$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa File: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (raw, json) Hash identifier: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94= Subject key identifier: 23:BF:21:CB:B9:B0:51:C0:EC:05:98:C2:BB:2F:E4:E7:2D:F3:D8:BD Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 1A08A5E14FACAB558ACA3C0329A21FAA4B41C6CE Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa Signing time: Mon 25 Aug 2025 16:51:54 +0000 ROA not before: Mon 25 Aug 2025 16:46:54 +0000 ROA not after: Mon 24 Aug 2026 16:51:54 +0000 asID: 214344 IP address blocks: 2a14:7581:99f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 05:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:08:a5:e1:4f:ac:ab:55:8a:ca:3c:03:29:a2:1f:aa:4b:41:c6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Aug 25 16:46:54 2025 GMT Not After : Aug 24 16:51:54 2026 GMT Subject: CN=23BF21CBB9B051C0EC0598C2BB2FE4E72DF3D8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:53:63:35:a5:be:32:72:86:97:a4:67:ee: 3d:22:76:82:db:09:f5:8a:02:f9:27:e2:33:e6:47: 0b:03:21:19:24:16:27:12:a5:cb:22:2e:dc:a3:67: 9a:cb:aa:ea:30:68:07:1d:c1:5d:45:19:2d:a9:67: 92:dc:fc:ac:46:0f:9f:2c:ff:08:18:13:c2:81:ed: ad:aa:cb:24:0a:18:de:dd:a1:d5:3d:e9:7f:66:db: ce:a0:4a:87:3e:78:97:a9:25:5b:1c:45:71:62:a5: 0a:00:09:fe:e7:ac:e5:68:7c:b3:39:e9:90:62:f0: ff:d3:52:21:2f:70:2d:3a:86:24:5f:38:52:13:3b: 85:29:85:09:66:5b:11:02:06:23:0d:4c:76:54:c7: 15:bd:9f:b1:dc:59:98:91:a8:5d:1f:ea:40:b1:5e: bb:10:b2:d4:49:db:20:19:ff:d3:02:09:29:f5:1d: 0b:59:9c:54:11:b1:b2:3d:df:29:14:ae:52:46:f6: dd:84:86:68:b9:0b:81:31:ff:2d:d5:0c:e7:fe:b7: 27:3e:d3:d1:4c:57:bd:07:64:37:31:56:d2:6d:60: ef:cd:d8:da:5c:f1:5f:d6:aa:ee:20:67:47:80:c3: 23:4f:62:97:a0:18:31:64:fc:6f:f3:96:a8:73:d8: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BF:21:CB:B9:B0:51:C0:EC:05:98:C2:BB:2F:E4:E7:2D:F3:D8:BD X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:99f4::/48 Signature Algorithm: sha256WithRSAEncryption 00:11:0c:e8:7b:e7:f7:29:44:6c:f0:7f:15:3b:7c:fa:1f:d0: 83:64:a4:09:10:ca:08:38:71:a2:39:60:b3:f7:f3:ed:c0:60: 67:b9:a4:cd:80:5b:a6:cb:c3:e8:e3:30:d7:2c:70:b9:4d:82: 83:67:34:52:aa:ae:7a:79:d5:9f:cf:29:71:4d:2d:35:05:14: 68:92:90:c8:45:2c:6c:6d:51:e1:33:0f:7c:0d:3e:52:1b:0f: de:4d:94:d2:e3:8d:02:9d:1f:a6:95:27:64:69:28:61:fb:9a: a3:5c:52:b0:63:5d:f5:98:21:ff:a7:f4:44:f1:aa:83:62:a3: cc:15:e0:2f:86:ee:fe:a6:62:b5:ea:ca:e1:71:c6:9a:aa:41: af:0a:9a:0f:dd:22:81:1d:e3:cb:63:88:d6:d6:86:bc:61:05: df:1e:5e:8f:0d:4e:c6:f1:05:b1:95:04:26:73:e9:4b:96:e0: 0d:b8:77:5b:2d:bf:57:76:d0:78:d1:67:88:e3:3f:90:c9:de: f8:7d:ec:6b:fa:bd:cb:dd:7e:7e:04:47:89:26:bb:e3:8a:74: 5f:b5:a4:4b:86:ee:d2:82:bf:44:0c:69:31:ef:5e:12:43:d0: 4f:be:14:b8:76:14:51:3d:5f:c2:33:0e:51:b8:5f:5d:eb:1d: 23:3a:4b:0a -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUGgil4U+sq1WKyjwDKaIfqktBxs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA4MjUxNjQ2NTRaFw0yNjA4MjQxNjUxNTRaMDMxMTAvBgNV BAMTKDIzQkYyMUNCQjlCMDUxQzBFQzA1OThDMkJCMkZFNEU3MkRGM0Q4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDielNjNaW+MnKGl6Rn7j0idoLb CfWKAvkn4jPmRwsDIRkkFicSpcsiLtyjZ5rLquowaAcdwV1FGS2pZ5Lc/KxGD58s /wgYE8KB7a2qyyQKGN7dodU96X9m286gSoc+eJepJVscRXFipQoACf7nrOVofLM5 6ZBi8P/TUiEvcC06hiRfOFITO4UphQlmWxECBiMNTHZUxxW9n7HcWZiRqF0f6kCx XrsQstRJ2yAZ/9MCCSn1HQtZnFQRsbI93ykUrlJG9t2Ehmi5C4Ex/y3VDOf+tyc+ 09FMV70HZDcxVtJtYO/N2Npc8V/Wqu4gZ0eAwyNPYpegGDFk/G/zlqhz2I97AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUI78hy7mwUcDsBZjCuy/k5y3z2L0wHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9hNWQ0YzAwYi1kMTA1LTQ5MDYtYjk4MS0xZDAzNDNlMzAxZGEvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM5Mzk2NjM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZn0MA0GCSqGSIb3DQEBCwUAA4IBAQAA EQzoe+f3KURs8H8VO3z6H9CDZKQJEMoIOHGiOWCz9/PtwGBnuaTNgFumy8Po4zDX LHC5TYKDZzRSqq56edWfzylxTS01BRRokpDIRSxsbVHhMw98DT5SGw/eTZTS440C nR+mlSdkaShh+5qjXFKwY131mCH/p/RE8aqDYqPMFeAvhu7+pmK16srhccaaqkGv CpoP3SKBHePLY4jW1oa8YQXfHl6PDU7G8QWxlQQmc+lLluANuHdbLb9XdtB40WeI 4z+Qyd74fexr+r3L3X5+BEeJJrvjinRftaRLhu7Sgr9EDGkx714SQ9BPvhS4dhRR PV/CMw5RuF9d6x0jOksK -----END CERTIFICATE-----Generated at Mon Sep 8 16:54:48 2025 by rpki-client