$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa File: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (raw, json) Hash identifier: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY= Subject key identifier: CF:71:E2:1E:69:B2:5C:DC:1F:6F:25:88:EC:8D:F0:E5:14:98:FC:93 Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 7BAD38094DB7540B8279184E5364CF82B7049E31 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa Signing time: Wed 26 Feb 2025 11:52:12 +0000 ROA not before: Wed 26 Feb 2025 11:47:12 +0000 ROA not after: Wed 25 Feb 2026 11:52:12 +0000 asID: 215223 IP address blocks: 2a14:7581:4820::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 05:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ad:38:09:4d:b7:54:0b:82:79:18:4e:53:64:cf:82:b7:04:9e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Feb 26 11:47:12 2025 GMT Not After : Feb 25 11:52:12 2026 GMT Subject: CN=CF71E21E69B25CDC1F6F2588EC8DF0E51498FC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2d:4b:14:4d:4c:0d:f3:8d:9f:0e:24:a9:6a: 9a:9c:df:45:e6:21:42:a0:72:b5:15:14:9d:66:e2: 93:5e:d0:6d:f1:c0:41:c3:93:88:0c:b1:ca:83:fb: a5:4f:e8:0f:fd:a8:80:07:54:b2:cd:40:7d:a9:6f: 11:17:ae:ab:db:e3:11:2f:8f:e6:17:83:55:44:14: ca:a7:a6:78:a4:0d:20:eb:5f:2b:6d:95:65:c9:88: 36:f5:70:06:ef:2e:16:a0:2a:49:3c:bb:20:5c:3d: a0:dd:8f:07:0e:1e:e2:f4:a2:73:07:3c:2b:93:e2: f7:c6:19:1c:6d:ab:bc:ed:a1:be:fb:c2:fb:c5:cb: 2f:1f:ec:f9:2e:34:2f:ea:56:28:c6:13:72:66:9f: 70:c2:bc:ec:38:43:31:c1:a4:e4:73:05:95:ab:63: e4:0c:b6:5e:fd:ac:9f:06:27:26:97:2e:f1:b8:da: 93:cd:e4:9b:8b:ae:16:e6:33:44:1f:30:87:2b:c3: 72:8c:43:2b:cf:9d:3b:c9:ab:a6:83:66:97:da:29: cd:76:aa:27:de:c5:88:e4:8e:55:4e:53:b6:4a:30: 01:1a:08:2b:ee:53:4f:d1:42:ee:e7:1c:94:71:45: c4:07:0c:54:c0:d0:c9:7b:04:59:e7:da:5f:44:38: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:E2:1E:69:B2:5C:DC:1F:6F:25:88:EC:8D:F0:E5:14:98:FC:93 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4820::/44 Signature Algorithm: sha256WithRSAEncryption 4a:f0:9b:83:fe:e5:40:0e:a7:81:ec:c0:a5:63:63:e9:cc:5e: f2:58:b4:09:fa:af:51:9c:ba:76:4b:91:79:1c:45:4a:1f:8d: 8e:24:d3:b3:dd:0f:63:f1:ec:ef:ff:95:4c:bf:bb:fc:d0:b1: 81:f6:8c:69:e1:03:a5:6e:11:0e:4c:0c:ee:65:79:7f:f1:42: 53:4c:76:3a:77:71:a5:d0:e8:b5:52:22:e1:e2:06:25:fb:e9: 94:4c:21:8c:22:62:a7:4d:04:79:69:42:c6:19:cf:d6:46:42: ad:ed:72:ce:d9:65:b3:ab:f9:95:f3:11:0f:b3:86:f0:1a:1b: 18:7f:00:2e:8d:f3:93:b7:fe:e9:63:68:84:4d:73:6c:52:9b: 96:6d:5c:de:49:1c:b3:23:b0:18:d2:65:bc:d7:85:73:70:25: 56:5c:a3:da:7e:f1:67:ac:d8:08:67:65:7c:f4:65:6f:d3:93: 97:ba:5f:52:24:e1:38:dc:65:32:6e:d9:ab:bb:38:58:81:98: b8:43:d5:88:ac:b9:75:6f:98:45:57:e7:61:32:04:2d:b1:e1: 72:06:a7:d8:32:ba:59:5a:f6:ca:01:38:85:95:bc:90:56:7f: ff:a5:ee:07:5a:28:99:ec:2d:a4:a3:79:9d:87:4c:c8:3d:10: 7f:9f:da:33 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUe604CU23VAuCeRhOU2TPgrcEnjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTAyMjYxMTQ3MTJaFw0yNjAyMjUxMTUyMTJaMDMxMTAvBgNV BAMTKENGNzFFMjFFNjlCMjVDREMxRjZGMjU4OEVDOERGMEU1MTQ5OEZDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbLUsUTUwN842fDiSpapqc30Xm IUKgcrUVFJ1m4pNe0G3xwEHDk4gMscqD+6VP6A/9qIAHVLLNQH2pbxEXrqvb4xEv j+YXg1VEFMqnpnikDSDrXyttlWXJiDb1cAbvLhagKkk8uyBcPaDdjwcOHuL0onMH PCuT4vfGGRxtq7ztob77wvvFyy8f7PkuNC/qVijGE3Jmn3DCvOw4QzHBpORzBZWr Y+QMtl79rJ8GJyaXLvG42pPN5JuLrhbmM0QfMIcrw3KMQyvPnTvJq6aDZpfaKc12 qifexYjkjlVOU7ZKMAEaCCvuU0/RQu7nHJRxRcQHDFTA0Ml7BFnn2l9EOBVXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUz3HiHmmyXNwfbyWI7I3w5RSY/JMwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzgzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM1MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUggMA0GCSqGSIb3DQEBCwUAA4IBAQBK 8JuD/uVADqeB7MClY2PpzF7yWLQJ+q9RnLp2S5F5HEVKH42OJNOz3Q9j8ezv/5VM v7v80LGB9oxp4QOlbhEOTAzuZXl/8UJTTHY6d3Gl0Oi1UiLh4gYl++mUTCGMImKn TQR5aULGGc/WRkKt7XLO2WWzq/mV8xEPs4bwGhsYfwAujfOTt/7pY2iETXNsUpuW bVzeSRyzI7AY0mW814VzcCVWXKPafvFnrNgIZ2V89GVv05OXul9SJOE43GUybtmr uzhYgZi4Q9WIrLl1b5hFV+dhMgQtseFyBqfYMrpZWvbKATiFlbyQVn//pe4HWiiZ 7C2ko3mdh0zIPRB/n9oz -----END CERTIFICATE-----Generated at Sat Jul 5 20:38:56 2025 by rpki-client