$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa File: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (raw, json) Hash identifier: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius= Subject key identifier: 1E:85:FC:4D:58:DB:9C:BB:AA:C3:3F:4E:56:FE:7C:E2:6B:42:2E:A7 Certificate issuer: /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Certificate serial: 1D99D5FD2407EE4979B0060381E506454399A085 Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa Signing time: Sat 16 Aug 2025 17:29:53 +0000 ROA not before: Sat 16 Aug 2025 17:24:53 +0000 ROA not after: Sat 15 Aug 2026 17:29:53 +0000 asID: 14447 IP address blocks: 2a14:7581:2500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 22:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:99:d5:fd:24:07:ee:49:79:b0:06:03:81:e5:06:45:43:99:a0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852 Validity Not Before: Aug 16 17:24:53 2025 GMT Not After : Aug 15 17:29:53 2026 GMT Subject: CN=1E85FC4D58DB9CBBAAC33F4E56FE7CE26B422EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:92:d0:7a:d4:03:30:45:67:93:b8:c8:1d: 61:16:60:8b:86:47:f6:bc:d5:03:2a:d8:1d:77:17: ea:a2:f4:47:dd:ea:44:ff:9d:30:41:08:c3:34:4f: 67:c2:4c:f4:7c:84:be:67:aa:d5:df:66:de:1b:6f: 30:b1:8a:0c:29:81:03:6b:d6:a7:7a:af:85:9a:40: 23:18:0c:ec:15:9e:c5:9a:fe:73:14:ba:ac:54:7f: d3:cb:27:c2:e9:36:f0:5e:89:a5:ba:a4:ae:46:1e: b8:c3:60:30:83:ed:9b:a2:08:1a:4c:09:67:61:15: e5:12:83:11:99:98:78:16:84:bf:8a:d8:a8:cc:04: a0:d3:d4:62:8f:fb:ee:5a:bc:cf:01:f4:d5:c6:46: d9:bd:ba:9f:00:b5:77:9e:27:ed:66:0c:1c:dc:8f: 90:a3:de:06:6a:bd:22:e2:79:5e:1a:6d:db:77:87: 2f:18:63:fd:db:aa:f8:be:b7:5b:17:3d:a3:bf:31: b7:bc:95:e6:c9:c6:22:65:b8:cd:99:2e:7c:b1:ae: 14:db:e7:8d:50:0b:b7:1b:08:c4:94:d7:50:fd:88: 1f:91:fe:c4:18:9a:5f:b3:ec:5d:f6:8d:94:8f:b6: cc:4e:9b:50:b3:3d:a8:4f:45:ca:4b:02:6b:78:06: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:85:FC:4D:58:DB:9C:BB:AA:C3:3F:4E:56:FE:7C:E2:6B:42:2E:A7 X509v3 Authority Key Identifier: keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2500::/40 Signature Algorithm: sha256WithRSAEncryption 31:be:43:ca:7b:39:5e:8c:aa:d8:12:07:aa:c2:82:10:14:56: 6f:2e:7d:6d:3a:cf:8f:ee:8d:4d:f9:4b:f0:74:1e:98:fe:a4: c9:ef:95:98:09:01:7c:15:84:44:f0:14:a8:21:a0:3c:c9:fa: b3:e2:6a:88:8f:3d:44:63:6f:13:89:0d:c9:94:c2:32:61:08: 63:72:fe:fe:55:b4:30:31:87:bd:7f:59:62:bd:c1:6d:8e:8f: 0a:8b:21:71:c6:83:c9:72:f8:29:f8:21:1e:2c:fd:7d:13:b0: 96:0a:19:ba:a8:5c:09:2c:c9:52:d8:bd:9d:5c:67:37:9f:fb: ed:e2:88:8b:8a:40:12:e0:a7:1e:05:32:b9:35:4e:f2:d2:bb: 76:c8:75:b5:48:7e:e4:ba:b5:25:a0:6b:13:03:30:cb:e3:f7: 24:30:ca:50:27:f8:ae:27:ce:af:8c:12:28:fc:42:f3:fa:25: c9:89:73:b2:ee:24:61:4d:b9:51:95:9f:85:95:6b:c2:5b:2c: 0f:d7:1e:fd:dd:ef:04:08:8f:13:12:d8:15:c4:3b:ea:51:5e: 9c:c0:d4:e8:fc:cf:0f:58:ae:b2:7b:78:ab:8f:46:ee:0f:c1: 68:b4:e5:fe:b9:65:24:c9:d4:c6:c8:eb:cc:d1:a6:0e:ec:91: 6b:ef:03:a7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHZnV/SQH7kl5sAYDgeUGRUOZoIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG RjNDMjg1MjAeFw0yNTA4MTYxNzI0NTNaFw0yNjA4MTUxNzI5NTNaMDMxMTAvBgNV BAMTKDFFODVGQzRENThEQjlDQkJBQUMzM0Y0RTU2RkU3Q0UyNkI0MjJFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhZLQetQDMEVnk7jIHWEWYIuG R/a81QMq2B13F+qi9Efd6kT/nTBBCMM0T2fCTPR8hL5nqtXfZt4bbzCxigwpgQNr 1qd6r4WaQCMYDOwVnsWa/nMUuqxUf9PLJ8LpNvBeiaW6pK5GHrjDYDCD7ZuiCBpM CWdhFeUSgxGZmHgWhL+K2KjMBKDT1GKP++5avM8B9NXGRtm9up8AtXeeJ+1mDBzc j5Cj3gZqvSLieV4abdt3hy8YY/3bqvi+t1sXPaO/Mbe8lebJxiJluM2ZLnyxrhTb 541QC7cbCMSU11D9iB+R/sQYml+z7F32jZSPtsxOm1CzPahPRcpLAmt4BoT9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHoX8TVjbnLuqwz9OVv584mtCLqcwHwYDVR0j BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx NkM2Qjc0N0ZGM0MyODUyLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mYWRlYmI5ZC0zM2NjLTQyOWItYWEzNS0xMDYzNGE4YjFkZDQvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEz NDM0MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACoUdYElMA0GCSqGSIb3DQEBCwUAA4IBAQAxvkPK ezlejKrYEgeqwoIQFFZvLn1tOs+P7o1N+UvwdB6Y/qTJ75WYCQF8FYRE8BSoIaA8 yfqz4mqIjz1EY28TiQ3JlMIyYQhjcv7+VbQwMYe9f1livcFtjo8KiyFxxoPJcvgp +CEeLP19E7CWChm6qFwJLMlS2L2dXGc3n/vt4oiLikAS4KceBTK5NU7y0rt2yHW1 SH7kurUloGsTAzDL4/ckMMpQJ/iuJ86vjBIo/ELz+iXJiXOy7iRhTblRlZ+FlWvC WywP1x793e8ECI8TEtgVxDvqUV6cwNTo/M8PWK6ye3irj0buD8FotOX+uWUkydTG yOvM0aYO7JFr7wOn -----END CERTIFICATE-----Generated at Sat Oct 25 06:53:07 2025 by rpki-client