$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa File: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (raw, json) Hash identifier: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM= Subject key identifier: 89:C6:28:F1:0E:17:31:DD:2E:65:1B:4A:34:1A:DC:40:C5:11:E8:B4 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 424B81B6BE9CFC12AC317124AB4797561B5F337F Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa Signing time: Fri 04 Jul 2025 16:48:02 +0000 ROA not before: Fri 04 Jul 2025 16:43:02 +0000 ROA not after: Fri 03 Jul 2026 16:48:02 +0000 asID: 215147 IP address blocks: 2a06:1283:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4b:81:b6:be:9c:fc:12:ac:31:71:24:ab:47:97:56:1b:5f:33:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:02 2025 GMT Not After : Jul 3 16:48:02 2026 GMT Subject: CN=89C628F10E1731DD2E651B4A341ADC40C511E8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:81:1f:e9:ae:9a:b4:d8:c1:3c:af:76:b0: 1e:d5:ba:2e:f8:19:c1:65:07:b5:71:b5:31:1c:ad: 54:22:3d:93:06:df:28:47:f6:17:2b:c1:5d:d1:de: 3c:61:06:d2:17:9d:44:0e:e2:ef:8e:7d:0f:a0:8f: 3d:78:c6:2f:6d:86:a2:44:68:d6:7d:bd:79:61:e2: bf:e5:8a:22:8c:ba:02:bf:cd:97:8f:ad:c0:f3:9c: ba:1d:2e:d3:dd:0d:45:3b:fd:9f:90:21:a2:08:39: 8d:eb:60:ed:c6:6c:0d:bd:af:4d:34:5c:72:f6:fe: 8b:c0:8c:2d:36:b2:e6:e1:5c:1f:ff:37:82:2d:88: 6b:ca:42:90:e8:ce:a4:78:d4:b8:c3:f4:28:62:bb: 38:2b:18:f9:32:85:a2:08:f8:fe:06:67:45:14:7c: 2a:79:cc:e7:68:83:99:2a:c7:e0:f3:6e:b2:36:73: b5:67:b0:6b:53:9d:ae:98:49:74:4f:4e:e1:aa:cd: e2:7a:e5:03:c9:06:7c:f7:13:ae:d8:52:6c:24:23: b6:36:80:b1:c6:49:8b:53:ba:91:ea:04:4d:be:b9: 33:3f:c3:e2:b4:d2:83:e0:ca:3c:19:03:12:55:98: 7f:b2:3c:74:53:64:8b:f6:93:1c:1f:b5:9a:ba:23: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C6:28:F1:0E:17:31:DD:2E:65:1B:4A:34:1A:DC:40:C5:11:E8:B4 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8000::/36 Signature Algorithm: sha256WithRSAEncryption 40:e1:19:b9:92:3e:3d:17:99:ac:64:e4:12:8f:cd:b6:e5:29: 5c:a7:4e:ea:e8:e2:0d:e0:7d:8a:57:c9:c9:0e:40:be:5b:90: 22:65:a7:ff:2f:54:97:c5:77:67:a8:f4:cd:2a:98:ba:8b:73: 43:41:e0:44:25:f7:6f:b6:81:9a:52:62:d3:ff:d0:93:8d:aa: df:b0:1d:9f:a1:f6:7c:81:4b:ca:cd:f1:10:ba:d9:d0:04:c4: a3:72:36:b0:c1:08:d7:cd:7d:35:c2:30:08:de:bc:3b:52:e7: ab:5a:73:d2:81:ef:2d:61:aa:69:cf:f7:db:4c:10:4e:25:b8: a8:e3:43:ca:3f:3a:8f:9a:68:ef:5e:c5:2b:05:c2:c9:f4:ac: 2d:7a:92:f9:35:91:75:95:81:dc:87:5d:16:e6:9a:85:fc:05: db:e9:aa:c7:60:c2:ff:3c:88:04:0e:c3:49:03:44:0e:35:67: cc:ff:65:63:c3:cd:df:10:9e:e0:0b:f3:8f:81:a9:8f:ed:bf: 60:e0:af:0c:1e:45:5c:46:39:5b:c1:36:09:bc:f2:5b:9e:7c: 41:7b:86:e1:a6:3a:23:16:00:ff:71:d4:4d:b8:21:1f:0d:82: 7d:41:ec:30:8b:d8:d1:67:21:65:c9:c5:4f:e5:13:b0:15:66: cb:5e:a9:8c -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUQkuBtr6c/BKsMXEkq0eXVhtfM38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDJaFw0yNjA3MDMxNjQ4MDJaMDMxMTAvBgNV BAMTKDg5QzYyOEYxMEUxNzMxREQyRTY1MUI0QTM0MUFEQzQwQzUxMUU4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHoEf6a6atNjBPK92sB7Vui74 GcFlB7VxtTEcrVQiPZMG3yhH9hcrwV3R3jxhBtIXnUQO4u+OfQ+gjz14xi9thqJE aNZ9vXlh4r/liiKMugK/zZePrcDznLodLtPdDUU7/Z+QIaIIOY3rYO3GbA29r000 XHL2/ovAjC02subhXB//N4ItiGvKQpDozqR41LjD9ChiuzgrGPkyhaII+P4GZ0UU fCp5zOdog5kqx+DzbrI2c7VnsGtTna6YSXRPTuGqzeJ65QPJBnz3E67YUmwkI7Y2 gLHGSYtTupHqBE2+uTM/w+K00oPgyjwZAxJVmH+yPHRTZIv2kxwftZq6I4oJAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUicYo8Q4XMd0uZRtKNBrcQMUR6LQwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKgYSg4AwDQYJKoZIhvcNAQELBQADggEBAEDh GbmSPj0Xmaxk5BKPzbblKVynTuro4g3gfYpXyckOQL5bkCJlp/8vVJfFd2eo9M0q mLqLc0NB4EQl92+2gZpSYtP/0JONqt+wHZ+h9nyBS8rN8RC62dAExKNyNrDBCNfN fTXCMAjevDtS56tac9KB7y1hqmnP99tMEE4luKjjQ8o/Oo+aaO9exSsFwsn0rC16 kvk1kXWVgdyHXRbmmoX8Bdvpqsdgwv88iAQOw0kDRA41Z8z/ZWPDzd8QnuAL84+B qY/tv2DgrwweRVxGOVvBNgm88luefEF7huGmOiMWAP9x1E24IR8Ngn1B7DCL2NFn IWXJxU/lE7AVZsteqYw= -----END CERTIFICATE-----Generated at Sat Jul 5 15:42:16 2025 by rpki-client