$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323135303531.roa File: 326131343a373538333a663830303a3a2f34382d3438203d3e20323135303531.roa (raw, json) Hash identifier: SlJjSBQvikYv0UsxtqAyz4KRSmnNoq7BerD9HLOKbKU= Subject key identifier: 30:E4:B1:C8:C5:FD:F6:C8:B8:FC:8E:EA:38:E9:3D:F7:46:B9:1E:65 Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Certificate serial: 41E35C9275F56B4133916A91E916C6871D16EE2A Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323135303531.roa Signing time: Mon 23 Mar 2026 17:08:40 +0000 ROA not before: Mon 23 Mar 2026 17:03:40 +0000 ROA not after: Mon 22 Mar 2027 17:08:40 +0000 asID: 215051 IP address blocks: 2a14:7583:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e3:5c:92:75:f5:6b:41:33:91:6a:91:e9:16:c6:87:1d:16:ee:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Validity Not Before: Mar 23 17:03:40 2026 GMT Not After : Mar 22 17:08:40 2027 GMT Subject: CN=30E4B1C8C5FDF6C8B8FC8EEA38E93DF746B91E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:81:f2:0e:a7:e6:47:e8:29:f4:57:21:c5: 69:86:68:6b:59:75:98:19:b7:64:25:b9:78:01:6e: c0:c7:d6:da:08:07:d1:15:99:64:84:a9:bb:b3:1c: ab:78:cd:24:ec:31:6a:26:e9:95:23:76:da:2a:88: 0b:01:ec:ac:b4:78:f4:be:fd:9d:39:98:23:9c:94: 69:3e:cc:24:23:eb:7c:cf:f4:0e:d4:c9:72:56:4a: 7c:26:91:04:ea:01:2a:a6:71:cf:d1:81:cd:31:42: 78:45:e6:b0:b9:d5:83:7a:3d:f9:b3:f0:9a:8f:43: 8a:a3:55:1d:3c:02:54:02:f3:4c:2b:14:f1:47:9d: 08:dc:cf:e4:61:8a:a7:93:59:21:cb:22:5b:f7:5f: c5:6b:ea:b3:92:e2:af:bb:e8:aa:0f:44:ec:bb:f4: 5d:32:9f:2f:47:e1:d7:a7:06:c4:5e:14:19:0b:4a: bc:c0:a1:4d:cb:e1:a5:37:a6:e2:22:da:68:ba:56: ab:27:28:30:fd:c6:9f:6d:5c:95:41:7e:67:8e:56: 9d:94:71:f2:99:ad:89:50:ec:8e:01:22:2e:3c:95: 96:25:72:c8:b0:0e:e4:18:54:f8:ee:4f:30:4c:5f: bf:71:9d:9b:e1:97:33:30:89:ac:e3:c7:85:11:11: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E4:B1:C8:C5:FD:F6:C8:B8:FC:8E:EA:38:E9:3D:F7:46:B9:1E:65 X509v3 Authority Key Identifier: keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject Information Access: Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323135303531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f800::/48 Signature Algorithm: sha256WithRSAEncryption a5:57:5d:38:0f:4d:9d:5a:cd:87:ea:2b:84:79:73:af:19:71: 31:d7:85:9a:54:04:0a:49:ce:44:94:d8:14:2a:cd:d8:d7:a1: 6b:83:b1:8e:3f:9a:43:6e:c2:bf:8e:1a:e8:e6:2d:bb:23:f6: fd:41:77:ef:69:1b:7c:38:43:00:d0:2f:b2:61:56:5e:c5:df: d6:7e:99:79:eb:e0:60:df:aa:7a:3d:94:b2:7b:82:60:76:8b: af:ee:21:f0:48:98:d2:58:e4:4a:fc:d4:b9:a5:9f:3e:aa:0a: 34:d2:85:7d:7f:8e:af:6c:dd:6b:d0:2e:c0:31:08:98:bc:d1: 39:02:62:9e:ff:7f:e6:00:ad:ef:b2:b9:85:c1:28:fc:2f:04: 38:44:ce:35:3f:dd:2a:69:31:9a:3a:49:da:44:14:9e:c3:d8: 1c:cf:c6:ba:e6:39:57:61:7d:56:22:63:fc:4b:37:4a:b5:b6: 43:a1:5e:4e:2e:aa:ad:99:2b:f6:80:72:b4:a4:cc:77:cf:c3: 75:25:21:d0:5a:fd:28:02:7b:5a:0f:1d:1d:af:64:d6:b4:8a: b4:81:eb:05:17:c4:99:65:32:cb:f0:59:e1:ce:b3:d1:8f:7d: 0b:28:70:91:1c:cd:da:85:f6:bc:5c:8b:36:c2:0e:36:ac:af: 33:5d:a2:86 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUQeNcknX1a0EzkWqR6RbGhx0W7iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1 NDgwRjNEOTAeFw0yNjAzMjMxNzAzNDBaFw0yNzAzMjIxNzA4NDBaMDMxMTAvBgNV BAMTKDMwRTRCMUM4QzVGREY2QzhCOEZDOEVFQTM4RTkzREY3NDZCOTFFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+eYHyDqfmR+gp9FchxWmGaGtZ dZgZt2QluXgBbsDH1toIB9EVmWSEqbuzHKt4zSTsMWom6ZUjdtoqiAsB7Ky0ePS+ /Z05mCOclGk+zCQj63zP9A7UyXJWSnwmkQTqASqmcc/Rgc0xQnhF5rC51YN6Pfmz 8JqPQ4qjVR08AlQC80wrFPFHnQjcz+RhiqeTWSHLIlv3X8Vr6rOS4q+76KoPROy7 9F0yny9H4denBsReFBkLSrzAoU3L4aU3puIi2mi6VqsnKDD9xp9tXJVBfmeOVp2U cfKZrYlQ7I4BIi48lZYlcsiwDuQYVPjuTzBMX79xnZvhlzMwiazjx4UREXJJAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUMOSxyMX99si4/I7qOOk990a5HmUwHwYDVR0j BBgwFoAUV2sdMMfWEv6C0uLFp47UFlSA89kwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3Bs YXNtYS1jYXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgw RjNEOS5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1h M2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC81NzZCMUQzMEM3RDYxMkZFODJE MkUyQzVBNzhFRDQxNjU0ODBGM0Q5LmNlcjCBkQYIKwYBBQUHAQsEgYQwgYEwfwYI KwYBBQUHMAuGc3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3BsYXNt YS1jYXN2LzEvMzI2MTMxMzQzYTM3MzUzODMzM2E2NjM4MzAzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMyMzEzNTMwMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYP4ADANBgkq hkiG9w0BAQsFAAOCAQEApVddOA9NnVrNh+orhHlzrxlxMdeFmlQECknORJTYFCrN 2Neha4Oxjj+aQ27Cv44a6OYtuyP2/UF372kbfDhDANAvsmFWXsXf1n6ZeevgYN+q ej2UsnuCYHaLr+4h8EiY0ljkSvzUuaWfPqoKNNKFfX+Or2zda9AuwDEImLzROQJi nv9/5gCt77K5hcEo/C8EOETONT/dKmkxmjpJ2kQUnsPYHM/GuuY5V2F9ViJj/Es3 SrW2Q6FeTi6qrZkr9oBytKTMd8/DdSUh0Fr9KAJ7Wg8dHa9k1rSKtIHrBRfEmWUy y/BZ4c6z0Y99CyhwkRzN2oX2vFyLNsIONqyvM12ihg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:44:51 2026 by rpki-client