: 02:11:3d:7c:8e:d5:27:e1:46:90:6a:ab:a3:c5:8f: aa:43:65:9e:81:a3:c1:b8:de:ae:66:bc:94:6b:c3: be:4d:ec:a5:59:1c:0e:b9:e1:da:b0:a1:d1:c3:58: c1:05:14:42:bb:35:24:d0:13:1d:5d:97:0e:ab:67: f2:38:3e:0d:b3:37:75:fb:f7:dd:b9:17:81:cc:55: 0c:92:5f:2b:03:5f:60:1c:ce:0f:65:b0:93:bc:42: 82:d8:a4:ce:e7:b2:19:f1:80:92:27:b6:2a:02:ca: 43:5e:cc:b8:9c:f6:30:4f:c5:30:b4:e6:ed:ac:04: 97:a6:64:95:6d:31:a5:cd:52:fd:d7:8d:dd:4c:bb: aa:1d:20:41:c6:5f:f5:3f:bf:1f:a4:8e:55:d7:94: 1d:73:cb:17:bc:a7:f9:18:1c:7a:95:d9:5c:e4:25: 2b:78:c9:b9:79:ce:45:f4:1f:e1:f2:6f:35:23:48: 8d:d4:27:ad:6f:3e:e1:93:05:8d:9a:f1:58:1f:0f: 5e:dd:3f:44:b8:0e:26:45:eb:6b:8a:62:b8:cb:38: ad:0c:35:0f:a9:15:d9:dc:77:2d:0d:15:29:7f:10: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:00:23:AB:1B:1A:2D:AF:06:2E:10:57:F9:04:C8:C8:1B:6A:18:6D X509v3 Authority Key Identifier: keyid:82:DF:DB:C2:29:91:42:D5:7F:36:C3:89:6E:E6:07:3C:08:02:34:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/82DFDBC2299142D57F36C3896EE6073C080234FF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f400::/44 Signature Algorithm: sha256WithRSAEncryption 83:6b:00:83:8b:67:73:bc:4c:1c:f4:d0:94:67:5e:5b:58:f4: c8:25:88:57:49:9b:0e:16:4e:de:25:c9:ab:a4:f4:ab:fa:65: bd:68:90:7a:ff:5a:92:1b:dd:cc:86:04:1c:86:b5:0c:b6:ec: 34:e0:18:be:da:b2:45:68:8a:1f:61:61:f5:25:d0:c5:4a:12: 87:66:be:54:30:a4:bc:05:7c:c2:4c:c0:4f:f3:13:3f:81:dc: f7:6f:4c:3f:6d:20:af:2f:22:95:74:95:f1:60:62:40:49:bb: ec:ff:c0:62:df:de:f6:d6:85:4a:e5:7e:cd:e0:3e:0d:1b:3a: b1:92:a2:07:d6:ad:f3:db:34:63:ae:55:50:bf:40:64:f1:2e: 67:a8:85:2b:1a:80:6c:a8:ed:06:b5:85:9c:d4:1e:cb:78:fe: eb:42:1e:e8:5b:52:07:6f:a1:67:ab:6a:81:04:67:5e:f3:14: a3:d9:c5:28:8a:41:4a:80:33:03:f8:49:63:85:ed:8c:f3:73: 92:60:3e:29:5d:8b:1b:90:18:82:d3:43:99:12:db:52:db:94: 2f:43:05:eb:0c:38:00:72:f4:77:23:56:ee:f6:b7:28:4c:bc: 5e:3b:dc:82:d5:f8:b5:94:cf:26:12:9f:8c:88:17:9e:39:62: 67:c3:90:4a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDhjL6oUuJ+csEEnUwuvzF6L/oYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJERkRCQzIyOTkxNDJENTdGMzZDMzg5NkVFNjA3M0Mw ODAyMzRGRjAeFw0yNTA4MjkxNDQwNTRaFw0yNjA4MjgxNDQ1NTRaMDMxMTAvBgNV BAMTKDczMDAyM0FCMUIxQTJEQUYwNjJFMTA1N0Y5MDRDOEM4MUI2QTE4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuYBSpHhKfAxEoSpSgqAyEV74b zU73CxKFOtwSoQIRPXyO1SfhRpBqq6PFj6pDZZ6Bo8G43q5mvJRrw75N7KVZHA65 4dqwodHDWMEFFEK7NSTQEx1dlw6rZ/I4Pg2zN3X79925F4HMVQySXysDX2Aczg9l sJO8QoLYpM7nshnxgJIntioCykNezLic9jBPxTC05u2sBJemZJVtMaXNUv3Xjd1M u6odIEHGX/U/vx+kjlXXlB1zyxe8p/kYHHqV2VzkJSt4ybl5zkX0H+HybzUjSI3U J61vPuGTBY2a8VgfD17dP0S4DiZF62uKYrjLOK0MNQ+pFdncdy0NFSl/EAANAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUcwAjqxsaLa8GLhBX+QTIyBtqGG0wHwYDVR0j BBgwFoAUgt/bwimRQtV/NsOJbuYHPAgCNP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZjMjc1MWItZjlhNS00ZTllLWE0YjgtNjU4MzEwY2U0 YWQzLzEvODJERkRCQzIyOTkxNDJENTdGMzZDMzg5NkVFNjA3M0MwODAyMzRGRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi84MkRGREJDMjI5OTE0MkQ1N0YzNkMzODk2 RUU2MDczQzA4MDIzNEZGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xNmMyNzUxYi1mOWE1LTRlOWUtYTRiOC02NTgzMTBjZTRhZDMvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzQzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTMwMzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1g/QAMA0GCSqGSIb3DQEBCwUAA4IBAQCD awCDi2dzvEwc9NCUZ15bWPTIJYhXSZsOFk7eJcmrpPSr+mW9aJB6/1qSG93MhgQc hrUMtuw04Bi+2rJFaIofYWH1JdDFShKHZr5UMKS8BXzCTMBP8xM/gdz3b0w/bSCv LyKVdJXxYGJASbvs/8Bi39721oVK5X7N4D4NGzqxkqIH1q3z2zRjrlVQv0Bk8S5n qIUrGoBsqO0GtYWc1B7LeP7rQh7oW1IHb6Fnq2qBBGde8xSj2cUoikFKgDMD+Elj he2M83OSYD4pXYsbkBiC00OZEttS25QvQwXrDDgAcvR3I1bu9rcoTLxeO9yC1fi1 lM8mEp+MiBeeOWJnw5BK -----END CERTIFICATE-----Generated at Tue Sep 9 03:06:51 2025 by rpki-client