$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: QPcM5CYzg+4kDoEfgn4tUu3mxl08r9G9K5BzbV3OQh8= Subject key identifier: 7B:25:35:8C:11:31:3C:8B:80:F0:3B:60:6D:25:69:FF:DD:78:BB:23 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 5BBD9508EE6CF7BB30EA0A74171C60B004B2C4AE Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa Signing time: Sat 08 Mar 2025 00:12:45 +0000 ROA not before: Sat 08 Mar 2025 00:07:45 +0000 ROA not after: Sat 07 Mar 2026 00:12:45 +0000 asID: 215956 IP address blocks: 2a14:7580:ed54::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bd:95:08:ee:6c:f7:bb:30:ea:0a:74:17:1c:60:b0:04:b2:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Mar 8 00:07:45 2025 GMT Not After : Mar 7 00:12:45 2026 GMT Subject: CN=7B25358C11313C8B80F03B606D2569FFDD78BB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:d7:dc:91:e5:3e:0f:d3:99:af:85:09:8d: a4:98:41:da:c0:7e:b8:11:a8:5a:f4:e3:5c:12:45: f7:72:a3:13:71:57:2f:7c:c3:0a:e0:7a:76:0f:93: ea:9a:d9:7d:8a:ed:7e:7a:bd:d0:e2:41:e4:22:b7: bd:39:87:19:03:c8:83:fa:d5:3d:e2:f5:8c:de:d7: ec:7a:d0:7a:df:dc:12:39:8b:b9:45:44:3a:60:3d: 22:4e:9a:4d:9f:25:58:f3:39:b0:a1:13:6e:6c:54: 6e:33:b6:2e:f8:fe:62:cb:ba:bd:8a:fe:6a:3f:74: db:6c:11:ce:76:65:bf:6e:ae:65:14:37:63:df:5b: a5:59:47:0a:5d:92:f4:2f:1c:6e:60:60:b6:e6:4f: a1:91:56:74:d4:4f:60:27:4b:d4:8f:ed:29:c5:84: cb:4d:3a:78:42:61:d5:88:49:d9:7c:e0:1b:f6:b3: 66:48:b9:8a:f9:a5:df:46:13:5d:1e:72:9f:8a:0d: 5e:7c:82:ce:7b:51:53:44:20:1b:5a:17:fb:37:16: 46:ef:de:0e:37:1e:34:70:47:17:06:f5:d9:5f:1a: 94:46:64:18:bf:f2:71:23:b6:05:bc:86:1a:eb:02: 67:ba:31:4c:0d:cb:92:cb:af:fa:8b:21:b1:ee:d1: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:25:35:8C:11:31:3C:8B:80:F0:3B:60:6D:25:69:FF:DD:78:BB:23 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435343a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed54::/46 Signature Algorithm: sha256WithRSAEncryption 62:aa:c5:b0:d7:48:74:db:f8:90:6d:40:f5:0f:1c:00:f7:a1: 9b:15:16:65:00:cf:52:ce:18:55:10:dd:ae:6e:af:64:8f:7d: 1a:4f:48:03:83:0c:a4:72:f4:a8:27:0a:0e:2b:fc:a9:b3:a5: e0:2d:36:3f:19:3c:82:f8:6e:03:43:9f:e2:04:43:69:b3:d5: 4e:54:97:00:7e:19:68:6c:39:05:79:6b:52:4e:03:eb:c7:db: 61:6a:91:69:3c:00:ca:52:48:3b:ed:87:9b:95:74:f8:9f:38: 3d:55:6b:59:73:1f:e8:92:39:26:06:a4:c3:58:6f:cc:f1:d7: f9:db:44:db:a7:42:e2:79:c6:84:2c:a1:1c:71:59:46:b9:34: 5b:d1:b5:d7:4a:ed:d1:f2:8f:ac:36:fe:e5:f9:d2:cf:19:b6: 32:f5:70:33:f6:d8:55:7b:43:db:97:94:e9:84:6d:a8:1c:ec: 5a:5c:eb:5e:d4:70:e4:97:0f:9d:e5:cf:8c:60:a9:c3:0c:44: 7f:d7:27:3c:7a:bb:ad:61:ba:97:f9:3e:6e:28:1c:c5:3c:ae: 19:4d:38:fe:89:c5:c5:27:5b:fe:00:be:dc:a5:ec:ad:18:19: 47:5a:24:5b:39:01:ad:49:3c:9d:e5:ac:2c:87:52:11:9f:bd: aa:af:85:66 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUW72VCO5s97sw6gp0FxxgsASyxK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTAzMDgwMDA3NDVaFw0yNjAzMDcwMDEyNDVaMDMxMTAvBgNV BAMTKDdCMjUzNThDMTEzMTNDOEI4MEYwM0I2MDZEMjU2OUZGREQ3OEJCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VNfckeU+D9OZr4UJjaSYQdrA frgRqFr041wSRfdyoxNxVy98wwrgenYPk+qa2X2K7X56vdDiQeQit705hxkDyIP6 1T3i9Yze1+x60Hrf3BI5i7lFRDpgPSJOmk2fJVjzObChE25sVG4zti74/mLLur2K /mo/dNtsEc52Zb9urmUUN2PfW6VZRwpdkvQvHG5gYLbmT6GRVnTUT2AnS9SP7SnF hMtNOnhCYdWISdl84Bv2s2ZIuYr5pd9GE10ecp+KDV58gs57UVNEIBtaF/s3Fkbv 3g43HjRwRxcG9dlfGpRGZBi/8nEjtgW8hhrrAme6MUwNy5LLr/qLIbHu0cv3AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUeyU1jBExPIuA8DtgbSVp/914uyMwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzNTM0M2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO1UMA0GCSqGSIb3DQEBCwUAA4IBAQBi qsWw10h02/iQbUD1DxwA96GbFRZlAM9SzhhVEN2ubq9kj30aT0gDgwykcvSoJwoO K/yps6XgLTY/GTyC+G4DQ5/iBENps9VOVJcAfhlobDkFeWtSTgPrx9thapFpPADK Ukg77YeblXT4nzg9VWtZcx/okjkmBqTDWG/M8df520Tbp0LiecaELKEccVlGuTRb 0bXXSu3R8o+sNv7l+dLPGbYy9XAz9thVe0Pbl5TphG2oHOxaXOte1HDklw+d5c+M YKnDDER/1yc8erutYbqX+T5uKBzFPK4ZTTj+icXFJ1v+AL7cpeytGBlHWiRbOQGt STyd5awsh1IRn72qr4Vm -----END CERTIFICATE-----Generated at Fri Oct 24 16:38:46 2025 by rpki-client