$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa File: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (raw, json) Hash identifier: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY= Subject key identifier: 82:05:EB:42:0E:0F:34:D1:5E:0D:9E:E3:E2:98:15:1F:B2:E5:79:ED Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 63FBA486B853E2D36065FDD203B3225BAF28FAEE Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa Signing time: Wed 23 Jul 2025 20:06:54 +0000 ROA not before: Wed 23 Jul 2025 20:01:54 +0000 ROA not after: Wed 22 Jul 2026 20:06:54 +0000 asID: 151704 IP address blocks: 2a0b:4e07:1c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fb:a4:86:b8:53:e2:d3:60:65:fd:d2:03:b3:22:5b:af:28:fa:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Jul 23 20:01:54 2025 GMT Not After : Jul 22 20:06:54 2026 GMT Subject: CN=8205EB420E0F34D15E0D9EE3E298151FB2E579ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:21:87:d3:26:4f:bd:37:3b:c1:08:1a:7c:e4: 59:4f:91:86:36:e3:65:fd:fe:75:2b:63:08:6b:7c: ad:57:f4:b7:f4:98:2e:e4:de:0d:d5:b6:a6:4a:79: 47:99:15:92:69:18:4f:ad:fc:ac:db:13:a0:a2:3e: be:84:5f:e1:e6:47:59:f3:f3:c3:09:8f:61:d4:45: 77:42:07:47:6e:bf:19:cb:eb:80:f6:b7:73:0d:98: 52:45:2b:0b:32:71:fc:91:e6:a4:35:cb:77:da:b1: dd:42:c6:dd:9c:38:42:98:a3:db:b9:31:85:e6:01: 3d:af:bc:3f:46:cc:22:d7:43:6b:b2:5c:ac:b1:fe: 63:ef:96:90:6d:24:d9:1c:86:4d:57:61:be:f8:f0: a6:08:ff:8d:3a:ef:99:e0:79:b1:2d:da:ae:e9:65: 94:d9:39:b6:c8:9b:86:4b:a8:60:f0:e8:52:f2:53: fa:e9:33:bd:e2:3f:d9:5f:68:79:6a:89:ed:3b:11: 8f:db:83:4c:70:5c:c9:23:4d:0d:52:78:ee:bd:ac: 02:a5:77:99:19:43:88:b4:04:cf:1c:a9:68:74:28: 90:c8:90:b2:9b:11:d1:d8:35:30:8d:b2:6f:6f:91: d0:b5:d3:e0:e9:21:97:d4:fd:b3:b2:1c:cc:47:69: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:05:EB:42:0E:0F:34:D1:5E:0D:9E:E3:E2:98:15:1F:B2:E5:79:ED X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:1c01::/48 Signature Algorithm: sha256WithRSAEncryption 30:21:0a:1a:9d:7e:4a:58:6c:af:be:9d:18:7b:30:da:17:7f: 90:9d:6e:e2:92:3a:9b:7e:ee:5d:48:88:fc:61:f0:be:28:64: fb:b8:24:52:a2:46:41:f0:8c:e1:7b:3b:7d:5d:bb:6b:fc:6d: f5:13:ac:5e:0d:67:b8:84:cc:69:2f:b3:04:2c:ea:5f:62:1c: 92:58:a2:17:01:4a:ef:01:34:47:ec:88:4e:f4:ec:19:a3:54: b1:72:04:72:83:d7:88:d8:cb:e9:ac:f2:1c:a1:7f:ba:c2:42: a0:5e:6a:0e:ed:15:83:eb:8e:bc:98:9e:a2:b8:3f:d8:eb:90: ec:95:ec:9e:b6:a7:a2:83:7d:51:f0:13:67:f9:8f:39:ac:88: 37:d6:ed:66:35:07:2b:66:68:2b:17:7b:19:88:ef:bc:f0:f2: ac:62:1c:c9:d1:a5:ef:03:b3:40:cf:5c:f4:71:1f:74:14:3f: 12:2c:cb:85:67:e6:8d:dc:0f:73:12:83:aa:8a:e1:cb:3b:5e: 9b:ba:42:ca:c3:e8:4f:19:e3:5a:f6:04:6a:af:02:83:13:f5: a1:84:03:75:04:9f:ee:5d:b7:03:07:14:57:02:bf:16:8f:03: c7:75:b1:b6:72:c9:17:72:bc:0a:7e:ea:47:b9:f0:89:4b:bc: d5:c8:21:d2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUY/ukhrhT4tNgZf3SA7MiW68o+u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTA3MjMyMDAxNTRaFw0yNjA3MjIyMDA2NTRaMDMxMTAvBgNV BAMTKDgyMDVFQjQyMEUwRjM0RDE1RTBEOUVFM0UyOTgxNTFGQjJFNTc5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIYfTJk+9NzvBCBp85FlPkYY2 42X9/nUrYwhrfK1X9Lf0mC7k3g3VtqZKeUeZFZJpGE+t/KzbE6CiPr6EX+HmR1nz 88MJj2HURXdCB0duvxnL64D2t3MNmFJFKwsycfyR5qQ1y3fasd1Cxt2cOEKYo9u5 MYXmAT2vvD9GzCLXQ2uyXKyx/mPvlpBtJNkchk1XYb748KYI/40675ngebEt2q7p ZZTZObbIm4ZLqGDw6FLyU/rpM73iP9lfaHlqie07EY/bg0xwXMkjTQ1SeO69rAKl d5kZQ4i0BM8cqWh0KJDIkLKbEdHYNTCNsm9vkdC10+DpIZfU/bOyHMxHac99AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUggXrQg4PNNFeDZ7j4pgVH7Llee0wHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAt MGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFmOWFmLzMvMzI2MTMwNjIzYTM0NjUzMDM3 M2EzMTYzMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTM3MzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoLTgccATANBgkqhkiG9w0BAQsFAAOCAQEAMCEKGp1+Slhsr76d GHsw2hd/kJ1u4pI6m37uXUiI/GHwvihk+7gkUqJGQfCM4Xs7fV27a/xt9ROsXg1n uITMaS+zBCzqX2IckliiFwFK7wE0R+yITvTsGaNUsXIEcoPXiNjL6azyHKF/usJC oF5qDu0Vg+uOvJieorg/2OuQ7JXsnranooN9UfATZ/mPOayIN9btZjUHK2ZoKxd7 GYjvvPDyrGIcydGl7wOzQM9c9HEfdBQ/EizLhWfmjdwPcxKDqorhyztem7pCysPo TxnjWvYEaq8CgxP1oYQDdQSf7l23AwcUVwK/Fo8Dx3WxtnLJF3K8Cn7qR7nwiUu8 1cgh0g== -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:10 2025 by rpki-client