$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa File: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (raw, json) Hash identifier: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg= Subject key identifier: 86:66:0A:DC:D6:8F:7D:D3:72:7F:EF:01:B1:6F:29:C9:E6:4E:39:9B Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 62FA9F2D0CF210D356793D9BE29C43387ECCAA50 Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa Signing time: Fri 05 Sep 2025 03:06:40 +0000 ROA not before: Fri 05 Sep 2025 03:01:40 +0000 ROA not after: Fri 04 Sep 2026 03:06:40 +0000 asID: 215934 IP address blocks: 2a14:7581:6fd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 07:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fa:9f:2d:0c:f2:10:d3:56:79:3d:9b:e2:9c:43:38:7e:cc:aa:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Sep 5 03:01:40 2025 GMT Not After : Sep 4 03:06:40 2026 GMT Subject: CN=86660ADCD68F7DD3727FEF01B16F29C9E64E399B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:6b:34:dc:59:a1:20:05:f6:2c:9e:2b:de: 8f:cf:2c:3c:af:e8:83:9a:1f:a4:f6:cf:20:0d:2c: 8c:de:37:0e:28:b8:41:8e:95:36:59:42:dd:fa:5e: 11:1c:68:9e:52:a5:9f:19:84:de:29:fa:1c:3c:a9: 63:a5:af:a9:87:52:7f:73:cc:2f:ce:ed:ee:17:08: 63:3d:49:c5:31:8d:99:c5:d1:f1:b6:9f:46:5b:06: 0a:4f:3a:c0:2f:8b:17:6e:56:80:b5:03:5a:1a:00: cc:6f:88:9f:b2:d6:e1:a3:54:79:4a:f1:89:93:12: 0b:5e:81:ce:65:54:c2:21:22:96:88:b9:5d:98:2b: 30:ee:ef:f6:e5:a6:9b:9d:59:a9:33:a6:10:51:0a: b7:99:3d:85:28:fd:68:69:1d:f0:c2:cd:01:c7:77: 66:76:49:95:b8:40:cf:17:22:14:4d:77:f6:46:df: 8f:31:eb:e2:fa:0f:6f:9d:89:75:a5:a3:f0:68:6a: 00:4e:43:c3:d3:04:74:af:a2:03:ac:12:3d:38:94: 06:55:a9:e9:ee:c0:08:17:f7:d9:3b:48:b7:62:17: 81:34:f0:7e:2e:28:96:ad:65:c3:e3:20:11:f9:3c: 35:77:6e:8c:ca:71:85:9c:53:f1:9b:13:9b:20:7a: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:66:0A:DC:D6:8F:7D:D3:72:7F:EF:01:B1:6F:29:C9:E6:4E:39:9B X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6fd0::/44 Signature Algorithm: sha256WithRSAEncryption 70:d4:14:a5:97:1e:be:ad:5e:84:1f:0e:da:86:5f:7c:1d:57: 83:46:ee:fb:9c:d8:f0:61:6b:70:0f:88:88:75:7a:a2:03:79: ee:66:6b:94:7f:ca:e3:65:9e:2b:00:4b:2e:1e:1b:4d:e9:75: d1:59:26:61:67:bb:e1:28:9c:de:e4:49:c0:24:a9:5f:32:64: a5:45:f8:27:55:ff:69:61:01:64:c4:61:13:c3:6a:7e:16:a5: a0:ea:17:ea:42:8f:2b:60:cd:57:f6:08:97:a9:51:66:b2:1b: 93:c3:ed:4c:a3:db:90:e9:cd:71:45:aa:8e:c2:69:20:c3:0a: 10:e1:c4:31:5a:04:c0:a5:e3:ce:1e:fc:06:73:b8:51:d0:73: bb:a6:43:6a:39:f1:c1:22:79:18:be:74:fc:52:f1:51:d4:23: b1:a4:92:39:39:5f:94:59:05:dc:49:cf:e7:ae:7a:f8:90:3b: e7:54:ff:c1:d9:ed:8b:40:b1:7b:26:6c:d2:22:fd:44:b8:3e: a5:35:f4:b1:69:e9:5e:4a:5b:be:11:c2:3b:de:95:34:b9:7f: f4:14:9e:08:02:3b:d8:a4:d8:66:3a:c6:de:13:60:12:c4:17: 38:f5:70:7c:7c:74:d3:4e:0a:63:b5:6c:8d:19:e9:49:6c:7d: 73:84:b1:7b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYvqfLQzyENNWeT2b4pxDOH7MqlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTA5MDUwMzAxNDBaFw0yNjA5MDQwMzA2NDBaMDMxMTAvBgNV BAMTKDg2NjYwQURDRDY4RjdERDM3MjdGRUYwMUIxNkYyOUM5RTY0RTM5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPWs03FmhIAX2LJ4r3o/PLDyv 6IOaH6T2zyANLIzeNw4ouEGOlTZZQt36XhEcaJ5SpZ8ZhN4p+hw8qWOlr6mHUn9z zC/O7e4XCGM9ScUxjZnF0fG2n0ZbBgpPOsAvixduVoC1A1oaAMxviJ+y1uGjVHlK 8YmTEgtegc5lVMIhIpaIuV2YKzDu7/blppudWakzphBRCreZPYUo/WhpHfDCzQHH d2Z2SZW4QM8XIhRNd/ZG348x6+L6D2+diXWlo/BoagBOQ8PTBHSvogOsEj04lAZV qenuwAgX99k7SLdiF4E08H4uKJatZcPjIBH5PDV3bozKcYWcU/GbE5sgeuhzAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUhmYK3NaPfdNyf+8BsW8pyeZOOZswHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81YTdjOTU2Yy0yMmViLTRiYjgtYTMyNy1hZDk3MTYxMjk1YmMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjY2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzkzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW/QMA0GCSqGSIb3DQEBCwUAA4IBAQBw 1BSllx6+rV6EHw7ahl98HVeDRu77nNjwYWtwD4iIdXqiA3nuZmuUf8rjZZ4rAEsu HhtN6XXRWSZhZ7vhKJze5EnAJKlfMmSlRfgnVf9pYQFkxGETw2p+FqWg6hfqQo8r YM1X9giXqVFmshuTw+1Mo9uQ6c1xRaqOwmkgwwoQ4cQxWgTApePOHvwGc7hR0HO7 pkNqOfHBInkYvnT8UvFR1COxpJI5OV+UWQXcSc/nrnr4kDvnVP/B2e2LQLF7JmzS Iv1EuD6lNfSxaeleSlu+EcI73pU0uX/0FJ4IAjvYpNhmOsbeE2ASxBc49XB8fHTT TgpjtWyNGelJbH1zhLF7 -----END CERTIFICATE-----Generated at Tue Sep 9 16:58:11 2025 by rpki-client