$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa File: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (raw, json) Hash identifier: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg= Subject key identifier: 8C:FF:37:2F:FF:00:35:9C:A3:F8:31:37:D1:AE:42:7F:8A:35:08:D7 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 0C3098EBF11BDE2A23177F301C88A823DCF15A77 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa Signing time: Tue 28 Oct 2025 14:43:54 +0000 ROA not before: Tue 28 Oct 2025 14:38:54 +0000 ROA not after: Tue 27 Oct 2026 14:43:54 +0000 asID: 215093 IP address blocks: 2a14:1ec1:7b20::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 16:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:30:98:eb:f1:1b:de:2a:23:17:7f:30:1c:88:a8:23:dc:f1:5a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Oct 28 14:38:54 2025 GMT Not After : Oct 27 14:43:54 2026 GMT Subject: CN=8CFF372FFF00359CA3F83137D1AE427F8A3508D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:0c:be:23:b7:38:c3:00:69:e0:5a:c6:44: 4f:97:25:f7:de:db:5b:c3:89:33:9f:08:8c:3d:80: 07:9e:d4:75:8c:2a:d5:0a:b4:84:b3:62:23:ab:38: cc:0c:79:b7:3e:76:26:7d:6b:fe:c6:94:c4:c1:2a: 86:86:8b:0c:5b:ce:51:57:8e:1f:3e:25:65:ca:91: 15:3a:2c:68:27:68:00:73:f0:67:b7:50:81:61:21: dd:ae:eb:ff:93:d5:55:6d:90:47:9d:a2:df:7a:06: 4b:be:9b:8e:1c:27:f7:81:0b:c7:d4:50:10:8a:87: 53:34:01:bd:0a:aa:ab:5f:88:db:c2:ec:35:c4:a1: 04:69:c7:b4:4f:3d:e9:52:e3:e1:4c:24:9c:c6:b0: 90:81:e6:5f:cc:6d:e1:31:93:5f:c3:7b:95:7a:3a: 1a:cd:05:89:05:ac:7e:c9:0a:69:d4:cd:4c:d5:f3: f4:80:92:79:c6:e8:b5:62:b5:cd:ae:7d:77:32:3b: 7d:1d:8b:15:b0:59:a2:22:37:19:43:c7:f5:56:8a: b8:51:3b:b5:2a:04:c2:2a:5c:f3:62:78:51:b6:b4: ec:69:20:db:1b:9c:b1:f1:0d:83:4c:d5:a5:7f:09: 69:a5:09:33:0a:c3:44:8a:86:52:ba:05:99:58:e5: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FF:37:2F:FF:00:35:9C:A3:F8:31:37:D1:AE:42:7F:8A:35:08:D7 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1ec1:7b20::/44 Signature Algorithm: sha256WithRSAEncryption 5c:c1:cc:64:b1:09:be:2a:06:98:a1:d0:7a:85:6d:0a:ff:a8: fb:51:6d:ac:43:bf:5d:5c:9c:1d:73:8d:29:91:a8:05:99:7e: f4:45:53:88:96:f1:75:6f:54:7c:ef:ed:8d:83:13:08:44:ba: 02:44:42:6e:8c:32:7a:b5:bb:13:39:ab:9c:7b:3a:c7:3d:c4: 13:67:99:fe:60:26:4d:4e:d7:f3:ac:f9:99:fb:d6:ba:28:56: 06:66:f9:d5:67:95:42:a7:09:3a:58:3f:e9:e0:82:63:38:c4: ee:c8:a3:cc:aa:1c:44:91:cc:fa:07:59:19:41:95:5f:6f:63: 89:b0:9f:c9:8f:4b:3e:aa:8e:e3:71:6f:58:1f:f2:04:89:36: 98:d6:5a:71:34:eb:61:5b:4a:a6:9c:d3:46:eb:75:79:d2:15: 04:d3:d0:fd:65:1d:b8:a1:22:56:c5:38:f0:8f:df:0d:ac:cf: fe:c9:e8:7b:4b:ff:96:0b:b2:d2:c4:1e:7f:92:11:e1:c7:8a: 54:35:24:67:9a:43:60:aa:23:e7:27:07:7a:2f:fe:48:92:ac: b1:93:10:21:36:27:1e:b1:d3:c9:cb:d9:d0:89:14:b6:d9:c8: d3:6d:43:c0:eb:7f:c1:01:34:3a:ae:87:0d:f1:7f:3a:5e:41: a5:75:fa:d6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDDCY6/Eb3iojF38wHIioI9zxWncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTEwMjgxNDM4NTRaFw0yNjEwMjcxNDQzNTRaMDMxMTAvBgNV BAMTKDhDRkYzNzJGRkYwMDM1OUNBM0Y4MzEzN0QxQUU0MjdGOEEzNTA4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMiwy+I7c4wwBp4FrGRE+XJffe 21vDiTOfCIw9gAee1HWMKtUKtISzYiOrOMwMebc+diZ9a/7GlMTBKoaGiwxbzlFX jh8+JWXKkRU6LGgnaABz8Ge3UIFhId2u6/+T1VVtkEedot96Bku+m44cJ/eBC8fU UBCKh1M0Ab0KqqtfiNvC7DXEoQRpx7RPPelS4+FMJJzGsJCB5l/MbeExk1/De5V6 OhrNBYkFrH7JCmnUzUzV8/SAknnG6LVitc2ufXcyO30dixWwWaIiNxlDx/VWirhR O7UqBMIqXPNieFG2tOxpINsbnLHxDYNM1aV/CWmlCTMKw0SKhlK6BZlY5RWjAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUjP83L/8ANZyj+DE30a5Cf4o1CNcwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yYWY3M2E5Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvMC8zMjYxMzEz NDNhMzE2NTYzMzEzYTM3NjIzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzAzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhQewXsgMA0GCSqGSIb3DQEBCwUAA4IBAQBc wcxksQm+KgaYodB6hW0K/6j7UW2sQ79dXJwdc40pkagFmX70RVOIlvF1b1R87+2N gxMIRLoCREJujDJ6tbsTOaucezrHPcQTZ5n+YCZNTtfzrPmZ+9a6KFYGZvnVZ5VC pwk6WD/p4IJjOMTuyKPMqhxEkcz6B1kZQZVfb2OJsJ/Jj0s+qo7jcW9YH/IEiTaY 1lpxNOthW0qmnNNG63V50hUE09D9ZR24oSJWxTjwj98NrM/+yeh7S/+WC7LSxB5/ khHhx4pUNSRnmkNgqiPnJwd6L/5IkqyxkxAhNicesdPJy9nQiRS22cjTbUPA63/B ATQ6rocN8X86XkGldfrW -----END CERTIFICATE-----Generated at Wed Oct 29 02:55:01 2025 by rpki-client