$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3230383a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3230383a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: rkwP8fCnxTJdBDGsTpOldy7TJL4f3VSmjql6vLYbKHI= Subject key identifier: 77:1F:56:B8:AC:23:3C:D6:69:9D:FF:A5:13:80:84:48:14:D0:75:CE Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 7C47EDE938B3F6A60D04281D2EEDF1535600E01E Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3230383a3a2f34382d3438203d3e20323136333234.roa Signing time: Fri 15 Aug 2025 06:03:10 +0000 ROA not before: Fri 15 Aug 2025 05:58:10 +0000 ROA not after: Fri 14 Aug 2026 06:03:10 +0000 asID: 216324 IP address blocks: 2a14:7581:208::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:47:ed:e9:38:b3:f6:a6:0d:04:28:1d:2e:ed:f1:53:56:00:e0:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Aug 15 05:58:10 2025 GMT Not After : Aug 14 06:03:10 2026 GMT Subject: CN=771F56B8AC233CD6699DFFA51380844814D075CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0e:d8:4f:ca:f6:64:50:d2:2e:25:7f:4d:c7: 88:03:b2:ca:95:dc:e7:30:9e:f5:94:3f:52:2b:90: d8:bb:98:de:fc:74:81:6c:74:ec:48:8d:5a:86:c7: 05:98:33:6f:12:42:d0:12:50:c7:76:1f:0d:5a:35: 91:e7:40:80:b5:28:f9:73:8f:81:b2:4d:0c:c6:65: fe:49:ca:70:68:5c:f6:3e:55:9d:f7:26:a1:de:2d: 66:f5:31:65:cf:ba:01:5a:8d:c8:97:c5:d2:f5:cd: 65:30:de:5d:b3:b6:2a:7b:b5:82:d9:d9:1f:20:c9: d3:44:f0:4e:dd:ae:e4:c1:0c:c9:39:94:14:5b:2d: e9:2a:8a:2a:28:5a:00:eb:34:37:c9:64:40:e0:9f: f1:3a:e7:41:0d:f9:aa:79:d2:1a:e9:87:b4:f0:fd: 64:cd:f5:3a:e8:42:b0:22:82:3d:28:60:c6:2a:4e: 6f:dd:73:4e:bf:50:ee:bc:00:f4:d7:09:5d:c6:f1: 0d:d0:6e:cc:81:4e:2f:08:38:ae:01:c7:10:cc:3d: a9:cc:cb:db:1d:77:d1:d4:f7:48:26:db:00:54:0b: a5:8b:2b:7e:32:a2:f9:d3:10:67:b8:02:9e:71:92: 49:68:47:07:d3:ae:34:09:b7:a0:51:05:d0:e0:2a: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1F:56:B8:AC:23:3C:D6:69:9D:FF:A5:13:80:84:48:14:D0:75:CE X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3230383a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:208::/48 Signature Algorithm: sha256WithRSAEncryption 0d:9a:35:a3:e3:99:44:11:59:b5:f1:da:c7:de:87:96:1b:a4: 32:fd:db:ba:5c:2b:b2:a6:b6:7f:90:d0:9f:0b:d5:b3:b6:67: 7a:78:a6:42:ce:60:15:87:7d:84:6f:9d:b6:d3:84:05:3b:d7: d0:7e:4c:fd:62:e3:02:64:01:ec:68:a5:20:9b:c3:ee:2e:30: fb:39:07:7b:d6:70:93:7b:23:95:dd:22:0d:46:c8:62:19:96: c3:96:1d:81:77:a3:0f:6c:02:f4:8c:f3:28:32:5a:a9:e5:1b: 80:2f:04:ef:2e:f3:a7:03:3e:70:ea:88:ce:3a:6b:6e:39:53: e0:a8:71:f1:dd:56:16:06:87:cf:a4:46:d9:68:41:b7:44:76: f6:5f:f8:15:f6:82:1c:14:ca:fb:b0:e2:e7:22:17:13:6d:7b: 06:38:49:2f:ee:af:26:49:77:bc:ab:57:e5:db:2d:fc:54:0b: 30:b1:09:79:31:fa:be:2e:ec:71:dc:47:d0:cd:b9:4b:e2:48: 57:dd:e8:0f:9b:e7:e2:56:b0:e2:0e:75:09:13:c8:ca:fb:94: eb:44:aa:69:c7:cf:88:93:c6:24:e9:81:ba:27:ea:1a:3c:f2: f2:ce:38:c7:09:f9:48:79:82:ef:16:6a:31:b4:85:b1:24:9d: 03:8f:30:f8 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUfEft6Tiz9qYNBCgdLu3xU1YA4B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTA4MTUwNTU4MTBaFw0yNjA4MTQwNjAzMTBaMDMxMTAvBgNV BAMTKDc3MUY1NkI4QUMyMzNDRDY2OTlERkZBNTEzODA4NDQ4MTREMDc1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzDthPyvZkUNIuJX9Nx4gDssqV 3OcwnvWUP1IrkNi7mN78dIFsdOxIjVqGxwWYM28SQtASUMd2Hw1aNZHnQIC1KPlz j4GyTQzGZf5JynBoXPY+VZ33JqHeLWb1MWXPugFajciXxdL1zWUw3l2ztip7tYLZ 2R8gydNE8E7druTBDMk5lBRbLekqiiooWgDrNDfJZEDgn/E650EN+ap50hrph7Tw /WTN9TroQrAigj0oYMYqTm/dc06/UO68APTXCV3G8Q3QbsyBTi8IOK4BxxDMPanM y9sdd9HU90gm2wBUC6WLK34yovnTEGe4Ap5xkkloRwfTrjQJt6BRBdDgKm59AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUdx9WuKwjPNZpnf+lE4CESBTQdc4wHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzAzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYECCDANBgkqhkiG9w0BAQsFAAOCAQEADZo1 o+OZRBFZtfHax96HlhukMv3bulwrsqa2f5DQnwvVs7ZnenimQs5gFYd9hG+dttOE BTvX0H5M/WLjAmQB7GilIJvD7i4w+zkHe9Zwk3sjld0iDUbIYhmWw5YdgXejD2wC 9IzzKDJaqeUbgC8E7y7zpwM+cOqIzjprbjlT4Khx8d1WFgaHz6RG2WhBt0R29l/4 FfaCHBTK+7Di5yIXE217BjhJL+6vJkl3vKtX5dst/FQLMLEJeTH6vi7scdxH0M25 S+JIV93oD5vn4law4g51CRPIyvuU60SqacfPiJPGJOmBuifqGjzy8s44xwn5SHmC 7xZqMbSFsSSdA48w+A== -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:52 2025 by rpki-client