$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: KKLY1zCTXfmGMrjDFuT7b/5dqeecgqHT0wX+vU1j/NU= Subject key identifier: 8F:7C:7D:BD:A8:BD:9C:BD:17:FE:8D:AA:DE:F1:BB:A1:2B:F6:81:17 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 6DA7BCE2911304AD7D77D4664988165892AD868D Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa Signing time: Sat 13 Sep 2025 14:35:52 +0000 ROA not before: Sat 13 Sep 2025 14:30:52 +0000 ROA not after: Sat 12 Sep 2026 14:35:52 +0000 asID: 214955 IP address blocks: 2a14:7583:f707::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 03:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a7:bc:e2:91:13:04:ad:7d:77:d4:66:49:88:16:58:92:ad:86:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Sep 13 14:30:52 2025 GMT Not After : Sep 12 14:35:52 2026 GMT Subject: CN=8F7C7DBDA8BD9CBD17FE8DAADEF1BBA12BF68117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:98:f9:e2:6d:f1:9c:03:d0:e3:ba:9f:c0: 05:26:b0:85:af:c9:ce:7e:a1:bb:40:e7:ed:b7:ad: 56:d9:b3:f9:1e:42:ab:53:fd:47:4c:60:91:ce:43: 15:5a:4d:85:cc:78:f6:5d:54:19:2f:fa:cc:b5:83: 41:a1:61:cc:b8:fc:14:21:c9:b5:5e:1d:30:16:66: d2:b1:f1:6a:17:74:2a:86:52:6d:13:94:10:16:58: 9e:d0:db:67:82:5f:8f:87:f2:fa:9f:5a:50:12:e5: 7a:1f:d0:e8:46:ac:ce:41:9b:6e:fa:a1:53:87:23: 73:33:57:99:32:81:cf:2e:79:56:0b:17:b4:7a:7b: 60:4d:58:c1:c2:df:b9:f7:b0:ea:68:a1:7f:0a:18: 14:61:ad:63:8b:ad:cd:ad:4b:99:0a:00:d2:b7:e1: 08:d0:3c:83:3a:9c:9d:80:a6:f6:91:bd:77:55:bf: 63:e1:4c:5e:f5:5a:88:20:56:8b:18:7f:6c:4b:41: 1d:04:e7:0f:e6:cb:19:66:18:a1:4d:be:8c:04:01: 15:b4:ef:82:3d:d0:0b:5b:a6:82:c3:7f:00:0d:eb: c9:66:4d:12:d5:38:d0:96:da:73:c6:ba:ae:9a:fe: 69:d3:31:f0:0c:30:7d:7b:1c:c6:ae:60:f7:ff:be: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7C:7D:BD:A8:BD:9C:BD:17:FE:8D:AA:DE:F1:BB:A1:2B:F6:81:17 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f707::/48 Signature Algorithm: sha256WithRSAEncryption 6c:54:ff:86:8d:8d:21:d1:f1:0c:e9:03:24:ef:57:39:dc:64: 17:23:70:5e:32:f0:a8:aa:ad:d9:62:e1:15:a0:ee:50:85:2f: 14:96:3e:26:e7:f2:7b:d1:40:d7:8f:8d:86:8d:72:26:97:8f: 0b:f3:e9:bb:99:21:46:8e:70:aa:d5:5e:58:52:01:60:41:d1: c4:9e:dc:9b:64:cd:2a:03:84:e5:5a:2f:fc:f8:3f:9e:a5:fa: e4:b9:d9:1e:79:73:94:47:64:a6:a5:e9:b9:49:bc:a5:0d:32: a8:57:42:e2:9f:a3:b6:d9:f1:1f:d8:93:42:29:33:47:57:70: a3:0a:40:6b:2f:0a:62:6f:c7:49:c6:17:55:08:ce:4d:b0:e1: fd:ef:3d:be:db:57:cb:43:54:5e:b7:6a:06:69:45:a6:08:52: 9d:43:20:17:eb:20:b4:01:64:be:75:41:8b:7d:9e:2b:9c:8b: 42:ac:de:9e:f4:fe:8e:5b:c6:6b:61:d2:b4:93:17:85:78:93: 71:c3:28:7a:a1:69:9d:6b:77:41:1a:f9:a9:ec:2f:ce:0b:87: 65:ad:fc:58:98:d9:d6:d1:36:d8:be:c5:57:e3:fc:bb:8e:2e: fb:98:80:e4:5a:ee:81:08:34:48:06:f9:e7:24:f6:b0:5a:a1: 4d:d2:54:c8 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbae84pETBK19d9RmSYgWWJKtho0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTA5MTMxNDMwNTJaFw0yNjA5MTIxNDM1NTJaMDMxMTAvBgNV BAMTKDhGN0M3REJEQThCRDlDQkQxN0ZFOERBQURFRjFCQkExMkJGNjgxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGJj54m3xnAPQ47qfwAUmsIWv yc5+obtA5+23rVbZs/keQqtT/UdMYJHOQxVaTYXMePZdVBkv+sy1g0GhYcy4/BQh ybVeHTAWZtKx8WoXdCqGUm0TlBAWWJ7Q22eCX4+H8vqfWlAS5Xof0OhGrM5Bm276 oVOHI3MzV5kygc8ueVYLF7R6e2BNWMHC37n3sOpooX8KGBRhrWOLrc2tS5kKANK3 4QjQPIM6nJ2ApvaRvXdVv2PhTF71WoggVosYf2xLQR0E5w/myxlmGKFNvowEARW0 74I90AtbpoLDfwAN68lmTRLVONCW2nPGuq6a/mnTMfAMMH17HMauYPf/voDfAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUj3x9vai9nL0X/o2q3vG7oSv2gRcwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cHMA0GCSqGSIb3DQEBCwUAA4IBAQBs VP+GjY0h0fEM6QMk71c53GQXI3BeMvCoqq3ZYuEVoO5QhS8Ulj4m5/J70UDXj42G jXIml48L8+m7mSFGjnCq1V5YUgFgQdHEntybZM0qA4TlWi/8+D+epfrkudkeeXOU R2Smpem5SbylDTKoV0Lin6O22fEf2JNCKTNHV3CjCkBrLwpib8dJxhdVCM5NsOH9 7z2+21fLQ1Ret2oGaUWmCFKdQyAX6yC0AWS+dUGLfZ4rnItCrN6e9P6OW8ZrYdK0 kxeFeJNxwyh6oWmda3dBGvmp7C/OC4dlrfxYmNnW0TbYvsVX4/y7ji77mIDkWu6B CDRIBvnnJPawWqFN0lTI -----END CERTIFICATE-----Generated at Mon Sep 15 19:30:13 2025 by rpki-client