$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa File: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8= Subject key identifier: E2:4C:DB:DB:B5:02:AF:B3:49:C1:F6:9D:8B:AC:F2:31:E3:FB:7F:B6 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 1000B28E9B3F47B70E2F4DA601B933CC33CC5766 Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa Signing time: Fri 04 Jul 2025 10:19:19 +0000 ROA not before: Fri 04 Jul 2025 10:14:19 +0000 ROA not after: Fri 03 Jul 2026 10:19:19 +0000 asID: 8075 IP address blocks: 2a0a:6044:8ffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 21:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:00:b2:8e:9b:3f:47:b7:0e:2f:4d:a6:01:b9:33:cc:33:cc:57:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Jul 4 10:14:19 2025 GMT Not After : Jul 3 10:19:19 2026 GMT Subject: CN=E24CDBDBB502AFB349C1F69D8BACF231E3FB7FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:d3:b8:86:2e:45:c3:39:3e:bd:4a:08:05: b1:96:e9:a9:9b:1b:be:2a:9e:a8:11:6c:82:2c:da: 23:e1:16:6d:93:68:76:21:84:13:ee:47:5d:49:aa: 41:78:bd:3c:8a:ae:84:70:ec:8f:b4:db:36:ca:cf: 49:d2:f0:6e:7b:b0:06:af:fb:d0:f7:6b:80:8c:53: 94:d5:f9:b1:c0:50:ba:4e:7f:3f:6c:6f:ac:be:70: 8e:1b:56:de:9a:ee:5a:26:4e:4a:d2:07:ab:3c:69: 26:b4:48:61:1e:fc:5e:09:1d:88:f8:80:38:26:f3: 2d:cb:29:fe:b3:9d:65:d4:d0:69:3e:1f:bf:1e:e6: 81:15:21:fb:6c:c5:94:8f:19:c4:a7:0d:fa:e1:3d: fb:21:06:0c:4c:6d:f6:2e:e0:c0:58:24:57:77:20: b9:44:5e:16:14:ff:19:d7:15:d9:e7:bf:c9:2d:ff: e5:f0:c0:23:63:30:56:e2:4d:cb:46:17:51:ed:16: c5:c8:0a:03:ef:12:20:1c:18:5f:46:9a:7f:55:17: 69:46:64:ed:c2:03:1c:9a:fc:bd:55:35:8c:e2:54: 86:94:1b:72:32:90:0b:f1:12:bb:65:a7:0f:58:a8: 67:7f:a1:2b:a3:17:fa:6c:d3:e6:b6:22:96:a0:f9: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:DB:DB:B5:02:AF:B3:49:C1:F6:9D:8B:AC:F2:31:E3:FB:7F:B6 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8ffe::/48 Signature Algorithm: sha256WithRSAEncryption 4c:cc:d4:97:3b:d5:b7:44:e0:b3:01:da:58:29:e2:a6:aa:a7: 5c:97:f5:e0:0f:3b:ff:40:d5:e8:27:da:00:7f:79:50:79:88: 20:2d:8e:d9:83:ad:59:73:99:c6:80:2a:e9:d3:4d:03:a7:f5: 98:6b:a0:6d:b4:66:9a:61:66:25:fe:69:4c:a3:25:a2:58:e3: 5c:6b:71:eb:95:12:0d:15:89:51:c3:ab:ca:b9:3b:ee:fe:37: 01:9a:eb:f7:d5:d2:41:a4:c8:92:80:92:c8:66:b7:de:76:42: 29:dd:44:f6:ae:ae:7c:d6:7c:40:fe:4f:3b:9c:bd:7d:c0:3d: 1c:b4:dc:0b:e3:bb:8c:05:9d:72:5f:0c:b5:a3:30:70:f0:5d: 65:8a:d4:a9:74:bc:1d:82:7c:df:7d:47:97:53:88:c7:b3:7e: 3b:39:ad:b7:82:ef:dc:87:9d:60:f7:0f:df:cb:86:09:9f:03: 49:dd:fb:17:7b:ae:f3:79:1b:e9:69:41:2a:b6:77:9a:d5:6f: ae:af:1f:96:92:a9:a7:16:84:02:c0:e8:09:ac:82:2a:12:9f: 25:dd:79:03:d8:31:b2:b9:48:65:b3:0e:db:5e:7a:b4:26:6f: 68:fc:0f:f6:46:3d:f8:23:a3:d1:8c:47:4f:25:4b:55:4b:a7: 38:db:38:61 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUEACyjps/R7cOL02mAbkzzDPMV2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTA3MDQxMDE0MTlaFw0yNjA3MDMxMDE5MTlaMDMxMTAvBgNV BAMTKEUyNENEQkRCQjUwMkFGQjM0OUMxRjY5RDhCQUNGMjMxRTNGQjdGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHdO4hi5Fwzk+vUoIBbGW6amb G74qnqgRbIIs2iPhFm2TaHYhhBPuR11JqkF4vTyKroRw7I+02zbKz0nS8G57sAav +9D3a4CMU5TV+bHAULpOfz9sb6y+cI4bVt6a7lomTkrSB6s8aSa0SGEe/F4JHYj4 gDgm8y3LKf6znWXU0Gk+H78e5oEVIftsxZSPGcSnDfrhPfshBgxMbfYu4MBYJFd3 ILlEXhYU/xnXFdnnv8kt/+XwwCNjMFbiTctGF1HtFsXICgPvEiAcGF9Gmn9VF2lG ZO3CAxya/L1VNYziVIaUG3IykAvxErtlpw9YqGd/oSujF/ps0+a2Ipag+QG7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQU4kzb27UCr7NJwfadi6zyMeP7f7YwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgz MDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCmBEj/4wDQYJKoZIhvcNAQELBQADggEBAEzM1Jc7 1bdE4LMB2lgp4qaqp1yX9eAPO/9A1egn2gB/eVB5iCAtjtmDrVlzmcaAKunTTQOn 9ZhroG20ZpphZiX+aUyjJaJY41xrceuVEg0ViVHDq8q5O+7+NwGa6/fV0kGkyJKA kshmt952QindRPaurnzWfED+TzucvX3APRy03Avju4wFnXJfDLWjMHDwXWWK1Kl0 vB2CfN99R5dTiMezfjs5rbeC79yHnWD3D9/LhgmfA0nd+xd7rvN5G+lpQSq2d5rV b66vH5aSqacWhALA6AmsgioSnyXdeQPYMbK5SGWzDtteerQmb2j8D/ZGPfgjo9GM R08lS1VLpzjbOGE= -----END CERTIFICATE-----Generated at Sat Jul 5 11:30:01 2025 by rpki-client