$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa File: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (raw, json) Hash identifier: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY= Subject key identifier: 02:7E:87:13:57:38:7D:87:23:A2:E7:6D:A5:3D:E6:77:C6:D7:65:2A Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 0D9F7B9778DF8F90F0EAFB624838CA7AB7594B9C Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa Signing time: Fri 04 Jul 2025 16:48:01 +0000 ROA not before: Fri 04 Jul 2025 16:43:01 +0000 ROA not after: Fri 03 Jul 2026 16:48:01 +0000 asID: 215147 IP address blocks: 2a06:1283:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9f:7b:97:78:df:8f:90:f0:ea:fb:62:48:38:ca:7a:b7:59:4b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:01 2025 GMT Not After : Jul 3 16:48:01 2026 GMT Subject: CN=027E871357387D8723A2E76DA53DE677C6D7652A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:ec:1c:ac:37:b1:dc:c4:66:c7:e5:75:08: f6:0f:a6:c2:6e:7f:80:05:7d:66:cc:30:90:67:70: 0d:e0:7a:ed:c4:b1:c2:74:db:0d:e5:5e:44:aa:3d: eb:ea:d0:69:1e:37:4f:84:fb:d7:27:93:49:0d:d6: 0c:81:3c:5e:4d:01:e9:85:3c:ba:67:7a:dd:54:30: f2:ca:f8:92:d5:18:6c:37:08:6e:d7:fa:ed:b0:c8: 6f:8f:5c:a1:28:85:62:4e:ab:c9:bd:e7:d4:ea:74: 95:1a:22:84:e2:86:4a:23:89:46:b7:a0:e9:92:a3: 04:cf:68:e6:50:1f:ac:d8:2d:81:2f:18:47:2c:13: b5:a3:1d:bf:40:9d:19:51:02:73:da:3d:c9:29:ce: 07:43:a7:68:dd:31:b3:6a:02:b7:7a:09:9b:64:be: 4f:1a:c0:5f:12:91:24:bf:a5:eb:df:ce:6d:4f:9a: d3:a4:d0:21:c5:6d:2c:4a:ab:7b:1a:39:90:89:2a: 16:5b:31:d0:49:14:b4:f7:2a:c3:b7:f4:0a:46:69: c4:60:7a:c9:62:63:fb:c9:fd:ae:23:aa:59:ba:81: 0f:19:ce:c5:dd:8c:7e:e7:bc:f4:fa:99:40:a9:95: f4:03:02:3c:27:ef:9a:3d:48:64:6d:4d:95:c2:df: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7E:87:13:57:38:7D:87:23:A2:E7:6D:A5:3D:E6:77:C6:D7:65:2A X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8002::/48 Signature Algorithm: sha256WithRSAEncryption 6a:9a:a0:60:40:a0:be:f8:20:f5:01:b0:27:57:24:07:df:a8: d6:0f:0b:61:b2:04:41:a7:2c:20:27:77:f7:44:c6:d4:86:e3: d1:42:6c:4d:07:6a:20:05:0a:a9:0b:12:6e:13:c2:7d:44:42: 74:02:de:27:3a:0e:46:f7:4f:a2:58:95:40:da:87:f6:be:83: 6c:80:0c:b8:cd:98:8d:3a:ca:cc:95:3e:7b:60:22:34:06:2d: 19:1e:fb:f5:98:c4:5b:af:85:44:14:d4:32:17:1a:a7:15:1f: 00:bf:a1:8e:f5:59:4b:c4:b4:ce:ee:24:6b:3d:4c:c3:2d:39: 2e:33:f9:09:7f:38:07:b7:af:c9:e8:66:07:df:c3:fe:92:c7: 21:4b:51:ac:59:11:8a:42:ef:e9:13:dd:c5:7f:90:af:78:c9: 41:a2:e3:94:f8:8b:c2:1e:83:25:4a:8c:aa:fd:10:9e:4e:a9: 99:d0:47:00:22:c3:4f:d6:cf:79:b5:73:02:e3:cf:3a:0f:4c: eb:96:3a:9b:4d:22:0a:e8:3f:71:b2:7e:b8:e3:2e:a4:dc:cd: 6a:da:26:7b:fb:37:d4:78:2a:22:09:bf:cf:7e:17:4b:77:7f: cf:b5:38:e7:d5:6c:d8:0f:1a:b5:d9:74:5b:f6:51:7f:fa:4e: c5:fa:87:8f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDZ97l3jfj5Dw6vtiSDjKerdZS5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDFaFw0yNjA3MDMxNjQ4MDFaMDMxMTAvBgNV BAMTKDAyN0U4NzEzNTczODdEODcyM0EyRTc2REE1M0RFNjc3QzZENzY1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMewcrDex3MRmx+V1CPYPpsJu f4AFfWbMMJBncA3geu3EscJ02w3lXkSqPevq0GkeN0+E+9cnk0kN1gyBPF5NAemF PLpnet1UMPLK+JLVGGw3CG7X+u2wyG+PXKEohWJOq8m959TqdJUaIoTihkojiUa3 oOmSowTPaOZQH6zYLYEvGEcsE7WjHb9AnRlRAnPaPckpzgdDp2jdMbNqArd6CZtk vk8awF8SkSS/pevfzm1PmtOk0CHFbSxKq3saOZCJKhZbMdBJFLT3KsO39ApGacRg esliY/vJ/a4jqlm6gQ8ZzsXdjH7nvPT6mUCplfQDAjwn75o9SGRtTZXC39S9AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUAn6HE1c4fYcjoudtpT3md8bXZSowHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4MzAzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4ACMA0GCSqGSIb3DQEBCwUAA4IBAQBq mqBgQKC++CD1AbAnVyQH36jWDwthsgRBpywgJ3f3RMbUhuPRQmxNB2ogBQqpCxJu E8J9REJ0At4nOg5G90+iWJVA2of2voNsgAy4zZiNOsrMlT57YCI0Bi0ZHvv1mMRb r4VEFNQyFxqnFR8Av6GO9VlLxLTO7iRrPUzDLTkuM/kJfzgHt6/J6GYH38P+ksch S1GsWRGKQu/pE93Ff5CveMlBouOU+IvCHoMlSoyq/RCeTqmZ0EcAIsNP1s95tXMC 4886D0zrljqbTSIK6D9xsn644y6k3M1q2iZ7+zfUeCoiCb/PfhdLd3/PtTjn1WzY Dxq12XRb9lF/+k7F+oeP -----END CERTIFICATE-----Generated at Sat Jul 5 15:44:33 2025 by rpki-client