$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3231363a3a2f34382d3438203d3e20323136333234.roa File: 326131343a373538313a3231363a3a2f34382d3438203d3e20323136333234.roa (raw, json) Hash identifier: NBku/GLKYozylvnwyxmXP0CwZstml2dHXgC2TzWnG90= Subject key identifier: 04:2C:B9:9B:6C:8B:8A:40:33:28:AF:D7:BB:51:91:BA:31:AD:03:C3 Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11 Certificate serial: 31E8EA663A1C14BFABC2B41F06601E401D9FBD43 Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3231363a3a2f34382d3438203d3e20323136333234.roa Signing time: Fri 15 Aug 2025 06:03:09 +0000 ROA not before: Fri 15 Aug 2025 05:58:09 +0000 ROA not after: Fri 14 Aug 2026 06:03:09 +0000 asID: 216324 IP address blocks: 2a14:7581:216::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e8:ea:66:3a:1c:14:bf:ab:c2:b4:1f:06:60:1e:40:1d:9f:bd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11 Validity Not Before: Aug 15 05:58:09 2025 GMT Not After : Aug 14 06:03:09 2026 GMT Subject: CN=042CB99B6C8B8A403328AFD7BB5191BA31AD03C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:83:29:6b:55:f1:ee:e2:d7:ff:c5:df:43: cc:a6:87:89:fa:70:1a:5f:10:57:7f:ca:fa:59:78: 91:d8:60:e7:ec:78:3b:eb:55:87:ab:a0:8d:2f:f3: e5:ff:01:d5:0e:4d:67:1d:6a:ba:b1:77:be:22:43: cf:aa:a9:11:05:65:da:35:68:1a:27:02:b3:58:a4: be:ec:cf:56:c4:0b:6c:85:e5:80:0f:62:6b:39:e8: 43:1f:d8:ae:e7:b0:41:08:26:b5:3b:ad:18:e5:45: bd:b7:45:ff:9d:a9:37:20:b4:21:3d:4e:2a:e5:85: 40:8c:28:e6:ed:df:2c:4d:7a:90:56:1e:5d:50:1a: 41:0a:13:ab:4f:d6:c7:47:4f:05:91:08:1d:34:e1: 17:d5:2a:c4:aa:ce:55:da:25:b3:96:15:47:2e:2f: ef:01:e9:6e:c8:7f:60:92:49:29:60:25:dc:94:26: 12:e6:3b:a6:ac:aa:e0:79:30:cc:6b:66:85:a9:8b: dd:7b:ad:0d:38:02:8f:86:87:07:02:15:83:6b:7f: 63:49:d0:01:e1:7d:70:3b:c6:8f:ab:09:de:42:25: 7f:bf:0b:bb:eb:a0:54:e9:06:8e:e1:19:0e:60:09: 6a:8a:88:bb:3b:56:45:e5:77:78:23:ed:f4:b3:82: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2C:B9:9B:6C:8B:8A:40:33:28:AF:D7:BB:51:91:BA:31:AD:03:C3 X509v3 Authority Key Identifier: keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a3231363a3a2f34382d3438203d3e20323136333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:216::/48 Signature Algorithm: sha256WithRSAEncryption 77:8b:0c:24:c4:3c:65:1f:61:43:0f:38:a1:66:81:8c:3d:f3: af:c5:d6:f5:0b:31:80:24:14:e5:95:cb:f6:11:72:b6:11:9b: e7:d2:49:e3:7f:41:2c:73:62:d3:c9:92:db:c1:c9:3e:69:89: a7:b1:63:9d:6d:a9:8d:ef:d9:2f:da:58:9b:e7:ad:e2:50:ce: db:d0:3e:72:8b:f0:2f:8f:55:ab:04:aa:7f:15:17:4f:be:4e: e9:4c:13:5d:cc:c1:3b:70:80:80:ae:ac:0d:28:cc:db:42:7c: 75:9e:cf:9c:07:9d:cf:73:c8:c5:86:c8:f3:64:11:ae:bc:db: cc:79:03:11:b5:1e:8a:d5:5e:6a:86:61:d8:a3:5b:e8:b0:b5: 0e:a7:ec:2c:55:66:d9:6a:ab:49:e4:61:bc:83:70:74:62:9b: 6d:0f:f1:3f:e7:1b:bb:38:29:2e:57:7b:42:59:1a:81:27:c1: f6:33:6f:8c:0a:56:1f:b3:81:d1:17:01:4f:b1:e4:dc:f5:32: f9:97:e2:2e:0e:1c:57:f3:a7:48:94:c8:13:4c:a0:c3:63:2f: 7c:b4:0e:e7:65:c5:1b:4b:af:f5:a2:80:f4:4d:e2:6e:ec:de: c3:ec:b1:1d:71:14:89:60:1e:07:82:6a:06:4b:68:c9:c5:1f: 0e:c1:9f:94 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUMejqZjocFL+rwrQfBmAeQB2fvUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZF NzhFNkUxMTAeFw0yNTA4MTUwNTU4MDlaFw0yNjA4MTQwNjAzMDlaMDMxMTAvBgNV BAMTKDA0MkNCOTlCNkM4QjhBNDAzMzI4QUZEN0JCNTE5MUJBMzFBRDAzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTIMpa1Xx7uLX/8XfQ8ymh4n6 cBpfEFd/yvpZeJHYYOfseDvrVYeroI0v8+X/AdUOTWcdarqxd74iQ8+qqREFZdo1 aBonArNYpL7sz1bEC2yF5YAPYms56EMf2K7nsEEIJrU7rRjlRb23Rf+dqTcgtCE9 TirlhUCMKObt3yxNepBWHl1QGkEKE6tP1sdHTwWRCB004RfVKsSqzlXaJbOWFUcu L+8B6W7If2CSSSlgJdyUJhLmO6asquB5MMxrZoWpi917rQ04Ao+GhwcCFYNrf2NJ 0AHhfXA7xo+rCd5CJX+/C7vroFTpBo7hGQ5gCWqKiLs7VkXld3gj7fSzgmu9AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUBCy5m2yLikAzKK/Xu1GRujGtA8MwHwYDVR0j BBgwFoAUMOw0HMWSY/SHmfcKlUkIJueObhEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzEvMzBFQzM0MUNDNTkyNjNGNDg3OTlGNzBBOTU0OTA4MjZFNzhFNkUxMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMEVDMzQxQ0M1OTI2M0Y0ODc5OUY3MEE5 NTQ5MDgyNkU3OEU2RTExLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzEzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NjMzMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYECFjANBgkqhkiG9w0BAQsFAAOCAQEAd4sM JMQ8ZR9hQw84oWaBjD3zr8XW9QsxgCQU5ZXL9hFythGb59JJ439BLHNi08mS28HJ PmmJp7FjnW2pje/ZL9pYm+et4lDO29A+covwL49VqwSqfxUXT75O6UwTXczBO3CA gK6sDSjM20J8dZ7PnAedz3PIxYbI82QRrrzbzHkDEbUeitVeaoZh2KNb6LC1Dqfs LFVm2WqrSeRhvINwdGKbbQ/xP+cbuzgpLld7QlkagSfB9jNvjApWH7OB0RcBT7Hk 3PUy+ZfiLg4cV/OnSJTIE0ygw2MvfLQO52XFG0uv9aKA9E3ibuzew+yxHXEUiWAe B4JqBktoycUfDsGflA== -----END CERTIFICATE-----Generated at Sun Aug 24 01:06:38 2025 by rpki-client