$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa File: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (raw, json) Hash identifier: T7lQYnTYs/DFRCwO/qyDeZsM0TJp9z7Gl/W0fx19d6k= Subject key identifier: ED:6A:67:91:D2:E6:E6:D0:87:1D:7F:ED:A5:1C:11:04:06:A6:D7:84 Certificate issuer: /CN=1F65F1D375662B71E99A607509E1EE167C6058E9 Certificate serial: 57E0ACADA96134550824EC4614B65D28199C41C2 Authority key identifier: 1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa Signing time: Tue 09 Sep 2025 15:29:01 +0000 ROA not before: Tue 09 Sep 2025 15:24:01 +0000 ROA not after: Tue 08 Sep 2026 15:29:01 +0000 asID: 213413 IP address blocks: 2a0b:4e07:a82::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.crl rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 22:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e0:ac:ad:a9:61:34:55:08:24:ec:46:14:b6:5d:28:19:9c:41:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F65F1D375662B71E99A607509E1EE167C6058E9 Validity Not Before: Sep 9 15:24:01 2025 GMT Not After : Sep 8 15:29:01 2026 GMT Subject: CN=ED6A6791D2E6E6D0871D7FEDA51C110406A6D784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:62:ff:fd:ea:96:6f:81:e8:94:65:a1:77: ed:3d:52:19:4c:8f:25:17:3e:6e:93:d6:ff:61:18: e3:73:df:f1:5a:4f:6d:d5:77:ac:ce:ad:97:9d:99: d7:68:d3:7c:55:10:df:45:bf:0c:6b:d2:b9:c4:3a: b0:43:bc:e2:42:94:3a:61:c5:c4:ca:e4:49:65:d1: 31:bf:94:9d:67:59:55:b5:20:95:e0:a9:7c:b0:e9: f9:a8:b1:e8:d6:f0:72:93:78:e7:e8:5e:8e:63:8a: 7a:d5:ad:72:2b:dc:ea:de:c4:ff:31:a8:29:ab:c8: 61:98:6d:ff:a9:cd:c4:39:49:16:23:b8:66:bd:c4: 95:ff:44:3f:38:27:aa:4f:2e:1e:52:f8:c7:42:54: 17:16:35:fc:a6:c0:15:4a:cd:c0:12:c1:a4:85:1d: 6b:32:0b:c8:05:ef:12:36:67:e6:47:ae:e1:57:8e: 03:40:73:16:5f:07:77:c3:11:d7:d7:f8:78:60:c4: 42:f9:da:a0:20:51:a1:b3:59:b0:34:f0:34:10:83: a3:6e:7c:a1:22:9f:69:1d:29:aa:ae:39:96:bc:7a: 0b:b8:f4:1e:eb:f7:af:38:96:1d:97:04:15:41:e3: 16:7b:98:0f:0b:48:c2:18:79:1b:e2:93:7c:dc:2c: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6A:67:91:D2:E6:E6:D0:87:1D:7F:ED:A5:1C:11:04:06:A6:D7:84 X509v3 Authority Key Identifier: keyid:1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:a82::/48 Signature Algorithm: sha256WithRSAEncryption 42:bf:24:85:96:cb:fc:74:87:65:6b:13:a3:af:2b:77:10:60: 02:db:12:23:71:3a:c6:e3:c8:b9:ce:a2:7b:b3:d3:bd:fa:b0: fc:53:8e:11:60:a5:73:91:bd:5f:36:bf:fb:34:68:67:35:65: cf:04:d4:2d:a3:7e:43:22:36:4c:10:6b:51:fe:77:9b:ba:cf: 23:b8:9d:8f:c0:fb:a2:0e:79:58:db:09:95:af:a7:a2:64:ea: 73:bb:94:b1:2d:9c:8f:52:91:70:79:aa:88:a1:08:48:6e:a2: 3f:63:cc:52:47:6b:16:99:e1:a1:69:dd:06:9b:cf:b6:50:62: d5:b1:16:a2:fe:f4:ee:88:70:30:48:43:e4:a4:41:b8:00:49: e3:a9:80:b8:0e:c8:c0:63:72:92:2d:3f:fb:9c:47:a7:9c:47: c8:66:2e:1a:1f:31:20:13:9d:d3:95:10:7b:a2:dd:73:ed:1c: 57:66:0b:15:bd:a0:29:5c:78:1e:5f:81:eb:64:3d:4b:da:7a: e9:cc:6b:90:7c:46:50:90:7d:f9:55:4b:a0:57:f1:10:d8:51: 0a:84:89:74:ea:27:cc:5a:ff:32:91:84:ef:5b:83:e8:23:51: 3e:4a:93:39:5c:94:30:83:c6:fc:f9:d8:ba:30:96:47:06:15: 00:00:36:6f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUV+CsralhNFUIJOxGFLZdKBmcQcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3 QzYwNThFOTAeFw0yNTA5MDkxNTI0MDFaFw0yNjA5MDgxNTI5MDFaMDMxMTAvBgNV BAMTKEVENkE2NzkxRDJFNkU2RDA4NzFEN0ZFREE1MUMxMTA0MDZBNkQ3ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGe2L//eqWb4HolGWhd+09UhlM jyUXPm6T1v9hGONz3/FaT23Vd6zOrZedmddo03xVEN9Fvwxr0rnEOrBDvOJClDph xcTK5Ell0TG/lJ1nWVW1IJXgqXyw6fmosejW8HKTeOfoXo5jinrVrXIr3OrexP8x qCmryGGYbf+pzcQ5SRYjuGa9xJX/RD84J6pPLh5S+MdCVBcWNfymwBVKzcASwaSF HWsyC8gF7xI2Z+ZHruFXjgNAcxZfB3fDEdfX+HhgxEL52qAgUaGzWbA08DQQg6Nu fKEin2kdKaquOZa8egu49B7r9684lh2XBBVB4xZ7mA8LSMIYeRvik3zcLI7PAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU7WpnkdLm5tCHHX/tpRwRBAam14QwHwYDVR0j BBgwFoAUH2Xx03VmK3HpmmB1CeHuFnxgWOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBkNjZkNGQtNWNkNC00MzM3LTg2MTUtNWIyNzdmNDFk ODhmLzEvMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3QzYwNThFOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3QzYw NThFOS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDBkNjZkNGQt NWNkNC00MzM3LTg2MTUtNWIyNzdmNDFkODhmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTM4MzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzNDMxMzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAqC04HCoIwDQYJKoZIhvcNAQELBQADggEBAEK/JIWWy/x0h2VrE6Ov K3cQYALbEiNxOsbjyLnOonuz0736sPxTjhFgpXORvV82v/s0aGc1Zc8E1C2jfkMi NkwQa1H+d5u6zyO4nY/A+6IOeVjbCZWvp6Jk6nO7lLEtnI9SkXB5qoihCEhuoj9j zFJHaxaZ4aFp3Qabz7ZQYtWxFqL+9O6IcDBIQ+SkQbgASeOpgLgOyMBjcpItP/uc R6ecR8hmLhofMSATndOVEHui3XPtHFdmCxW9oClceB5fgetkPUvaeunMa5B8RlCQ fflVS6BX8RDYUQqEiXTqJ8xa/zKRhO9bg+gjUT5KkzlclDCDxvz52LowlkcGFQAA Nm8= -----END CERTIFICATE-----Generated at Thu Oct 9 14:06:57 2025 by rpki-client