$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/326131343a373538303a666639303a3a2f34342d3438203d3e20323035393431.roa File: 326131343a373538303a666639303a3a2f34342d3438203d3e20323035393431.roa (raw, json) Hash identifier: 7N4lyNBMuutS3OvSSoE0Vwp3PGeAo19d8bgklkw0PMg= Subject key identifier: C4:8B:C3:29:B1:D0:E3:38:C7:69:65:84:96:10:90:D5:20:99:FE:2A Certificate issuer: /CN=33EDE0B0EE6D8AE9053E11C830DF759F85FB8157 Certificate serial: 2B655970582FC8B2EA76B8B2B9DF7A058E25E8E2 Authority key identifier: 33:ED:E0:B0:EE:6D:8A:E9:05:3E:11:C8:30:DF:75:9F:85:FB:81:57 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/326131343a373538303a666639303a3a2f34342d3438203d3e20323035393431.roa Signing time: Fri 22 Aug 2025 19:33:32 +0000 ROA not before: Fri 22 Aug 2025 19:28:32 +0000 ROA not after: Fri 21 Aug 2026 19:33:32 +0000 asID: 205941 IP address blocks: 2a14:7580:ff90::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.crl rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:65:59:70:58:2f:c8:b2:ea:76:b8:b2:b9:df:7a:05:8e:25:e8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EDE0B0EE6D8AE9053E11C830DF759F85FB8157 Validity Not Before: Aug 22 19:28:32 2025 GMT Not After : Aug 21 19:33:32 2026 GMT Subject: CN=C48BC329B1D0E338C7696584961090D52099FE2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:fc:4f:ac:58:e3:26:56:38:1d:07:4a:78: 2b:e2:65:2a:38:00:b9:72:c7:3d:67:cd:22:70:03: eb:91:b6:c5:b6:65:b8:b6:4d:e2:90:61:73:05:0a: 94:39:ea:f2:27:fd:e3:0e:14:12:db:57:0e:d6:f4: bd:03:d6:94:b7:13:16:2f:2d:05:46:34:81:09:a2: 2b:d6:9a:5e:3f:8e:0a:13:d1:c1:ae:34:9b:7f:5a: 9a:c7:5e:e0:8e:6c:64:c1:a3:fa:62:01:4e:da:c0: 55:6b:b3:5e:11:41:47:5c:98:e2:e1:3b:11:80:86: 16:c0:21:e0:b1:e7:e2:48:82:b2:82:4c:5b:e7:15: e7:42:c3:0b:e2:5b:96:9d:8d:42:2c:2e:07:6e:fd: 03:f6:78:6d:8e:05:3e:be:24:95:57:fb:0a:26:10: 3d:ef:0d:8b:31:1a:da:2b:e6:db:02:3f:48:0e:8a: 26:1e:00:5a:bf:c7:2f:84:d6:f9:61:1f:e2:ab:ed: d1:e2:a9:04:61:18:1e:38:3b:2c:72:82:11:ea:24: 4a:58:e6:22:77:bb:f8:59:99:8e:67:5a:6f:06:16: f9:bd:0d:34:4e:38:64:4a:94:9f:5e:38:ab:11:d3: 48:31:aa:b1:84:b4:8c:df:a4:89:a1:16:1f:0a:2e: 1e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8B:C3:29:B1:D0:E3:38:C7:69:65:84:96:10:90:D5:20:99:FE:2A X509v3 Authority Key Identifier: keyid:33:ED:E0:B0:EE:6D:8A:E9:05:3E:11:C8:30:DF:75:9F:85:FB:81:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/326131343a373538303a666639303a3a2f34342d3438203d3e20323035393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff90::/44 Signature Algorithm: sha256WithRSAEncryption b8:3f:13:39:57:34:4d:63:f2:9c:e0:42:03:d0:f7:8f:25:27: 70:d5:7a:2f:65:07:b1:60:e0:77:f2:14:54:04:91:20:b2:d7: db:89:6c:c3:df:a2:89:79:4b:3b:ea:f4:9d:84:9b:1d:39:a3: a9:e6:59:27:4a:4e:7a:58:2d:d0:fc:4c:76:4b:de:07:df:ab: 35:b2:f4:c9:8f:ea:61:49:82:da:63:28:dc:11:8a:2a:9a:14: 63:d7:11:4c:4a:71:08:c9:07:92:e2:86:09:28:86:42:02:ee: 15:8b:ed:2e:01:7c:67:1d:cd:de:ae:2d:59:fd:b2:2c:5e:12: 14:10:dc:c5:4e:34:a5:c8:7f:76:e1:63:21:61:73:4f:9a:b0: 57:35:af:ad:50:23:9b:3a:4e:6c:73:95:69:e3:32:03:35:63: c0:b1:48:c8:55:44:39:8f:ad:be:f9:1e:a8:6e:ac:c7:e0:77: 06:d6:71:78:25:5c:e5:bc:08:a9:f3:b6:dd:2d:68:fa:90:a9: e8:c0:64:e5:4f:9e:55:3e:46:e0:9e:08:76:8d:6f:32:ef:e5: 6e:de:be:8d:69:90:26:cb:e2:6e:e3:ab:ba:53:3c:cd:7b:6c: b3:21:2a:fa:36:ff:4e:a3:b9:b9:60:68:0c:93:80:66:bd:1b: da:44:c9:b5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUK2VZcFgvyLLqdriyud96BY4l6OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFREUwQjBFRTZEOEFFOTA1M0UxMUM4MzBERjc1OUY4 NUZCODE1NzAeFw0yNTA4MjIxOTI4MzJaFw0yNjA4MjExOTMzMzJaMDMxMTAvBgNV BAMTKEM0OEJDMzI5QjFEMEUzMzhDNzY5NjU4NDk2MTA5MEQ1MjA5OUZFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKvxPrFjjJlY4HQdKeCviZSo4 ALlyxz1nzSJwA+uRtsW2Zbi2TeKQYXMFCpQ56vIn/eMOFBLbVw7W9L0D1pS3ExYv LQVGNIEJoivWml4/jgoT0cGuNJt/WprHXuCObGTBo/piAU7awFVrs14RQUdcmOLh OxGAhhbAIeCx5+JIgrKCTFvnFedCwwviW5adjUIsLgdu/QP2eG2OBT6+JJVX+wom ED3vDYsxGtor5tsCP0gOiiYeAFq/xy+E1vlhH+Kr7dHiqQRhGB44OyxyghHqJEpY 5iJ3u/hZmY5nWm8GFvm9DTROOGRKlJ9eOKsR00gxqrGEtIzfpImhFh8KLh6pAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUxIvDKbHQ4zjHaWWElhCQ1SCZ/iowHwYDVR0j BBgwFoAUM+3gsO5tiukFPhHIMN91n4X7gVcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjdlYmRlMDMtMzRkZi00ZjJjLTkyZmEtOGZlMWQwODNk MTVkLzMvMzNFREUwQjBFRTZEOEFFOTA1M0UxMUM4MzBERjc1OUY4NUZCODE1Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zM0VERTBCMEVFNkQ4QUU5MDUzRTExQzgz MERGNzU5Rjg1RkI4MTU3LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yN2ViZGUwMy0zNGRmLTRmMmMtOTJmYS04ZmUxZDA4M2QxNWQvMy8zMjYxMzEz NDNhMzczNTM4MzAzYTY2NjYzOTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MDM1MzkzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gP+QMA0GCSqGSIb3DQEBCwUAA4IBAQC4 PxM5VzRNY/Kc4EID0PePJSdw1XovZQexYOB38hRUBJEgstfbiWzD36KJeUs76vSd hJsdOaOp5lknSk56WC3Q/Ex2S94H36s1svTJj+phSYLaYyjcEYoqmhRj1xFMSnEI yQeS4oYJKIZCAu4Vi+0uAXxnHc3eri1Z/bIsXhIUENzFTjSlyH924WMhYXNPmrBX Na+tUCObOk5sc5Vp4zIDNWPAsUjIVUQ5j62++R6obqzH4HcG1nF4JVzlvAip87bd LWj6kKnowGTlT55VPkbgngh2jW8y7+Vu3r6NaZAmy+Ju46u6UzzNe2yzISr6Nv9O o7m5YGgMk4BmvRvaRMm1 -----END CERTIFICATE-----Generated at Sat Aug 23 21:49:22 2025 by rpki-client