$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa File: 326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa (raw, json) Hash identifier: kC7ihYm/R5OERXYsLtyhxzyEmlKI1XwHLSptM6n0vvg= Subject key identifier: 45:03:AC:36:3F:4F:A1:92:03:6E:69:D6:AE:2F:3F:9D:29:B0:C1:2A Certificate issuer: /CN=21291D2963EE74682B10BECBA6060EF246C76881 Certificate serial: 11C5C21D8C7414FA59988495B3D738FAAAD664C7 Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa Signing time: Tue 02 Sep 2025 00:25:07 +0000 ROA not before: Tue 02 Sep 2025 00:20:07 +0000 ROA not after: Tue 01 Sep 2026 00:25:07 +0000 asID: 205941 IP address blocks: 2a14:7583:2080::/46 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 09:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c5:c2:1d:8c:74:14:fa:59:98:84:95:b3:d7:38:fa:aa:d6:64:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881 Validity Not Before: Sep 2 00:20:07 2025 GMT Not After : Sep 1 00:25:07 2026 GMT Subject: CN=4503AC363F4FA192036E69D6AE2F3F9D29B0C12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:ae:3c:18:6c:f1:7a:f8:ed:30:f4:cb:dc: a3:27:e3:48:fe:44:dd:4d:01:33:c1:11:2b:a7:f9: b7:0e:77:49:96:7b:25:b7:a1:21:8f:66:fc:f4:9e: 8b:ce:05:b4:92:8f:87:a0:aa:b3:9d:9d:ef:75:21: 67:90:1b:05:9e:3c:0b:bd:ef:20:0a:27:1b:ce:52: 69:c6:e9:46:f1:17:2c:51:8f:78:ea:26:80:27:f6: f2:bf:9c:84:eb:ba:14:fe:4c:50:9e:f5:47:19:8f: aa:72:5e:d0:78:a5:61:55:5f:f8:8a:b2:c1:1c:e4: 47:cd:2f:27:cf:77:a9:97:9f:56:bf:eb:44:1b:03: a1:e5:d4:7b:6c:82:f7:ab:ce:d1:68:a5:c8:42:1b: 90:e2:cb:08:cf:eb:ff:5c:6f:d0:19:f3:e1:dd:60: 09:b9:c2:c5:d8:f9:2b:d8:12:82:af:4e:94:32:bc: fc:55:77:5b:d3:09:49:ba:4c:91:a0:38:67:9c:16: 5e:e4:ea:7e:9c:bc:98:96:f3:f6:f3:c9:3a:37:99: 0f:b8:49:5b:a3:92:e9:ff:ae:35:04:67:a1:60:30: 69:2a:23:43:33:61:1e:47:56:68:41:a5:c0:b7:49: da:70:90:21:23:e7:ea:bb:a2:51:b4:c4:f7:bc:34: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:03:AC:36:3F:4F:A1:92:03:6E:69:D6:AE:2F:3F:9D:29:B0:C1:2A X509v3 Authority Key Identifier: keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:2080::/46 Signature Algorithm: sha256WithRSAEncryption 2a:c0:3f:4b:d1:ac:63:bb:74:0e:5e:70:92:9c:bd:8e:40:98: 68:8e:98:f2:86:7b:52:1a:a9:24:71:8f:3f:ac:07:a5:81:05: 12:8c:f7:63:19:23:7c:fe:9d:f2:61:a5:66:97:27:a2:ed:8c: d3:e5:f7:59:0b:f0:27:76:ee:c8:22:98:a4:9b:8a:90:bf:3b: 3f:13:bd:d3:48:35:05:aa:87:3e:9f:6d:e3:a1:9f:b3:9a:25: 6a:08:69:27:35:97:94:7f:3d:37:39:00:93:d2:91:b0:4e:04: 22:62:8c:df:d5:d6:02:d5:23:8e:c8:ca:d8:7b:24:08:e8:4e: 71:d9:ef:3a:4c:e4:fa:23:3c:25:f7:2b:62:bc:cb:66:6a:f5: c6:d6:84:6f:b4:12:fc:a7:af:f6:e3:0c:86:2c:af:da:db:67: 76:7f:45:08:d6:27:36:df:07:af:c3:d8:c1:fb:a0:f6:0e:67: 92:45:b9:28:48:f8:aa:0e:54:16:27:4e:58:f1:ce:3f:99:67: d3:6d:46:3c:bf:3f:d2:df:b5:1e:e0:79:b3:91:2d:44:7e:4f: 80:72:d9:5c:4c:42:c9:4e:f8:e2:eb:4c:ab:c3:06:49:61:91: b8:eb:f5:3d:c5:0f:07:45:67:be:9f:bd:d3:de:08:80:cb:46: bb:9a:1d:32 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUEcXCHYx0FPpZmISVs9c4+qrWZMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0 NkM3Njg4MTAeFw0yNTA5MDIwMDIwMDdaFw0yNjA5MDEwMDI1MDdaMDMxMTAvBgNV BAMTKDQ1MDNBQzM2M0Y0RkExOTIwMzZFNjlENkFFMkYzRjlEMjlCMEMxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiz648GGzxevjtMPTL3KMn40j+ RN1NATPBESun+bcOd0mWeyW3oSGPZvz0novOBbSSj4egqrOdne91IWeQGwWePAu9 7yAKJxvOUmnG6UbxFyxRj3jqJoAn9vK/nITruhT+TFCe9UcZj6pyXtB4pWFVX/iK ssEc5EfNLyfPd6mXn1a/60QbA6Hl1HtsgverztFopchCG5DiywjP6/9cb9AZ8+Hd YAm5wsXY+SvYEoKvTpQyvPxVd1vTCUm6TJGgOGecFl7k6n6cvJiW8/bzyTo3mQ+4 SVujkun/rjUEZ6FgMGkqI0MzYR5HVmhBpcC3SdpwkCEj5+q7olG0xPe8NOGVAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQURQOsNj9PoZIDbmnWri8/nSmwwSowHwYDVR0j BBgwFoAUISkdKWPudGgrEL7LpgYO8kbHaIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzgvMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0NkM3Njg4MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JB NjA2MEVGMjQ2Qzc2ODgxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvOC8zMjYxMzEz NDNhMzczNTM4MzMzYTMyMzAzODMwM2EzYTJmMzQzNjJkMzEzMjM4MjAzZDNlMjAz MjMwMzUzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwIqFHWDIIAwDQYJKoZIhvcNAQELBQADggEB ACrAP0vRrGO7dA5ecJKcvY5AmGiOmPKGe1IaqSRxjz+sB6WBBRKM92MZI3z+nfJh pWaXJ6LtjNPl91kL8Cd27sgimKSbipC/Oz8TvdNINQWqhz6fbeOhn7OaJWoIaSc1 l5R/PTc5AJPSkbBOBCJijN/V1gLVI47Iyth7JAjoTnHZ7zpM5PojPCX3K2K8y2Zq 9cbWhG+0Evynr/bjDIYsr9rbZ3Z/RQjWJzbfB6/D2MH7oPYOZ5JFuShI+KoOVBYn Tljxzj+ZZ9NtRjy/P9LftR7gebORLUR+T4By2VxMQslO+OLrTKvDBklhkbjr9T3F DwdFZ76fvdPeCIDLRruaHTI= -----END CERTIFICATE-----Generated at Mon Sep 8 16:55:26 2025 by rpki-client