$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa File: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (raw, json) Hash identifier: fhZLtEdAcpVe5ZEFnO5ghX4tvoay2QbvYeWWfzdmNM4= Subject key identifier: 35:8D:AA:38:48:5D:82:7E:48:5E:FB:97:D3:49:86:54:30:E1:96:ED Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 41DCE02B013DA3948AE92F9329F391B731E3370F Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa Signing time: Fri 04 Jul 2025 16:48:02 +0000 ROA not before: Fri 04 Jul 2025 16:43:02 +0000 ROA not after: Fri 03 Jul 2026 16:48:02 +0000 asID: 211066 IP address blocks: 2a06:1283:8d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dc:e0:2b:01:3d:a3:94:8a:e9:2f:93:29:f3:91:b7:31:e3:37:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 4 16:43:02 2025 GMT Not After : Jul 3 16:48:02 2026 GMT Subject: CN=358DAA38485D827E485EFB97D349865430E196ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:5b:88:c4:85:0c:71:fa:4d:06:d2:c9:31: ea:13:af:27:13:64:95:43:e0:75:a0:42:44:48:e1: 10:65:13:21:31:7a:d5:d1:a3:0c:22:23:1b:0e:66: c0:4f:96:05:94:e3:24:d1:6d:02:cb:a0:f7:b7:d3: 7c:41:1e:ea:ed:41:96:f1:ea:dd:ae:ea:fe:03:8b: fc:b0:ce:74:13:50:5f:f9:65:af:5d:79:a9:de:c0: 82:4b:41:f8:3f:ec:c1:4a:89:2c:b6:73:31:b1:f5: a0:e3:1f:99:3f:28:9a:ac:6b:6d:c4:72:d2:6b:d4: 4e:53:b3:f0:21:25:04:5d:c0:d8:d3:72:46:a5:2a: 1e:49:39:a7:fb:90:3b:b8:ce:81:d8:2f:59:1e:75: 10:b8:47:8a:a5:f3:cd:2d:cb:a5:c5:20:55:88:82: 63:3e:89:6b:aa:49:64:41:41:0a:5a:a4:e6:62:92: b5:66:7d:40:6c:46:fc:7b:17:61:8a:4b:05:2b:af: d3:b4:1d:64:12:19:8a:13:6b:c2:8e:d5:8c:f7:38: 62:1d:db:d2:14:4b:79:dc:a6:a7:68:e4:18:9e:10: b5:bf:41:69:f3:9a:ec:30:bf:8c:ed:ef:5b:1c:84: 9d:d8:97:b0:d1:e6:d5:02:4f:a3:91:d9:85:3e:61: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8D:AA:38:48:5D:82:7E:48:5E:FB:97:D3:49:86:54:30:E1:96:ED X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:8d00::/40 Signature Algorithm: sha256WithRSAEncryption 6c:66:20:79:8b:08:08:2c:a9:0a:f2:b8:a2:c6:6d:d2:b3:e7: f3:4c:6a:d7:08:07:30:a7:b0:f9:8a:06:24:a5:43:d9:0e:bb: 39:79:24:3e:48:c2:ff:ee:65:03:c4:3c:8f:50:7b:16:2b:d7: 32:21:81:86:21:b3:6f:3d:6f:49:f6:1a:a4:87:6d:67:e1:d1: 79:94:ec:75:15:2f:9d:e1:63:40:19:53:33:3e:55:da:84:c0: c6:a9:59:f8:df:a6:ce:de:2a:18:89:1a:c1:6a:68:dd:3c:dc: 39:1d:8d:81:08:9a:77:cf:1f:08:16:57:d1:ca:a9:78:8e:77: bd:67:92:40:b4:9d:fb:a4:fd:11:15:f1:c6:ad:2f:63:14:ef: d7:c6:7d:fe:b3:01:6e:98:7b:58:d5:7e:ba:59:6b:36:83:a1: 96:26:6c:fb:66:32:90:29:e5:df:97:e2:88:52:3e:f0:2c:7a: e1:2f:fe:a2:a1:fc:ce:04:0f:1a:06:04:28:44:fc:a5:09:27: c2:6b:f3:03:f8:9f:f4:b5:da:29:2c:de:22:49:6d:15:c2:3f: ea:b3:88:46:d3:67:9f:cd:99:87:62:63:c6:86:7e:25:8c:3d: dd:26:ab:c5:9b:9f:e7:9d:c2:dc:17:a6:11:b9:1c:23:8e:e8: 92:6f:b4:72 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUQdzgKwE9o5SK6S+TKfORtzHjNw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDQxNjQzMDJaFw0yNjA3MDMxNjQ4MDJaMDMxMTAvBgNV BAMTKDM1OERBQTM4NDg1RDgyN0U0ODVFRkI5N0QzNDk4NjU0MzBFMTk2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyFuIxIUMcfpNBtLJMeoTrycT ZJVD4HWgQkRI4RBlEyExetXRowwiIxsOZsBPlgWU4yTRbQLLoPe303xBHurtQZbx 6t2u6v4Di/ywznQTUF/5Za9deanewIJLQfg/7MFKiSy2czGx9aDjH5k/KJqsa23E ctJr1E5Ts/AhJQRdwNjTckalKh5JOaf7kDu4zoHYL1kedRC4R4ql880ty6XFIFWI gmM+iWuqSWRBQQpapOZikrVmfUBsRvx7F2GKSwUrr9O0HWQSGYoTa8KO1Yz3OGId 29IUS3ncpqdo5BieELW/QWnzmuwwv4zt71schJ3Yl7DR5tUCT6OR2YU+Yb7hAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUNY2qOEhdgn5IXvuX00mGVDDhlu0wHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi8zMjYxMzAz NjNhMzEzMjM4MzMzYTM4NjQzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTMxMzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYSg40wDQYJKoZIhvcNAQELBQADggEBAGxm IHmLCAgsqQryuKLGbdKz5/NMatcIBzCnsPmKBiSlQ9kOuzl5JD5Iwv/uZQPEPI9Q exYr1zIhgYYhs289b0n2GqSHbWfh0XmU7HUVL53hY0AZUzM+VdqEwMapWfjfps7e KhiJGsFqaN083DkdjYEImnfPHwgWV9HKqXiOd71nkkC0nfuk/REV8catL2MU79fG ff6zAW6Ye1jVfrpZazaDoZYmbPtmMpAp5d+X4ohSPvAseuEv/qKh/M4EDxoGBChE /KUJJ8Jr8wP4n/S12iks3iJJbRXCP+qziEbTZ5/NmYdiY8aGfiWMPd0mq8Wbn+ed wtwXphG5HCOO6JJvtHI= -----END CERTIFICATE-----Generated at Sat Jul 5 15:35:51 2025 by rpki-client