$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434343a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656434343a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: JOuETj6IQbn1/Yf+ST0Be/5xwsZNFtW+uQt+p/VtXZU= Subject key identifier: 41:7C:51:A2:E2:CB:8C:49:46:48:11:1C:9C:50:52:16:E9:D1:1C:DE Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 2C31B94D41D2E33B1BF865769F45A32C78071D43 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434343a3a2f34362d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:14:33 +0000 ROA not before: Sat 08 Mar 2025 00:09:33 +0000 ROA not after: Sat 07 Mar 2026 00:14:33 +0000 asID: 215956 IP address blocks: 2a14:7580:ed44::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:31:b9:4d:41:d2:e3:3b:1b:f8:65:76:9f:45:a3:2c:78:07:1d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:09:33 2025 GMT Not After : Mar 7 00:14:33 2026 GMT Subject: CN=417C51A2E2CB8C494648111C9C505216E9D11CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:23:ab:57:2a:d8:6d:93:8f:fe:92:b3:6d: 1d:6b:e3:b4:98:d8:b2:1a:84:5a:c2:38:2b:93:52: e0:a1:ea:69:db:87:33:c6:8c:e1:97:b8:bc:45:a1: a6:8b:b1:c0:29:d9:a3:e9:e8:c2:01:f4:d1:73:89: 45:bf:b6:8c:f7:df:52:c0:57:7e:04:42:66:a9:31: 1f:13:de:e2:45:13:67:b6:dd:49:3d:5e:02:ec:63: 2a:af:33:c6:fc:e1:e8:09:7c:3c:94:2e:1d:ee:db: a3:62:47:6e:f9:1c:06:4f:55:f6:1f:ce:d9:79:5f: 23:38:48:65:54:4d:66:b8:82:e5:48:cc:7a:a5:ab: eb:f8:a1:f0:a5:7c:2c:8e:5b:18:c7:56:69:2a:1b: d0:fe:4f:a2:62:d7:50:e1:f6:b9:8b:b6:c2:e2:aa: f8:30:33:ea:77:7e:76:2f:cc:58:3d:a5:2c:5f:d5: ac:c9:39:f8:70:40:b7:1b:fd:35:1d:b0:89:35:e8: a7:10:b1:a1:b2:9e:f9:19:d5:c5:81:e4:e8:59:b8: ed:1d:96:d4:be:ce:33:f0:45:c2:0b:cd:24:74:71: 40:9a:16:65:0a:21:ed:79:1e:3c:e5:90:15:b0:89: 63:f3:6e:06:ed:0b:3a:52:52:5c:56:eb:a3:24:58: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7C:51:A2:E2:CB:8C:49:46:48:11:1C:9C:50:52:16:E9:D1:1C:DE X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434343a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed44::/46 Signature Algorithm: sha256WithRSAEncryption 7c:b5:60:7b:0e:63:a8:59:0f:ec:57:ed:5b:67:2f:88:09:8d: 10:24:8b:fb:f4:7f:74:a0:86:8d:a6:3b:f9:f2:6b:57:ae:60: 0f:b9:64:09:cf:58:c4:4a:0d:7a:4b:93:67:28:a1:4a:3c:c3: 43:dd:3b:59:f3:44:88:57:d0:3e:0a:90:53:53:ec:3e:dc:b9: 51:84:dd:a4:bc:c8:0f:4b:f4:1b:e0:e6:d0:28:7a:30:ea:0c: 24:6c:89:93:fb:d4:94:96:2c:f3:a4:1f:1b:9d:df:30:49:49: f1:4b:6e:3d:8a:b4:b2:f9:ca:77:26:61:de:57:da:78:ac:a8: 32:ac:7e:4f:4b:f5:7f:30:db:b4:43:8f:6a:43:bb:99:db:f3: f8:ca:71:59:13:02:7a:72:fc:2e:59:9e:d9:b3:7b:d2:0b:ca: 25:49:ba:8a:b2:12:b1:9b:e8:6d:89:0c:f0:d8:72:cb:51:31: 7b:8c:26:30:5c:65:3b:e7:aa:3c:0a:fa:ac:1a:31:55:e5:e3: ec:eb:ec:59:c7:30:49:60:5e:f5:b3:0d:4c:2e:12:b2:fc:16: ab:70:5a:28:fa:ab:44:ed:1d:e1:3f:c6:d0:f2:f5:e9:84:fe: bb:fd:c4:60:87:54:a6:e2:8c:25:d1:27:03:51:69:65:f5:1c: 54:54:4f:34 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULDG5TUHS4zsb+GV2n0WjLHgHHUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDA5MzNaFw0yNjAzMDcwMDE0MzNaMDMxMTAvBgNV BAMTKDQxN0M1MUEyRTJDQjhDNDk0NjQ4MTExQzlDNTA1MjE2RTlEMTFDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPiOrVyrYbZOP/pKzbR1r47SY 2LIahFrCOCuTUuCh6mnbhzPGjOGXuLxFoaaLscAp2aPp6MIB9NFziUW/toz331LA V34EQmapMR8T3uJFE2e23Uk9XgLsYyqvM8b84egJfDyULh3u26NiR275HAZPVfYf ztl5XyM4SGVUTWa4guVIzHqlq+v4ofClfCyOWxjHVmkqG9D+T6Ji11Dh9rmLtsLi qvgwM+p3fnYvzFg9pSxf1azJOfhwQLcb/TUdsIk16KcQsaGynvkZ1cWB5OhZuO0d ltS+zjPwRcILzSR0cUCaFmUKIe15HjzlkBWwiWPzbgbtCzpSUlxW66MkWB4ZAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUQXxRouLLjElGSBEcnFBSFunRHN4wHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzNDM0M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO1EMA0GCSqGSIb3DQEBCwUAA4IBAQB8 tWB7DmOoWQ/sV+1bZy+ICY0QJIv79H90oIaNpjv58mtXrmAPuWQJz1jESg16S5Nn KKFKPMND3TtZ80SIV9A+CpBTU+w+3LlRhN2kvMgPS/Qb4ObQKHow6gwkbImT+9SU lizzpB8bnd8wSUnxS249irSy+cp3JmHeV9p4rKgyrH5PS/V/MNu0Q49qQ7uZ2/P4 ynFZEwJ6cvwuWZ7Zs3vSC8olSbqKshKxm+htiQzw2HLLUTF7jCYwXGU756o8Cvqs GjFV5ePs6+xZxzBJYF71sw1MLhKy/BarcFoo+qtE7R3hP8bQ8vXphP67/cRgh1Sm 4owl0ScDUWll9RxUVE80 -----END CERTIFICATE-----Generated at Fri Oct 24 16:38:46 2025 by rpki-client