$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa File: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (raw, json) Hash identifier: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU= Subject key identifier: 7B:08:36:0B:40:2A:52:2A:E5:9E:2A:95:57:3A:5D:0A:A8:B5:33:90 Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E Certificate serial: 177D50300E6C50539B31057CB5C1F8A2915058EB Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa Signing time: Thu 03 Jul 2025 19:13:29 +0000 ROA not before: Thu 03 Jul 2025 19:08:29 +0000 ROA not after: Thu 02 Jul 2026 19:13:29 +0000 asID: 214723 IP address blocks: 2a0a:6044:ba02::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 13:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7d:50:30:0e:6c:50:53:9b:31:05:7c:b5:c1:f8:a2:91:50:58:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E Validity Not Before: Jul 3 19:08:29 2025 GMT Not After : Jul 2 19:13:29 2026 GMT Subject: CN=7B08360B402A522AE59E2A95573A5D0AA8B53390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:ce:6a:ee:d0:2d:ba:e4:af:5d:a6:21:78: 42:fb:f6:b4:e8:e6:39:c9:81:2d:ee:1e:52:50:51: e0:3a:67:9a:2d:d3:ae:a0:c0:03:66:f5:c0:14:49: 61:ec:7a:4c:69:2d:b9:3e:05:7a:b6:e0:f2:24:18: 86:f6:61:e7:a3:ce:36:c1:7d:55:9c:5f:7b:ca:ff: 97:61:b4:48:f7:3b:30:fe:b6:42:09:c8:b5:e7:29: 82:4b:66:ff:fa:63:85:88:09:e3:47:1f:02:08:6a: 27:dd:c5:e2:f9:03:d9:40:9a:4e:08:02:5d:90:9f: 54:73:02:f0:20:0c:2e:83:76:be:7b:4a:bf:9f:ae: f9:08:af:db:c9:1c:c5:6e:eb:8f:3d:5a:1a:e7:63: 5e:15:6b:07:eb:ce:ab:a5:5a:46:23:8f:ed:4a:2d: da:15:30:b7:46:50:db:f4:d6:c8:a0:a6:10:4b:40: 30:b8:b2:bb:b3:be:da:83:10:87:5a:e2:e7:cc:b8: a7:5f:e0:f7:73:76:c9:a2:8c:08:a9:7e:a4:9e:72: ca:d3:1d:56:73:14:60:a5:17:dc:2a:8c:cd:36:4f: ec:db:93:f0:b8:56:f7:35:6c:e3:83:85:af:9b:ba: b1:82:78:d4:be:6b:24:66:cb:7c:a0:46:44:bc:e0: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:08:36:0B:40:2A:52:2A:E5:9E:2A:95:57:3A:5D:0A:A8:B5:33:90 X509v3 Authority Key Identifier: keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba02::/47 Signature Algorithm: sha256WithRSAEncryption 74:95:3b:41:0e:56:d4:cb:1b:94:3e:0c:a8:0c:d9:b0:64:6a: 11:5f:32:56:27:db:49:b8:2e:fc:a0:f5:bb:08:20:4d:6d:d5: f8:eb:08:e3:dd:ea:a8:08:f2:7f:7c:38:c4:4e:63:ea:66:1b: 9d:b7:14:f1:15:e8:a2:9a:67:40:4e:7c:3c:93:31:17:e1:b0: 35:fa:55:b8:dd:2a:71:cb:d1:84:f1:a0:7a:04:cf:7d:12:5d: 9d:ab:aa:8f:f2:39:72:91:da:b9:2d:17:af:df:07:87:08:4d: 34:1f:29:65:2c:e2:6b:6d:ca:72:d1:d4:6c:ad:8c:98:92:0a: 8a:07:97:34:85:67:c8:28:9c:5f:7d:02:88:54:60:2c:2c:7b: 45:77:6c:a3:f4:5b:c1:84:7b:46:17:90:5c:c5:5a:9c:4c:db: 13:64:f2:3c:e9:6a:99:ef:97:9f:be:f2:12:3c:9a:e3:e4:27: 70:8e:1c:dc:8f:95:32:41:3b:5f:b7:9c:95:ed:1e:b5:e5:e9: 2c:07:1d:52:31:aa:0a:38:04:2b:f0:87:d0:ca:54:33:25:3e: f6:8c:a4:52:8a:95:59:8a:e2:e4:5b:89:16:13:bf:bf:c5:53: 15:a5:83:fa:c9:c6:2b:9b:b2:65:82:d2:a4:a4:93:4b:ee:c1: 15:8a:14:25 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgIUF31QMA5sUFObMQV8tcH4opFQWOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3 MkY2ODIyRTAeFw0yNTA3MDMxOTA4MjlaFw0yNjA3MDIxOTEzMjlaMDMxMTAvBgNV BAMTKDdCMDgzNjBCNDAyQTUyMkFFNTlFMkE5NTU3M0E1RDBBQThCNTMzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNyM5q7tAtuuSvXaYheEL79rTo 5jnJgS3uHlJQUeA6Z5ot066gwANm9cAUSWHsekxpLbk+BXq24PIkGIb2YeejzjbB fVWcX3vK/5dhtEj3OzD+tkIJyLXnKYJLZv/6Y4WICeNHHwIIaifdxeL5A9lAmk4I Al2Qn1RzAvAgDC6Ddr57Sr+frvkIr9vJHMVu6489WhrnY14VawfrzqulWkYjj+1K LdoVMLdGUNv01sigphBLQDC4sruzvtqDEIda4ufMuKdf4PdzdsmijAipfqSecsrT HVZzFGClF9wqjM02T+zbk/C4Vvc1bOODha+burGCeNS+ayRmy3ygRkS84JobAgMB AAGjggJVMIICUTAdBgNVHQ4EFgQUewg2C0AqUirlniqVVzpdCqi1M5AwHwYDVR0j BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB NzM2NUVFNTcyRjY4MjJFLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvNi8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyNjEzMDMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM0MzczMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKgpgRLoCMA0GCSqGSIb3DQEBCwUAA4IBAQB0 lTtBDlbUyxuUPgyoDNmwZGoRXzJWJ9tJuC78oPW7CCBNbdX46wjj3eqoCPJ/fDjE TmPqZhudtxTxFeiimmdATnw8kzEX4bA1+lW43Spxy9GE8aB6BM99El2dq6qP8jly kdq5LRev3weHCE00HyllLOJrbcpy0dRsrYyYkgqKB5c0hWfIKJxffQKIVGAsLHtF d2yj9FvBhHtGF5BcxVqcTNsTZPI86WqZ75efvvISPJrj5Cdwjhzcj5UyQTtft5yV 7R615eksBx1SMaoKOAQr8IfQylQzJT72jKRSipVZiuLkW4kWE7+/xVMVpYP6ycYr m7JlgtKkpJNL7sEVihQl -----END CERTIFICATE-----Generated at Sun Jul 6 05:29:37 2025 by rpki-client