$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa File: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (raw, json) Hash identifier: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA= Subject key identifier: D9:59:31:91:01:E0:B9:7F:33:D3:DC:D6:D7:D5:56:06:C9:89:EA:08 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 1BBE4CDB11086F1CAC4740A5E988E515AEAD4B Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa Signing time: Fri 05 Sep 2025 03:06:33 +0000 ROA not before: Fri 05 Sep 2025 03:01:33 +0000 ROA not after: Fri 04 Sep 2026 03:06:33 +0000 asID: 198954 IP address blocks: 2a14:7581:6c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 07:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:be:4c:db:11:08:6f:1c:ac:47:40:a5:e9:88:e5:15:ae:ad:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Sep 5 03:01:33 2025 GMT Not After : Sep 4 03:06:33 2026 GMT Subject: CN=D959319101E0B97F33D3DCD6D7D55606C989EA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:34:e0:3c:a9:0f:4a:c7:fe:22:81:c5:8e: 28:43:0c:53:72:df:a0:37:0f:0b:34:df:9e:3a:11: 17:b5:6d:d7:bd:7e:11:01:94:e4:67:96:ba:63:bd: 47:22:9d:95:18:4a:93:a9:80:d4:ac:28:ec:e1:01: df:53:fc:45:f5:12:78:ed:7d:40:18:18:6a:73:b4: ac:7f:0b:4e:7d:fd:cc:84:c3:e3:3d:7a:b8:8c:7e: 8e:f4:e1:85:13:cc:4a:f1:cf:f0:bb:8d:36:2a:1a: 42:68:2d:b9:e1:0a:2f:0a:99:2b:53:6b:5f:18:d7: ad:65:b5:bc:ad:36:11:04:e1:95:b6:f7:ab:d0:0f: c3:d5:3b:ee:b5:53:9f:a9:f6:eb:86:2d:27:4f:54: 5a:c2:c1:3e:2f:3d:26:80:e1:95:f7:55:c1:b9:71: f6:cd:5b:92:65:43:74:26:56:09:0c:42:24:80:bb: ec:17:aa:f0:ee:5e:b1:6a:82:ad:51:7c:38:76:7f: 0d:41:e0:e9:86:e0:74:3d:fb:f2:48:38:07:22:3e: 1e:c2:3a:5f:38:02:c8:a8:1c:49:21:f4:f4:d7:4d: 4a:2a:d9:ad:89:7e:59:3a:27:d2:9d:8e:c1:9a:0f: 15:8d:6b:60:02:e6:b4:e6:bf:a8:3b:19:38:fb:6a: 2f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:59:31:91:01:E0:B9:7F:33:D3:DC:D6:D7:D5:56:06:C9:89:EA:08 X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6c00::/40 Signature Algorithm: sha256WithRSAEncryption 1d:7e:9c:56:bb:ef:b2:aa:89:83:d7:51:6c:6a:68:93:94:93: 36:da:eb:95:2b:bd:8b:1d:33:f9:c6:67:d3:1a:a5:9d:60:1a: 74:e5:ae:de:50:8d:d8:d9:32:84:40:6b:6e:39:7e:e8:5e:34: 44:fe:df:c6:42:11:2f:c0:99:33:19:70:32:28:c1:16:83:e0: 86:53:bd:e4:e6:d2:45:c4:60:7b:dc:d8:6a:b5:1d:8b:82:1c: a5:31:65:25:76:19:dd:bd:c5:ac:e9:f7:64:06:ce:86:b3:fd: 77:32:f2:da:eb:dd:2f:62:de:82:67:6d:f3:3e:ce:41:07:85: e4:98:30:36:8a:fa:a9:c2:f1:49:38:48:df:6a:5a:8f:9d:4b: e5:7d:fe:23:00:77:ef:e2:21:1f:9d:d1:31:1c:b7:7e:ed:00: e0:88:46:fd:ce:43:ab:23:c5:2c:05:b9:74:32:b7:bf:9b:b4: 4f:ba:50:8f:f4:24:8c:ea:2b:ed:95:c9:06:19:7b:46:bb:b0: a4:c2:f6:f3:a1:27:2e:8c:ad:09:a9:20:da:3c:6b:84:5f:a1: d1:d9:80:89:2f:1e:7c:ce:e9:1d:a1:7b:d8:2d:0e:d6:49:95: e9:89:b3:6a:9f:f4:00:a6:8e:3b:26:f0:ff:3e:7b:ba:fa:11: e6:0d:e9:a7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgITG75M2xEIbxysR0Cl6YjlFa6tSzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNGQkNDREE2OEE2 NjA0NjIwMB4XDTI1MDkwNTAzMDEzM1oXDTI2MDkwNDAzMDYzM1owMzExMC8GA1UE AxMoRDk1OTMxOTEwMUUwQjk3RjMzRDNEQ0Q2RDdENTU2MDZDOTg5RUEwODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL4eNOA8qQ9Kx/4igcWOKEMMU3Lf oDcPCzTfnjoRF7Vt171+EQGU5GeWumO9RyKdlRhKk6mA1Kwo7OEB31P8RfUSeO19 QBgYanO0rH8LTn39zITD4z16uIx+jvThhRPMSvHP8LuNNioaQmgtueEKLwqZK1Nr XxjXrWW1vK02EQThlbb3q9APw9U77rVTn6n264YtJ09UWsLBPi89JoDhlfdVwblx 9s1bkmVDdCZWCQxCJIC77Beq8O5esWqCrVF8OHZ/DUHg6YbgdD378kg4ByI+HsI6 XzgCyKgcSSH09NdNSirZrYl+WTon0p2OwZoPFY1rYALmtOa/qDsZOPtqLzECAwEA AaOCAoQwggKAMB0GA1UdDgQWBBTZWTGRAeC5fzPT3NbX1VYGyYnqCDAfBgNVHSME GDAWgBQCD37SF/w2Uy5rBFz7zNpopmBGIDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS81YTdjOTU2Yy0yMmViLTRiYjgtYTMyNy1hZDk3MTYxMjk1 YmMvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNGQkNDREE2OEE2NjA0NjIwLmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5 OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzAyMEY3RUQyMTdGQzM2NTMyRTZCMDQ1Q0ZC Q0NEQTY4QTY2MDQ2MjAuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVhN2M5NTZjLTIyZWItNGJiOC1hMzI3LWFkOTcxNjEyOTViYy8wLzMyNjEzMTM0 M2EzNzM1MzgzMTNhMzY2MzMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTM5 MzgzOTM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWBbDANBgkqhkiG9w0BAQsFAAOCAQEAHX6c VrvvsqqJg9dRbGpok5STNtrrlSu9ix0z+cZn0xqlnWAadOWu3lCN2NkyhEBrbjl+ 6F40RP7fxkIRL8CZMxlwMijBFoPghlO95ObSRcRge9zYarUdi4IcpTFlJXYZ3b3F rOn3ZAbOhrP9dzLy2uvdL2Legmdt8z7OQQeF5JgwNor6qcLxSThI32paj51L5X3+ IwB37+IhH53RMRy3fu0A4IhG/c5DqyPFLAW5dDK3v5u0T7pQj/QkjOor7ZXJBhl7 RruwpML286EnLoytCakg2jxrhF+h0dmAiS8efM7pHaF72C0O1kmV6Ymzap/0AKaO Oybw/z57uvoR5g3ppw== -----END CERTIFICATE-----Generated at Tue Sep 9 16:58:11 2025 by rpki-client