$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa File: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (raw, json) Hash identifier: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A= Subject key identifier: 53:5C:CC:2A:8D:25:BA:F6:7A:2C:F5:B8:A3:1C:C7:D2:13:66:F1:69 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 027DC92FD6A6BC3835E611FCB0E209D43F5064CC Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa Signing time: Fri 04 Jul 2025 10:19:19 +0000 ROA not before: Fri 04 Jul 2025 10:14:19 +0000 ROA not after: Fri 03 Jul 2026 10:19:19 +0000 asID: 215605 IP address blocks: 2a0a:6044:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 21:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7d:c9:2f:d6:a6:bc:38:35:e6:11:fc:b0:e2:09:d4:3f:50:64:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Jul 4 10:14:19 2025 GMT Not After : Jul 3 10:19:19 2026 GMT Subject: CN=535CCC2A8D25BAF67A2CF5B8A31CC7D21366F169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:4c:64:fe:3c:f8:1b:e4:d5:f7:a0:81:22: d6:6d:90:70:9d:00:f6:b3:92:20:13:d6:13:ce:aa: 1e:f6:5a:bc:c4:10:fe:87:4a:02:a7:d9:38:8b:9b: 45:7c:74:71:6f:f0:45:b7:78:fd:ca:3a:ed:5a:ff: 07:25:3a:9e:40:67:64:1b:e2:de:6b:a9:80:fd:8a: fc:89:51:a5:19:36:59:8d:68:68:af:d2:f1:d5:3e: 5d:e2:06:fe:fc:59:28:a9:f9:6c:bf:2a:e4:79:d5: 67:fc:e8:16:65:e7:6a:32:f0:85:d0:07:be:72:77: 87:ac:a1:e8:2d:23:be:e7:8e:86:c9:a5:b9:7c:3a: 70:67:d0:60:0a:4b:6b:c4:50:8b:8d:0f:8f:b1:a7: ed:4d:8a:98:58:a5:7e:ce:98:a8:56:4f:8d:94:46: 50:e4:6e:8a:7c:4e:ac:be:4f:0a:0f:8f:67:93:f5: 70:8e:85:1a:4e:98:1e:e5:f6:f3:35:42:0b:39:d3: d3:8b:43:86:30:68:0b:39:8a:8c:c6:cc:ef:7c:cc: f1:b1:35:1d:a4:41:a6:87:c0:5a:f1:ae:88:1d:77: 7f:02:c3:41:94:38:08:b1:9c:8d:e5:f1:e2:5a:d6: 6f:b5:e3:85:8f:18:c1:27:2a:d8:fc:66:bb:56:6d: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:CC:2A:8D:25:BA:F6:7A:2C:F5:B8:A3:1C:C7:D2:13:66:F1:69 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8000::/36 Signature Algorithm: sha256WithRSAEncryption bd:c1:39:39:c6:22:ef:16:6e:59:a0:91:80:d4:09:15:ac:4e: 1a:44:e5:6d:13:85:b4:cf:56:09:e2:02:c5:45:29:1f:7f:51: 15:3f:52:c4:9f:a9:46:fc:05:a9:01:32:b8:52:60:2e:43:76: 15:aa:b5:b0:38:ab:a0:c2:55:be:73:f6:0c:6d:ed:2b:e7:8b: 98:40:aa:27:fb:af:78:ae:af:86:1b:ec:eb:c1:15:61:21:df: 25:fc:ce:c1:8b:e3:c9:18:cd:22:8d:40:f3:7a:c2:af:dc:2a: f1:2f:e2:f8:87:36:7f:14:af:d7:c0:c1:8f:c6:bb:ab:e5:cf: 92:12:97:02:0e:8b:7a:71:25:94:d1:bc:89:ab:09:83:de:9a: 90:9e:61:d3:60:53:3b:e8:cd:36:65:5c:c3:1b:eb:c0:fc:e2: 44:89:c7:95:29:33:0d:6e:15:62:c0:95:ff:51:b1:b4:8d:4d: 02:8b:72:90:06:93:6f:7c:ab:65:70:48:b7:38:e5:37:9e:c6: 72:64:6b:74:61:9d:2f:ab:0e:35:56:b7:de:c0:98:d7:02:f4: 91:a4:ae:a1:07:80:4e:42:2e:93:95:2d:1d:f5:64:ce:51:5c: dd:fb:76:1a:1e:41:4f:23:db:e1:99:a2:72:9a:89:86:c7:0d: 6c:fc:fc:58 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUAn3JL9amvDg15hH8sOIJ1D9QZMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTA3MDQxMDE0MTlaFw0yNjA3MDMxMDE5MTlaMDMxMTAvBgNV BAMTKDUzNUNDQzJBOEQyNUJBRjY3QTJDRjVCOEEzMUNDN0QyMTM2NkYxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlkxk/jz4G+TV96CBItZtkHCd APazkiAT1hPOqh72WrzEEP6HSgKn2TiLm0V8dHFv8EW3eP3KOu1a/wclOp5AZ2Qb 4t5rqYD9ivyJUaUZNlmNaGiv0vHVPl3iBv78WSip+Wy/KuR51Wf86BZl52oy8IXQ B75yd4esoegtI77njobJpbl8OnBn0GAKS2vEUIuND4+xp+1NiphYpX7OmKhWT42U RlDkbop8Tqy+TwoPj2eT9XCOhRpOmB7l9vM1Qgs509OLQ4YwaAs5iozGzO98zPGx NR2kQaaHwFrxrogdd38Cw0GUOAixnI3l8eJa1m+144WPGMEnKtj8ZrtWbYo1AgMB AAGjggJUMIICUDAdBgNVHQ4EFgQUU1zMKo0luvZ6LPW4oxzH0hNm8WkwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKgpgRIAwDQYJKoZIhvcNAQELBQADggEBAL3B OTnGIu8WblmgkYDUCRWsThpE5W0ThbTPVgniAsVFKR9/URU/UsSfqUb8BakBMrhS YC5DdhWqtbA4q6DCVb5z9gxt7Svni5hAqif7r3iur4Yb7OvBFWEh3yX8zsGL48kY zSKNQPN6wq/cKvEv4viHNn8Ur9fAwY/Gu6vlz5ISlwIOi3pxJZTRvImrCYPempCe YdNgUzvozTZlXMMb68D84kSJx5UpMw1uFWLAlf9RsbSNTQKLcpAGk298q2VwSLc4 5TeexnJka3RhnS+rDjVWt97AmNcC9JGkrqEHgE5CLpOVLR31ZM5RXN37dhoeQU8j 2+GZonKaiYbHDWz8/Fg= -----END CERTIFICATE-----Generated at Sat Jul 5 11:42:19 2025 by rpki-client