$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa File: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (raw, json) Hash identifier: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc= Subject key identifier: D8:32:34:F0:70:46:1F:01:3F:27:CE:50:D9:9E:47:77:77:E9:29:91 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 573A0FCD9EE82F099AD05D8FE16201BB81BC67BD Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa Signing time: Thu 29 May 2025 15:43:33 +0000 ROA not before: Thu 29 May 2025 15:38:33 +0000 ROA not after: Thu 28 May 2026 15:43:33 +0000 asID: 215364 IP address blocks: 2a14:7581:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 22:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3a:0f:cd:9e:e8:2f:09:9a:d0:5d:8f:e1:62:01:bb:81:bc:67:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: May 29 15:38:33 2025 GMT Not After : May 28 15:43:33 2026 GMT Subject: CN=D83234F070461F013F27CE50D99E477777E92991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:42:25:6f:69:50:fd:05:e6:c3:ad:02:64: b7:8d:94:95:06:d4:a3:f6:23:6f:59:09:b2:32:cf: ca:b1:f4:51:89:0a:0b:70:dc:b6:ed:cf:c7:3a:e9: 36:cc:b5:c8:f6:77:9c:8c:c9:64:1e:25:a4:08:a2: 17:09:88:9d:99:9c:23:56:84:92:96:ea:05:63:96: d3:cf:fe:99:22:f9:86:93:15:c4:cb:da:b9:0d:3f: 9f:1f:a1:40:b6:a7:67:81:f0:d2:af:d7:d4:cd:b2: f8:87:a8:e4:98:33:4a:5e:07:f9:23:43:16:c9:b7: b6:fe:93:22:a8:6f:4d:0c:e5:a2:22:7c:76:d2:75: 48:66:11:95:5a:df:be:f8:0e:33:82:2f:fa:51:1a: b4:fe:ff:4c:20:32:58:3c:3e:11:73:03:89:21:ae: f6:f1:b8:48:85:96:80:a1:d3:24:81:1a:1c:e0:d1: 9f:cb:07:e6:66:8c:57:1f:2a:16:3f:77:23:da:ae: fe:06:f7:5b:c8:b2:92:7f:35:af:b6:d7:f3:dc:66: 17:8d:ca:d9:ba:83:da:50:bc:89:e8:72:7f:50:9c: bf:cc:6e:5b:fb:24:c7:72:5e:f3:b4:d1:4d:db:54: 87:e2:8c:73:ef:89:bd:25:e4:3a:22:00:f2:74:ae: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:32:34:F0:70:46:1F:01:3F:27:CE:50:D9:9E:47:77:77:E9:29:91 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:e1:e8:9a:04:90:9f:f3:c1:88:d7:ce:fc:b9:02:20:c6:94: 5a:01:a3:4d:6e:2a:86:aa:b2:71:a0:c1:b2:48:e4:30:56:8a: f6:e1:8b:28:5f:4d:5a:2b:d2:9b:7e:c8:38:2b:2d:c6:8e:99: 2e:85:13:a0:c1:31:af:9e:08:65:8f:0d:54:83:1a:52:b3:7d: 44:a3:9c:ca:79:11:ad:6b:01:4a:05:1d:72:78:76:f2:43:c2: 15:6a:57:a6:b8:9c:61:f1:24:e2:cb:28:e5:5d:37:90:a9:0e: fc:19:e6:b6:cf:2c:03:ce:c6:e7:85:37:36:d7:95:22:a4:c4: d8:3b:56:a7:d2:05:89:a0:7d:4e:61:66:da:79:de:93:0b:3f: b1:4e:22:b9:b2:1f:7e:0e:7f:48:72:51:89:5e:68:a4:05:7a: 11:4e:98:33:83:2b:84:6a:9d:3b:8c:55:9e:f0:81:a6:6c:f0: 38:12:a2:86:56:6a:c8:43:74:40:24:a8:c8:24:c1:c7:91:31: 95:71:42:22:1e:6b:11:e4:7f:f0:19:42:78:b3:d8:98:8e:e9: f3:5e:af:0c:1a:6b:c1:3f:df:06:3d:cc:55:16:44:41:69:e2: 6f:4a:03:4e:c2:96:73:4e:ca:f6:87:09:55:8d:4e:0d:0f:7e: 68:64:8e:01 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUVzoPzZ7oLwma0F2P4WIBu4G8Z70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA1MjkxNTM4MzNaFw0yNjA1MjgxNTQzMzNaMDMxMTAvBgNV BAMTKEQ4MzIzNEYwNzA0NjFGMDEzRjI3Q0U1MEQ5OUU0Nzc3NzdFOTI5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtr0Ilb2lQ/QXmw60CZLeNlJUG 1KP2I29ZCbIyz8qx9FGJCgtw3Lbtz8c66TbMtcj2d5yMyWQeJaQIohcJiJ2ZnCNW hJKW6gVjltPP/pki+YaTFcTL2rkNP58foUC2p2eB8NKv19TNsviHqOSYM0peB/kj QxbJt7b+kyKob00M5aIifHbSdUhmEZVa3774DjOCL/pRGrT+/0wgMlg8PhFzA4kh rvbxuEiFloCh0ySBGhzg0Z/LB+ZmjFcfKhY/dyParv4G91vIspJ/Na+21/PcZheN ytm6g9pQvInocn9QnL/Mblv7JMdyXvO00U3bVIfijHPvib0l5DoiAPJ0riH9AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU2DI08HBGHwE/J85Q2Z5Hd3fpKZEwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzAzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1gSAwDQYJKoZIhvcNAQELBQADggEBABvh 6JoEkJ/zwYjXzvy5AiDGlFoBo01uKoaqsnGgwbJI5DBWivbhiyhfTVor0pt+yDgr LcaOmS6FE6DBMa+eCGWPDVSDGlKzfUSjnMp5Ea1rAUoFHXJ4dvJDwhVqV6a4nGHx JOLLKOVdN5CpDvwZ5rbPLAPOxueFNzbXlSKkxNg7VqfSBYmgfU5hZtp53pMLP7FO IrmyH34Of0hyUYleaKQFehFOmDODK4RqnTuMVZ7wgaZs8DgSooZWashDdEAkqMgk wceRMZVxQiIeaxHkf/AZQniz2JiO6fNerwwaa8E/3wY9zFUWREFp4m9KA07ClnNO yvaHCVWNTg0PfmhkjgE= -----END CERTIFICATE-----Generated at Fri Oct 24 06:46:38 2025 by rpki-client