$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa File: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (raw, json) Hash identifier: E/viu9vBcRpgXLkYydv4L1bSWYconnC9RhF31aVMM/0= Subject key identifier: D3:E9:00:60:84:AF:F7:20:63:EF:0A:5D:BA:53:23:BE:17:CE:A5:52 Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 093F1C4083BECC1C37B98B9DE33364B4F9791675 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa Signing time: Fri 04 Jul 2025 16:48:01 +0000 ROA not before: Fri 04 Jul 2025 16:43:01 +0000 ROA not after: Fri 03 Jul 2026 16:48:01 +0000 asID: 211066 IP address blocks: 2a06:1283:8b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3f:1c:40:83:be:cc:1c:37:b9:8b:9d:e3:33:64:b4:f9:79:16:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:01 2025 GMT Not After : Jul 3 16:48:01 2026 GMT Subject: CN=D3E9006084AFF72063EF0A5DBA5323BE17CEA552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:e7:e5:b0:81:f9:c6:a4:0d:ba:1f:26:44: 6a:57:0a:8c:9b:9f:b3:ce:50:11:5f:2e:84:88:d7: ac:88:3c:3c:1c:63:0a:af:41:1c:78:8c:9d:ad:56: bf:54:be:ec:f6:36:e8:8e:8a:70:b5:42:db:5f:70: 19:ae:9f:dc:36:93:06:ee:ac:e2:a6:49:3c:26:fc: 63:e1:0a:8e:d0:50:d7:51:fd:70:2b:f4:52:73:4c: b5:e5:9f:e7:6b:70:6b:c0:3c:20:c7:33:90:af:cf: 13:80:0a:6e:28:c8:d4:a8:3a:26:fa:8d:d4:4e:0f: f0:87:e9:52:e1:79:f3:77:75:23:98:d5:40:fa:02: 82:85:f3:bb:01:fe:79:99:f7:24:35:b5:47:fb:64: f2:73:e3:10:c5:1c:c2:93:65:30:19:26:7c:c3:98: 1a:dc:04:f3:18:ae:09:ab:df:25:02:8f:ca:86:10: 0c:6a:39:b3:37:3a:47:5c:87:77:3a:84:e9:68:f6: a7:af:f4:0f:40:f4:80:86:0d:78:b6:a8:22:30:83: b7:a6:d3:05:91:ed:e9:4b:13:31:64:a6:15:3e:b7: 74:a4:8c:2f:8f:78:9d:fd:61:f1:e5:9e:e7:5b:65: 66:4f:83:d0:16:70:91:bb:e4:0e:6a:51:4f:3a:66: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E9:00:60:84:AF:F7:20:63:EF:0A:5D:BA:53:23:BE:17:CE:A5:52 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b00::/40 Signature Algorithm: sha256WithRSAEncryption b6:7c:4f:83:e4:ae:d1:e1:02:83:0b:b9:f3:e9:39:e2:f1:ea: 35:83:88:93:31:09:67:56:a5:96:2a:d1:b4:b5:4b:88:1a:ce: f0:54:f5:92:aa:6a:b3:13:56:1f:8e:86:c3:91:d9:f0:31:84: 6c:1d:be:59:a5:53:c0:7e:f0:9f:bb:60:31:3b:91:9b:08:07: 23:04:9a:ca:b2:09:15:95:bc:87:5d:a4:54:0e:4a:2e:0a:4e: fd:b6:92:c0:fd:09:ce:ac:f9:29:1b:40:ff:46:42:e5:19:64: 47:49:fb:e7:e0:49:e1:31:ae:15:03:c5:c7:d3:2c:4e:9a:6e: 00:c2:93:a2:8b:bf:2e:2c:b9:5f:36:13:c5:6d:13:79:e0:f8: ca:db:f6:c3:eb:2b:92:ea:36:72:ce:07:5e:a8:9f:e3:93:fd: 97:d6:bc:9c:9b:5c:7f:b5:5c:8e:25:cf:2a:78:ec:81:2a:96: ac:1e:86:6b:5e:0c:fb:d5:9a:d0:10:ee:34:77:0a:86:28:61: 25:28:ea:88:cf:23:01:31:0d:c6:08:35:1d:b9:f5:56:70:7d: 38:04:ad:f9:9a:e2:fb:4a:b4:4e:23:c4:4a:18:28:a9:2a:7b: 6d:2b:3e:53:b6:c8:ef:1a:3c:3e:00:f9:02:9b:bf:aa:40:fb: be:22:08:89 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUCT8cQIO+zBw3uYud4zNktPl5FnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDFaFw0yNjA3MDMxNjQ4MDFaMDMxMTAvBgNV BAMTKEQzRTkwMDYwODRBRkY3MjA2M0VGMEE1REJBNTMyM0JFMTdDRUE1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNyOflsIH5xqQNuh8mRGpXCoyb n7POUBFfLoSI16yIPDwcYwqvQRx4jJ2tVr9Uvuz2NuiOinC1QttfcBmun9w2kwbu rOKmSTwm/GPhCo7QUNdR/XAr9FJzTLXln+drcGvAPCDHM5CvzxOACm4oyNSoOib6 jdROD/CH6VLhefN3dSOY1UD6AoKF87sB/nmZ9yQ1tUf7ZPJz4xDFHMKTZTAZJnzD mBrcBPMYrgmr3yUCj8qGEAxqObM3Okdch3c6hOlo9qev9A9A9ICGDXi2qCIwg7em 0wWR7elLEzFkphU+t3SkjC+PeJ39YfHlnudbZWZPg9AWcJG75A5qUU86Zo33AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU0+kAYISv9yBj7wpdulMjvhfOpVIwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTMxMzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYSg4swDQYJKoZIhvcNAQELBQADggEBALZ8 T4PkrtHhAoMLufPpOeLx6jWDiJMxCWdWpZYq0bS1S4gazvBU9ZKqarMTVh+OhsOR 2fAxhGwdvlmlU8B+8J+7YDE7kZsIByMEmsqyCRWVvIddpFQOSi4KTv22ksD9Cc6s +SkbQP9GQuUZZEdJ++fgSeExrhUDxcfTLE6abgDCk6KLvy4suV82E8VtE3ng+Mrb 9sPrK5LqNnLOB16on+OT/ZfWvJybXH+1XI4lzyp47IEqlqwehmteDPvVmtAQ7jR3 CoYoYSUo6ojPIwExDcYINR259VZwfTgErfma4vtKtE4jxEoYKKkqe20rPlO2yO8a PD4A+QKbv6pA+74iCIk= -----END CERTIFICATE-----Generated at Sat Jul 5 15:46:07 2025 by rpki-client