$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa File: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (raw, json) Hash identifier: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ= Subject key identifier: EA:D2:DC:3C:8D:60:49:EF:D9:EA:C1:E2:A4:80:C0:C0:32:42:54:76 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 3C9F74AC853AD2C0B6D7A2BD97B32D742D58FB71 Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa Signing time: Fri 05 Sep 2025 03:11:57 +0000 ROA not before: Fri 05 Sep 2025 03:06:57 +0000 ROA not after: Fri 04 Sep 2026 03:11:57 +0000 asID: 9923 IP address blocks: 2a14:7581:6e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 07:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9f:74:ac:85:3a:d2:c0:b6:d7:a2:bd:97:b3:2d:74:2d:58:fb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Sep 5 03:06:57 2025 GMT Not After : Sep 4 03:11:57 2026 GMT Subject: CN=EAD2DC3C8D6049EFD9EAC1E2A480C0C032425476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:23:cb:43:68:f0:40:b5:72:32:9b:39:2a: 77:dc:83:dc:fb:03:76:d2:a8:5a:de:cc:ab:8e:0c: 1c:bb:a6:6d:a6:26:2b:a5:54:8e:2b:12:b3:d9:03: 64:f0:a9:f4:34:7f:f1:dc:ff:3b:13:19:97:0a:80: 4b:28:c0:b7:cc:33:b3:cf:d0:6f:be:18:8f:3a:76: 78:d2:c6:60:14:ed:91:cc:4d:74:b4:72:75:b2:f1: d5:88:ad:fe:ec:a0:81:0d:64:20:5e:ac:b4:de:8e: 57:60:6a:b1:bf:6d:41:4b:23:0c:95:df:e8:ff:0b: c1:13:67:15:5e:99:97:f9:02:cf:ef:18:d6:9c:6a: 0a:6e:fb:44:71:bf:1c:d8:cb:46:61:b7:e0:99:47: 2a:3e:51:22:c7:8d:09:ab:28:b8:46:10:72:2e:72: a4:ff:71:97:3a:b9:3a:73:ee:6c:e2:92:9a:a3:ec: 26:1f:d2:d9:a0:f7:a5:bd:ae:4b:7d:a2:78:7f:37: ba:20:32:27:ee:8b:d8:6b:2c:17:ee:30:4a:3e:96: 24:ec:4b:52:12:9a:e1:43:52:10:42:86:ee:6b:a4: c7:3a:25:6d:10:7c:60:1c:94:d9:fa:53:81:53:1d: b6:35:01:88:2e:7e:de:c5:04:48:7d:51:42:0e:65: 00:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:DC:3C:8D:60:49:EF:D9:EA:C1:E2:A4:80:C0:C0:32:42:54:76 X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6e00::/40 Signature Algorithm: sha256WithRSAEncryption 2f:87:7f:42:ca:d0:18:83:41:f3:47:15:de:94:3b:00:ec:33: 81:a3:bd:42:a1:6a:7f:3c:69:ab:e2:63:78:cf:15:f6:84:43: 2b:4d:4d:0c:19:b2:bb:e3:b7:3e:c0:83:57:1f:a6:1e:5d:85: 98:9a:57:8d:49:32:8c:bc:5f:80:8a:40:5f:bc:6e:bb:8e:14: ae:82:04:d6:1f:ab:91:70:97:69:e7:34:3e:88:34:5b:d9:39: 4b:2e:15:07:af:31:63:c4:c5:a6:37:0f:a2:1c:4c:eb:0b:ce: be:d1:87:38:1e:b9:02:b0:9e:d8:f6:b9:9f:42:51:15:21:9e: 70:52:bc:5d:61:39:24:8d:df:35:4b:f5:a8:2b:37:7f:91:c2: 8a:b0:aa:84:2f:70:41:b0:7a:0b:c6:8d:3b:4d:68:6a:ea:cb: 00:55:78:84:9f:39:23:96:2e:5d:c8:e6:fc:ee:97:ee:55:2c: 19:f2:49:1c:41:39:dd:aa:58:2c:12:d0:b7:17:34:a7:af:f1: 20:86:c7:af:4b:f8:65:c9:4f:ae:30:4e:88:6b:02:03:e1:0b: 66:50:86:76:47:6a:be:8d:88:99:77:1f:db:5f:98:3a:c3:1f: 5c:6b:c0:29:e0:e2:59:1d:21:a3:4f:4d:1c:a4:44:d1:f4:f0: fd:13:5c:20 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIUPJ90rIU60sC216K9l7MtdC1Y+3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTA5MDUwMzA2NTdaFw0yNjA5MDQwMzExNTdaMDMxMTAvBgNV BAMTKEVBRDJEQzNDOEQ2MDQ5RUZEOUVBQzFFMkE0ODBDMEMwMzI0MjU0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9iPLQ2jwQLVyMps5Knfcg9z7 A3bSqFrezKuODBy7pm2mJiulVI4rErPZA2TwqfQ0f/Hc/zsTGZcKgEsowLfMM7PP 0G++GI86dnjSxmAU7ZHMTXS0cnWy8dWIrf7soIENZCBerLTejldgarG/bUFLIwyV 3+j/C8ETZxVemZf5As/vGNacagpu+0RxvxzYy0Zht+CZRyo+USLHjQmrKLhGEHIu cqT/cZc6uTpz7mzikpqj7CYf0tmg96W9rkt9onh/N7ogMifui9hrLBfuMEo+liTs S1ISmuFDUhBChu5rpMc6JW0QfGAclNn6U4FTHbY1AYguft7FBEh9UUIOZQChAgMB AAGjggKAMIICfDAdBgNVHQ4EFgQU6tLcPI1gSe/Z6sHipIDAwDJCVHYwHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81YTdjOTU2Yy0yMmViLTRiYjgtYTMyNy1hZDk3MTYxMjk1YmMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjUzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzkz OTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgAqFHWBbjANBgkqhkiG9w0BAQsFAAOCAQEAL4d/QsrQ GINB80cV3pQ7AOwzgaO9QqFqfzxpq+JjeM8V9oRDK01NDBmyu+O3PsCDVx+mHl2F mJpXjUkyjLxfgIpAX7xuu44UroIE1h+rkXCXaec0Pog0W9k5Sy4VB68xY8TFpjcP ohxM6wvOvtGHOB65ArCe2Pa5n0JRFSGecFK8XWE5JI3fNUv1qCs3f5HCirCqhC9w QbB6C8aNO01oaurLAFV4hJ85I5YuXcjm/O6X7lUsGfJJHEE53apYLBLQtxc0p6/x IIbHr0v4ZclPrjBOiGsCA+ELZlCGdkdqvo2ImXcf21+YOsMfXGvAKeDiWR0ho09N HKRE0fTw/RNcIA== -----END CERTIFICATE-----Generated at Tue Sep 9 16:56:17 2025 by rpki-client