$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3130332e36382e3131312e302f32342d3234203d3e203136353039.roa File: 3130332e36382e3131312e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: v23gqB+9rcnB/hrHbwTiZfxNm+BISJw8XOqr/+uPjbI= Subject key identifier: B3:8A:3E:75:A4:1B:9F:3C:8E:B8:C5:2A:C7:13:C0:9D:EB:6A:1D:4C Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 3799CF28FDD7685EC0FAB26A5FF231C9ECF5FD45 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3130332e36382e3131312e302f32342d3234203d3e203136353039.roa Signing time: Tue 10 Mar 2026 19:43:52 +0000 ROA not before: Tue 10 Mar 2026 19:38:52 +0000 ROA not after: Tue 09 Mar 2027 19:43:52 +0000 asID: 16509 IP address blocks: 103.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Mar 2026 08:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:99:cf:28:fd:d7:68:5e:c0:fa:b2:6a:5f:f2:31:c9:ec:f5:fd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Mar 10 19:38:52 2026 GMT Not After : Mar 9 19:43:52 2027 GMT Subject: CN=B38A3E75A41B9F3C8EB8C52AC713C09DEB6A1D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:6f:69:6a:57:56:80:77:2b:0c:31:e3:6f: 3a:6a:56:30:76:eb:41:97:00:90:c8:db:76:98:5d: 6d:d2:a5:2e:7b:57:af:bc:d1:dc:06:9b:be:2c:21: 68:9e:4d:e7:eb:ba:a6:bc:28:4c:6d:7e:4a:62:40: 8c:15:c2:4c:01:61:6d:a3:fe:03:bf:f4:fa:c7:31: 72:a6:31:9b:3e:0f:39:de:72:f5:5d:4e:69:8c:57: 2f:5e:4e:99:fa:7b:af:2b:60:7b:81:46:6e:72:82: c9:37:d8:50:50:37:36:3c:fa:10:2d:f1:6e:36:a8: 4d:ff:04:55:e7:c1:96:57:a3:c9:8a:56:00:f8:01: 6f:aa:c8:44:57:2d:c2:24:43:f5:42:dd:24:0b:a5: eb:20:33:32:7e:4d:df:83:ec:02:ed:ac:fd:06:07: ea:b9:8b:a8:a2:65:a2:02:34:14:ca:7d:54:98:af: 38:1e:1b:ab:25:58:5a:7b:04:3b:ee:99:e7:8a:a8: a9:c8:ac:1a:99:72:c3:53:b0:8d:87:71:27:75:d1: 31:07:e9:15:28:72:67:28:9e:c8:38:8f:c5:56:2b: 39:75:f7:42:09:75:93:ae:25:45:a4:a0:f3:cb:19: 21:66:04:53:f6:b9:6c:fd:64:b5:1f:1c:33:f7:7b: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8A:3E:75:A4:1B:9F:3C:8E:B8:C5:2A:C7:13:C0:9D:EB:6A:1D:4C X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3130332e36382e3131312e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.111.0/24 Signature Algorithm: sha256WithRSAEncryption 36:87:71:c4:44:c5:26:a0:a2:63:90:b5:8d:b7:bb:13:ae:44: 2e:0c:2f:e1:20:a0:10:bc:21:39:b5:e3:91:a6:de:60:0d:ef: 87:72:36:f1:b5:6e:69:35:62:1e:f4:bb:52:62:95:08:83:f8: 03:e4:35:71:91:d2:ca:0f:22:da:36:d3:15:95:e2:07:9d:f2: 43:3a:75:43:9c:9b:72:bf:a3:6f:2d:10:68:35:39:9e:c5:87: 5e:a8:d3:85:35:e0:22:25:7d:f5:a1:64:e6:b5:7f:38:16:e8: 1c:2f:52:ec:3d:bd:de:fa:22:17:60:b7:cb:f5:43:1a:20:78: ab:09:c9:75:9b:ec:31:54:1d:ad:4c:96:88:4f:21:a5:cd:0a: e8:47:73:11:7c:22:f4:bb:38:d5:3f:7d:24:53:43:11:9d:c9: 3f:17:cd:f5:33:75:e5:f5:70:88:4e:03:74:58:df:26:f0:cd: bf:29:07:9a:0d:8e:3d:bb:e8:e4:cb:75:70:3d:20:96:3a:bc: da:41:57:67:f1:33:9f:19:e3:44:b7:93:48:8f:e5:67:b3:f0: 27:3b:ca:cd:bb:14:0d:75:93:1a:5c:fc:c4:bc:65:ef:5b:bf: db:1e:77:44:5c:37:1b:74:a9:71:8d:a3:54:ce:ae:b3:9b:43: 71:4b:97:01 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUN5nPKP3XaF7A+rJqX/Ixyez1/UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjAzMTAxOTM4NTJaFw0yNzAzMDkxOTQzNTJaMDMxMTAvBgNV BAMTKEIzOEEzRTc1QTQxQjlGM0M4RUI4QzUyQUM3MTNDMDlERUI2QTFENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhG9paldWgHcrDDHjbzpqVjB2 60GXAJDI23aYXW3SpS57V6+80dwGm74sIWieTefruqa8KExtfkpiQIwVwkwBYW2j /gO/9PrHMXKmMZs+DznecvVdTmmMVy9eTpn6e68rYHuBRm5ygsk32FBQNzY8+hAt 8W42qE3/BFXnwZZXo8mKVgD4AW+qyERXLcIkQ/VC3SQLpesgMzJ+Td+D7ALtrP0G B+q5i6iiZaICNBTKfVSYrzgeG6slWFp7BDvumeeKqKnIrBqZcsNTsI2HcSd10TEH 6RUocmconsg4j8VWKzl190IJdZOuJUWkoPPLGSFmBFP2uWz9ZLUfHDP3e1WTAgMB AAGjggJtMIICaTAdBgNVHQ4EFgQUs4o+daQbnzyOuMUqxxPAnetqHUwwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzEzMDMzMmUzNjM4MmUzMTMx MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Z0RvMA0GCSqGSIb3DQEBCwUAA4IBAQA2h3HERMUmoKJjkLWNt7sTrkQuDC/hIKAQ vCE5teORpt5gDe+HcjbxtW5pNWIe9LtSYpUIg/gD5DVxkdLKDyLaNtMVleIHnfJD OnVDnJtyv6NvLRBoNTmexYdeqNOFNeAiJX31oWTmtX84FugcL1LsPb3e+iIXYLfL 9UMaIHirCcl1m+wxVB2tTJaITyGlzQroR3MRfCL0uzjVP30kU0MRnck/F831M3Xl 9XCITgN0WN8m8M2/KQeaDY49u+jky3VwPSCWOrzaQVdn8TOfGeNEt5NIj+Vns/An O8rNuxQNdZMaXPzEvGXvW7/bHndEXDcbdKlxjaNUzq6zm0NxS5cB -----END CERTIFICATE-----Generated at Thu Mar 19 12:31:13 2026 by rpki-client