$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa File: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (raw, json) Hash identifier: 0UwJEaqOuZNt12cGdgRNs6h5sg/UqNE4VWJ7LVXWQWc= Subject key identifier: 75:73:75:4F:0A:F6:6A:B4:43:1F:4B:6D:5A:6B:71:0B:F0:62:06:E2 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 3AD9D3658838ADD633CB5FADD516934B38960B39 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa Signing time: Fri 04 Jul 2025 16:48:01 +0000 ROA not before: Fri 04 Jul 2025 16:43:01 +0000 ROA not after: Fri 03 Jul 2026 16:48:01 +0000 asID: 211066 IP address blocks: 2a06:1283:8a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d9:d3:65:88:38:ad:d6:33:cb:5f:ad:d5:16:93:4b:38:96:0b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:01 2025 GMT Not After : Jul 3 16:48:01 2026 GMT Subject: CN=7573754F0AF66AB4431F4B6D5A6B710BF06206E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:df:e3:e5:7d:6f:29:e5:8b:cf:3d:b2:63: 6c:ab:22:27:2a:3c:f2:aa:70:99:a2:43:01:19:11: 51:fe:fc:7f:f9:a8:6c:d5:fb:10:ca:e4:1d:b1:09: 82:79:37:44:86:8c:65:c9:5a:6e:84:04:9d:5b:f5: a4:6d:7e:8f:8f:ad:65:9a:8a:9a:0c:18:bd:dd:f6: fb:32:be:d7:dc:79:a8:52:b7:41:07:81:15:ab:e4: 46:d7:18:e0:0a:be:02:de:43:57:65:02:f9:71:db: 07:e0:2d:71:0b:04:d2:dd:a4:db:20:3b:14:57:59: c7:1b:0e:4f:5f:28:1b:61:fc:d3:01:1e:61:18:c9: 8a:07:cc:89:de:c4:07:61:0e:76:16:fd:95:2a:1c: 13:09:89:d1:66:1f:2f:e9:32:83:cc:82:0d:b5:9b: 3d:2c:c1:24:e6:b3:71:30:fa:32:52:dd:4b:f0:c7: 70:88:44:af:60:d4:92:40:1f:a8:6c:9c:9a:53:73: 2e:19:17:78:2f:d0:dc:67:f1:dc:da:e2:cc:34:8f: 14:72:32:33:cf:5e:36:a0:68:ad:2c:18:c4:9a:82: 01:23:a8:b8:99:f6:c3:9f:2e:99:f9:e9:be:e0:27: de:7a:25:0c:26:63:73:fd:6f:f4:28:27:d9:34:60: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:73:75:4F:0A:F6:6A:B4:43:1F:4B:6D:5A:6B:71:0B:F0:62:06:E2 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8a00::/40 Signature Algorithm: sha256WithRSAEncryption 0b:01:62:6d:71:13:f5:f4:4a:e1:86:49:0f:ad:a0:18:84:88: 3b:ec:b1:a9:ef:bd:21:76:26:c2:85:c8:e5:ab:c7:fe:0f:45: f0:e7:57:41:f5:1a:91:7a:e0:07:4a:56:d6:08:01:9d:01:07: 7b:37:7c:d8:89:04:5c:60:82:45:84:37:b7:be:5c:aa:62:f5: a3:ad:c5:3d:c8:f4:c0:44:05:b8:83:c8:90:91:6d:12:80:41: db:a1:a6:01:a6:fd:f8:eb:e0:d3:86:f6:64:7b:bc:52:c2:41: da:93:e3:ac:f9:55:61:73:f7:23:0f:de:17:85:da:ef:9a:cf: 4c:eb:99:b7:b9:62:ea:ac:42:ab:ef:52:bc:ec:3d:8e:1c:8e: d9:8a:6b:48:c2:e7:88:11:08:06:be:56:73:31:a9:d7:eb:e2: b2:29:86:71:d9:24:3b:f9:90:c2:3d:5c:4d:dd:75:88:91:f9: 84:89:b4:16:06:51:3e:a2:fc:ef:a3:b5:36:4d:6b:5e:b0:e2: 1e:c2:bb:b9:0a:3e:2a:db:75:f9:5d:14:2b:81:c8:9a:b5:7b: d5:32:09:72:de:5c:04:f6:f4:9e:70:1c:7b:90:cc:06:23:d1: ad:bc:d0:26:27:00:09:23:d9:5f:eb:ae:a0:bc:a8:f6:bb:af: f0:56:60:44 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUOtnTZYg4rdYzy1+t1RaTSziWCzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDFaFw0yNjA3MDMxNjQ4MDFaMDMxMTAvBgNV BAMTKDc1NzM3NTRGMEFGNjZBQjQ0MzFGNEI2RDVBNkI3MTBCRjA2MjA2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMX9/j5X1vKeWLzz2yY2yrIicq PPKqcJmiQwEZEVH+/H/5qGzV+xDK5B2xCYJ5N0SGjGXJWm6EBJ1b9aRtfo+PrWWa ipoMGL3d9vsyvtfceahSt0EHgRWr5EbXGOAKvgLeQ1dlAvlx2wfgLXELBNLdpNsg OxRXWccbDk9fKBth/NMBHmEYyYoHzInexAdhDnYW/ZUqHBMJidFmHy/pMoPMgg21 mz0swSTms3Ew+jJS3Uvwx3CIRK9g1JJAH6hsnJpTcy4ZF3gv0Nxn8dza4sw0jxRy MjPPXjagaK0sGMSaggEjqLiZ9sOfLpn56b7gJ956JQwmY3P9b/QoJ9k0YIZVAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUdXN1Twr2arRDH0ttWmtxC/BiBuIwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjEzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTMxMzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYSg4owDQYJKoZIhvcNAQELBQADggEBAAsB Ym1xE/X0SuGGSQ+toBiEiDvssanvvSF2JsKFyOWrx/4PRfDnV0H1GpF64AdKVtYI AZ0BB3s3fNiJBFxggkWEN7e+XKpi9aOtxT3I9MBEBbiDyJCRbRKAQduhpgGm/fjr 4NOG9mR7vFLCQdqT46z5VWFz9yMP3heF2u+az0zrmbe5YuqsQqvvUrzsPY4cjtmK a0jC54gRCAa+VnMxqdfr4rIphnHZJDv5kMI9XE3ddYiR+YSJtBYGUT6i/O+jtTZN a16w4h7Cu7kKPirbdfldFCuByJq1e9UyCXLeXAT29J5wHHuQzAYj0a280CYnAAkj 2V/rrqC8qPa7r/BWYEQ= -----END CERTIFICATE-----Generated at Sat Jul 5 15:45:21 2025 by rpki-client