$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: F//u8b8URxPoSW5tKZ7gI7LWdU+B7yQQrxeBR/nXITQ= Subject key identifier: 00:64:A8:27:71:78:67:7F:6A:F2:EE:CB:F3:4A:0A:D9:8E:A3:F7:40 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 77D15C3A3A91573560B4671D12CD7DF177116AE2 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa Signing time: Thu 04 Sep 2025 23:06:00 +0000 ROA not before: Thu 04 Sep 2025 23:01:00 +0000 ROA not after: Thu 03 Sep 2026 23:06:00 +0000 asID: 214955 IP address blocks: 2a14:7583:f743::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 12:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d1:5c:3a:3a:91:57:35:60:b4:67:1d:12:cd:7d:f1:77:11:6a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Sep 4 23:01:00 2025 GMT Not After : Sep 3 23:06:00 2026 GMT Subject: CN=0064A8277178677F6AF2EECBF34A0AD98EA3F740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:cc:5f:dd:20:c5:32:7d:55:d6:ff:69:9f: 5c:60:04:b8:bb:cf:54:24:f8:94:32:bc:02:f4:12: 59:5a:5c:e3:75:76:fd:7a:6d:92:14:ba:fd:6a:3d: ef:b3:9a:31:c6:27:83:52:c1:d1:8f:63:c1:4b:02: ec:48:24:92:10:63:fc:d5:de:18:95:e8:95:3a:69: 0a:98:8d:48:47:2f:c2:02:b3:3a:d5:91:26:cd:41: 9a:93:20:d3:db:94:28:c5:25:5c:e7:59:e6:4b:65: d9:64:c9:ef:97:e2:c9:00:81:bb:3b:dc:d8:9d:9f: 13:87:33:3c:2c:e1:a6:b8:5a:c5:ec:85:2c:36:b1: c8:4e:1b:87:3c:8c:58:35:fd:f7:15:e6:a0:f6:09: bb:2e:53:20:c7:4d:11:be:e1:b6:f2:6c:1b:fb:b6: de:26:bf:1a:9f:a4:af:10:83:a1:42:16:9a:32:14: e0:06:f1:6e:f2:8d:3e:e3:86:29:ad:ef:d3:17:ff: bf:a7:18:e2:b7:42:61:b8:2c:4f:34:92:e8:a8:04: 48:52:ab:42:ed:b3:c8:8d:4a:9c:04:2c:0a:ce:5f: 0b:b8:34:2b:16:72:dd:f4:5f:a7:89:68:e3:a7:10: a3:df:39:24:6a:74:52:e9:9e:11:d6:b4:6a:46:70: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:A8:27:71:78:67:7F:6A:F2:EE:CB:F3:4A:0A:D9:8E:A3:F7:40 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f743::/48 Signature Algorithm: sha256WithRSAEncryption 81:38:87:cd:2a:93:f7:99:46:e9:22:67:81:57:ec:79:06:7d: 22:56:22:af:f4:8d:80:ac:c1:76:e2:97:58:cb:8b:e0:aa:4d: f2:bb:ab:68:0c:df:d2:77:25:58:b4:80:60:e0:ac:d2:a3:82: 79:7b:75:87:13:3d:fe:6b:d3:cb:86:e0:73:2d:f6:60:1f:ae: ac:fe:fd:3b:b0:07:b8:fb:75:d8:e7:56:d9:66:c9:66:90:a1: 12:94:08:56:95:a5:22:b9:97:64:a1:d3:3e:68:07:4c:0e:47: 4e:bd:2e:b6:1e:80:25:c7:60:07:06:b1:c3:84:71:9f:4a:d3: 9f:3f:83:85:c2:eb:74:2f:f9:95:a4:06:69:26:e9:54:4d:91: 3a:10:48:24:b8:d5:8d:ae:8e:e7:fd:4b:ed:c3:c4:c9:67:95: 05:df:e6:09:c8:ad:7c:8e:83:37:7f:83:21:c2:79:51:16:ff: 60:b8:b9:69:53:e5:e4:25:8e:cf:e4:cb:f2:64:87:61:4f:8c: 3c:53:86:d5:9f:f1:a0:18:c4:75:69:0d:a9:25:2e:35:f7:85: 1c:84:9f:98:ed:96:f7:ce:45:11:f9:31:4a:1f:a6:05:a1:7d: 0e:64:96:b3:1b:43:f2:4c:79:97:8b:24:35:26:12:e1:f4:46: e8:f1:c2:fb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUd9FcOjqRVzVgtGcdEs198XcRauIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTA5MDQyMzAxMDBaFw0yNjA5MDMyMzA2MDBaMDMxMTAvBgNV BAMTKDAwNjRBODI3NzE3ODY3N0Y2QUYyRUVDQkYzNEEwQUQ5OEVBM0Y3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqMxf3SDFMn1V1v9pn1xgBLi7 z1Qk+JQyvAL0EllaXON1dv16bZIUuv1qPe+zmjHGJ4NSwdGPY8FLAuxIJJIQY/zV 3hiV6JU6aQqYjUhHL8ICszrVkSbNQZqTINPblCjFJVznWeZLZdlkye+X4skAgbs7 3NidnxOHMzws4aa4WsXshSw2schOG4c8jFg1/fcV5qD2CbsuUyDHTRG+4bbybBv7 tt4mvxqfpK8Qg6FCFpoyFOAG8W7yjT7jhimt79MX/7+nGOK3QmG4LE80kuioBEhS q0Lts8iNSpwELArOXwu4NCsWct30X6eJaOOnEKPfOSRqdFLpnhHWtGpGcBf5AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUAGSoJ3F4Z39q8u7L80oK2Y6j90AwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczNDMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/dDMA0GCSqGSIb3DQEBCwUAA4IBAQCB OIfNKpP3mUbpImeBV+x5Bn0iViKv9I2ArMF24pdYy4vgqk3yu6toDN/SdyVYtIBg 4KzSo4J5e3WHEz3+a9PLhuBzLfZgH66s/v07sAe4+3XY51bZZslmkKESlAhWlaUi uZdkodM+aAdMDkdOvS62HoAlx2AHBrHDhHGfStOfP4OFwut0L/mVpAZpJulUTZE6 EEgkuNWNro7n/Uvtw8TJZ5UF3+YJyK18joM3f4MhwnlRFv9guLlpU+XkJY7P5Mvy ZIdhT4w8U4bVn/GgGMR1aQ2pJS4194UchJ+Y7Zb3zkUR+TFKH6YFoX0OZJazG0Py THmXiyQ1JhLh9Ebo8cL7 -----END CERTIFICATE-----Generated at Mon Sep 8 17:00:21 2025 by rpki-client