$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3130332e36382e3131312e302f32342d3234203d3e203134363138.roa File: 3130332e36382e3131312e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: +ZT6HtlGOJ61cP7N+UsE1pnRJ2TDyeCXtrjMBeHrmO8= Subject key identifier: 70:2E:13:BD:10:83:0A:87:F6:25:93:84:0D:FC:9A:47:D8:BB:A0:77 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 74666286705C48F233960850CEBD791504630A85 Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3130332e36382e3131312e302f32342d3234203d3e203134363138.roa Signing time: Tue 10 Mar 2026 19:45:13 +0000 ROA not before: Tue 10 Mar 2026 19:40:13 +0000 ROA not after: Tue 09 Mar 2027 19:45:13 +0000 asID: 14618 IP address blocks: 103.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:66:62:86:70:5c:48:f2:33:96:08:50:ce:bd:79:15:04:63:0a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Mar 10 19:40:13 2026 GMT Not After : Mar 9 19:45:13 2027 GMT Subject: CN=702E13BD10830A87F62593840DFC9A47D8BBA077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:bd:c6:20:3a:9a:32:d8:e7:81:12:23:f9: 7c:e9:0f:86:e5:05:47:79:7c:04:49:00:2a:e7:1a: 1a:db:53:d1:f8:37:d9:26:57:77:c1:5f:de:61:48: 42:56:fe:46:43:4a:50:92:4a:af:41:18:74:c7:8f: 22:c5:c9:0f:c1:6b:59:03:8e:db:b5:7c:ff:0e:bd: 5a:14:53:61:b3:57:5b:b9:3f:48:72:86:35:30:6a: 37:2b:4d:ef:1e:b8:13:25:92:a5:91:a4:d5:7f:d7: f4:da:a8:2e:50:99:88:b1:7a:1d:3b:92:d5:eb:20: 8c:7a:9f:87:41:cc:1d:2d:12:e4:74:16:6c:a8:59: 30:c2:88:cf:86:2d:33:b7:53:b2:49:32:38:ab:52: de:8a:62:de:50:5e:3b:48:a2:ae:e3:8a:c7:9a:62: ef:29:d5:50:60:99:94:a2:5b:b7:6b:85:b8:bf:a6: 26:d9:b1:8f:22:97:6c:52:a2:bf:b6:f2:70:64:f9: 25:27:fb:ff:cd:7e:18:3f:ec:3e:31:af:cf:e7:46: 9d:bd:cf:34:46:e4:b7:e2:49:c6:28:36:4e:92:00: 83:1e:b6:99:64:37:7c:ec:fb:96:53:07:55:5e:c3: af:b0:6a:d4:d6:df:49:f5:8f:ae:f0:13:af:f2:a0: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2E:13:BD:10:83:0A:87:F6:25:93:84:0D:FC:9A:47:D8:BB:A0:77 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/3130332e36382e3131312e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.111.0/24 Signature Algorithm: sha256WithRSAEncryption 79:a1:35:79:3e:2c:82:4f:22:ca:ab:8b:97:8a:d2:b8:42:1a: ca:04:75:a2:07:08:ec:3d:82:84:8f:47:4e:87:49:0b:4b:fd: e8:45:7e:42:76:b0:87:97:b6:1d:64:7c:c5:05:66:0a:b6:11: 73:e7:7a:2d:88:99:f7:a8:66:04:e6:6a:c8:7f:73:a5:62:30: dc:f3:b1:bb:f6:89:70:e1:e3:c8:87:08:97:33:e2:56:12:6b: 4f:10:f7:ee:c2:8d:da:f2:3b:1f:d9:8f:5c:74:b9:47:e7:c4: af:69:26:b3:5d:8f:7e:96:74:89:4a:5d:46:5f:df:7e:57:52: 88:ab:3f:a9:e9:1e:62:25:ec:6a:c7:97:69:3b:6b:85:e6:42: 81:9a:b9:45:38:b9:d9:74:4e:4e:ea:5d:b1:4e:9b:f2:9c:b0: 83:62:42:24:78:5f:37:40:ac:d8:fa:3a:3e:67:28:24:b7:ba: 51:34:b7:c5:22:2a:61:24:fc:cc:7e:6f:3d:86:b4:e7:d3:7b: 40:c7:7a:3f:3b:96:66:9b:fb:8c:ed:7d:11:ef:7c:65:4c:ec: 24:23:54:c5:77:cd:f4:5a:72:78:0c:52:c9:80:1a:49:a6:a8: 08:6c:9b:89:57:e8:99:5f:65:21:dc:ed:71:a9:4c:25:25:6b: 4a:f0:57:d0 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUdGZihnBcSPIzlghQzr15FQRjCoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNjAzMTAxOTQwMTNaFw0yNzAzMDkxOTQ1MTNaMDMxMTAvBgNV BAMTKDcwMkUxM0JEMTA4MzBBODdGNjI1OTM4NDBERkM5QTQ3RDhCQkEwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGL3GIDqaMtjngRIj+XzpD4bl BUd5fARJACrnGhrbU9H4N9kmV3fBX95hSEJW/kZDSlCSSq9BGHTHjyLFyQ/Ba1kD jtu1fP8OvVoUU2GzV1u5P0hyhjUwajcrTe8euBMlkqWRpNV/1/TaqC5QmYixeh07 ktXrIIx6n4dBzB0tEuR0FmyoWTDCiM+GLTO3U7JJMjirUt6KYt5QXjtIoq7jisea Yu8p1VBgmZSiW7drhbi/pibZsY8il2xSor+28nBk+SUn+//Nfhg/7D4xr8/nRp29 zzRG5LfiScYoNk6SAIMetplkN3zs+5ZTB1Vew6+watTW30n1j67wE6/yoPghAgMB AAGjggJtMIICaTAdBgNVHQ4EFgQUcC4TvRCDCof2JZOEDfyaR9i7oHcwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzEzMDMzMmUzNjM4MmUzMTMx MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Z0RvMA0GCSqGSIb3DQEBCwUAA4IBAQB5oTV5PiyCTyLKq4uXitK4QhrKBHWiBwjs PYKEj0dOh0kLS/3oRX5CdrCHl7YdZHzFBWYKthFz53otiJn3qGYE5mrIf3OlYjDc 87G79olw4ePIhwiXM+JWEmtPEPfuwo3a8jsf2Y9cdLlH58SvaSazXY9+lnSJSl1G X99+V1KIqz+p6R5iJexqx5dpO2uF5kKBmrlFOLnZdE5O6l2xTpvynLCDYkIkeF83 QKzY+jo+Zygkt7pRNLfFIiphJPzMfm89hrTn03tAx3o/O5Zmm/uM7X0R73xlTOwk I1TFd830WnJ4DFLJgBpJpqgIbJuJV+iZX2Uh3O1xqUwlJWtK8FfQ -----END CERTIFICATE-----Generated at Thu Mar 26 03:23:16 2026 by rpki-client