$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa File: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (raw, json) Hash identifier: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg= Subject key identifier: 5B:CC:E6:B5:91:1C:A0:74:8A:13:DF:1F:0A:E7:BF:05:60:D2:E2:A6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 656FF92AB5CEC0A8E3EC87FE0F61F084ABEB9388 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa Signing time: Fri 06 Jun 2025 12:29:55 +0000 ROA not before: Fri 06 Jun 2025 12:24:55 +0000 ROA not after: Fri 05 Jun 2026 12:29:55 +0000 asID: 207196 IP address blocks: 2a14:1ec1:7b00::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6f:f9:2a:b5:ce:c0:a8:e3:ec:87:fe:0f:61:f0:84:ab:eb:93:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jun 6 12:24:55 2025 GMT Not After : Jun 5 12:29:55 2026 GMT Subject: CN=5BCCE6B5911CA0748A13DF1F0AE7BF0560D2E2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:24:55:9c:bc:9b:6c:c8:82:3a:e2:3b:f7: 59:8c:9d:6a:b9:e6:6d:f9:cd:ca:32:d9:6f:f4:d0: 68:a6:08:5b:0e:53:40:63:cc:5e:ef:e5:06:91:53: 60:b0:a5:19:39:a0:9f:4f:16:2a:49:59:87:2e:6d: 24:d4:60:d2:87:39:18:46:2c:7d:74:12:1a:ed:71: f0:a3:2b:64:41:2e:50:37:e1:10:11:9f:55:c3:d6: 71:48:12:46:9e:a3:25:5a:8f:75:ed:75:9e:64:99: 14:8c:e3:8a:c0:91:5b:1a:21:22:01:1c:28:be:d8: ac:c3:84:c5:b0:88:4d:6e:5f:08:66:1a:84:dc:65: ee:a1:d9:ce:f3:96:cc:b1:cf:85:88:ee:e2:66:e9: 27:02:e3:13:2f:46:b0:e1:96:a2:0b:db:9f:61:73: 1d:36:23:03:f0:46:e5:75:cd:df:79:a7:97:36:14: 7b:02:be:67:ab:88:b2:17:64:83:ae:c6:30:9b:aa: 63:a6:fd:86:0f:0a:14:c7:a1:51:2e:b4:71:54:83: ed:bf:a4:fc:9a:d4:c4:79:92:fa:18:61:61:4c:7a: aa:0f:a9:5d:01:89:b3:70:33:93:a5:de:8c:8d:ec: 13:18:d9:b6:d4:2a:f3:e3:eb:6f:87:75:cb:4e:98: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CC:E6:B5:91:1C:A0:74:8A:13:DF:1F:0A:E7:BF:05:60:D2:E2:A6 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec1:7b00::/44 Signature Algorithm: sha256WithRSAEncryption 3a:ce:3e:c1:b1:e3:ac:4a:27:53:94:ef:c1:ba:be:33:7e:0b: 24:11:5a:20:99:3d:40:19:5a:bd:44:dd:dc:8d:7d:bb:f6:3a: 52:78:09:f3:3a:89:7b:5b:fc:00:e4:65:67:d9:fa:30:77:03: 22:9e:82:c0:db:a6:bc:60:a2:19:a8:28:1d:bf:cd:5b:1e:e5: 30:06:ae:91:79:ba:48:5d:ea:b8:0d:5e:d3:c7:48:b7:27:3c: b3:20:ef:f9:7f:a8:35:1c:36:20:80:ed:b6:4d:62:09:fc:5a: cf:01:d2:97:79:2d:09:d4:ed:d9:64:ee:0c:0f:57:4f:47:2f: fa:cd:50:74:4f:cf:7f:56:42:27:e1:64:cd:ca:b7:7e:81:7b: 05:9e:0f:ef:d7:73:13:5d:bf:0a:ba:67:3d:f4:7d:35:8e:e2: 95:d0:a7:11:5a:40:c0:f2:3d:25:59:dd:eb:b7:ea:12:bd:ea: ee:ed:26:54:96:9f:5a:35:2f:d1:6f:d0:b6:f2:83:73:c8:79: 5d:2e:22:08:9e:c7:d7:b7:e9:4c:e5:b4:2b:fd:11:0f:26:b1: cf:27:7d:5d:3c:97:ce:e2:ab:54:f8:cf:8c:75:21:83:c5:af: 64:b5:40:28:5d:14:3f:c7:30:fd:ef:5d:80:09:91:8a:89:ca: 43:21:bf:dc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUZW/5KrXOwKjj7If+D2HwhKvrk4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA2MDYxMjI0NTVaFw0yNjA2MDUxMjI5NTVaMDMxMTAvBgNV BAMTKDVCQ0NFNkI1OTExQ0EwNzQ4QTEzREYxRjBBRTdCRjA1NjBEMkUyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EiRVnLybbMiCOuI791mMnWq5 5m35zcoy2W/00GimCFsOU0BjzF7v5QaRU2CwpRk5oJ9PFipJWYcubSTUYNKHORhG LH10EhrtcfCjK2RBLlA34RARn1XD1nFIEkaeoyVaj3XtdZ5kmRSM44rAkVsaISIB HCi+2KzDhMWwiE1uXwhmGoTcZe6h2c7zlsyxz4WI7uJm6ScC4xMvRrDhlqIL259h cx02IwPwRuV1zd95p5c2FHsCvmeriLIXZIOuxjCbqmOm/YYPChTHoVEutHFUg+2/ pPya1MR5kvoYYWFMeqoPqV0BibNwM5Ol3oyN7BMY2bbUKvPj62+HdctOmIZTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUW8zmtZEcoHSKE98fCue/BWDS4qYwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzEzYTM3NjIzMDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM3MzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhQewXsAMA0GCSqGSIb3DQEBCwUAA4IBAQA6 zj7BseOsSidTlO/Bur4zfgskEVogmT1AGVq9RN3cjX279jpSeAnzOol7W/wA5GVn 2fowdwMinoLA26a8YKIZqCgdv81bHuUwBq6RebpIXeq4DV7Tx0i3JzyzIO/5f6g1 HDYggO22TWIJ/FrPAdKXeS0J1O3ZZO4MD1dPRy/6zVB0T89/VkIn4WTNyrd+gXsF ng/v13MTXb8Kumc99H01juKV0KcRWkDA8j0lWd3rt+oSveru7SZUlp9aNS/Rb9C2 8oNzyHldLiIInsfXt+lM5bQr/REPJrHPJ31dPJfO4qtU+M+MdSGDxa9ktUAoXRQ/ xzD9712ACZGKicpDIb/c -----END CERTIFICATE-----Generated at Sun Jun 8 00:20:02 2025 by rpki-client