$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa File: 326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa (raw, json) Hash identifier: h1a1cZj7VSGbOfHrD9FwYA93/4cSGskJlxFeFxQgJB0= Subject key identifier: 70:24:76:7C:01:54:03:2D:AC:40:6E:C0:81:25:A7:3E:CB:34:60:0C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 173056665F8A620FDA965A3C792F66FA2535ADCB Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa Signing time: Fri 04 Jul 2025 16:48:01 +0000 ROA not before: Fri 04 Jul 2025 16:43:01 +0000 ROA not after: Fri 03 Jul 2026 16:48:01 +0000 asID: 216296 IP address blocks: 2a06:1283:8b04::/48 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:30:56:66:5f:8a:62:0f:da:96:5a:3c:79:2f:66:fa:25:35:ad:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:01 2025 GMT Not After : Jul 3 16:48:01 2026 GMT Subject: CN=7024767C0154032DAC406EC08125A73ECB34600C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:ea:71:52:ba:60:99:84:66:ae:a3:b9:97: e6:66:22:8d:f2:fa:da:0a:1c:78:08:3b:73:1e:b7: c6:44:9b:ed:fe:b2:c5:f0:75:dc:07:b4:27:a8:e3: 4d:d4:84:40:ae:d6:4f:2f:3d:7b:17:3a:75:7e:2f: d9:94:10:ed:32:f9:44:b4:f8:15:0d:af:ac:30:49: 84:94:eb:a0:76:8f:44:fe:cb:a6:a5:4f:ad:ab:5d: 22:1b:1a:62:e0:ba:08:9c:08:0c:3e:06:c2:df:a1: c8:f1:57:e1:0b:e5:1d:92:6b:c7:c9:6f:81:45:67: fd:22:cc:c8:61:be:93:b4:fa:2c:a6:f4:4b:a6:97: 8d:52:12:d4:cc:da:95:77:8f:15:8b:3d:3d:38:a1: 89:39:52:e6:da:18:34:12:d0:06:24:a9:aa:95:85: 4d:da:9d:c0:a4:11:66:a0:05:37:c6:15:9d:b6:dd: b1:0d:b6:b5:10:a4:6e:ae:9c:63:7d:d6:24:07:4a: 8d:4a:f7:97:5a:85:c6:e9:39:fe:18:3b:26:3c:d2: bd:0f:af:74:fe:fa:8e:b1:13:ef:96:91:e7:d5:7c: d0:bb:b6:11:c6:7d:3d:b6:f4:72:cd:eb:81:70:37: 8e:e9:c3:7c:ba:6e:e8:46:a7:e5:f5:34:36:43:8c: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:24:76:7C:01:54:03:2D:AC:40:6E:C0:81:25:A7:3E:CB:34:60:0C X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8b04::/48 Signature Algorithm: sha256WithRSAEncryption 22:b9:81:61:9b:54:60:cb:6d:53:3e:3a:7c:09:69:a7:0c:d6: 72:85:f5:aa:d8:28:78:d2:5a:87:20:82:b2:65:bc:bd:0d:70: 96:1a:7c:a6:ca:aa:a7:4b:a4:df:e9:b8:a4:83:7e:b9:2f:b8: ff:d0:da:5b:fe:db:f3:81:4f:0d:48:7b:ef:d6:bb:8c:93:1b: d1:c2:70:7a:c4:48:a9:b4:e7:93:e1:2d:84:1c:8a:c8:87:ad: a1:7f:2c:2c:29:5e:8e:61:b7:d2:05:41:cf:fa:5f:d7:6c:25: de:a3:49:8f:05:72:99:fb:c2:e9:ab:16:de:2b:41:fc:23:26: 40:39:4a:fb:05:54:8c:0a:99:c9:68:19:90:00:23:16:6a:40: 96:f4:47:e0:61:be:60:3c:44:1a:6e:c1:8a:f8:d8:99:69:07: ce:3f:8d:b0:54:06:a1:eb:38:78:98:b5:f8:89:bb:b8:ec:9e: 8e:6d:31:02:83:65:13:d4:8b:7b:90:2a:60:35:74:f0:ce:c4: 2e:11:ce:8b:ca:63:0f:fb:0b:87:64:96:4c:2d:32:93:cb:a4: a8:89:03:f2:23:2f:b0:9c:5d:4f:39:fd:dd:84:6c:f8:07:9d: b2:f8:c8:9a:59:95:1e:e6:a4:80:c0:db:df:ec:9d:5f:2b:79: 21:fe:d3:cd -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUFzBWZl+KYg/allo8eS9m+iU1rcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDFaFw0yNjA3MDMxNjQ4MDFaMDMxMTAvBgNV BAMTKDcwMjQ3NjdDMDE1NDAzMkRBQzQwNkVDMDgxMjVBNzNFQ0IzNDYwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6upxUrpgmYRmrqO5l+ZmIo3y +toKHHgIO3Met8ZEm+3+ssXwddwHtCeo403UhECu1k8vPXsXOnV+L9mUEO0y+US0 +BUNr6wwSYSU66B2j0T+y6alT62rXSIbGmLgugicCAw+BsLfocjxV+EL5R2Sa8fJ b4FFZ/0izMhhvpO0+iym9Euml41SEtTM2pV3jxWLPT04oYk5UubaGDQS0AYkqaqV hU3ancCkEWagBTfGFZ223bENtrUQpG6unGN91iQHSo1K95dahcbpOf4YOyY80r0P r3T++o6xE++WkefVfNC7thHGfT229HLN64FwN47pw3y6buhGp+X1NDZDjGqXAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUcCR2fAFUAy2sQG7AgSWnPss0YAwwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjIzMDM0M2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAz MjMxMzYzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBhKDiwQwDQYJKoZIhvcNAQELBQADggEB ACK5gWGbVGDLbVM+OnwJaacM1nKF9arYKHjSWocggrJlvL0NcJYafKbKqqdLpN/p uKSDfrkvuP/Q2lv+2/OBTw1Ie+/Wu4yTG9HCcHrESKm055PhLYQcisiHraF/LCwp Xo5ht9IFQc/6X9dsJd6jSY8Fcpn7wumrFt4rQfwjJkA5SvsFVIwKmcloGZAAIxZq QJb0R+BhvmA8RBpuwYr42JlpB84/jbBUBqHrOHiYtfiJu7jsno5tMQKDZRPUi3uQ KmA1dPDOxC4RzovKYw/7C4dklkwtMpPLpKiJA/IjL7CcXU85/d2EbPgHnbL4yJpZ lR7mpIDA29/snV8reSH+080= -----END CERTIFICATE-----Generated at Sat Jul 5 15:46:49 2025 by rpki-client