$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa File: 326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa (raw, json) Hash identifier: QTSey6Hp5GxpO8W9pZDSl/g5MxHZNI9D5mYgXqg8BF0= Subject key identifier: B2:EB:CF:51:86:A3:B1:DA:3B:9E:42:62:9F:9B:87:B1:33:E3:0F:CA Certificate issuer: /CN=21291D2963EE74682B10BECBA6060EF246C76881 Certificate serial: 2C7CE7C4DF66457F34FD7C603D50BC8AB29A5744 Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa Signing time: Mon 06 Oct 2025 16:33:44 +0000 ROA not before: Mon 06 Oct 2025 16:28:44 +0000 ROA not after: Mon 05 Oct 2026 16:33:44 +0000 asID: 205941 IP address blocks: 2a14:7583:2fc0::/42 maxlen: 128 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Oct 2025 19:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7c:e7:c4:df:66:45:7f:34:fd:7c:60:3d:50:bc:8a:b2:9a:57:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881 Validity Not Before: Oct 6 16:28:44 2025 GMT Not After : Oct 5 16:33:44 2026 GMT Subject: CN=B2EBCF5186A3B1DA3B9E42629F9B87B133E30FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1a:8b:12:6a:97:fe:6e:60:ab:de:83:43:da: dc:19:3d:c4:77:a6:49:71:70:1b:6e:af:95:a3:c1: f9:13:dd:fc:4e:12:6e:16:82:6d:56:db:b0:a7:61: c6:15:a3:10:8b:38:03:6e:b2:87:cd:5b:b4:86:77: d2:25:43:17:ab:68:0d:5a:78:47:24:3e:de:1f:95: 13:2b:03:f8:b2:f0:f7:ff:e9:80:f7:9a:f8:60:a8: a4:6a:19:b5:14:d4:9a:41:af:e7:05:12:5d:3a:0f: aa:74:80:bd:b2:8e:0f:58:45:ed:f7:6b:91:14:8c: 93:2c:45:fe:6c:af:f5:1c:65:24:51:2a:aa:5f:15: 68:8e:ff:e1:f6:e1:9e:99:cc:c5:ef:b2:41:e6:1b: 89:2e:5b:27:1d:c4:e6:8c:2e:66:23:20:89:0b:b2: ee:81:35:ec:d8:f6:c4:49:3b:37:19:37:ef:af:77: 2b:e7:ee:d0:3a:8d:57:e2:0c:86:91:df:bf:61:14: 87:bb:ef:8d:77:78:c7:91:09:85:bf:a6:8f:4e:72: bd:a2:45:6e:2f:16:97:92:1f:c8:6c:b0:23:30:e8: eb:99:95:75:03:a8:ce:68:7f:69:a0:eb:d4:8d:49: b8:8b:09:f6:e2:95:02:d9:8f:3f:a9:9c:89:c0:db: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EB:CF:51:86:A3:B1:DA:3B:9E:42:62:9F:9B:87:B1:33:E3:0F:CA X509v3 Authority Key Identifier: keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/326131343a373538333a326663303a3a2f34322d313238203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:2fc0::/42 Signature Algorithm: sha256WithRSAEncryption 7d:ed:55:99:ab:3e:b8:51:5f:87:1b:18:df:0c:41:d5:9c:44: 97:c1:43:a7:d4:9f:43:57:02:d5:4b:02:65:fa:9c:68:00:84: dc:d5:70:32:73:55:a6:75:41:54:3f:28:fd:51:a0:73:f8:b4: 98:53:1f:fc:30:bb:b0:37:ba:ef:9b:fb:38:a3:2a:14:e1:09: b6:b1:39:88:31:8a:88:0a:4f:4b:1c:f5:0d:ed:21:37:53:89: 65:fa:80:72:b6:65:56:95:89:05:3b:62:03:fa:92:b2:05:5b: a4:a0:1b:82:c3:3b:fd:76:53:ef:f0:ce:18:81:d1:68:7b:f0: 1f:2d:f2:26:33:f9:ec:15:f9:59:98:6b:93:26:64:83:80:a3: ae:0c:44:f9:53:b3:b3:14:e5:38:6b:45:e3:fb:a2:68:b3:27: df:cc:ee:d5:c8:cc:c9:6d:1e:e0:7f:2f:2d:8d:c0:88:da:3d: 1a:4b:a9:bf:84:71:44:83:c5:ae:cc:3c:0c:3b:44:c1:d7:3c: fb:6c:87:4e:9c:ba:b1:36:21:c2:64:9b:eb:b7:b1:77:77:74: 0e:9a:9f:17:90:0e:19:1b:3b:91:fe:00:86:53:56:6c:76:56: 07:4f:91:fd:e6:13:9f:09:fe:1c:63:c8:f8:47:0f:8a:07:75: 75:ea:8b:e9 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIULHznxN9mRX80/XxgPVC8irKaV0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0 NkM3Njg4MTAeFw0yNTEwMDYxNjI4NDRaFw0yNjEwMDUxNjMzNDRaMDMxMTAvBgNV BAMTKEIyRUJDRjUxODZBM0IxREEzQjlFNDI2MjlGOUI4N0IxMzNFMzBGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrGosSapf+bmCr3oND2twZPcR3 pklxcBtur5WjwfkT3fxOEm4Wgm1W27CnYcYVoxCLOANusofNW7SGd9IlQxeraA1a eEckPt4flRMrA/iy8Pf/6YD3mvhgqKRqGbUU1JpBr+cFEl06D6p0gL2yjg9YRe33 a5EUjJMsRf5sr/UcZSRRKqpfFWiO/+H24Z6ZzMXvskHmG4kuWycdxOaMLmYjIIkL su6BNezY9sRJOzcZN++vdyvn7tA6jVfiDIaR379hFIe77413eMeRCYW/po9Ocr2i RW4vFpeSH8hssCMw6OuZlXUDqM5of2mg69SNSbiLCfbilQLZjz+pnInA2/R/AgMB AAGjggKHMIICgzAdBgNVHQ4EFgQUsuvPUYajsdo7nkJin5uHsTPjD8owHwYDVR0j BBgwFoAUISkdKWPudGgrEL7LpgYO8kbHaIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzgvMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0NkM3Njg4MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JB NjA2MEVGMjQ2Qzc2ODgxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYGCCsGAQUF BzALhoGZcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvOC8zMjYxMzEz NDNhMzczNTM4MzMzYTMyNjY2MzMwM2EzYTJmMzQzMjJkMzEzMjM4MjAzZDNlMjAz MjMwMzUzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwYqFHWDL8AwDQYJKoZIhvcNAQELBQADggEB AH3tVZmrPrhRX4cbGN8MQdWcRJfBQ6fUn0NXAtVLAmX6nGgAhNzVcDJzVaZ1QVQ/ KP1RoHP4tJhTH/wwu7A3uu+b+zijKhThCbaxOYgxiogKT0sc9Q3tITdTiWX6gHK2 ZVaViQU7YgP6krIFW6SgG4LDO/12U+/wzhiB0Wh78B8t8iYz+ewV+VmYa5MmZIOA o64MRPlTs7MU5ThrReP7omizJ9/M7tXIzMltHuB/Ly2NwIjaPRpLqb+EcUSDxa7M PAw7RMHXPPtsh06curE2IcJkm+u3sXd3dA6anxeQDhkbO5H+AIZTVmx2VgdPkf3m E58J/hxjyPhHD4oHdXXqi+k= -----END CERTIFICATE-----Generated at Thu Oct 9 07:45:11 2025 by rpki-client