$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656438303a3a2f34362d3438203d3e20323135393536.roa File: 326131343a373538303a656438303a3a2f34362d3438203d3e20323135393536.roa (raw, json) Hash identifier: 2zDy/eUziglFV/9EItor0la5XQ2kOtjIFeGeY68GANA= Subject key identifier: 5E:1D:70:9E:E6:7E:B1:A1:A9:09:3A:BF:89:CB:E4:CF:B1:EA:96:15 Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Certificate serial: 13D5607F75138FB18F54A15DA331401ED59347F2 Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656438303a3a2f34362d3438203d3e20323135393536.roa Signing time: Sun 01 Jun 2025 22:08:03 +0000 ROA not before: Sun 01 Jun 2025 22:03:03 +0000 ROA not after: Sun 31 May 2026 22:08:03 +0000 asID: 215956 IP address blocks: 2a14:7580:ed80::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d5:60:7f:75:13:8f:b1:8f:54:a1:5d:a3:31:40:1e:d5:93:47:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B Validity Not Before: Jun 1 22:03:03 2025 GMT Not After : May 31 22:08:03 2026 GMT Subject: CN=5E1D709EE67EB1A1A9093ABF89CBE4CFB1EA9615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:9b:b9:61:46:a6:da:ae:44:ea:51:55:0d: b0:4e:39:ae:d4:ef:2d:fd:a7:1a:06:c6:0a:2a:e7: 9b:2b:e1:70:9c:1a:22:09:58:84:ad:eb:8a:d7:95: 0f:48:44:45:e1:77:7b:c3:3b:25:f4:08:62:58:4d: ad:a3:9a:12:f1:50:72:ea:4c:1a:60:57:48:c3:44: b3:db:46:26:63:cc:4b:db:d2:d4:53:b4:f8:e2:47: 4a:4c:0e:31:b9:ff:a1:af:77:b0:33:af:f0:f0:14: 24:cc:7e:83:6d:05:d1:2d:24:58:b7:83:d6:e8:61: 36:3a:dd:33:5d:2a:56:a3:41:d9:c6:cd:b1:f5:fa: d6:1f:9b:a5:a7:55:09:44:b5:b0:34:cb:bd:30:04: 69:9d:35:7e:d5:23:af:88:a3:3e:6d:7b:7d:f6:0f: ea:e8:d5:ac:7d:29:ed:a9:e1:f1:55:b6:a3:8f:9f: e2:30:b2:57:5c:e6:73:f9:a2:95:1e:6d:7d:66:07: d2:dc:d3:a3:72:de:a5:67:e3:57:6a:b4:e3:c0:03: 8d:e7:53:69:7b:f9:2f:e7:69:11:db:4c:8e:46:72: c1:0e:6d:10:0f:72:be:f4:eb:cb:2a:5c:c3:7d:45: 9c:4e:ca:49:aa:c2:89:f9:30:ce:f6:ea:e9:b8:90: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1D:70:9E:E6:7E:B1:A1:A9:09:3A:BF:89:CB:E4:CF:B1:EA:96:15 X509v3 Authority Key Identifier: keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656438303a3a2f34362d3438203d3e20323135393536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ed80::/46 Signature Algorithm: sha256WithRSAEncryption 8a:2f:6b:04:68:28:86:f8:35:0b:6a:e6:15:77:ac:4b:45:85: 8d:64:64:2e:87:67:d2:01:fb:79:80:b8:a1:21:c2:3a:d2:eb: dc:d5:03:3a:a2:8e:81:62:de:ea:6c:89:2c:2e:41:3e:d1:86: bf:8b:49:59:59:be:b3:c7:63:46:c3:72:65:84:9d:45:8a:14: 90:93:4c:2a:db:23:83:31:e9:a4:64:fa:21:dc:1b:da:a8:17: b9:8d:f4:3a:d0:ed:8b:76:c3:b7:4e:62:84:37:54:7b:28:a2: dd:19:5e:65:52:ac:79:5c:58:7c:fe:06:69:89:c6:52:ba:19: 7b:bc:b4:9b:82:95:89:40:42:50:a4:ab:af:e4:dc:89:4c:e8: b9:49:bc:24:f1:91:84:ef:fb:36:21:2b:ea:06:9e:11:e0:54: 89:b8:78:79:e1:c3:85:6c:57:4f:3d:51:b5:7c:f3:ee:7a:53: 9c:ce:b0:f5:4f:21:aa:f4:4c:dc:8e:6f:83:fb:5d:d3:87:a8: 35:43:aa:94:4f:59:b6:72:42:21:85:84:27:4c:81:a3:35:9d: 5e:27:a0:83:ef:78:a5:89:e4:25:80:db:e5:e4:7f:ca:71:50: e5:78:27:2e:c0:80:0f:a8:3f:87:3e:b0:cb:2b:ea:81:d2:9e: 69:43:73:91 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUE9Vgf3UTj7GPVKFdozFAHtWTR/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5 QjhEOTAyQjAeFw0yNTA2MDEyMjAzMDNaFw0yNjA1MzEyMjA4MDNaMDMxMTAvBgNV BAMTKDVFMUQ3MDlFRTY3RUIxQTFBOTA5M0FCRjg5Q0JFNENGQjFFQTk2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mZu5YUam2q5E6lFVDbBOOa7U 7y39pxoGxgoq55sr4XCcGiIJWISt64rXlQ9IREXhd3vDOyX0CGJYTa2jmhLxUHLq TBpgV0jDRLPbRiZjzEvb0tRTtPjiR0pMDjG5/6Gvd7Azr/DwFCTMfoNtBdEtJFi3 g9boYTY63TNdKlajQdnGzbH1+tYfm6WnVQlEtbA0y70wBGmdNX7VI6+Ioz5te332 D+ro1ax9Ke2p4fFVtqOPn+Iwsldc5nP5opUebX1mB9Lc06Ny3qVn41dqtOPAA43n U2l7+S/naRHbTI5GcsEObRAPcr7068sqXMN9RZxOykmqwon5MM726um4kBqbAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUXh1wnuZ+saGpCTq/icvkz7HqlhUwHwYDVR0j BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY1NjQzODMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO2AMA0GCSqGSIb3DQEBCwUAA4IBAQCK L2sEaCiG+DULauYVd6xLRYWNZGQuh2fSAft5gLihIcI60uvc1QM6oo6BYt7qbIks LkE+0Ya/i0lZWb6zx2NGw3JlhJ1FihSQk0wq2yODMemkZPoh3BvaqBe5jfQ60O2L dsO3TmKEN1R7KKLdGV5lUqx5XFh8/gZpicZSuhl7vLSbgpWJQEJQpKuv5NyJTOi5 Sbwk8ZGE7/s2ISvqBp4R4FSJuHh54cOFbFdPPVG1fPPuelOczrD1TyGq9Ezcjm+D +13Th6g1Q6qUT1m2ckIhhYQnTIGjNZ1eJ6CD73ilieQlgNvl5H/KcVDleCcuwIAP qD+HPrDLK+qB0p5pQ3OR -----END CERTIFICATE-----Generated at Fri Oct 24 16:39:56 2025 by rpki-client