$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa File: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (raw, json) Hash identifier: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw= Subject key identifier: 58:28:AA:80:19:75:F4:BC:03:7B:A2:F2:10:DB:8B:29:0B:33:8B:79 Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 32886A4D47F8444503B545CB3AF3E96D7BCDC66B Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa Signing time: Wed 09 Jul 2025 09:38:34 +0000 ROA not before: Wed 09 Jul 2025 09:33:34 +0000 ROA not after: Wed 08 Jul 2026 09:38:34 +0000 asID: 203915 IP address blocks: 2a14:7580:ff79::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 19:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:88:6a:4d:47:f8:44:45:03:b5:45:cb:3a:f3:e9:6d:7b:cd:c6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 9 09:33:34 2025 GMT Not After : Jul 8 09:38:34 2026 GMT Subject: CN=5828AA801975F4BC037BA2F210DB8B290B338B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:0f:86:40:20:76:ff:af:40:69:6c:12:97: ce:65:93:a2:8b:82:95:15:af:53:69:ed:56:82:26: 03:78:4e:67:f6:00:9d:79:86:30:c8:04:3f:55:0f: 3f:f2:d5:44:cc:1c:4f:64:de:11:94:b5:79:89:90: 07:69:8a:1d:d8:8f:ac:4e:09:e5:0d:d6:a9:7d:4a: 4b:ab:1f:01:b4:c5:dd:55:e0:c3:d5:7d:87:91:c4: de:28:bf:6b:06:6f:23:a2:c1:b0:54:d6:30:69:6c: ca:02:2c:bc:f1:70:08:2f:05:e2:7f:e5:40:47:8a: d1:53:00:fc:d2:55:66:e2:9b:93:e0:7b:d4:b2:c1: 4a:47:98:74:dc:2e:0d:6f:eb:a3:ad:08:8c:7a:03: 96:9a:f8:f8:24:e4:48:8e:36:96:f0:a8:70:c1:67: 1c:dd:46:6e:5d:00:18:71:e3:d9:a5:c6:a9:eb:20: b0:a8:ed:03:2a:ba:60:dd:23:81:33:37:da:9a:ed: f8:9d:36:8e:0d:bc:9d:80:e5:01:a9:51:19:26:a7: 5f:f0:32:dd:a3:52:53:12:89:52:b3:f7:26:b0:a3: a4:79:e2:52:27:ef:81:eb:af:9c:17:c6:7a:fe:15: a1:0b:b8:cd:e4:49:8d:ec:5e:df:15:d4:ff:df:5f: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:AA:80:19:75:F4:BC:03:7B:A2:F2:10:DB:8B:29:0B:33:8B:79 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff79::/48 Signature Algorithm: sha256WithRSAEncryption 3d:e7:e8:f0:4b:23:89:f0:9f:6c:fd:4d:23:87:e5:dc:09:b6: ab:3a:1c:df:96:8b:f4:17:43:da:aa:e1:a6:c6:1d:e0:53:38: 62:0f:2e:4a:b9:db:00:a5:c8:93:ee:19:d7:e0:b0:2a:74:81: 13:d0:fe:ad:33:ef:30:02:0e:1a:bf:8f:fe:78:0a:02:cb:f8: 72:8a:e2:b8:0b:64:c4:ac:4d:45:2e:25:7d:88:5b:0f:26:26: 49:e3:27:fa:0f:1f:e1:ab:7b:6f:40:fd:99:a3:26:0c:3b:87: 4d:af:8a:94:60:00:f4:46:dd:7a:03:ac:a7:dc:21:94:0b:29: f5:89:50:3e:5a:af:99:32:50:a0:54:8f:b8:80:5d:3f:33:09: 3b:c7:ba:06:4e:6e:03:2e:d9:b9:21:38:31:b2:ff:ee:1b:cf: 11:99:51:ce:9d:6d:bf:00:e5:ac:62:30:7c:2e:1c:76:a7:b3: 20:d9:fc:1d:b8:fc:84:59:55:78:c6:8f:fe:6b:7e:c9:ac:b0: de:81:f6:de:84:e8:3e:c7:a6:21:c6:04:e4:90:dc:d9:aa:51: 51:97:03:10:f0:dc:7c:61:44:db:85:40:ed:78:3f:45:17:9a: d7:53:77:60:85:8b:f1:a0:4b:fb:64:91:ac:1a:8d:9f:3b:72: b8:3f:1f:b3 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMohqTUf4REUDtUXLOvPpbXvNxmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MDkwOTMzMzRaFw0yNjA3MDgwOTM4MzRaMDMxMTAvBgNV BAMTKDU4MjhBQTgwMTk3NUY0QkMwMzdCQTJGMjEwREI4QjI5MEIzMzhCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yQ+GQCB2/69AaWwSl85lk6KL gpUVr1Np7VaCJgN4Tmf2AJ15hjDIBD9VDz/y1UTMHE9k3hGUtXmJkAdpih3Yj6xO CeUN1ql9SkurHwG0xd1V4MPVfYeRxN4ov2sGbyOiwbBU1jBpbMoCLLzxcAgvBeJ/ 5UBHitFTAPzSVWbim5Pge9SywUpHmHTcLg1v66OtCIx6A5aa+Pgk5EiONpbwqHDB ZxzdRm5dABhx49mlxqnrILCo7QMqumDdI4EzN9qa7fidNo4NvJ2A5QGpURkmp1/w Mt2jUlMSiVKz9yawo6R54lIn74Hrr5wXxnr+FaELuM3kSY3sXt8V1P/fX13nAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUWCiqgBl19LwDe6LyENuLKQszi3kwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMvMS8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzNzM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDMzMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP95MA0GCSqGSIb3DQEBCwUAA4IBAQA9 5+jwSyOJ8J9s/U0jh+XcCbarOhzflov0F0PaquGmxh3gUzhiDy5KudsApciT7hnX 4LAqdIET0P6tM+8wAg4av4/+eAoCy/hyiuK4C2TErE1FLiV9iFsPJiZJ4yf6Dx/h q3tvQP2ZoyYMO4dNr4qUYAD0Rt16A6yn3CGUCyn1iVA+Wq+ZMlCgVI+4gF0/Mwk7 x7oGTm4DLtm5ITgxsv/uG88RmVHOnW2/AOWsYjB8Lhx2p7Mg2fwduPyEWVV4xo/+ a37JrLDegfbehOg+x6YhxgTkkNzZqlFRlwMQ8Nx8YUTbhUDteD9FF5rXU3dghYvx oEv7ZJGsGo2fO3K4Px+z -----END CERTIFICATE-----Generated at Fri Oct 24 06:46:42 2025 by rpki-client