$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa File: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc= Subject key identifier: C3:C9:6F:48:74:A9:F2:B0:CA:D4:3E:65:FE:E1:D7:AA:AA:68:CD:98 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 1B75905A9D6834CA46597F90ECD9E60F01DE918B Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa Signing time: Fri 04 Jul 2025 10:19:18 +0000 ROA not before: Fri 04 Jul 2025 10:14:18 +0000 ROA not after: Fri 03 Jul 2026 10:19:18 +0000 asID: 8075 IP address blocks: 2a0a:6044:8fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 21:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:75:90:5a:9d:68:34:ca:46:59:7f:90:ec:d9:e6:0f:01:de:91:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Jul 4 10:14:18 2025 GMT Not After : Jul 3 10:19:18 2026 GMT Subject: CN=C3C96F4874A9F2B0CAD43E65FEE1D7AAAA68CD98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:c3:88:d8:3e:6c:65:3e:b7:28:d9:2b:fa: 44:1c:ab:ae:ec:02:48:34:57:d0:69:6b:fc:c1:0f: 34:b6:45:64:18:c2:02:92:4f:05:a1:ab:5e:f3:f1: 12:5e:02:6a:53:61:d9:81:45:d0:be:35:02:e4:09: a8:de:b7:f8:61:15:70:e6:cf:90:42:55:0f:4b:54: c1:5a:b5:af:25:a5:5e:31:e1:22:2f:89:76:3b:57: 74:b3:c9:69:20:6e:25:5b:67:9c:80:80:99:e0:5f: ba:c6:da:57:90:d4:c8:a7:ac:8f:ab:c6:eb:cf:e3: 23:9e:52:d0:07:85:67:91:bc:d9:a9:24:81:77:ea: da:3e:04:d1:ab:8d:21:e2:fb:95:5d:2a:6a:c9:25: 4f:a0:d6:b0:ec:82:6b:40:80:fa:a6:e4:ed:6b:62: 88:14:ec:3a:f0:86:78:9e:d5:ca:01:8f:6e:cc:9a: 3e:76:f2:fc:97:67:83:fc:8f:11:2e:00:ec:3f:a8: 4d:7c:a3:cf:6c:32:d4:82:3f:a4:91:1c:7a:c8:d3: 12:09:cb:a3:3e:bb:1c:ce:11:06:9e:2e:23:db:cd: 65:39:70:c9:a4:ba:ba:de:45:b0:ff:8a:06:b8:94: 7c:91:57:b2:90:04:d4:d2:e9:62:c5:13:36:b2:0d: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C9:6F:48:74:A9:F2:B0:CA:D4:3E:65:FE:E1:D7:AA:AA:68:CD:98 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8fff::/48 Signature Algorithm: sha256WithRSAEncryption 23:df:dd:d5:cd:56:04:63:c2:40:67:19:09:30:80:1c:3f:2e: 36:21:25:50:5c:b4:a4:52:58:9d:e7:2a:12:6e:2b:55:e6:00: fc:ef:d4:06:41:06:34:44:f7:57:a3:ac:91:87:ab:53:de:f2: a0:9d:c7:9e:00:fb:1c:ae:59:b2:05:1e:47:4f:33:45:f1:0f: ac:f3:68:85:21:a6:30:99:59:35:bd:58:f6:2d:de:48:d0:c9: e0:69:e5:97:6e:73:be:7e:31:97:14:74:6a:62:b6:b5:d7:bf: c4:da:1b:cb:9a:eb:c7:af:f8:48:3f:67:0f:de:32:b2:e5:62: bc:82:7c:57:fd:d7:77:5b:42:20:3b:87:1b:e0:98:dc:99:f3: 2a:e3:a4:5a:f5:d9:63:56:49:a4:51:e4:64:10:36:2b:52:5a: 3e:63:27:81:82:2d:60:e1:f9:c5:21:2a:b4:f2:98:07:e8:b8: b7:a0:ed:bc:6b:61:47:7b:6f:db:b8:d8:0a:cf:11:17:a0:40: e7:5d:3b:27:70:9d:cf:74:34:cb:07:ec:23:b7:4d:d5:f1:bf: 64:50:04:63:6e:68:3a:83:08:ae:1a:91:97:4c:d5:6c:7e:95: 00:9f:d2:34:28:d0:f6:b2:fc:09:0e:67:23:ce:26:60:06:ed: 4b:8b:04:b2 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUG3WQWp1oNMpGWX+Q7NnmDwHekYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTA3MDQxMDE0MThaFw0yNjA3MDMxMDE5MThaMDMxMTAvBgNV BAMTKEMzQzk2RjQ4NzRBOUYyQjBDQUQ0M0U2NUZFRTFEN0FBQUE2OENEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRMOI2D5sZT63KNkr+kQcq67s Akg0V9Bpa/zBDzS2RWQYwgKSTwWhq17z8RJeAmpTYdmBRdC+NQLkCajet/hhFXDm z5BCVQ9LVMFata8lpV4x4SIviXY7V3SzyWkgbiVbZ5yAgJngX7rG2leQ1MinrI+r xuvP4yOeUtAHhWeRvNmpJIF36to+BNGrjSHi+5VdKmrJJU+g1rDsgmtAgPqm5O1r YogU7Drwhnie1coBj27Mmj528vyXZ4P8jxEuAOw/qE18o89sMtSCP6SRHHrI0xIJ y6M+uxzOEQaeLiPbzWU5cMmkurreRbD/iga4lHyRV7KQBNTS6WLFEzayDZVDAgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUw8lvSHSp8rDK1D5l/uHXqqpozZgwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgz MDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCmBEj/8wDQYJKoZIhvcNAQELBQADggEBACPf3dXN VgRjwkBnGQkwgBw/LjYhJVBctKRSWJ3nKhJuK1XmAPzv1AZBBjRE91ejrJGHq1Pe 8qCdx54A+xyuWbIFHkdPM0XxD6zzaIUhpjCZWTW9WPYt3kjQyeBp5Zduc75+MZcU dGpitrXXv8TaG8ua68ev+Eg/Zw/eMrLlYryCfFf913dbQiA7hxvgmNyZ8yrjpFr1 2WNWSaRR5GQQNitSWj5jJ4GCLWDh+cUhKrTymAfouLeg7bxrYUd7b9u42ArPEReg QOddOydwnc90NMsH7CO3TdXxv2RQBGNuaDqDCK4akZdM1Wx+lQCf0jQo0Pay/AkO ZyPOJmAG7UuLBLI= -----END CERTIFICATE-----Generated at Sat Jul 5 11:40:55 2025 by rpki-client