$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa File: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (raw, json) Hash identifier: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M= Subject key identifier: 5A:FB:91:30:2E:35:9C:C1:2A:C4:C1:08:8E:FD:5A:4D:89:61:0C:1E Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 30DE66BEAD88D5EB8470FC8197637F9E5B74DA39 Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa Signing time: Mon 20 Oct 2025 19:14:36 +0000 ROA not before: Mon 20 Oct 2025 19:09:36 +0000 ROA not after: Mon 19 Oct 2026 19:14:36 +0000 asID: 204871 IP address blocks: 2a14:7581:700::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:de:66:be:ad:88:d5:eb:84:70:fc:81:97:63:7f:9e:5b:74:da:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Oct 20 19:09:36 2025 GMT Not After : Oct 19 19:14:36 2026 GMT Subject: CN=5AFB91302E359CC12AC4C1088EFD5A4D89610C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:0f:8a:77:a9:ec:d7:28:3b:50:cc:9e:cd: 18:48:da:9a:c9:4c:f3:d4:b1:a6:19:dd:9e:c1:13: 15:82:18:c0:0f:3a:58:6f:e2:a0:46:38:a7:f8:67: 52:3d:6d:89:a1:70:f9:2a:98:b1:00:3c:12:67:8a: 0f:f6:e5:71:35:5f:7d:00:ef:b9:f3:16:9e:17:0b: d8:a8:34:bf:e2:12:17:43:00:85:17:92:e8:59:f0: 32:97:ec:84:43:88:a2:f0:fd:13:e1:25:18:bb:86: 38:e6:a2:21:7b:73:3d:95:d1:64:b6:8b:7e:cd:bd: bf:de:f6:7e:75:5d:46:b5:60:ec:09:40:d8:af:4b: 50:a0:90:87:12:61:30:2d:be:23:65:01:7f:28:d9: 5c:a5:de:30:84:df:f8:68:66:c1:3e:fe:1f:db:a2: d4:bd:17:55:76:ba:8f:ef:1d:04:f1:85:33:3d:9d: 06:44:29:8d:f4:66:57:ef:f3:e7:9a:fd:a0:ec:92: 8e:87:e8:85:61:b1:fd:dc:01:c1:5b:4d:42:3d:5e: f9:84:cc:64:8f:0e:47:ed:41:15:9c:5d:01:15:d5: bf:9e:b5:a3:36:07:b8:77:e3:f7:db:ab:e7:3e:b2: 4f:f1:88:60:c9:b4:d2:64:56:77:06:26:b4:32:fd: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FB:91:30:2E:35:9C:C1:2A:C4:C1:08:8E:FD:5A:4D:89:61:0C:1E X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:700::/48 Signature Algorithm: sha256WithRSAEncryption 1a:6a:3d:f7:ee:5e:4a:e0:e2:c2:b8:89:b0:02:67:33:be:3a: b2:19:26:74:e9:a2:10:12:e5:a5:86:44:09:40:85:21:a1:87: 7d:c2:92:ff:6f:32:0d:27:03:06:ae:09:1f:c7:6d:62:cb:cd: a4:ae:f3:4a:8f:88:e9:8a:f1:58:3a:c2:4e:90:74:62:d3:56: 20:40:19:d8:40:49:cb:aa:a5:26:ea:06:65:28:16:d1:f3:54: ce:82:a5:d2:50:5f:36:d1:9e:56:d4:ae:84:41:b1:00:79:8c: 8f:e2:ff:19:b0:29:5d:64:bf:1c:f4:00:29:c1:b2:82:cd:af: 81:2e:76:5e:7e:1f:f0:ff:5e:07:a5:d6:88:59:b0:24:77:59: ac:f1:d1:5f:7b:79:77:de:c0:07:e3:d1:54:07:51:c8:91:36: 95:de:ec:ba:5a:57:8c:94:91:26:51:1b:55:19:7d:8b:f1:f1: 7c:e9:e7:90:32:c9:0e:75:bb:b0:fa:12:75:65:3f:90:78:4b: a5:ee:32:7a:1c:fd:24:fa:cb:42:68:9e:94:d5:3a:89:f5:ae: 15:ff:a9:88:02:35:19:2a:b2:2f:6d:49:bc:31:ef:d8:2f:0c: db:ec:88:68:77:2f:47:41:08:e4:f8:72:fd:62:35:d7:7b:1c: 0b:35:84:7b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUMN5mvq2I1euEcPyBl2N/nlt02jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNTEwMjAxOTA5MzZaFw0yNjEwMTkxOTE0MzZaMDMxMTAvBgNV BAMTKDVBRkI5MTMwMkUzNTlDQzEyQUM0QzEwODhFRkQ1QTREODk2MTBDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1w+Kd6ns1yg7UMyezRhI2prJ TPPUsaYZ3Z7BExWCGMAPOlhv4qBGOKf4Z1I9bYmhcPkqmLEAPBJnig/25XE1X30A 77nzFp4XC9ioNL/iEhdDAIUXkuhZ8DKX7IRDiKLw/RPhJRi7hjjmoiF7cz2V0WS2 i37Nvb/e9n51XUa1YOwJQNivS1CgkIcSYTAtviNlAX8o2Vyl3jCE3/hoZsE+/h/b otS9F1V2uo/vHQTxhTM9nQZEKY30Zlfv8+ea/aDsko6H6IVhsf3cAcFbTUI9XvmE zGSPDkftQRWcXQEV1b+etaM2B7h34/fbq+c+sk/xiGDJtNJkVncGJrQy/RwfAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUWvuRMC41nMEqxMEIjv1aTYlhDB4wHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmI2ODkwZC0wZDZiLTRlYTktYTJlZi05MmQzNGEzYWU2NGQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM3MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAz NDM4MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYEHADANBgkqhkiG9w0BAQsFAAOCAQEAGmo9 9+5eSuDiwriJsAJnM746shkmdOmiEBLlpYZECUCFIaGHfcKS/28yDScDBq4JH8dt YsvNpK7zSo+I6YrxWDrCTpB0YtNWIEAZ2EBJy6qlJuoGZSgW0fNUzoKl0lBfNtGe VtSuhEGxAHmMj+L/GbApXWS/HPQAKcGygs2vgS52Xn4f8P9eB6XWiFmwJHdZrPHR X3t5d97AB+PRVAdRyJE2ld7sulpXjJSRJlEbVRl9i/HxfOnnkDLJDnW7sPoSdWU/ kHhLpe4yehz9JPrLQmielNU6ifWuFf+piAI1GSqyL21JvDHv2C8M2+yIaHcvR0EI 5Phy/WI113scCzWEew== -----END CERTIFICATE-----Generated at Fri Oct 24 16:25:47 2025 by rpki-client