$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3230363a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3230363a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: aafPrQqGPC5J6qpVCGFn9lsILmzjvZ8rKcEyTr7txQA= Subject key identifier: 53:9C:D1:32:09:C6:D4:72:20:C9:A8:22:33:00:53:7B:3E:F1:53:00 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 20F9A627D39E3DCC4C061F027C86FDF6E141157C Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3230363a3a2f34382d3438203d3e20323136333234.roa Signing time: Fri 15 Aug 2025 06:03:11 +0000 ROA not before: Fri 15 Aug 2025 05:58:11 +0000 ROA not after: Fri 14 Aug 2026 06:03:11 +0000 asID: 216324 IP address blocks: 2a14:7581:206::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f9:a6:27:d3:9e:3d:cc:4c:06:1f:02:7c:86:fd:f6:e1:41:15:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Aug 15 05:58:11 2025 GMT Not After : Aug 14 06:03:11 2026 GMT Subject: CN=539CD13209C6D47220C9A8223300537B3EF15300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:4f:24:2e:d8:fe:4f:61:98:be:71:3e:87: ec:86:7d:d1:e6:e9:3d:1c:72:0e:50:01:9f:41:7e: c7:e2:1a:51:d7:9d:6a:ea:3e:90:d8:73:ef:50:8a: 55:c7:5b:cc:55:3b:e4:24:7b:07:91:d7:93:fa:3a: 0e:b5:df:0a:ea:71:ff:2f:91:77:19:3e:c8:a3:01: 25:23:d0:a7:ec:03:39:7c:48:84:6f:cc:df:96:e8: 15:b1:38:e5:39:1b:27:58:3d:34:90:a4:66:82:c7: 48:19:fd:56:51:58:ce:4b:fe:6e:fb:2f:01:42:a4: 9d:fd:ca:12:99:f8:88:fa:84:09:8d:32:52:d6:13: e5:c5:06:4b:31:84:9e:87:12:b5:6f:a5:41:29:94: ed:2c:d9:2f:08:b5:72:a7:46:51:7e:3a:b3:91:a9: 8e:af:4e:72:69:ef:b8:f4:1b:ff:34:95:66:c1:d2: cd:a3:36:25:1f:e5:66:2f:2f:ba:aa:85:9e:0a:32: a3:a1:02:22:8b:ac:be:7a:ac:82:5f:f3:27:21:a9: c6:e7:a1:b0:5c:5c:2e:21:a5:08:cb:80:cc:2c:3c: 04:33:d2:2f:4c:ac:13:cc:f8:8c:7c:94:b9:c7:47: b9:92:c4:7f:a6:79:3e:3d:00:a2:7d:c1:53:4a:b2: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9C:D1:32:09:C6:D4:72:20:C9:A8:22:33:00:53:7B:3E:F1:53:00 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3230363a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:206::/48 Signature Algorithm: sha256WithRSAEncryption 64:66:5d:17:b1:e3:46:90:1a:52:26:b2:d8:4f:a0:a2:88:fa: 59:92:68:ef:20:36:69:1d:f6:2c:63:29:15:78:f5:7f:62:f9: 0a:d8:fa:95:11:89:86:57:ba:7c:52:23:41:f7:2c:3f:37:c0: c5:1b:f1:39:fa:3c:cb:cf:54:6d:57:b7:5b:d4:4b:15:99:dc: fe:98:ed:f3:95:21:8c:92:ca:2f:f6:89:db:bb:af:44:fd:2a: 4b:63:1f:37:59:85:ca:55:08:ed:2a:db:c4:cd:98:5d:0a:7c: d5:9a:b3:6b:c9:c3:ef:e0:fa:18:2f:a5:8b:88:7f:5f:ea:9d: 16:c1:ec:a7:c9:6d:6f:6b:85:7d:cb:f8:9a:d9:80:63:3d:c8: 77:fa:d6:67:34:35:f3:e6:c3:9b:ed:12:3d:cc:e6:90:e9:c8: 0b:6c:0e:e3:a6:c3:61:06:32:23:fb:56:d2:c9:64:5d:7b:94: 77:ab:39:ed:95:64:c2:00:56:a6:df:37:2a:07:21:41:5e:4e: 60:f1:2f:c8:85:87:9a:d7:0d:06:7a:a7:64:c0:a6:3b:7f:63: 40:a9:0b:d8:20:1d:6a:12:68:2e:a8:55:b1:3c:f9:0c:30:3a: d8:c0:a5:e5:82:93:e1:78:2a:3d:40:ce:ed:de:bd:7c:3c:41: 00:09:9c:ff -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUIPmmJ9OePcxMBh8CfIb99uFBFXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTA4MTUwNTU4MTFaFw0yNjA4MTQwNjAzMTFaMDMxMTAvBgNV BAMTKDUzOUNEMTMyMDlDNkQ0NzIyMEM5QTgyMjMzMDA1MzdCM0VGMTUzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWN08kLtj+T2GYvnE+h+yGfdHm 6T0ccg5QAZ9BfsfiGlHXnWrqPpDYc+9QilXHW8xVO+QkeweR15P6Og613wrqcf8v kXcZPsijASUj0KfsAzl8SIRvzN+W6BWxOOU5GydYPTSQpGaCx0gZ/VZRWM5L/m77 LwFCpJ39yhKZ+Ij6hAmNMlLWE+XFBksxhJ6HErVvpUEplO0s2S8ItXKnRlF+OrOR qY6vTnJp77j0G/80lWbB0s2jNiUf5WYvL7qqhZ4KMqOhAiKLrL56rIJf8ychqcbn obBcXC4hpQjLgMwsPAQz0i9MrBPM+Ix8lLnHR7mSxH+meT49AKJ9wVNKslhJAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUU5zRMgnG1HIgyagiMwBTez7xUwAwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzAzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYECBjANBgkqhkiG9w0BAQsFAAOCAQEAZGZd F7HjRpAaUiay2E+gooj6WZJo7yA2aR32LGMpFXj1f2L5Ctj6lRGJhle6fFIjQfcs PzfAxRvxOfo8y89UbVe3W9RLFZnc/pjt85UhjJLKL/aJ27uvRP0qS2MfN1mFylUI 7SrbxM2YXQp81Zqza8nD7+D6GC+li4h/X+qdFsHsp8ltb2uFfcv4mtmAYz3Id/rW ZzQ18+bDm+0SPczmkOnIC2wO46bDYQYyI/tW0slkXXuUd6s57ZVkwgBWpt83Kgch QV5OYPEvyIWHmtcNBnqnZMCmO39jQKkL2CAdahJoLqhVsTz5DDA62MCl5YKT4Xgq PUDO7d69fDxBAAmc/w== -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:44 2025 by rpki-client