$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623132303a3a2f34342d3434203d3e20323136303532.roa File: 326130363a313238333a623132303a3a2f34342d3434203d3e20323136303532.roa (raw, json) Hash identifier: pHiukXqCqweMFpSLlDNumfZFCA42V+kgBueERJwuPno= Subject key identifier: 50:24:1C:C7:9B:7B:53:25:1A:70:1F:7A:61:43:FD:17:DF:F5:79:61 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 4ACD7F0AA7EB6DB59764CF23DFCB0536500537EB Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623132303a3a2f34342d3434203d3e20323136303532.roa Signing time: Fri 04 Jul 2025 16:08:38 +0000 ROA not before: Fri 04 Jul 2025 16:03:38 +0000 ROA not after: Fri 03 Jul 2026 16:08:38 +0000 asID: 216052 IP address blocks: 2a06:1283:b120::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cd:7f:0a:a7:eb:6d:b5:97:64:cf:23:df:cb:05:36:50:05:37:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jul 4 16:03:38 2025 GMT Not After : Jul 3 16:08:38 2026 GMT Subject: CN=50241CC79B7B53251A701F7A6143FD17DFF57961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:13:01:73:9c:b2:45:da:c6:57:1e:3b:b5: 5c:42:19:68:96:e3:33:26:6a:73:ba:7f:0c:80:de: d4:39:b2:a5:a5:86:e1:f8:33:55:5c:e6:11:d4:26: fe:b7:86:a3:2a:1f:84:bf:95:79:a6:1f:5b:99:b5: 00:9f:e6:51:ab:e4:2c:ca:3b:aa:42:8e:ec:4f:3b: 67:f6:d9:2c:de:db:ff:9a:1a:5b:f4:be:5a:15:63: 82:9e:9c:61:89:a3:01:01:fb:fd:4b:d4:d0:59:13: 53:25:93:7c:db:75:5a:d5:06:1f:6d:e5:ff:f7:62: 88:ae:6c:e2:aa:c4:99:4f:80:19:1e:ae:81:99:8e: 3e:46:f8:f6:b2:c4:0f:7e:dc:ee:c4:39:79:64:96: 84:a5:7f:37:4b:92:b7:02:42:58:b6:04:75:6a:89: 2c:fb:31:cb:10:31:15:8f:e6:9b:bc:b3:75:d6:dd: 11:e9:29:49:c0:c2:20:72:06:c4:34:11:53:ec:13: ae:d5:03:5d:72:f8:f6:96:25:55:55:8e:37:58:cf: 23:0a:21:6b:a0:74:57:e8:68:35:26:ad:68:cf:18: a1:a6:96:ea:0b:14:d0:9e:dc:b9:ad:25:e0:a7:1d: c0:d2:73:ef:f8:00:0a:39:97:28:77:d6:34:48:35: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:1C:C7:9B:7B:53:25:1A:70:1F:7A:61:43:FD:17:DF:F5:79:61 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623132303a3a2f34342d3434203d3e20323136303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b120::/44 Signature Algorithm: sha256WithRSAEncryption 16:c1:9e:0b:f9:b2:22:ed:a1:e7:12:b5:c3:08:05:a6:84:ef: eb:24:6d:af:27:ed:29:80:bc:7c:58:60:62:4e:92:da:cb:1b: 5a:c0:4f:9e:f8:e6:c4:75:5b:14:4c:59:67:fb:57:8f:e7:33: 28:d3:bf:49:27:86:b5:c0:96:2a:3f:2a:9e:fd:e3:54:f5:71: b6:9d:89:00:75:c5:3a:30:2f:e7:62:61:b2:af:53:04:3b:64: 02:94:cf:82:f7:34:73:06:b4:eb:b1:53:67:15:08:89:4a:df: cd:48:fd:90:3f:5f:1a:26:46:51:c0:ab:61:99:7a:3b:09:b5: 81:45:0d:b8:54:07:4c:88:81:0c:0b:37:2a:41:e4:5d:1a:42: fe:b5:89:65:3e:24:f0:47:bd:b8:79:c1:8b:45:40:e7:0c:c4: da:ac:45:49:0d:3d:9e:d7:ab:7a:ac:5d:27:33:ed:9e:d8:93: 6c:8b:d9:5c:32:0d:54:af:65:a1:e9:54:51:dd:28:85:aa:91: 6c:50:81:21:d9:1e:9a:5f:00:e8:12:cd:14:0f:e0:1f:f7:44: 78:b7:95:b8:de:cb:8e:8d:f6:c9:37:9d:5f:d2:67:9a:aa:4a: e2:6b:33:3e:96:50:a4:8a:99:06:75:59:05:43:a9:ea:31:a3: 3b:1d:89:97 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUSs1/CqfrbbWXZM8j38sFNlAFN+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNTA3MDQxNjAzMzhaFw0yNjA3MDMxNjA4MzhaMDMxMTAvBgNV BAMTKDUwMjQxQ0M3OUI3QjUzMjUxQTcwMUY3QTYxNDNGRDE3REZGNTc5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaThMBc5yyRdrGVx47tVxCGWiW 4zMmanO6fwyA3tQ5sqWlhuH4M1Vc5hHUJv63hqMqH4S/lXmmH1uZtQCf5lGr5CzK O6pCjuxPO2f22Sze2/+aGlv0vloVY4KenGGJowEB+/1L1NBZE1Mlk3zbdVrVBh9t 5f/3YoiubOKqxJlPgBkeroGZjj5G+PayxA9+3O7EOXlkloSlfzdLkrcCQli2BHVq iSz7McsQMRWP5pu8s3XW3RHpKUnAwiByBsQ0EVPsE67VA11y+PaWJVVVjjdYzyMK IWugdFfoaDUmrWjPGKGmluoLFNCe3LmtJeCnHcDSc+/4AAo5lyh31jRINejPAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUUCQcx5t7UyUacB96YUP9F9/1eWEwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjMxMzIzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEzNjMwMzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoGEoOxIDANBgkqhkiG9w0BAQsFAAOCAQEAFsGeC/myIu2h5xK1 wwgFpoTv6yRtryftKYC8fFhgYk6S2ssbWsBPnvjmxHVbFExZZ/tXj+czKNO/SSeG tcCWKj8qnv3jVPVxtp2JAHXFOjAv52Jhsq9TBDtkApTPgvc0cwa067FTZxUIiUrf zUj9kD9fGiZGUcCrYZl6Owm1gUUNuFQHTIiBDAs3KkHkXRpC/rWJZT4k8Ee9uHnB i0VA5wzE2qxFSQ09ntereqxdJzPtntiTbIvZXDINVK9loelUUd0ohaqRbFCBIdke ml8A6BLNFA/gH/dEeLeVuN7Ljo32yTedX9JnmqpK4mszPpZQpIqZBnVZBUOp6jGj Ox2Jlw== -----END CERTIFICATE-----Generated at Sat Jul 5 08:50:05 2025 by rpki-client