$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa File: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (raw, json) Hash identifier: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo= Subject key identifier: 38:CD:CB:BE:E9:E7:26:BF:AE:91:F5:DC:6B:1B:B8:CD:12:7A:78:4F Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 2A052887FA570CECD891F0DEEA15BEAAD3C3DFCD Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa Signing time: Fri 05 Sep 2025 03:06:43 +0000 ROA not before: Fri 05 Sep 2025 03:01:43 +0000 ROA not after: Fri 04 Sep 2026 03:06:43 +0000 asID: 214841 IP address blocks: 2a14:7581:6fe0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 15:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:28:87:fa:57:0c:ec:d8:91:f0:de:ea:15:be:aa:d3:c3:df:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Sep 5 03:01:43 2025 GMT Not After : Sep 4 03:06:43 2026 GMT Subject: CN=38CDCBBEE9E726BFAE91F5DC6B1BB8CD127A784F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:55:3f:37:f9:4a:b7:a2:cc:f5:fd:06:53: 48:86:ff:be:89:81:e7:6e:e2:70:2a:8c:53:01:73: bb:9a:a7:ba:8e:8d:0b:41:0d:c4:f0:49:8d:ec:c3: b6:64:c3:11:9b:2b:2e:d4:ae:14:74:d0:e0:a3:35: e6:a0:36:b1:54:87:ef:f1:df:ca:d1:64:af:ab:af: b9:98:93:16:6c:9e:f1:97:90:8e:3a:f4:a9:0b:a2: 13:de:56:b4:02:fc:fc:8d:9f:23:56:f9:46:4b:67: b0:11:3e:7a:ea:88:f0:f6:cc:05:6e:6a:60:8e:9b: a9:26:a1:82:c1:9f:d2:85:fe:71:37:d0:64:47:1d: 9b:ba:25:82:92:d3:62:7d:3b:86:e3:78:94:04:82: 09:7f:87:5e:f9:07:4d:7e:a7:5a:bd:c4:07:81:47: 02:fb:8d:4e:98:d6:23:8c:c2:80:3c:78:7b:86:f2: ba:15:2f:65:24:7b:21:a6:cc:ec:2a:99:d8:8f:55: c8:90:72:a9:4b:32:53:9d:8e:cf:05:31:1f:3f:42: 41:32:4c:ab:9d:cf:f0:e7:b7:9c:ff:cb:ee:65:de: 7e:f2:6a:b1:9f:9c:7a:c1:c1:53:79:ab:92:4e:e2: 27:23:77:65:63:f9:82:0f:79:84:68:9e:e9:bd:52: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:CB:BE:E9:E7:26:BF:AE:91:F5:DC:6B:1B:B8:CD:12:7A:78:4F X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6fe0::/44 Signature Algorithm: sha256WithRSAEncryption 89:8a:ce:24:f3:b0:ad:66:00:1c:eb:10:a6:57:68:ee:f9:22: 83:9d:ee:f8:f0:cd:94:26:fd:14:55:7e:04:55:70:ec:4f:d3: fe:64:ae:83:bb:26:bb:a7:a2:aa:e0:23:02:91:18:ec:a2:0b: b4:62:83:f6:10:4f:18:d4:27:c4:5f:bf:ef:5d:33:ab:b2:e7: 1b:a0:12:8e:d8:d3:ab:1a:b6:70:99:f8:20:11:84:66:b9:e7: 4d:4f:b3:bf:24:46:1a:c0:58:35:02:fa:81:b7:39:f0:81:6f: 68:d5:65:93:82:fd:4d:f2:19:c2:79:cb:a3:36:76:50:b3:fa: b6:b9:89:e5:9e:04:ff:9c:0c:8c:5b:2e:db:ea:53:ce:a4:10: 53:f7:35:c4:6c:12:81:44:13:5f:b2:47:cc:a9:ea:66:51:12: 35:c2:af:10:4d:d4:26:85:7e:a0:91:9d:c8:d9:36:18:86:33: 7f:b6:d7:1a:df:7d:1a:24:07:3d:47:f2:ff:9b:7d:b8:49:2e: 5b:9c:60:56:3c:fe:24:58:c2:d3:20:d6:29:a4:49:9b:c0:49: 44:d1:7e:52:61:56:24:f5:35:17:ff:57:80:42:a8:8e:a1:aa: 8b:1d:25:c5:24:15:e2:56:8a:72:83:d5:fb:19:5f:ee:0b:93: f1:a1:76:db -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUKgUoh/pXDOzYkfDe6hW+qtPD380wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTA5MDUwMzAxNDNaFw0yNjA5MDQwMzA2NDNaMDMxMTAvBgNV BAMTKDM4Q0RDQkJFRTlFNzI2QkZBRTkxRjVEQzZCMUJCOENEMTI3QTc4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgFU/N/lKt6LM9f0GU0iG/76J gedu4nAqjFMBc7uap7qOjQtBDcTwSY3sw7ZkwxGbKy7UrhR00OCjNeagNrFUh+/x 38rRZK+rr7mYkxZsnvGXkI469KkLohPeVrQC/PyNnyNW+UZLZ7ARPnrqiPD2zAVu amCOm6kmoYLBn9KF/nE30GRHHZu6JYKS02J9O4bjeJQEggl/h175B01+p1q9xAeB RwL7jU6Y1iOMwoA8eHuG8roVL2UkeyGmzOwqmdiPVciQcqlLMlOdjs8FMR8/QkEy TKudz/Dnt5z/y+5l3n7yarGfnHrBwVN5q5JO4icjd2Vj+YIPeYRonum9Uqd/AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUOM3LvunnJr+ukfXcaxu4zRJ6eE8wHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS81YTdjOTU2Yy0yMmViLTRiYjgtYTMyNy1hZDk3MTYxMjk1YmMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjY2NTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gW/gMA0GCSqGSIb3DQEBCwUAA4IBAQCJ is4k87CtZgAc6xCmV2ju+SKDne748M2UJv0UVX4EVXDsT9P+ZK6Duya7p6Kq4CMC kRjsogu0YoP2EE8Y1CfEX7/vXTOrsucboBKO2NOrGrZwmfggEYRmuedNT7O/JEYa wFg1AvqBtznwgW9o1WWTgv1N8hnCecujNnZQs/q2uYnlngT/nAyMWy7b6lPOpBBT 9zXEbBKBRBNfskfMqepmURI1wq8QTdQmhX6gkZ3I2TYYhjN/ttca330aJAc9R/L/ m324SS5bnGBWPP4kWMLTINYppEmbwElE0X5SYVYk9TUX/1eAQqiOoaqLHSXFJBXi Vopyg9X7GV/uC5PxoXbb -----END CERTIFICATE-----Generated at Tue Sep 9 05:45:20 2025 by rpki-client