$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa File: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (raw, json) Hash identifier: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA= Subject key identifier: 4B:9C:63:0F:D5:E3:CB:7B:73:F9:F1:61:54:1A:57:29:4E:E5:C5:36 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 572F00471A71567E7630C31CA7C64020B15D0F4C Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa Signing time: Sun 17 Aug 2025 15:23:26 +0000 ROA not before: Sun 17 Aug 2025 15:18:26 +0000 ROA not after: Sun 16 Aug 2026 15:23:26 +0000 asID: 14447 IP address blocks: 2a14:7581:90a0::/43 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 06:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2f:00:47:1a:71:56:7e:76:30:c3:1c:a7:c6:40:20:b1:5d:0f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Aug 17 15:18:26 2025 GMT Not After : Aug 16 15:23:26 2026 GMT Subject: CN=4B9C630FD5E3CB7B73F9F161541A57294EE5C536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:18:63:4d:84:f6:dc:87:8d:8a:80:d1:1a: d3:53:dd:7b:bb:83:d2:72:ff:36:25:82:d9:a4:2d: db:57:2f:4f:ea:be:16:02:d2:d6:b0:a4:4b:f0:a9: 69:dd:09:dc:5a:c7:d9:e0:99:79:11:4c:96:89:23: e7:7e:82:b5:d5:58:21:33:5a:11:5f:df:d1:32:83: 93:76:1f:88:a7:1f:f9:00:da:a2:db:c8:8a:e1:2e: ec:d3:1a:32:53:33:04:29:71:17:e1:c5:15:dc:ff: e3:42:22:d4:07:9a:63:8a:fa:81:87:43:6a:cb:e5: fc:d2:0e:84:80:96:c8:42:c7:02:66:7b:8e:3e:a4: 3d:b1:a4:f5:ae:22:09:ed:c2:d7:a3:3c:99:8e:6d: 2e:d8:fc:e2:63:35:9b:46:a2:35:a9:76:c7:2a:71: d8:f2:1f:4f:6c:a9:54:ff:24:02:9d:9b:bc:e8:46: fe:fb:96:3a:82:d8:fd:23:e7:4b:fe:b9:99:76:ac: 85:d0:da:ec:c8:72:18:3b:eb:62:16:69:1f:ee:c5: ab:14:06:76:14:e6:62:1e:aa:12:2a:4e:50:f2:3d: 18:2c:f6:fd:dd:7c:12:af:48:66:15:89:e0:1c:46: de:3b:ab:64:58:a5:81:b4:eb:b8:f3:06:90:82:92: fc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:63:0F:D5:E3:CB:7B:73:F9:F1:61:54:1A:57:29:4E:E5:C5:36 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:90a0::/43 Signature Algorithm: sha256WithRSAEncryption 34:0a:46:a3:77:ec:80:f6:7d:f5:b1:c6:2d:b3:ae:d5:82:4f: 37:8c:be:47:3a:ce:be:73:84:e2:99:e8:7f:ab:fc:ad:46:ed: a9:5b:b4:d3:48:d4:90:1f:f8:61:a4:6b:fb:ee:7f:a1:f2:e2: e6:a2:36:b7:7b:f5:a8:f5:6e:64:b1:7f:5a:e5:99:a2:9b:72: db:75:3e:09:6f:ab:32:b7:97:bf:e9:db:e1:42:31:4e:55:16: 7f:7c:a2:41:65:31:c5:61:6d:ef:c1:1d:19:c1:d9:c0:a9:8a: 3c:02:4a:1e:5d:9e:7f:68:20:09:d1:cf:bc:45:03:25:54:32: 6c:39:67:af:77:86:ca:55:3f:1e:84:c8:44:a8:7d:81:a0:f7: ea:59:f7:2a:f4:ba:f1:a6:dc:7f:86:dc:95:74:e9:14:be:20: ff:38:7e:bc:c3:95:eb:c5:2f:30:75:06:bc:33:04:8b:29:e9: c1:fe:0a:01:b5:2f:05:7c:4a:28:40:42:b8:58:71:66:88:7d: 92:62:48:d1:7e:ed:6e:93:17:1c:03:2e:9c:e4:c0:af:cb:27: 26:87:7f:15:66:6b:67:42:bf:8a:da:08:05:5b:9e:0d:67:26: c0:10:bb:72:60:8e:c7:0b:4f:f9:9d:85:ff:6f:cf:7a:7d:7f: 47:76:36:90 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUVy8ARxpxVn52MMMcp8ZAILFdD0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA4MTcxNTE4MjZaFw0yNjA4MTYxNTIzMjZaMDMxMTAvBgNV BAMTKDRCOUM2MzBGRDVFM0NCN0I3M0Y5RjE2MTU0MUE1NzI5NEVFNUM1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChchhjTYT23IeNioDRGtNT3Xu7 g9Jy/zYlgtmkLdtXL0/qvhYC0tawpEvwqWndCdxax9ngmXkRTJaJI+d+grXVWCEz WhFf39Eyg5N2H4inH/kA2qLbyIrhLuzTGjJTMwQpcRfhxRXc/+NCItQHmmOK+oGH Q2rL5fzSDoSAlshCxwJme44+pD2xpPWuIgntwtejPJmObS7Y/OJjNZtGojWpdscq cdjyH09sqVT/JAKdm7zoRv77ljqC2P0j50v+uZl2rIXQ2uzIchg762IWaR/uxasU BnYU5mIeqhIqTlDyPRgs9v3dfBKvSGYVieAcRt47q2RYpYG067jzBpCCkvydAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUS5xjD9Xjy3tz+fFhVBpXKU7lxTYwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84NTVjN2Q1YS0xNWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzA2MTMwM2EzYTJmMzQzMzJkMzQzODIwM2QzZTIwMzEz NDM0MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBSoUdYGQoDANBgkqhkiG9w0BAQsFAAOCAQEANApG o3fsgPZ99bHGLbOu1YJPN4y+RzrOvnOE4pnof6v8rUbtqVu000jUkB/4YaRr++5/ ofLi5qI2t3v1qPVuZLF/WuWZopty23U+CW+rMreXv+nb4UIxTlUWf3yiQWUxxWFt 78EdGcHZwKmKPAJKHl2ef2ggCdHPvEUDJVQybDlnr3eGylU/HoTIRKh9gaD36ln3 KvS68abcf4bclXTpFL4g/zh+vMOV68UvMHUGvDMEiynpwf4KAbUvBXxKKEBCuFhx Zoh9kmJI0X7tbpMXHAMunOTAr8snJod/FWZrZ0K/itoIBVueDWcmwBC7cmCOxwtP +Z2F/2/Pen1/R3Y2kA== -----END CERTIFICATE-----Generated at Fri Aug 22 17:56:04 2025 by rpki-client