$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa File: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (raw, json) Hash identifier: 3Oy0/+Zmc9e5z/F4yp6K4LzyzEeGtPjpxBkzzaKS8w0= Subject key identifier: DA:34:21:B6:87:A2:6B:15:AD:6A:27:F8:84:20:83:D2:98:76:A7:A2 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 6DCA7CF762D682BF6D5A2BE690C7277F603AE1E4 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa Signing time: Wed 24 Jun 2026 23:01:21 +0000 ROA not before: Wed 24 Jun 2026 22:56:21 +0000 ROA not after: Wed 23 Jun 2027 23:01:21 +0000 asID: 214809 IP address blocks: 103.139.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 09:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ca:7c:f7:62:d6:82:bf:6d:5a:2b:e6:90:c7:27:7f:60:3a:e1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Jun 24 22:56:21 2026 GMT Not After : Jun 23 23:01:21 2027 GMT Subject: CN=DA3421B687A26B15AD6A27F8842083D29876A7A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:7d:3a:3e:32:cc:df:c2:fe:5b:d8:0e:14: c9:6b:71:c5:83:55:8b:1d:d0:42:41:48:88:79:ee: 1b:b4:41:f4:c4:2b:c8:b5:84:eb:cd:86:6a:d5:ba: 97:b8:e4:f2:17:c2:75:f3:28:82:23:e3:df:01:7f: 68:64:6f:83:9a:37:fd:84:e1:3a:36:d1:e5:49:b0: 85:80:28:a1:2c:3d:9e:01:d0:f7:8f:f2:a5:4f:aa: a3:f2:37:ea:12:bb:b7:0d:34:74:64:15:0d:aa:c4: c7:f5:25:dc:ea:1e:77:43:ee:01:03:da:cd:e2:a7: 01:df:8b:e3:d2:ff:41:62:da:a5:8b:b9:39:30:60: 1d:7f:57:69:26:fe:b5:ec:42:0d:f6:4c:0a:b3:bd: 16:e1:0b:70:87:21:fe:39:6d:17:39:ab:12:9e:fd: c4:6f:fc:4e:12:28:a0:1f:ae:41:c2:3b:13:19:89: 0b:b1:ce:82:55:38:4b:ae:17:7b:3f:ea:45:63:4c: 5d:9a:aa:a7:1c:6f:32:eb:f2:c4:17:0f:ab:aa:c5: 75:41:ba:68:52:b7:54:4c:e6:d7:a9:cb:b1:1f:f3: 29:ab:c9:3c:21:76:28:b5:3a:fd:54:6f:86:72:b6: 9a:df:c1:4f:6d:5b:a5:a4:70:66:eb:9c:33:d7:fa: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:34:21:B6:87:A2:6B:15:AD:6A:27:F8:84:20:83:D2:98:76:A7:A2 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.88.0/24 Signature Algorithm: sha256WithRSAEncryption 77:f5:33:11:3c:1c:bb:0c:81:21:89:31:4c:61:b8:cc:62:ec: 04:7a:07:b9:75:17:d6:60:82:97:fa:13:17:96:30:a9:f4:b7: 2f:13:f3:69:9e:16:e0:38:c2:a5:3b:92:57:93:16:e9:9c:ce: 14:17:cb:dc:27:73:0e:09:ae:c7:0f:0b:77:3e:90:45:73:f1: 9b:6e:25:88:d8:0c:f6:f6:df:a4:a6:20:1d:30:9b:d2:83:2b: dd:61:4a:bf:08:65:b3:57:55:88:ef:af:28:a9:c5:31:97:8c: d1:4c:5a:ed:4c:ee:ee:2a:b9:32:66:4c:02:69:0d:8c:e9:37: 9d:74:48:69:3f:0f:1c:36:94:9a:fd:f6:b2:5b:41:f7:d8:fd: 46:9e:a5:de:d8:af:eb:22:71:5b:2f:47:fa:e3:c5:36:b4:37: 27:4c:7f:0b:c0:02:c3:b4:3a:01:af:4c:68:3c:d6:ff:0b:40: b1:43:ce:e5:b1:34:b5:13:29:47:e9:ee:3b:7d:af:e4:2a:7c: cc:bc:49:9d:30:e9:dc:0f:0a:ad:13:cf:6f:35:d7:98:45:42: 63:d9:5b:da:ee:f5:ab:0a:2d:1f:78:e0:ff:08:c7:17:8b:f3: e6:47:1d:47:79:84:57:7c:ca:75:a3:4f:1c:41:81:34:24:fe: 79:f4:ba:f9 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUbcp892LWgr9tWivmkMcnf2A64eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNjA2MjQyMjU2MjFaFw0yNzA2MjMyMzAxMjFaMDMxMTAvBgNV BAMTKERBMzQyMUI2ODdBMjZCMTVBRDZBMjdGODg0MjA4M0QyOTg3NkE3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnV306PjLM38L+W9gOFMlrccWD VYsd0EJBSIh57hu0QfTEK8i1hOvNhmrVupe45PIXwnXzKIIj498Bf2hkb4OaN/2E 4To20eVJsIWAKKEsPZ4B0PeP8qVPqqPyN+oSu7cNNHRkFQ2qxMf1JdzqHndD7gED 2s3ipwHfi+PS/0Fi2qWLuTkwYB1/V2km/rXsQg32TAqzvRbhC3CHIf45bRc5qxKe /cRv/E4SKKAfrkHCOxMZiQuxzoJVOEuuF3s/6kVjTF2aqqccbzLr8sQXD6uqxXVB umhSt1RM5tepy7Ef8ymryTwhdii1Ov1Ub4ZytprfwU9tW6WkcGbrnDPX+p/xAgMB AAGjggJvMIICazAdBgNVHQ4EFgQU2jQhtoeiaxWtaif4hCCD0ph2p6IwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzEwOThjMjMt YTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRlYTA5LzEvMzEzMDMzMmUzMTMzMzkyZTM4 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzODMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABni1gwDQYJKoZIhvcNAQELBQADggEBAHf1MxE8HLsMgSGJMUxhuMxi7AR6B7l1 F9Zggpf6ExeWMKn0ty8T82meFuA4wqU7kleTFumczhQXy9wncw4JrscPC3c+kEVz 8ZtuJYjYDPb236SmIB0wm9KDK91hSr8IZbNXVYjvryipxTGXjNFMWu1M7u4quTJm TAJpDYzpN510SGk/Dxw2lJr99rJbQffY/Uaepd7Yr+sicVsvR/rjxTa0NydMfwvA AsO0OgGvTGg81v8LQLFDzuWxNLUTKUfp7jt9r+QqfMy8SZ0w6dwPCq0Tz28115hF QmPZW9ru9asKLR944P8IxxeL8+ZHHUd5hFd8ynWjTxxBgTQk/nn0uvk= -----END CERTIFICATE-----Generated at Thu Jul 23 19:10:25 2026 by rpki-client