$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: GR7y7aRgVAUP5lUmI8IZDhrv8mAyuuXgZxhshW1ruYs= Subject key identifier: CE:20:21:2F:BD:86:06:B8:82:DD:0F:FB:C2:77:F2:64:CF:D0:5D:8D Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 622B31BED67E185B0BACE35DA164FCABBFC7DA0F Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa Signing time: Wed 10 Sep 2025 08:31:25 +0000 ROA not before: Wed 10 Sep 2025 08:26:25 +0000 ROA not after: Wed 09 Sep 2026 08:31:25 +0000 asID: 214955 IP address blocks: 2a14:7583:f704::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 03:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2b:31:be:d6:7e:18:5b:0b:ac:e3:5d:a1:64:fc:ab:bf:c7:da:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Sep 10 08:26:25 2025 GMT Not After : Sep 9 08:31:25 2026 GMT Subject: CN=CE20212FBD8606B882DD0FFBC277F264CFD05D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:ea:2f:97:2d:53:fe:82:60:4a:61:0c:11: 28:d2:4f:b8:c8:52:74:15:71:7c:b8:a5:d7:e7:c9: c4:b8:ff:00:78:22:05:2b:1a:92:2a:49:93:aa:a5: 2f:2c:a2:53:ab:f6:41:31:7f:18:78:9a:bb:52:fd: d8:0e:82:9c:71:7d:66:5e:14:21:dd:8a:35:5e:96: c9:f3:66:f5:b2:4c:ae:53:87:84:14:21:57:f1:3c: 49:8b:bf:dd:ec:2c:67:dd:9d:bd:76:e5:d9:5b:af: 82:76:af:ec:0b:f6:d5:b6:69:18:29:87:93:57:37: 85:dc:f7:26:b6:2a:7b:01:9e:ae:b9:88:0b:01:99: 94:33:e7:af:a5:2d:ba:68:54:35:eb:03:30:5d:70: 88:c7:af:9b:7d:da:3b:7b:be:18:80:75:71:90:3e: f4:72:11:9a:56:2c:40:db:73:bb:3b:bc:f8:f3:ae: ce:e2:69:f3:10:af:c9:c9:b7:92:1a:36:71:32:dc: ba:3c:a0:3f:42:90:31:09:78:bb:46:4b:6e:c5:72: a2:b2:f8:0a:79:ea:e8:e5:8b:97:80:e1:c7:93:82: e9:07:27:c9:c7:c9:6f:8f:9a:41:8a:b6:fb:47:c3: 9e:da:74:cd:23:9e:39:18:ee:66:24:e1:ac:6e:30: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:20:21:2F:BD:86:06:B8:82:DD:0F:FB:C2:77:F2:64:CF:D0:5D:8D X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f704::/48 Signature Algorithm: sha256WithRSAEncryption cd:76:2a:24:87:2a:4c:16:12:d0:04:22:fc:32:9b:17:0f:12: ba:21:6f:5e:b1:be:bc:ac:1f:82:9e:65:a2:08:33:94:e6:21: f5:63:05:03:69:c7:ae:4b:3e:bd:a2:8b:8a:cd:86:27:6b:0f: b9:37:58:29:2d:74:b1:c1:98:40:54:e5:4e:a6:52:b7:74:16: d3:46:f1:a3:ce:a7:3c:4f:97:04:b2:4e:88:23:52:ab:c4:d0: e3:98:9e:43:45:7d:0e:c2:57:22:db:6c:6a:ae:50:c7:b9:10: a9:7e:1b:83:a9:29:06:7c:2a:09:ca:59:ee:d2:df:b2:a1:38: 9c:60:ca:f1:b7:30:5b:45:e7:57:ec:8b:a5:d9:9e:1f:af:eb: 83:8e:e8:d2:64:d4:b4:6f:8b:6a:90:8e:0f:7b:bd:a3:e6:32: ee:66:75:ec:b2:7c:df:0e:9e:07:ff:85:cb:0d:b9:97:0b:ec: 10:86:12:2e:de:06:24:f9:29:e3:cd:1e:95:53:03:ed:15:fd: e6:fa:5c:c2:c9:b5:15:44:c2:ea:3c:45:3c:fa:fe:3e:f1:b1: 53:be:79:e6:46:c7:fe:5f:1c:84:95:cd:43:85:30:30:87:27: a8:5f:9e:ac:88:13:16:51:ae:7f:88:f4:ac:b5:84:ee:fb:eb: 80:82:6b:86 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYisxvtZ+GFsLrONdoWT8q7/H2g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTA5MTAwODI2MjVaFw0yNjA5MDkwODMxMjVaMDMxMTAvBgNV BAMTKENFMjAyMTJGQkQ4NjA2Qjg4MkREMEZGQkMyNzdGMjY0Q0ZEMDVEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6uovly1T/oJgSmEMESjST7jI UnQVcXy4pdfnycS4/wB4IgUrGpIqSZOqpS8solOr9kExfxh4mrtS/dgOgpxxfWZe FCHdijVelsnzZvWyTK5Th4QUIVfxPEmLv93sLGfdnb125dlbr4J2r+wL9tW2aRgp h5NXN4Xc9ya2KnsBnq65iAsBmZQz56+lLbpoVDXrAzBdcIjHr5t92jt7vhiAdXGQ PvRyEZpWLEDbc7s7vPjzrs7iafMQr8nJt5IaNnEy3Lo8oD9CkDEJeLtGS27FcqKy +Ap56ujli5eA4ceTgukHJ8nHyW+PmkGKtvtHw57adM0jnjkY7mYk4axuMDC/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUziAhL72GBriC3Q/7wnfyZM/QXY0wHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cEMA0GCSqGSIb3DQEBCwUAA4IBAQDN diokhypMFhLQBCL8MpsXDxK6IW9esb68rB+CnmWiCDOU5iH1YwUDaceuSz69oouK zYYnaw+5N1gpLXSxwZhAVOVOplK3dBbTRvGjzqc8T5cEsk6II1KrxNDjmJ5DRX0O wlci22xqrlDHuRCpfhuDqSkGfCoJylnu0t+yoTicYMrxtzBbRedX7Iul2Z4fr+uD jujSZNS0b4tqkI4Pe72j5jLuZnXssnzfDp4H/4XLDbmXC+wQhhIu3gYk+SnjzR6V UwPtFf3m+lzCybUVRMLqPEU8+v4+8bFTvnnmRsf+XxyElc1DhTAwhyeoX56siBMW Ua5/iPSstYTu++uAgmuG -----END CERTIFICATE-----Generated at Mon Sep 15 19:30:16 2025 by rpki-client