$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa File: 326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa (raw, json) Hash identifier: Ja70Dgv7oi8FouDnPyOlRiC7C5wmvg0AFmspgYP8l8U= Subject key identifier: 26:2C:8D:5B:5F:25:6F:D8:2A:F5:44:83:10:D2:74:89:BE:D9:45:1A Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 41515CED0C6BE75540CEACC0F7C24281A4333428 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa Signing time: Fri 04 Jul 2025 16:08:42 +0000 ROA not before: Fri 04 Jul 2025 16:03:42 +0000 ROA not after: Fri 03 Jul 2026 16:08:42 +0000 asID: 216052 IP address blocks: 2a06:1283:b150::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:51:5c:ed:0c:6b:e7:55:40:ce:ac:c0:f7:c2:42:81:a4:33:34:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jul 4 16:03:42 2025 GMT Not After : Jul 3 16:08:42 2026 GMT Subject: CN=262C8D5B5F256FD82AF5448310D27489BED9451A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:a1:07:ea:50:cf:2b:56:dd:f0:ad:82:53: e6:49:72:da:fc:e5:3c:b7:ea:96:0f:bc:61:c2:d4: de:f5:e9:25:94:ce:9a:34:67:ea:5d:8d:a2:cc:96: b2:7e:da:57:53:2b:21:25:70:63:58:57:2e:85:5b: 71:84:40:02:6b:1e:2f:07:fe:ee:45:e2:2d:f5:95: b2:4c:b1:48:ed:35:ab:2e:06:dc:50:16:72:70:5d: 30:7c:75:93:6f:9e:ef:ee:0e:18:bb:36:7a:81:6a: 45:1e:d4:fc:77:2d:f1:7f:10:b1:7d:b9:68:b4:a6: 95:3c:da:97:da:46:79:3c:5f:fc:3c:f0:ef:63:c4: ff:65:69:96:8e:16:fd:a9:ef:c7:fd:19:32:08:af: 88:73:7e:4d:3d:77:0c:18:e2:ed:d5:67:b8:e0:f9: 67:5f:99:7b:50:17:40:04:33:31:ad:61:d2:98:6f: 72:26:1a:b5:1d:7a:97:40:a5:86:97:92:44:ab:8d: 8e:36:b0:07:05:88:fc:0d:14:c2:5c:70:fb:64:90: 96:fe:93:3c:eb:b1:5c:d8:2e:ef:5c:17:5d:e2:f1: c5:54:4e:3e:f9:9d:4f:78:dd:0d:9c:e2:d5:a5:da: d0:39:f6:21:36:55:e7:7b:7b:cb:b4:b0:db:9b:b0: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2C:8D:5B:5F:25:6F:D8:2A:F5:44:83:10:D2:74:89:BE:D9:45:1A X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a623135303a3a2f34342d3434203d3e20323136303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b150::/44 Signature Algorithm: sha256WithRSAEncryption 87:74:35:e2:92:97:5a:3d:99:c6:84:18:2c:96:bd:11:cd:8b: 3e:ba:2b:23:bb:39:34:ee:c2:50:33:0c:89:ed:43:3b:52:f1: e9:b1:4b:01:8a:c5:78:e1:90:55:86:80:7d:a8:e1:d8:eb:c6: 75:3e:8d:61:49:9a:a2:f3:29:2e:9c:04:b7:81:77:17:7a:4b: b7:16:79:4e:93:db:35:fd:52:6a:83:86:07:60:96:16:81:c6: 8d:4f:64:24:39:4b:a4:5c:6a:be:31:37:89:1d:68:43:78:c3: 7b:24:bd:8c:95:71:da:30:b2:5b:81:73:3d:0b:64:98:e2:88: 3b:b7:f3:f4:ab:71:82:53:5b:66:54:9b:97:4f:cd:7e:e7:e1: d9:6a:08:39:1e:61:f2:43:8c:ff:00:8b:9a:17:cd:c9:8c:c0: d8:26:f0:da:0d:3f:a6:0e:e0:ed:27:62:7b:c4:fe:86:82:5f: 27:22:35:94:34:4b:68:6f:d6:a3:9e:97:cf:4e:3e:b3:e8:f4: 93:5e:65:25:45:28:6c:3c:42:4c:3a:2c:b2:9c:98:f4:69:cf: 1d:14:80:8f:ea:4f:c6:51:36:f4:b1:5d:27:01:3d:4b:e6:33: 8b:f3:e1:75:c8:94:ff:46:3d:6d:69:95:6b:da:d5:ea:e0:b3: c2:bf:09:5a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUQVFc7Qxr51VAzqzA98JCgaQzNCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNTA3MDQxNjAzNDJaFw0yNjA3MDMxNjA4NDJaMDMxMTAvBgNV BAMTKDI2MkM4RDVCNUYyNTZGRDgyQUY1NDQ4MzEwRDI3NDg5QkVEOTQ1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWm6EH6lDPK1bd8K2CU+ZJctr8 5Ty36pYPvGHC1N716SWUzpo0Z+pdjaLMlrJ+2ldTKyElcGNYVy6FW3GEQAJrHi8H /u5F4i31lbJMsUjtNasuBtxQFnJwXTB8dZNvnu/uDhi7NnqBakUe1Px3LfF/ELF9 uWi0ppU82pfaRnk8X/w88O9jxP9laZaOFv2p78f9GTIIr4hzfk09dwwY4u3VZ7jg +WdfmXtQF0AEMzGtYdKYb3ImGrUdepdApYaXkkSrjY42sAcFiPwNFMJccPtkkJb+ kzzrsVzYLu9cF13i8cVUTj75nU943Q2c4tWl2tA59iE2Ved7e8u0sNubsBGxAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUJiyNW18lb9gq9USDENJ0ib7ZRRowHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjMxMzUzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzEzNjMwMzUzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHBCoGEoOxUDANBgkqhkiG9w0BAQsFAAOCAQEAh3Q14pKXWj2ZxoQY LJa9Ec2LProrI7s5NO7CUDMMie1DO1Lx6bFLAYrFeOGQVYaAfajh2OvGdT6NYUma ovMpLpwEt4F3F3pLtxZ5TpPbNf1SaoOGB2CWFoHGjU9kJDlLpFxqvjE3iR1oQ3jD eyS9jJVx2jCyW4FzPQtkmOKIO7fz9KtxglNbZlSbl0/Nfufh2WoIOR5h8kOM/wCL mhfNyYzA2Cbw2g0/pg7g7Sdie8T+hoJfJyI1lDRLaG/Wo56Xz04+s+j0k15lJUUo bDxCTDosspyY9GnPHRSAj+pPxlE29LFdJwE9S+Yzi/PhdciU/0Y9bWmVa9rV6uCz wr8JWg== -----END CERTIFICATE-----Generated at Sat Jul 5 08:52:03 2025 by rpki-client