$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa File: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (raw, json) Hash identifier: zM36/OphB/KbTgVAZhJZfKncuog5pc9Z90qFovwCspo= Subject key identifier: EF:E0:2C:C2:E2:66:96:29:CC:C4:CE:59:7D:7C:B2:4A:11:3F:88:49 Certificate issuer: /CN=702B79B445330AC21D237308277A4472598CE771 Certificate serial: 02ED6ECA69CCFD2CB45ABAD20C9AAECF58769FE0 Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa Signing time: Mon 15 Sep 2025 01:25:06 +0000 ROA not before: Mon 15 Sep 2025 01:20:06 +0000 ROA not after: Mon 14 Sep 2026 01:25:06 +0000 asID: 214955 IP address blocks: 2a14:7583:f764::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 03:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ed:6e:ca:69:cc:fd:2c:b4:5a:ba:d2:0c:9a:ae:cf:58:76:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702B79B445330AC21D237308277A4472598CE771 Validity Not Before: Sep 15 01:20:06 2025 GMT Not After : Sep 14 01:25:06 2026 GMT Subject: CN=EFE02CC2E2669629CCC4CE597D7CB24A113F8849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:84:c7:f2:44:37:fb:37:24:41:34:d2:32: e2:6d:d0:83:60:cf:00:cf:16:8a:53:c1:24:a0:81: d1:26:51:56:aa:ea:42:16:5f:5b:e3:17:a6:be:90: 10:ce:6a:b4:9a:a0:d8:42:13:8a:89:92:f4:e0:50: 23:32:e4:27:2b:c6:8d:ac:24:e6:0a:68:ef:ed:99: 40:52:1e:fa:0e:34:6a:89:51:bf:94:fa:fb:5b:2d: e0:d1:fe:cc:0e:d8:e9:9f:7e:86:84:aa:12:b7:0e: 9a:3e:6f:63:7d:c2:5a:e3:0a:e3:4e:c8:7c:e3:fb: fc:54:fc:bb:ab:42:f4:fa:9f:aa:88:58:5b:4c:7a: 39:e5:36:fb:a8:a4:43:48:6f:dc:0c:bb:63:ce:55: 8f:ea:64:54:3f:53:75:21:46:be:78:2c:3a:d4:7d: 64:06:7f:c6:89:b3:d2:39:89:2e:74:62:9e:ab:bc: 03:b9:02:fb:01:90:39:ac:6d:81:cd:4f:b0:fa:77: c9:4a:2a:3b:d0:84:3d:a3:81:2b:8c:bc:21:ef:b4: c8:93:0c:94:a9:bb:bf:25:b2:05:41:57:6e:ef:1c: 51:3e:dd:d2:f1:08:39:a1:9c:1f:46:b9:5a:2f:27: 1a:c0:6d:9f:f4:c7:63:7f:93:a5:93:13:d4:d5:b6: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E0:2C:C2:E2:66:96:29:CC:C4:CE:59:7D:7C:B2:4A:11:3F:88:49 X509v3 Authority Key Identifier: keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f764::/48 Signature Algorithm: sha256WithRSAEncryption 2b:39:d4:3a:a8:3d:80:9c:1b:b3:ad:8f:52:bc:38:8b:a5:00: b9:52:66:ee:25:01:ff:e6:91:f1:17:39:dd:c4:7c:ef:eb:b7: ed:b3:d8:c1:9b:ba:72:53:f9:fb:c6:0f:7a:1b:cf:61:60:be: a9:24:79:e0:b1:b5:65:00:c0:f6:d7:b8:b2:09:9c:96:97:65: 8a:de:df:09:dd:b8:e5:e7:77:b3:5f:e8:33:18:f9:09:e0:f6: b1:ae:70:60:60:57:a6:b5:b9:e4:6f:2a:6a:2b:ec:0e:d3:e0: 13:14:b8:1a:74:4a:c4:83:d1:10:44:07:a7:38:02:30:07:0f: ed:04:bd:43:be:e8:54:a1:d2:77:51:1a:cf:9c:4a:af:d8:8e: 22:9e:58:1e:6c:02:a3:70:40:94:be:78:61:a4:e5:12:66:70: 2e:d5:d0:3b:f4:0d:dc:cc:a3:f5:9b:bd:9d:97:1e:f6:07:1a: 20:33:35:b9:c7:12:55:23:9f:67:18:af:c8:14:d4:b7:99:ee: 34:67:4c:e8:3e:c4:9a:c6:97:57:0a:80:49:9d:12:30:18:2d: 0d:cb:69:75:a7:28:5c:0e:38:54:e4:33:a7:83:a1:e3:69:a1: 2a:88:69:e8:47:fc:80:35:7e:6e:1c:d0:9c:56:29:60:27:03: 31:12:ba:d5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAu1uymnM/Sy0WrrSDJquz1h2n+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1 OThDRTc3MTAeFw0yNTA5MTUwMTIwMDZaFw0yNjA5MTQwMTI1MDZaMDMxMTAvBgNV BAMTKEVGRTAyQ0MyRTI2Njk2MjlDQ0M0Q0U1OTdEN0NCMjRBMTEzRjg4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhoTH8kQ3+zckQTTSMuJt0INg zwDPFopTwSSggdEmUVaq6kIWX1vjF6a+kBDOarSaoNhCE4qJkvTgUCMy5Ccrxo2s JOYKaO/tmUBSHvoONGqJUb+U+vtbLeDR/swO2OmffoaEqhK3Dpo+b2N9wlrjCuNO yHzj+/xU/LurQvT6n6qIWFtMejnlNvuopENIb9wMu2POVY/qZFQ/U3UhRr54LDrU fWQGf8aJs9I5iS50Yp6rvAO5AvsBkDmsbYHNT7D6d8lKKjvQhD2jgSuMvCHvtMiT DJSpu78lsgVBV27vHFE+3dLxCDmhnB9GuVovJxrAbZ/0x2N/k6WTE9TVtnqjAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU7+AswuJmlinMxM5ZfXyyShE/iEkwHwYDVR0j BBgwFoAUcCt5tEUzCsIdI3MIJ3pEclmM53EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzEvNzAyQjc5QjQ0NTMzMEFDMjFEMjM3MzA4Mjc3QTQ0NzI1OThDRTc3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC83MDJCNzlCNDQ1MzMwQUMyMUQyMzczMDgy NzdBNDQ3MjU5OENFNzcxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zZjk5ZTY2ZC00YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMS8zMjYxMzEz NDNhMzczNTM4MzMzYTY2MzczNjM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1g/dkMA0GCSqGSIb3DQEBCwUAA4IBAQAr OdQ6qD2AnBuzrY9SvDiLpQC5UmbuJQH/5pHxFzndxHzv67fts9jBm7pyU/n7xg96 G89hYL6pJHngsbVlAMD217iyCZyWl2WK3t8J3bjl53ezX+gzGPkJ4PaxrnBgYFem tbnkbypqK+wO0+ATFLgadErEg9EQRAenOAIwBw/tBL1DvuhUodJ3URrPnEqv2I4i nlgebAKjcECUvnhhpOUSZnAu1dA79A3czKP1m72dlx72BxogMzW5xxJVI59nGK/I FNS3me40Z0zoPsSaxpdXCoBJnRIwGC0Ny2l1pyhcDjhU5DOng6HjaaEqiGnoR/yA NX5uHNCcVilgJwMxErrV -----END CERTIFICATE-----Generated at Mon Sep 15 19:30:10 2025 by rpki-client