$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa File: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (raw, json) Hash identifier: xT802+pU8TCiwwtqUkMgmyrnKplgnOIvmjCKunR0EEU= Subject key identifier: 88:35:FF:0A:D6:77:71:64:E7:B7:D3:D9:7C:4C:58:58:FC:77:C2:07 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 11EF97D6C10D35FE2A8458AB78DC6113C8950563 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa Signing time: Sun 12 Oct 2025 15:31:23 +0000 ROA not before: Sun 12 Oct 2025 15:26:23 +0000 ROA not after: Sun 11 Oct 2026 15:31:23 +0000 asID: 214030 IP address blocks: 2a14:7580:f330::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ef:97:d6:c1:0d:35:fe:2a:84:58:ab:78:dc:61:13:c8:95:05:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Oct 12 15:26:23 2025 GMT Not After : Oct 11 15:31:23 2026 GMT Subject: CN=8835FF0AD6777164E7B7D3D97C4C5858FC77C207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:e3:57:80:8d:05:f5:7a:e8:f6:25:e9:58: bd:be:03:87:54:e1:f1:d1:60:e3:25:51:23:5c:4f: ba:a1:93:57:7d:78:9c:9f:91:aa:bc:d7:4d:63:8b: 2e:e5:84:05:dc:b2:0c:32:fa:a9:99:89:fa:c2:1d: 40:4e:22:67:6f:0b:a0:c7:3c:d8:dc:81:71:66:a6: 6d:84:7a:dd:e9:ac:64:7b:5a:94:ba:50:8a:63:a0: b1:2a:99:8a:10:0c:27:e6:fc:1f:7e:78:03:75:fa: f1:15:89:06:d1:83:b1:20:20:28:6e:18:9e:dd:49: 1a:5e:97:bb:23:f7:37:30:16:b0:31:dd:8b:b4:e0: b6:d2:6d:64:a1:e0:60:17:af:c0:ed:fa:96:9b:c3: 14:de:48:d0:3a:91:4f:b6:82:62:95:46:1f:79:c9: 65:1f:8d:98:63:03:c4:20:b5:86:db:d7:6c:50:a2: ef:2a:f4:21:de:bf:d7:fa:1b:ee:8d:1e:21:52:22: 1a:16:ce:45:ac:c7:ff:18:a6:d6:00:98:f1:b8:f3: c8:11:9e:d1:86:e0:cf:a3:56:a9:a6:03:14:ef:6a: d7:70:6c:55:c9:54:37:36:d6:2e:a5:72:ef:68:58: 5c:92:89:df:c8:4b:d9:4a:7d:c9:29:77:42:30:99: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:35:FF:0A:D6:77:71:64:E7:B7:D3:D9:7C:4C:58:58:FC:77:C2:07 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f330::/44 Signature Algorithm: sha256WithRSAEncryption 81:f6:4b:7e:50:f6:85:48:28:32:af:ac:f5:ce:8e:13:2c:d0: 33:11:35:45:e1:bc:5d:46:7b:9a:41:90:64:d2:dc:4a:03:b3: 67:ef:cb:d1:27:b3:35:38:16:ec:dd:96:da:01:2d:d9:22:96: 1f:7e:6b:a5:ed:5e:b9:d2:ee:33:23:8b:65:2a:b3:ae:f7:dc: 60:79:88:0e:c9:3e:13:ba:12:d2:ed:c3:b9:66:ae:0b:12:b1: 92:c6:80:de:6b:08:59:ac:a9:1c:db:d3:e8:c8:c4:8b:f4:3e: 59:86:5b:76:b2:17:28:5d:37:3a:8b:4a:d2:af:32:fa:3d:a9: 70:7d:8f:e8:e2:5b:3a:b6:da:ca:9a:4a:a8:69:a2:ea:d0:92: cf:70:fc:ea:53:9f:a8:d6:a6:28:08:63:d0:1b:9f:31:5d:b8: 38:80:7a:f5:3c:a3:1b:63:ca:02:7f:8a:f2:7b:86:c2:96:2d: 4b:0b:f8:90:bd:82:b9:c3:e4:40:d4:1d:0a:cb:87:31:66:c7: 5d:10:25:49:16:51:c2:a6:b3:4f:b4:4c:f4:11:55:62:65:ba: a0:d4:64:80:1a:6b:16:06:7a:6c:b7:da:86:31:3c:55:3e:9f: 08:62:00:82:20:ee:9d:f4:cc:15:87:b2:2f:18:3e:a8:00:28: fb:9b:4b:fb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEe+X1sENNf4qhFireNxhE8iVBWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTEwMTIxNTI2MjNaFw0yNjEwMTExNTMxMjNaMDMxMTAvBgNV BAMTKDg4MzVGRjBBRDY3NzcxNjRFN0I3RDNEOTdDNEM1ODU4RkM3N0MyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKeNXgI0F9Xro9iXpWL2+A4dU 4fHRYOMlUSNcT7qhk1d9eJyfkaq8101jiy7lhAXcsgwy+qmZifrCHUBOImdvC6DH PNjcgXFmpm2Eet3prGR7WpS6UIpjoLEqmYoQDCfm/B9+eAN1+vEViQbRg7EgIChu GJ7dSRpel7sj9zcwFrAx3Yu04LbSbWSh4GAXr8Dt+pabwxTeSNA6kU+2gmKVRh95 yWUfjZhjA8QgtYbb12xQou8q9CHev9f6G+6NHiFSIhoWzkWsx/8YptYAmPG488gR ntGG4M+jVqmmAxTvatdwbFXJVDc21i6lcu9oWFySid/IS9lKfckpd0IwmS3LAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUiDX/CtZ3cWTnt9PZfExYWPx3wgcwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2MzMzMzMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzAzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPMwMA0GCSqGSIb3DQEBCwUAA4IBAQCB 9kt+UPaFSCgyr6z1zo4TLNAzETVF4bxdRnuaQZBk0txKA7Nn78vRJ7M1OBbs3Zba AS3ZIpYffmul7V650u4zI4tlKrOu99xgeYgOyT4TuhLS7cO5Zq4LErGSxoDeawhZ rKkc29PoyMSL9D5Zhlt2shcoXTc6i0rSrzL6PalwfY/o4ls6ttrKmkqoaaLq0JLP cPzqU5+o1qYoCGPQG58xXbg4gHr1PKMbY8oCf4rye4bCli1LC/iQvYK5w+RA1B0K y4cxZsddECVJFlHCprNPtEz0EVViZbqg1GSAGmsWBnpst9qGMTxVPp8IYgCCIO6d 9MwVh7IvGD6oACj7m0v7 -----END CERTIFICATE-----Generated at Mon Oct 20 07:40:50 2025 by rpki-client