$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa File: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (raw, json) Hash identifier: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8= Subject key identifier: 4C:35:15:09:93:07:B5:A3:4A:FB:26:D6:78:33:04:BD:50:34:BA:A2 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 39124A1CD55273C6440DA4595C56994B41A94600 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa Signing time: Wed 21 May 2025 23:52:39 +0000 ROA not before: Wed 21 May 2025 23:47:39 +0000 ROA not after: Wed 20 May 2026 23:52:39 +0000 asID: 209710 IP address blocks: 2a14:7580:ff55::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:12:4a:1c:d5:52:73:c6:44:0d:a4:59:5c:56:99:4b:41:a9:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: May 21 23:47:39 2025 GMT Not After : May 20 23:52:39 2026 GMT Subject: CN=4C3515099307B5A34AFB26D6783304BD5034BAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:8c:bb:90:2f:2c:0d:53:6d:91:6d:27:8b: 82:55:fb:0b:1f:9d:2c:45:b6:20:77:9b:94:63:c8: e2:57:1b:b8:88:2f:eb:46:fd:60:79:6a:89:25:53: bb:50:c1:05:a3:7c:98:ff:df:05:c1:4c:4b:d4:d1: 4a:db:fc:09:a3:f3:b6:07:85:27:1d:dc:45:26:ac: 50:28:f2:4b:ad:e9:18:73:c2:62:ad:00:08:82:8d: 40:68:46:14:3c:1b:4d:76:24:87:e0:aa:95:91:f3: 52:f5:cb:74:ea:76:82:c0:21:c0:93:31:f1:c0:f3: 4c:13:68:7f:8e:f5:4d:d1:1e:61:ef:f5:96:d9:e6: a7:e9:87:12:78:62:37:df:f9:21:89:e1:09:dd:17: 37:e2:85:d4:19:fc:ad:73:fa:06:98:90:8c:d1:44: be:66:9a:01:06:71:71:d4:7f:b5:f3:c3:2f:f5:e3: 8e:41:81:67:72:23:ee:38:13:9b:4f:58:2f:3f:69: 43:68:8c:f9:13:ff:87:f8:dd:1d:f2:2e:cc:45:b9: 51:08:c2:c1:00:e7:be:d8:6f:e0:b3:03:6a:51:87: 39:b9:12:09:14:64:13:34:5c:d1:44:cb:e5:af:c4: d7:28:d1:1b:dc:6d:c1:28:9d:57:59:8e:4d:28:71: 77:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:35:15:09:93:07:B5:A3:4A:FB:26:D6:78:33:04:BD:50:34:BA:A2 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff55::/48 Signature Algorithm: sha256WithRSAEncryption a2:23:04:b4:35:db:44:c0:39:88:61:4d:fe:56:a6:73:6b:ec: c4:c2:f0:f5:ad:82:fc:03:3a:96:79:4c:d4:d0:c7:8e:87:9c: 6c:25:b0:3d:da:52:28:da:2d:c0:a1:eb:bc:2b:43:8e:04:b5: a0:5d:91:c0:fd:d1:de:dc:21:74:e2:a6:e6:2b:3b:bc:58:26: a7:a0:34:ca:ec:ea:2e:30:e8:c6:c5:05:c4:59:38:7a:46:0b: 0b:a8:c1:d6:3a:eb:c4:13:c3:7a:15:19:17:78:87:aa:51:fd: 48:b6:02:49:98:32:f0:fc:dc:cd:72:93:19:ca:07:35:a5:1b: e9:06:6a:4c:08:a3:67:92:e1:94:15:e7:85:72:1c:f9:17:cf: cd:d9:49:ff:18:bc:6a:9b:08:20:e6:92:2b:91:d6:50:56:c8: 8d:ed:9f:d1:94:a8:28:3a:0e:a1:dc:c9:f9:61:c1:4a:b3:13: 90:fb:13:c6:19:36:e2:b7:8a:aa:91:26:d6:28:e7:e1:15:19: 52:87:fd:46:a3:c5:79:bc:07:d1:1a:4c:9b:21:ae:04:23:db: 88:d5:7c:52:4a:72:c4:a4:81:88:b3:9b:9c:14:8b:f0:76:ed: d0:dd:bc:4d:5b:e2:0d:f5:32:c8:a6:11:9b:92:5a:e3:6b:5b: b5:ab:30:5e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUORJKHNVSc8ZEDaRZXFaZS0GpRgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA1MjEyMzQ3MzlaFw0yNjA1MjAyMzUyMzlaMDMxMTAvBgNV BAMTKDRDMzUxNTA5OTMwN0I1QTM0QUZCMjZENjc4MzMwNEJENTAzNEJBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O4y7kC8sDVNtkW0ni4JV+wsf nSxFtiB3m5RjyOJXG7iIL+tG/WB5aoklU7tQwQWjfJj/3wXBTEvU0Urb/Amj87YH hScd3EUmrFAo8kut6RhzwmKtAAiCjUBoRhQ8G012JIfgqpWR81L1y3TqdoLAIcCT MfHA80wTaH+O9U3RHmHv9ZbZ5qfphxJ4Yjff+SGJ4QndFzfihdQZ/K1z+gaYkIzR RL5mmgEGcXHUf7Xzwy/1445BgWdyI+44E5tPWC8/aUNojPkT/4f43R3yLsxFuVEI wsEA577Yb+CzA2pRhzm5EgkUZBM0XNFEy+WvxNco0RvcbcEonVdZjk0ocXeTAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUTDUVCZMHtaNK+ybWeDMEvVA0uqIwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM5MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP9VMA0GCSqGSIb3DQEBCwUAA4IBAQCi IwS0NdtEwDmIYU3+VqZza+zEwvD1rYL8AzqWeUzU0MeOh5xsJbA92lIo2i3Aoeu8 K0OOBLWgXZHA/dHe3CF04qbmKzu8WCanoDTK7OouMOjGxQXEWTh6RgsLqMHWOuvE E8N6FRkXeIeqUf1ItgJJmDLw/NzNcpMZygc1pRvpBmpMCKNnkuGUFeeFchz5F8/N 2Un/GLxqmwgg5pIrkdZQVsiN7Z/RlKgoOg6h3Mn5YcFKsxOQ+xPGGTbit4qqkSbW KOfhFRlSh/1Go8V5vAfRGkybIa4EI9uI1XxSSnLEpIGIs5ucFIvwdu3Q3bxNW+IN 9TLIphGbklrja1u1qzBe -----END CERTIFICATE-----Generated at Fri Oct 24 16:41:36 2025 by rpki-client