$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa File: 326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa (raw, json) Hash identifier: tCxR0HM6B91ZeEQP8X07ciSs82f3QdQW1fL5NCNzZ4Y= Subject key identifier: 77:36:AB:13:E6:42:B1:3E:22:1C:2F:13:09:DA:2A:9E:B3:95:23:8E Certificate issuer: /CN=1F65F1D375662B71E99A607509E1EE167C6058E9 Certificate serial: 11F135F0A35FD4D37F08EA8D6063BD047A35DA2B Authority key identifier: 1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa Signing time: Mon 29 Sep 2025 18:18:02 +0000 ROA not before: Mon 29 Sep 2025 18:13:02 +0000 ROA not after: Mon 28 Sep 2026 18:18:02 +0000 asID: 207567 IP address blocks: 2a0b:4e07:ae0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.crl rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 22:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f1:35:f0:a3:5f:d4:d3:7f:08:ea:8d:60:63:bd:04:7a:35:da:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F65F1D375662B71E99A607509E1EE167C6058E9 Validity Not Before: Sep 29 18:13:02 2025 GMT Not After : Sep 28 18:18:02 2026 GMT Subject: CN=7736AB13E642B13E221C2F1309DA2A9EB395238E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:bf:4e:10:5b:94:10:c9:47:a1:fe:42:9f: 68:6b:c6:47:88:29:b0:b1:a6:e5:b8:8c:f9:6a:9d: 6b:03:28:e1:da:ed:7e:60:24:23:87:bd:2a:5e:1a: 4e:08:71:13:f7:6c:60:b2:57:90:7c:bd:10:19:e9: be:bb:72:7c:ac:7f:b8:a1:16:6c:03:67:84:f3:0f: 9a:1d:3f:b6:18:72:55:9d:82:10:56:15:6d:cc:68: a0:fc:d5:e4:81:e0:2c:48:ca:f3:91:93:c1:5f:5a: 49:45:bb:71:9d:71:5a:3f:74:ef:a1:21:73:17:c0: 0b:a0:08:2d:69:45:99:c4:8a:c0:95:5a:cc:c7:11: 7c:17:2b:1e:18:c4:aa:1c:3f:a2:a2:9f:8c:7f:c2: fd:a5:1d:78:82:39:c8:00:79:45:7f:4a:d1:6c:2d: 80:12:b0:08:56:65:3e:42:06:fa:51:b9:9e:28:8f: 99:03:f1:3f:e7:11:2a:52:b6:aa:85:d2:a0:10:14: 2a:1c:e1:f2:ab:83:79:86:9c:83:8a:18:f4:bc:49: 7e:a1:41:5e:da:f9:23:8d:ca:3a:d4:e0:d5:94:e0: 7c:17:5c:12:5f:e8:2d:35:04:af:08:7c:2d:45:26: fc:09:df:a5:a6:9f:44:c9:9e:cb:73:4f:45:cb:ca: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:AB:13:E6:42:B1:3E:22:1C:2F:13:09:DA:2A:9E:B3:95:23:8E X509v3 Authority Key Identifier: keyid:1F:65:F1:D3:75:66:2B:71:E9:9A:60:75:09:E1:EE:16:7C:60:58:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/1F65F1D375662B71E99A607509E1EE167C6058E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/1F65F1D375662B71E99A607509E1EE167C6058E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d66d4d-5cd4-4337-8615-5b277f41d88f/1/326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:ae0::/44 Signature Algorithm: sha256WithRSAEncryption 71:22:00:89:10:6a:64:bd:5d:42:66:13:02:69:b5:05:9b:54: 8c:cf:e7:49:93:50:b7:48:e9:a2:59:e8:74:9f:05:d5:6f:ff: 9c:75:36:11:5a:e2:25:02:08:67:5f:c8:4b:db:a8:0b:f0:8d: b6:5b:79:8d:78:7e:f1:b0:30:2e:3a:63:45:0c:d3:fd:94:d0: 8f:13:c6:26:e4:7d:0b:e2:1c:9c:4a:24:23:0a:43:42:ea:72: f8:07:5d:8e:d6:e7:c2:13:86:8c:9a:68:11:3b:09:59:12:c2: b9:12:11:4a:26:a6:48:4b:ef:4d:47:2a:82:0c:4c:1e:76:9a: e6:0f:00:9b:bd:7a:75:22:64:fe:af:51:ae:54:b3:8e:cd:d5: 18:3a:b1:29:b1:37:ac:b2:63:26:ec:5b:74:0f:e1:37:f4:52: 44:77:18:4d:f2:76:72:17:bc:22:de:2f:e7:19:28:b5:1d:9d: 66:f4:08:49:e1:be:46:a1:90:f0:65:dc:69:92:5d:c9:d4:ea: cb:77:f0:1d:5c:9a:7a:40:ee:ca:3a:2a:00:92:72:8f:ae:06: 12:4b:dc:0d:55:b8:a7:2c:7a:4f:e8:b7:d3:26:23:2b:d9:51: 16:d3:eb:93:2c:56:21:bd:a6:8e:f2:e8:6f:dd:97:9b:a4:b1: 4e:dd:3f:04 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEfE18KNf1NN/COqNYGO9BHo12iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3 QzYwNThFOTAeFw0yNTA5MjkxODEzMDJaFw0yNjA5MjgxODE4MDJaMDMxMTAvBgNV BAMTKDc3MzZBQjEzRTY0MkIxM0UyMjFDMkYxMzA5REEyQTlFQjM5NTIzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBb9OEFuUEMlHof5Cn2hrxkeI KbCxpuW4jPlqnWsDKOHa7X5gJCOHvSpeGk4IcRP3bGCyV5B8vRAZ6b67cnysf7ih FmwDZ4TzD5odP7YYclWdghBWFW3MaKD81eSB4CxIyvORk8FfWklFu3GdcVo/dO+h IXMXwAugCC1pRZnEisCVWszHEXwXKx4YxKocP6Kin4x/wv2lHXiCOcgAeUV/StFs LYASsAhWZT5CBvpRuZ4oj5kD8T/nESpStqqF0qAQFCoc4fKrg3mGnIOKGPS8SX6h QV7a+SONyjrU4NWU4HwXXBJf6C01BK8IfC1FJvwJ36Wmn0TJnstzT0XLyvEZAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUdzarE+ZCsT4iHC8TCdoqnrOVI44wHwYDVR0j BBgwFoAUH2Xx03VmK3HpmmB1CeHuFnxgWOkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBkNjZkNGQtNWNkNC00MzM3LTg2MTUtNWIyNzdmNDFk ODhmLzEvMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3QzYwNThFOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMUY2NUYxRDM3NTY2MkI3MUU5OUE2MDc1MDlFMUVFMTY3QzYw NThFOS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDBkNjZkNGQt NWNkNC00MzM3LTg2MTUtNWIyNzdmNDFkODhmLzEvMzI2MTMwNjIzYTM0NjUzMDM3 M2E2MTY1MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzczNTM2Mzcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqC04HCuAwDQYJKoZIhvcNAQELBQADggEBAHEiAIkQamS9XUJmEwJp tQWbVIzP50mTULdI6aJZ6HSfBdVv/5x1NhFa4iUCCGdfyEvbqAvwjbZbeY14fvGw MC46Y0UM0/2U0I8TxibkfQviHJxKJCMKQ0LqcvgHXY7W58IThoyaaBE7CVkSwrkS EUompkhL701HKoIMTB52muYPAJu9enUiZP6vUa5Us47N1Rg6sSmxN6yyYybsW3QP 4Tf0UkR3GE3ydnIXvCLeL+cZKLUdnWb0CEnhvkahkPBl3GmSXcnU6st38B1cmnpA 7so6KgCSco+uBhJL3A1VuKcsek/ot9MmIyvZURbT65MsViG9po7y6G/dl5uksU7d PwQ= -----END CERTIFICATE-----Generated at Thu Oct 9 14:06:56 2025 by rpki-client