$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830313a3a2f34382d3438203d3e203233343730.roa File: 326131343a373538333a663830313a3a2f34382d3438203d3e203233343730.roa (raw, json) Hash identifier: 3RgjJp+VEISluQwTvwIfx0JgoYjsyXaBdAssJHT2F7g= Subject key identifier: 7A:3B:FF:6C:E0:EA:97:59:50:FC:72:BC:8A:47:2C:54:D0:EF:16:B9 Certificate issuer: /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Certificate serial: 5CB4CA431910E814F79CC8805B404FB76BF7F79C Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject info access: rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830313a3a2f34382d3438203d3e203233343730.roa Signing time: Tue 17 Mar 2026 05:05:02 +0000 ROA not before: Tue 17 Mar 2026 05:00:02 +0000 ROA not after: Tue 16 Mar 2027 05:05:02 +0000 asID: 23470 IP address blocks: 2a14:7583:f801::/48 maxlen: 48 Validation: OK Signature path: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b4:ca:43:19:10:e8:14:f7:9c:c8:80:5b:40:4f:b7:6b:f7:f7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9 Validity Not Before: Mar 17 05:00:02 2026 GMT Not After : Mar 16 05:05:02 2027 GMT Subject: CN=7A3BFF6CE0EA975950FC72BC8A472C54D0EF16B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:a7:29:c4:a7:fc:10:04:b7:66:2c:1d:ff: bf:eb:57:d6:28:e2:70:30:6a:f1:84:33:60:df:f8: 39:1f:f7:8f:bd:d0:fb:41:94:97:2f:37:82:5b:97: c0:f3:a9:1a:83:a0:71:82:07:c4:57:e8:18:8e:ae: 71:2a:e8:9b:c5:cc:5c:36:c3:10:37:55:04:c0:7a: e7:39:9a:9e:8d:3d:63:b6:ae:04:eb:12:22:c3:ef: 3c:ed:a7:0e:83:8b:e4:17:5a:7d:45:61:58:9b:09: bb:2a:28:21:2e:9d:6d:b3:42:b5:c8:40:c1:81:43: cb:69:d3:01:61:35:ae:82:bd:11:23:2c:1b:6c:40: f3:77:a6:c1:7e:6e:10:bd:c1:61:08:f2:9d:54:0b: 55:07:d0:b7:00:2f:6a:f9:5d:5b:56:98:64:2d:92: c8:c5:51:9b:27:31:b3:6a:80:66:0f:7a:3c:34:2b: cc:c8:23:4b:4a:5b:29:95:99:89:cc:5d:1d:27:3b: e2:b9:d7:5e:09:0c:44:9c:d9:73:5c:18:1d:45:be: 07:db:b4:a8:d4:e0:28:95:43:ab:a0:05:3e:81:cc: 44:a3:30:e8:32:93:9d:71:47:36:b5:d0:44:f0:d5: cf:60:6c:d3:f8:06:0e:8a:60:f9:03:1c:8c:fc:3b: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3B:FF:6C:E0:EA:97:59:50:FC:72:BC:8A:47:2C:54:D0:EF:16:B9 X509v3 Authority Key Identifier: keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer Subject Information Access: Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830313a3a2f34382d3438203d3e203233343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:f801::/48 Signature Algorithm: sha256WithRSAEncryption 88:1a:a4:e4:21:1f:ce:fb:1b:f1:a3:b8:27:0e:6d:37:c0:3f: 17:e4:88:8d:9f:2d:f5:f2:f8:18:70:57:26:ce:60:f4:7e:4c: 8d:45:c8:c9:44:b5:7e:0e:36:a8:5a:7f:d7:6f:be:7b:f1:d7: 59:6b:fa:c5:2d:de:64:f1:d9:7c:e2:ca:b1:eb:56:7b:8a:e0: 51:56:b5:12:1a:90:21:7f:d5:b9:f5:f5:d2:1e:7c:09:37:40: 66:38:d9:01:bb:cb:9d:98:2a:0c:59:69:87:20:d9:df:e8:ca: 6f:db:32:74:4d:e8:9a:aa:fc:42:ce:bd:7b:44:8f:21:b4:63: ac:cd:5b:8b:07:a2:89:1e:de:ab:c8:26:6f:9f:ef:b9:72:bc: d6:80:ba:7d:c9:e7:91:bc:45:0f:cf:69:71:9b:bf:99:60:02: 4b:40:e2:73:15:85:41:a5:57:49:d8:f3:14:50:e4:c5:b6:56: bf:a7:62:87:f0:68:7a:5e:47:3d:fa:52:eb:d1:3a:a6:49:62: a2:b3:0c:14:7a:b1:96:46:2c:c3:a5:b9:55:0d:bb:d7:29:8c: 4e:d2:a3:78:50:95:ab:f9:c1:10:c7:6b:0a:ed:15:88:ef:fa: 87:3f:55:62:0b:b8:a1:48:4e:af:c2:73:f6:b7:ec:d0:f8:5c: 02:72:7c:ab -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXLTKQxkQ6BT3nMiAW0BPt2v395wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1 NDgwRjNEOTAeFw0yNjAzMTcwNTAwMDJaFw0yNzAzMTYwNTA1MDJaMDMxMTAvBgNV BAMTKDdBM0JGRjZDRTBFQTk3NTk1MEZDNzJCQzhBNDcyQzU0RDBFRjE2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3acpxKf8EAS3Ziwd/7/rV9Yo 4nAwavGEM2Df+Dkf94+90PtBlJcvN4Jbl8DzqRqDoHGCB8RX6BiOrnEq6JvFzFw2 wxA3VQTAeuc5mp6NPWO2rgTrEiLD7zztpw6Di+QXWn1FYVibCbsqKCEunW2zQrXI QMGBQ8tp0wFhNa6CvREjLBtsQPN3psF+bhC9wWEI8p1UC1UH0LcAL2r5XVtWmGQt ksjFUZsnMbNqgGYPejw0K8zII0tKWymVmYnMXR0nO+K5114JDESc2XNcGB1Fvgfb tKjU4CiVQ6ugBT6BzESjMOgyk51xRza10ETw1c9gbNP4Bg6KYPkDHIz8O6O5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUejv/bODql1lQ/HK8ikcsVNDvFrkwHwYDVR0j BBgwFoAUV2sdMMfWEv6C0uLFp47UFlSA89kwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcmtpLnBsYXNtYW5vZGVzLmNvbS9yZXBvL3Bs YXNtYS1jYXN2LzEvNTc2QjFEMzBDN0Q2MTJGRTgyRDJFMkM1QTc4RUQ0MTY1NDgw RjNEOS5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1h M2ZlLTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC81NzZCMUQzMEM3RDYxMkZFODJE MkUyQzVBNzhFRDQxNjU0ODBGM0Q5LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9Bggr BgEFBQcwC4ZxcnN5bmM6Ly9ya2kucGxhc21hbm9kZXMuY29tL3JlcG8vcGxhc21h LWNhc3YvMS8zMjYxMzEzNDNhMzczNTM4MzMzYTY2MzgzMDMxM2EzYTJmMzQzODJk MzQzODIwM2QzZTIwMzIzMzM0MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYP4ATANBgkqhkiG 9w0BAQsFAAOCAQEAiBqk5CEfzvsb8aO4Jw5tN8A/F+SIjZ8t9fL4GHBXJs5g9H5M jUXIyUS1fg42qFp/12++e/HXWWv6xS3eZPHZfOLKsetWe4rgUVa1EhqQIX/VufX1 0h58CTdAZjjZAbvLnZgqDFlphyDZ3+jKb9sydE3omqr8Qs69e0SPIbRjrM1biwei iR7eq8gmb5/vuXK81oC6fcnnkbxFD89pcZu/mWACS0DicxWFQaVXSdjzFFDkxbZW v6dih/Boel5HPfpS69E6pkliorMMFHqxlkYsw6W5VQ271ymMTtKjeFCVq/nBEMdr Cu0ViO/6hz9VYgu4oUhOr8Jz9rfs0PhcAnJ8qw== -----END CERTIFICATE-----Generated at Thu Mar 26 09:11:58 2026 by rpki-client