$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa File: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (raw, json) Hash identifier: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs= Subject key identifier: 90:E4:F7:DD:E7:06:09:AF:E8:F3:56:D3:C1:E1:AF:A6:FC:DE:2F:3B Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 6B622A7EB381C01766B234D39E363C3C22CD64E1 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa Signing time: Fri 16 May 2025 16:39:34 +0000 ROA not before: Fri 16 May 2025 16:34:34 +0000 ROA not after: Fri 15 May 2026 16:39:34 +0000 asID: 215171 IP address blocks: 2a14:7581:4560::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 05:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:62:2a:7e:b3:81:c0:17:66:b2:34:d3:9e:36:3c:3c:22:cd:64:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: May 16 16:34:34 2025 GMT Not After : May 15 16:39:34 2026 GMT Subject: CN=90E4F7DDE70609AFE8F356D3C1E1AFA6FCDE2F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:c7:56:e7:fd:27:37:1c:b1:30:20:4c:cd: f5:76:e7:79:16:8a:fb:d9:df:c4:c2:26:91:bd:82: e0:15:43:e9:10:2f:af:13:3b:a6:e6:aa:5f:8a:17: 8f:1e:9a:43:f1:e6:da:e2:4f:8a:0b:25:66:25:2c: c7:a0:a5:b2:7b:e3:fe:9b:0b:3c:7e:1a:58:e2:7d: d8:f4:ac:dc:6f:99:98:46:db:18:7d:9c:47:12:9c: 11:05:c1:fe:f4:89:8e:90:4a:67:8a:47:c8:cc:06: fb:d3:9f:2c:83:a1:6a:52:a7:10:96:fe:41:f6:89: a8:ff:38:80:06:e3:a4:12:c8:81:28:d4:80:39:71: f8:85:b5:34:a5:ff:9b:19:7f:9c:6b:cb:ce:7e:ae: 7a:5a:90:e4:45:82:d8:03:29:6e:12:19:71:5a:0e: 1d:6d:f1:9a:73:d9:03:4f:00:7b:57:91:bf:1e:5a: e9:a6:58:1b:5b:0d:cc:a1:80:3e:a4:9e:8f:8b:0a: e0:66:5e:db:6e:e6:7c:ff:2c:0a:b1:6a:ec:df:88: a2:6f:9c:1c:8a:cb:4a:d2:20:d6:79:9b:61:cf:e9: bf:5c:e5:3b:a5:5a:19:70:1c:65:2e:4d:fb:fb:29: 53:77:a4:00:75:9c:f6:6c:d6:95:c7:48:e5:8f:d5: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E4:F7:DD:E7:06:09:AF:E8:F3:56:D3:C1:E1:AF:A6:FC:DE:2F:3B X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4560::/44 Signature Algorithm: sha256WithRSAEncryption 9c:4a:03:46:19:68:ce:73:d0:34:e1:6f:16:99:20:9e:a6:05: 93:c9:28:e0:c2:4f:a2:da:2d:d1:01:e3:15:f2:eb:f1:2d:da: af:bf:30:78:1f:05:97:91:bb:7e:6f:a7:3c:ad:45:48:38:21: e3:7d:e3:8c:e1:d3:e1:63:88:c7:d7:ca:e4:a0:e5:59:cb:fd: d5:b8:ad:df:97:1a:7f:ee:f9:ac:3c:0e:26:55:35:86:1d:4e: ce:2b:15:a8:b9:45:82:f7:62:7e:ef:48:ce:b1:b5:25:a6:4e: bc:4e:e5:b8:41:27:a5:2d:d7:3e:7a:0e:4c:fd:cf:42:62:e2: cb:90:b4:cf:8c:42:e6:b9:a1:34:91:30:3e:8c:c7:16:69:50: db:bb:1b:34:b7:06:5b:d8:e6:80:99:e0:81:6b:ab:65:5e:fb: 9a:d2:90:0e:8b:84:20:0a:b5:2b:67:cc:e9:9c:69:3c:f5:45: b8:f4:03:e3:1b:d0:04:13:41:52:63:90:57:34:69:d4:ce:3b: 20:69:f5:91:70:96:ae:94:f4:d5:6a:60:21:2d:89:9f:b8:d8: 35:6c:8b:e8:c9:39:9e:05:92:d2:76:29:d9:ff:8b:60:d0:86: cc:ff:9d:43:77:7e:bc:4f:67:46:3a:91:70:91:52:e9:cd:c5: 1b:6f:67:55 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUa2IqfrOBwBdmsjTTnjY8PCLNZOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTA1MTYxNjM0MzRaFw0yNjA1MTUxNjM5MzRaMDMxMTAvBgNV BAMTKDkwRTRGN0RERTcwNjA5QUZFOEYzNTZEM0MxRTFBRkE2RkNERTJGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDsdW5/0nNxyxMCBMzfV253kW ivvZ38TCJpG9guAVQ+kQL68TO6bmql+KF48emkPx5triT4oLJWYlLMegpbJ74/6b Czx+Gljifdj0rNxvmZhG2xh9nEcSnBEFwf70iY6QSmeKR8jMBvvTnyyDoWpSpxCW /kH2iaj/OIAG46QSyIEo1IA5cfiFtTSl/5sZf5xry85+rnpakORFgtgDKW4SGXFa Dh1t8Zpz2QNPAHtXkb8eWummWBtbDcyhgD6kno+LCuBmXttu5nz/LAqxauzfiKJv nByKy0rSINZ5m2HP6b9c5TulWhlwHGUuTfv7KVN3pAB1nPZs1pXHSOWP1cEtAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUkOT33ecGCa/o81bTweGvpvzeLzswHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzUzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUVgMA0GCSqGSIb3DQEBCwUAA4IBAQCc SgNGGWjOc9A04W8WmSCepgWTySjgwk+i2i3RAeMV8uvxLdqvvzB4HwWXkbt+b6c8 rUVIOCHjfeOM4dPhY4jH18rkoOVZy/3VuK3flxp/7vmsPA4mVTWGHU7OKxWouUWC 92J+70jOsbUlpk68TuW4QSelLdc+eg5M/c9CYuLLkLTPjELmuaE0kTA+jMcWaVDb uxs0twZb2OaAmeCBa6tlXvua0pAOi4QgCrUrZ8zpnGk89UW49APjG9AEE0FSY5BX NGnUzjsgafWRcJaulPTVamAhLYmfuNg1bIvoyTmeBZLSdinZ/4tg0IbM/51Dd368 T2dGOpFwkVLpzcUbb2dV -----END CERTIFICATE-----Generated at Fri Jul 4 13:26:35 2025 by rpki-client