$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa File: 326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa (raw, json) Hash identifier: be9i66kYT9S8FN11kLwpL53RT8mHbO1o0DQS826QI9o= Subject key identifier: 0E:77:69:5D:A7:94:85:33:EF:77:E2:0F:4A:75:2D:B5:6E:39:3E:F3 Certificate issuer: /CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Certificate serial: 3B097A8B67B4DE6235930CCE4CEA654FE3675A38 Authority key identifier: 5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa Signing time: Mon 23 Jun 2025 12:46:14 +0000 ROA not before: Mon 23 Jun 2025 12:41:14 +0000 ROA not after: Mon 22 Jun 2026 12:46:14 +0000 asID: 207427 IP address blocks: 2a14:7580:fff2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 08:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:09:7a:8b:67:b4:de:62:35:93:0c:ce:4c:ea:65:4f:e3:67:5a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Validity Not Before: Jun 23 12:41:14 2025 GMT Not After : Jun 22 12:46:14 2026 GMT Subject: CN=0E77695DA7948533EF77E20F4A752DB56E393EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:5e:d2:0a:40:fc:18:c8:cb:09:8a:98:67: d7:36:bf:d9:b1:e1:4c:ad:19:5e:9f:53:83:05:e5: 06:2c:a4:46:ad:e0:a8:eb:0b:6b:25:5e:28:ad:ae: b3:8e:6b:b9:cb:08:46:25:a9:6b:c9:52:f7:a5:cd: 6e:88:18:3c:17:ba:56:18:70:9c:47:f3:41:03:72: f7:79:f9:b4:4c:b7:2e:ee:de:09:a3:7a:e1:ba:96: c9:8a:d3:94:d9:cd:11:e3:cf:c9:5c:be:83:9b:01: 68:e0:54:c4:f0:1f:af:33:2e:a6:4c:23:96:b8:6a: 51:5e:7c:f5:d3:26:3b:fa:52:a2:47:ca:2a:7d:2f: fe:c9:63:3f:3b:9b:d4:cf:a5:98:08:30:5b:37:6d: 04:d8:a7:c4:d8:a2:96:f5:c8:66:dd:22:1e:4b:7f: f5:23:d7:95:2c:a1:65:ac:89:bc:1d:89:6c:da:e7: ed:6e:3e:8d:c2:69:e8:19:c9:16:b7:b9:be:d1:4a: e9:74:19:9d:50:29:80:32:bd:dc:4a:3e:22:86:90: e0:b4:d2:b0:fa:7a:39:7b:e5:e0:54:ff:8b:1b:b6: 13:59:91:cb:d1:70:63:e3:5d:2c:ef:5f:9a:91:82: b1:b0:f1:3d:22:99:d1:3e:f6:71:4d:ec:42:25:0b: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:77:69:5D:A7:94:85:33:EF:77:E2:0F:4A:75:2D:B5:6E:39:3E:F3 X509v3 Authority Key Identifier: keyid:5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fff2::/48 Signature Algorithm: sha256WithRSAEncryption 29:df:a5:bc:d4:dd:e9:bc:b5:e8:9e:95:c3:50:b8:9a:54:20: e9:7e:3c:a0:5b:f6:5d:61:8d:c9:f2:a5:6d:50:c5:ed:a2:45: 3c:3a:f1:44:0c:53:be:96:c9:cd:65:c5:33:b5:c9:8c:36:07: b4:49:a3:58:fd:69:07:bf:41:3a:97:8b:5b:de:3b:e9:4b:04: 1b:01:d5:0e:8c:15:05:a8:f1:22:8f:72:db:91:8c:cd:f9:d0: cb:4b:44:7a:36:6c:c1:ff:9e:1a:c4:87:f6:e4:f6:56:fb:d6: 8f:65:23:c8:17:47:be:3e:d4:ee:b8:3f:26:b6:aa:38:26:76: 1d:3d:13:27:2c:28:c5:b8:b1:c7:0c:e2:59:2b:e2:57:37:64: 6a:44:33:46:3e:60:95:cf:14:80:60:7d:15:fd:7a:0d:a8:f0: 40:6d:4a:69:17:44:a9:0c:23:18:e1:f8:07:d9:9c:25:4a:cc: 06:85:9c:92:bb:65:11:a6:89:38:56:5f:6d:02:fc:a5:c4:4b: 5f:e5:15:1d:ce:58:25:a4:59:3e:4f:44:4c:e1:45:79:5a:de: bc:13:96:9e:43:90:aa:9e:33:c2:2a:83:42:50:ea:21:12:f3: e6:ab:df:fa:81:a2:73:f1:09:ee:44:1c:55:7a:80:95:23:7a: b5:5e:57:13 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUOwl6i2e03mI1kwzOTOplT+NnWjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRF RDkxMTU5MjAeFw0yNTA2MjMxMjQxMTRaFw0yNjA2MjIxMjQ2MTRaMDMxMTAvBgNV BAMTKDBFNzc2OTVEQTc5NDg1MzNFRjc3RTIwRjRBNzUyREI1NkUzOTNFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTl7SCkD8GMjLCYqYZ9c2v9mx 4UytGV6fU4MF5QYspEat4KjrC2slXiitrrOOa7nLCEYlqWvJUvelzW6IGDwXulYY cJxH80EDcvd5+bRMty7u3gmjeuG6lsmK05TZzRHjz8lcvoObAWjgVMTwH68zLqZM I5a4alFefPXTJjv6UqJHyip9L/7JYz87m9TPpZgIMFs3bQTYp8TYopb1yGbdIh5L f/Uj15UsoWWsibwdiWza5+1uPo3CaegZyRa3ub7RSul0GZ1QKYAyvdxKPiKGkOC0 0rD6ejl75eBU/4sbthNZkcvRcGPjXSzvX5qRgrGw8T0imdE+9nFN7EIlC0i7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUDndpXaeUhTPvd+IPSnUttW45PvMwHwYDVR0j BBgwFoAUW+bweBw6enT5k8U9wH/EJO2RFZIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDJhZWQwYTQtM2U3Ni00ODMwLWJiYjQtMWNiYzIwNDM1 MmIzLzAvNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRFRDkxMTU5Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81QkU2RjA3ODFDM0E3QTc0Rjk5M0M1M0RD MDdGQzQyNEVEOTExNTkyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8wMmFlZDBhNC0zZTc2LTQ4MzAtYmJiNC0xY2JjMjA0MzUyYjMvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjY2NjMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MDM3MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gP/yMA0GCSqGSIb3DQEBCwUAA4IBAQAp 36W81N3pvLXonpXDULiaVCDpfjygW/ZdYY3J8qVtUMXtokU8OvFEDFO+lsnNZcUz tcmMNge0SaNY/WkHv0E6l4tb3jvpSwQbAdUOjBUFqPEij3LbkYzN+dDLS0R6NmzB /54axIf25PZW+9aPZSPIF0e+PtTuuD8mtqo4JnYdPRMnLCjFuLHHDOJZK+JXN2Rq RDNGPmCVzxSAYH0V/XoNqPBAbUppF0SpDCMY4fgH2ZwlSswGhZySu2URpok4Vl9t AvylxEtf5RUdzlglpFk+T0RM4UV5Wt68E5aeQ5CqnjPCKoNCUOohEvPmq9/6gaJz 8QnuRBxVeoCVI3q1XlcT -----END CERTIFICATE-----Generated at Mon Jun 30 22:36:41 2025 by rpki-client