$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa File: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (raw, json) Hash identifier: PjXxPcOFpDrt2/J2rK7/G4zujo+FjWZMvwQwdSAXtCs= Subject key identifier: 9A:BC:13:F4:D5:6E:ED:97:51:4B:82:76:93:73:46:B1:0C:62:03:EA Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 1F358477DBB229C93C7A2E0A4FC671F560DCA0EF Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa Signing time: Fri 04 Jul 2025 16:48:01 +0000 ROA not before: Fri 04 Jul 2025 16:43:01 +0000 ROA not after: Fri 03 Jul 2026 16:48:01 +0000 asID: 211066 IP address blocks: 2a06:1283:8c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:35:84:77:db:b2:29:c9:3c:7a:2e:0a:4f:c6:71:f5:60:dc:a0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:01 2025 GMT Not After : Jul 3 16:48:01 2026 GMT Subject: CN=9ABC13F4D56EED97514B8276937346B10C6203EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:03:57:29:ef:35:e9:aa:14:2e:90:f5:a3: 0e:63:b9:ed:42:c8:a6:5b:29:b3:19:3f:24:e7:c2: c4:a3:82:04:f0:2e:2c:9b:d1:4e:8d:7c:cd:f4:33: 93:20:47:a6:6e:94:19:44:7d:f4:8f:a2:fd:46:ab: 8b:00:88:7a:ee:26:01:58:42:7e:08:84:db:b3:55: 22:33:24:cb:5c:f4:7b:36:3e:58:e8:52:57:6f:94: ed:22:81:39:83:d1:a5:fa:27:a0:1f:0b:c5:03:a5: 9a:d4:41:a6:82:5a:58:d6:b3:e6:26:00:3e:20:b4: 25:06:c9:26:6c:ab:31:62:1f:df:8a:52:46:2a:e8: ff:50:71:a6:7e:4b:c6:0e:fe:36:ed:5d:7c:fd:a7: 76:f2:56:68:fc:48:52:c5:93:84:ee:37:f5:20:10: e9:dc:b0:fe:3b:08:26:73:b3:f2:f3:6e:c0:b0:b7: 54:84:e6:7c:c2:4e:05:29:47:06:bb:ed:47:63:e0: b2:47:59:87:08:86:46:d9:64:30:62:97:c1:8b:51: 90:1b:c5:e5:1f:80:1a:63:52:32:a7:08:f2:70:cc: 0a:04:65:87:45:e3:f5:23:57:0f:4f:50:9a:3f:44: 01:5c:a5:ce:62:08:d9:e6:4b:41:48:09:31:12:bc: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BC:13:F4:D5:6E:ED:97:51:4B:82:76:93:73:46:B1:0C:62:03:EA X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8c00::/40 Signature Algorithm: sha256WithRSAEncryption 32:f0:10:f4:85:ce:f2:79:24:45:34:4d:ac:db:df:6d:79:cd: aa:05:e0:98:5d:e5:a8:ae:14:5c:12:22:aa:21:dc:43:68:dd: 2e:a8:ab:96:59:a7:0c:09:da:cc:6b:8d:cc:40:a5:56:21:3c: f0:69:06:13:3f:6f:0a:8a:a5:8b:9b:71:e8:10:22:36:89:3d: ba:e3:a4:74:25:8c:4c:bc:6b:0c:c7:4e:f2:a7:d8:4a:e2:ef: e0:0b:80:5c:79:9f:42:da:19:7d:00:21:29:2e:ca:9b:66:a3: da:46:15:3d:06:6b:77:85:13:28:dc:9c:b6:a3:15:47:7c:19: 3c:ae:39:d5:ed:f3:b4:a9:70:3d:a1:d7:9f:0c:81:a2:f7:d5: 92:d2:fb:87:2e:f3:54:fa:8d:94:af:ea:4a:12:e6:58:50:2e: d2:81:17:5a:51:6c:de:b3:4d:df:69:71:b0:5e:70:5e:f8:f8: ce:55:4a:dc:a8:d9:04:61:5c:c7:76:2b:a2:2e:e7:2b:3e:f6: 85:db:2f:12:6d:f5:61:90:94:02:f0:ad:3d:89:c5:fe:10:94: 79:0d:b7:82:84:29:57:f4:ba:4c:9b:73:58:1f:0e:40:99:75: 2b:e4:b0:5e:a4:ea:e3:b9:72:80:c7:de:d6:77:86:a1:75:ba: f6:12:21:7b -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUHzWEd9uyKck8ei4KT8Zx9WDcoO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDFaFw0yNjA3MDMxNjQ4MDFaMDMxMTAvBgNV BAMTKDlBQkMxM0Y0RDU2RUVEOTc1MTRCODI3NjkzNzM0NkIxMEM2MjAzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMgNXKe816aoULpD1ow5jue1C yKZbKbMZPyTnwsSjggTwLiyb0U6NfM30M5MgR6ZulBlEffSPov1Gq4sAiHruJgFY Qn4IhNuzVSIzJMtc9Hs2PljoUldvlO0igTmD0aX6J6AfC8UDpZrUQaaCWljWs+Ym AD4gtCUGySZsqzFiH9+KUkYq6P9QcaZ+S8YO/jbtXXz9p3byVmj8SFLFk4TuN/Ug EOncsP47CCZzs/LzbsCwt1SE5nzCTgUpRwa77Udj4LJHWYcIhkbZZDBil8GLUZAb xeUfgBpjUjKnCPJwzAoEZYdF4/UjVw9PUJo/RAFcpc5iCNnmS0FICTESvFcxAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUmrwT9NVu7ZdRS4J2k3NGsQxiA+owHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjMzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTMxMzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYSg4wwDQYJKoZIhvcNAQELBQADggEBADLw EPSFzvJ5JEU0Tazb3215zaoF4Jhd5aiuFFwSIqoh3ENo3S6oq5ZZpwwJ2sxrjcxA pVYhPPBpBhM/bwqKpYubcegQIjaJPbrjpHQljEy8awzHTvKn2Eri7+ALgFx5n0La GX0AISkuyptmo9pGFT0Ga3eFEyjcnLajFUd8GTyuOdXt87SpcD2h158MgaL31ZLS +4cu81T6jZSv6koS5lhQLtKBF1pRbN6zTd9pcbBecF74+M5VStyo2QRhXMd2K6Iu 5ys+9oXbLxJt9WGQlALwrT2Jxf4QlHkNt4KEKVf0ukybc1gfDkCZdSvksF6k6uO5 coDH3tZ3hqF1uvYSIXs= -----END CERTIFICATE-----Generated at Sat Jul 5 15:37:46 2025 by rpki-client