$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: s15NOBRzlJhT8Ilr0QxZxBoPvIfuNlcjTL4p1JyK0Rg= Subject key identifier: A4:53:A7:A7:86:03:46:D6:59:1E:5C:FE:BC:D2:94:BF:18:A5:2B:81 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 3A07FA961929890A975ECB3B1F28B671A3B78DBC Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa Signing time: Sat 13 Sep 2025 15:56:54 +0000 ROA not before: Sat 13 Sep 2025 15:51:54 +0000 ROA not after: Sat 12 Sep 2026 15:56:54 +0000 asID: 214955 IP address blocks: 2a14:7583:f708::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 03:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:07:fa:96:19:29:89:0a:97:5e:cb:3b:1f:28:b6:71:a3:b7:8d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Sep 13 15:51:54 2025 GMT Not After : Sep 12 15:56:54 2026 GMT Subject: CN=A453A7A7860346D6591E5CFEBCD294BF18A52B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:b2:aa:44:65:3d:6e:f3:68:2e:a1:26:f0: 83:bc:cd:98:d2:ca:4e:6a:08:96:d3:44:13:53:4c: ce:37:57:71:a8:d2:0a:d6:1a:1f:cb:9a:d4:0e:3f: 75:1e:c4:ee:2c:c4:79:d3:76:12:c5:34:d4:fa:b2: 5c:00:fa:3e:48:b9:66:b1:de:74:45:f3:ce:da:fd: fb:5e:3d:e4:07:98:b8:de:f4:86:cd:82:25:73:13: 00:0d:59:d1:f8:09:7d:a7:13:f5:81:1d:97:83:b5: 6e:9c:9a:3c:f6:92:e1:6f:b5:23:3c:06:48:6e:4b: 15:c6:29:5a:6d:7b:c7:72:dd:f7:79:9d:c7:08:af: 12:64:5b:44:5c:14:c8:46:39:7e:6d:39:7b:43:e3: f7:59:a5:97:84:d2:8c:1d:31:7f:e8:fa:20:06:da: 84:05:3a:45:09:ee:6e:ef:21:14:c7:48:19:d7:28: 61:f8:b7:4d:8f:d3:57:58:4c:1b:cb:f1:69:a5:13: e5:e5:3d:8e:9f:15:b7:22:88:81:9b:9a:62:55:14: da:7a:0b:bd:e3:bb:31:fb:65:ef:9e:eb:0f:7e:40: 1f:1e:7d:f4:0c:44:d2:3c:06:67:14:e7:fc:8a:55: c2:cb:d7:77:12:68:dc:6e:09:ed:9b:c6:38:86:30: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:53:A7:A7:86:03:46:D6:59:1E:5C:FE:BC:D2:94:BF:18:A5:2B:81 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f708::/48 Signature Algorithm: sha256WithRSAEncryption 7f:3c:63:5e:10:61:65:1c:11:6b:2f:11:43:52:e7:07:2d:fc: 90:1c:b1:62:5c:3f:db:3b:3b:64:4d:ef:0e:14:1f:ce:19:f6: 83:4d:6a:db:72:25:22:37:b5:fb:8c:3f:b6:43:72:a8:e7:06: a7:f8:3c:55:0d:c7:cf:58:fd:03:35:d4:80:e5:4c:36:3f:a7: 62:a4:6e:54:bb:cd:37:42:58:40:69:14:00:38:59:2b:ff:a0: f6:7e:ac:98:85:43:7c:11:21:30:c5:41:78:32:25:8c:d3:1b: f3:2f:08:30:dc:83:14:43:a7:d7:d4:21:c2:f6:df:eb:24:12: 17:5f:f5:d6:89:ab:90:15:2e:8f:12:42:63:8e:97:4b:ef:c8: 79:90:29:0a:d8:32:9d:19:30:2b:81:7f:e2:72:0b:0d:7f:87: e8:36:10:35:11:7c:41:f0:fb:c5:7c:a1:25:c2:5a:4b:c6:ba: 61:84:c2:56:40:2d:c0:ec:32:a0:07:4a:3c:41:e7:55:64:50: 3f:99:19:ec:32:e3:c3:78:60:73:52:27:40:bb:7c:58:30:7b: 5a:74:e5:33:e5:ff:7b:bd:be:4e:18:c2:2d:7f:5c:01:02:b5: a8:b6:42:a7:e1:8a:8c:21:cc:c4:8e:2b:ee:2c:78:ba:a0:04: ba:ab:7c:dd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOgf6lhkpiQqXXss7Hyi2caO3jbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTA5MTMxNTUxNTRaFw0yNjA5MTIxNTU2NTRaMDMxMTAvBgNV BAMTKEE0NTNBN0E3ODYwMzQ2RDY1OTFFNUNGRUJDRDI5NEJGMThBNTJCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/7KqRGU9bvNoLqEm8IO8zZjS yk5qCJbTRBNTTM43V3Go0grWGh/LmtQOP3UexO4sxHnTdhLFNNT6slwA+j5IuWax 3nRF887a/ftePeQHmLje9IbNgiVzEwANWdH4CX2nE/WBHZeDtW6cmjz2kuFvtSM8 BkhuSxXGKVpte8dy3fd5nccIrxJkW0RcFMhGOX5tOXtD4/dZpZeE0owdMX/o+iAG 2oQFOkUJ7m7vIRTHSBnXKGH4t02P01dYTBvL8WmlE+XlPY6fFbciiIGbmmJVFNp6 C73juzH7Ze+e6w9+QB8effQMRNI8BmcU5/yKVcLL13cSaNxuCe2bxjiGMN1JAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUpFOnp4YDRtZZHlz+vNKUvxilK4EwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/cIMA0GCSqGSIb3DQEBCwUAA4IBAQB/ PGNeEGFlHBFrLxFDUucHLfyQHLFiXD/bOztkTe8OFB/OGfaDTWrbciUiN7X7jD+2 Q3Ko5wan+DxVDcfPWP0DNdSA5Uw2P6dipG5Uu803QlhAaRQAOFkr/6D2fqyYhUN8 ESEwxUF4MiWM0xvzLwgw3IMUQ6fX1CHC9t/rJBIXX/XWiauQFS6PEkJjjpdL78h5 kCkK2DKdGTArgX/icgsNf4foNhA1EXxB8PvFfKElwlpLxrphhMJWQC3A7DKgB0o8 QedVZFA/mRnsMuPDeGBzUidAu3xYMHtadOUz5f97vb5OGMItf1wBArWotkKn4YqM IczEjivuLHi6oAS6q3zd -----END CERTIFICATE-----Generated at Mon Sep 15 19:30:11 2025 by rpki-client