$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa File: 326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa (raw, json) Hash identifier: PTSU8qGNCimGfVZLMLacuvM/VXxIUmWAazoLI57rq4o= Subject key identifier: 1E:26:3C:EC:A5:0A:17:44:10:7B:0F:32:57:A1:85:EE:AD:87:B9:A1 Certificate issuer: /CN=21291D2963EE74682B10BECBA6060EF246C76881 Certificate serial: 248DD3B10F208F740DC968B45443ACCE2FC98D3D Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa Signing time: Tue 02 Sep 2025 00:25:15 +0000 ROA not before: Tue 02 Sep 2025 00:20:15 +0000 ROA not after: Tue 01 Sep 2026 00:25:15 +0000 asID: 205941 IP address blocks: 2a14:7583:2084::/46 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 07:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8d:d3:b1:0f:20:8f:74:0d:c9:68:b4:54:43:ac:ce:2f:c9:8d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881 Validity Not Before: Sep 2 00:20:15 2025 GMT Not After : Sep 1 00:25:15 2026 GMT Subject: CN=1E263CECA50A1744107B0F3257A185EEAD87B9A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:d2:37:28:e5:d8:a0:17:87:69:fd:80:bb: 0e:b6:4e:ab:5b:6d:1d:0c:ec:b9:d9:73:9f:95:fb: 38:6d:54:ff:4c:8e:a7:a5:02:51:de:b0:bb:cc:0a: 0a:4a:4f:23:b1:a9:6c:38:39:c6:72:aa:ae:70:db: fa:1a:72:b4:da:76:b3:08:32:0a:e7:fd:9b:d9:54: d9:4a:a9:0b:d4:ca:bc:8a:5e:a1:a2:cb:e3:38:43: 4f:75:66:b9:79:22:0c:ce:be:fe:2d:0a:d5:ac:1b: 73:31:f5:13:41:64:28:02:eb:3e:b5:12:4f:42:8a: c1:84:df:62:5a:e8:2a:2f:c2:c6:df:73:98:cb:f7: 25:f5:72:6d:6a:85:94:6e:fc:91:7e:a6:d7:44:d1: 73:18:4e:84:92:d4:43:91:8e:f4:d1:0f:78:46:02: b8:e2:9b:ef:fa:80:ae:60:5f:e3:b6:6d:39:01:ec: 04:24:5d:55:15:0e:cf:de:43:fd:5d:17:2d:73:ea: ff:3b:31:57:96:90:7c:f9:33:95:16:ea:85:c8:7b: 2f:10:7e:a3:85:fb:58:7c:6e:a0:14:0a:5e:55:21: f0:fc:c6:79:3e:79:50:29:e9:7e:ef:24:bd:e6:f4: 5a:99:c7:e5:8c:2a:b9:4c:b8:7d:03:62:0b:e8:8e: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:3C:EC:A5:0A:17:44:10:7B:0F:32:57:A1:85:EE:AD:87:B9:A1 X509v3 Authority Key Identifier: keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:2084::/46 Signature Algorithm: sha256WithRSAEncryption 88:60:a1:cd:2a:9d:38:e6:64:ca:bb:d0:12:cc:96:30:d1:62: 57:fa:d2:4a:b4:9c:99:ad:07:38:ae:c3:77:99:30:44:24:aa: ef:49:bf:f8:ff:fe:15:e0:d9:04:ee:b1:04:71:f9:0f:54:e8: 3f:f7:a2:42:2a:4f:92:f3:e8:8b:90:67:40:49:c2:7b:35:d1: bc:8a:5b:58:2a:8d:7d:98:93:30:9d:83:f2:62:4a:99:bb:dd: 0b:20:35:a1:2b:b0:f7:7b:e4:df:3e:67:2a:f3:a4:a0:4d:a0: a7:be:38:8c:c1:7d:6d:37:c0:9d:09:49:ce:51:22:4e:01:38: f2:a0:0c:36:f7:80:62:10:41:b3:e9:df:7c:08:ee:cc:a4:e3: 1d:4b:1e:ee:4e:7a:5e:b6:1f:73:96:2a:61:cb:d9:e3:da:f3: 74:9c:af:7e:1f:b5:1b:3b:88:db:08:56:a7:39:f0:2c:b0:7d: 42:2a:0f:14:e1:36:cc:27:bc:cb:6d:c9:68:c9:0e:ad:27:79: d1:bc:66:35:3c:6f:1b:49:95:b8:1e:f8:f7:80:11:54:31:97: ee:97:6f:d9:5a:fb:65:70:82:00:fc:1a:cc:cc:d9:b0:a4:72: 01:1f:f5:a4:a4:c3:91:6d:96:0b:1f:20:47:50:82:55:b7:97: 50:69:a2:96 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUJI3TsQ8gj3QNyWi0VEOszi/JjT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0 NkM3Njg4MTAeFw0yNTA5MDIwMDIwMTVaFw0yNjA5MDEwMDI1MTVaMDMxMTAvBgNV BAMTKDFFMjYzQ0VDQTUwQTE3NDQxMDdCMEYzMjU3QTE4NUVFQUQ4N0I5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRdI3KOXYoBeHaf2Auw62Tqtb bR0M7LnZc5+V+zhtVP9MjqelAlHesLvMCgpKTyOxqWw4OcZyqq5w2/oacrTadrMI Mgrn/ZvZVNlKqQvUyryKXqGiy+M4Q091Zrl5IgzOvv4tCtWsG3Mx9RNBZCgC6z61 Ek9CisGE32Ja6Covwsbfc5jL9yX1cm1qhZRu/JF+ptdE0XMYToSS1EORjvTRD3hG Arjim+/6gK5gX+O2bTkB7AQkXVUVDs/eQ/1dFy1z6v87MVeWkHz5M5UW6oXIey8Q fqOF+1h8bqAUCl5VIfD8xnk+eVAp6X7vJL3m9FqZx+WMKrlMuH0DYgvoji9ZAgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUHiY87KUKF0QQew8yV6GF7q2HuaEwHwYDVR0j BBgwFoAUISkdKWPudGgrEL7LpgYO8kbHaIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzgvMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0NkM3Njg4MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JB NjA2MEVGMjQ2Qzc2ODgxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvOC8zMjYxMzEz NDNhMzczNTM4MzMzYTMyMzAzODM0M2EzYTJmMzQzNjJkMzEzMjM4MjAzZDNlMjAz MjMwMzUzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwIqFHWDIIQwDQYJKoZIhvcNAQELBQADggEB AIhgoc0qnTjmZMq70BLMljDRYlf60kq0nJmtBziuw3eZMEQkqu9Jv/j//hXg2QTu sQRx+Q9U6D/3okIqT5Lz6IuQZ0BJwns10byKW1gqjX2YkzCdg/JiSpm73QsgNaEr sPd75N8+ZyrzpKBNoKe+OIzBfW03wJ0JSc5RIk4BOPKgDDb3gGIQQbPp33wI7syk 4x1LHu5Oel62H3OWKmHL2ePa83Scr34ftRs7iNsIVqc58CywfUIqDxThNswnvMtt yWjJDq0nedG8ZjU8bxtJlbge+PeAEVQxl+6Xb9la+2VwggD8GszM2bCkcgEf9aSk w5FtlgsfIEdQglW3l1BpopY= -----END CERTIFICATE-----Generated at Fri Oct 24 16:44:12 2025 by rpki-client