$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa File: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (raw, json) Hash identifier: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA= Subject key identifier: F5:EE:A7:2A:FA:A4:7D:9E:89:C2:F4:CD:8A:FA:A4:00:39:A2:44:32 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 5BDA12CBA0B183B36D15F64EDAD8D9819FBF034B Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa Signing time: Tue 17 Jun 2025 15:37:32 +0000 ROA not before: Tue 17 Jun 2025 15:32:32 +0000 ROA not after: Tue 16 Jun 2026 15:37:32 +0000 asID: 216452 IP address blocks: 2a14:7584:7000::/36 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:da:12:cb:a0:b1:83:b3:6d:15:f6:4e:da:d8:d9:81:9f:bf:03:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jun 17 15:32:32 2025 GMT Not After : Jun 16 15:37:32 2026 GMT Subject: CN=F5EEA72AFAA47D9E89C2F4CD8AFAA40039A24432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:e5:77:c4:23:f8:37:27:84:0e:30:34:cc: e4:c0:d2:54:fa:4c:dc:a4:52:db:0e:80:cd:13:95: 98:71:eb:05:c1:96:fd:c9:5a:8b:bc:b5:17:38:2b: eb:e1:cc:af:62:6e:14:b2:e4:e1:69:7b:ea:74:46: 89:6b:a3:e4:88:61:e2:4c:c5:23:ba:2e:d2:5e:ee: ee:8c:c6:01:bc:5e:ae:e8:cf:86:1f:23:b2:9d:47: cf:6c:9f:86:c2:de:45:f8:17:ab:be:61:55:eb:3c: 90:cd:e8:f8:66:7e:60:b7:13:54:b0:30:5e:cd:e2: e5:bb:77:7d:a6:0e:d6:85:6a:94:9c:70:7b:41:ad: ff:62:b3:75:d9:ff:e7:1c:78:a0:77:dd:91:0c:48: c2:47:d4:3b:d4:6f:ce:f0:1f:e5:d7:e7:ea:47:6e: 6f:b0:68:35:01:e6:30:08:be:0a:04:d5:b6:df:31: a8:13:0e:90:6f:16:76:0d:ed:8c:1e:08:f0:50:d7: 57:3b:43:9d:53:fe:72:8f:24:36:6e:59:75:9d:a1: 25:bd:e0:35:8e:3f:e1:b9:eb:2a:8b:39:fa:fe:15: 8e:34:e1:4d:34:e1:fe:c3:9f:b1:30:c2:97:ba:ec: 4b:c0:f2:5f:20:26:fb:18:b8:09:aa:e6:46:f3:cf: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EE:A7:2A:FA:A4:7D:9E:89:C2:F4:CD:8A:FA:A4:00:39:A2:44:32 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:7000::/36 Signature Algorithm: sha256WithRSAEncryption 0c:77:be:f5:f0:ae:5c:c1:53:47:3a:f0:11:df:0f:82:84:bc: 0a:ec:c7:91:b2:42:f4:49:39:fe:13:08:2f:88:ab:ef:3a:95: 05:6b:b0:c4:d5:26:55:13:e1:52:69:1d:2e:14:5b:5e:84:74: b2:75:8a:4b:db:19:4a:f1:3a:00:9e:83:b3:f7:62:87:11:23: da:2e:ce:de:92:38:f0:f4:78:f5:10:7f:9f:61:93:26:ba:83: 68:57:05:4d:10:5b:f1:89:cd:7c:8b:bb:c3:be:90:91:5b:d0: b2:d5:15:4e:37:b7:02:c5:ff:29:12:08:e9:39:f0:13:c9:78: 46:0c:34:2d:35:ab:27:82:b5:22:86:eb:5f:f3:23:61:70:e8: 5d:48:cc:6f:b6:01:3d:2d:93:f9:11:63:d3:ed:1d:fa:b2:47: 85:2d:4b:02:b0:46:b0:62:9e:1f:45:2f:6c:53:d3:06:39:b0: 60:a8:e2:f0:1e:ba:3e:47:12:7e:2f:71:28:c0:cd:3b:97:01: ef:56:3f:01:69:fa:7b:8a:13:5e:10:f6:e0:72:e6:72:3f:41: ac:f6:93:33:f7:81:09:df:a9:d0:b1:01:78:d0:e4:cf:63:1f: b7:1b:79:76:01:27:4f:33:e9:4e:08:1a:90:06:9d:88:14:49: 35:ad:ad:8f -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUW9oSy6Cxg7NtFfZO2tjZgZ+/A0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTA2MTcxNTMyMzJaFw0yNjA2MTYxNTM3MzJaMDMxMTAvBgNV BAMTKEY1RUVBNzJBRkFBNDdEOUU4OUMyRjRDRDhBRkFBNDAwMzlBMjQ0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrheV3xCP4NyeEDjA0zOTA0lT6 TNykUtsOgM0TlZhx6wXBlv3JWou8tRc4K+vhzK9ibhSy5OFpe+p0Rolro+SIYeJM xSO6LtJe7u6MxgG8Xq7oz4YfI7KdR89sn4bC3kX4F6u+YVXrPJDN6PhmfmC3E1Sw MF7N4uW7d32mDtaFapSccHtBrf9is3XZ/+cceKB33ZEMSMJH1DvUb87wH+XX5+pH bm+waDUB5jAIvgoE1bbfMagTDpBvFnYN7YweCPBQ11c7Q51T/nKPJDZuWXWdoSW9 4DWOP+G56yqLOfr+FY404U004f7Dn7Ewwpe67EvA8l8gJvsYuAmq5kbzz673AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU9e6nKvqkfZ6JwvTNivqkADmiRDIwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83MmM0MDVmMS1jMzJkLTQ3Y2UtODk0My0wNzUyZWQxM2Q4ZWYvMS8zMjYxMzEz NDNhMzczNTM4MzQzYTM3MzAzMDMwM2EzYTJmMzMzNjJkMzQzNDIwM2QzZTIwMzIz MTM2MzQzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1hHAwDQYJKoZIhvcNAQELBQADggEBAAx3 vvXwrlzBU0c68BHfD4KEvArsx5GyQvRJOf4TCC+Iq+86lQVrsMTVJlUT4VJpHS4U W16EdLJ1ikvbGUrxOgCeg7P3YocRI9ouzt6SOPD0ePUQf59hkya6g2hXBU0QW/GJ zXyLu8O+kJFb0LLVFU43twLF/ykSCOk58BPJeEYMNC01qyeCtSKG61/zI2Fw6F1I zG+2AT0tk/kRY9PtHfqyR4UtSwKwRrBinh9FL2xT0wY5sGCo4vAeuj5HEn4vcSjA zTuXAe9WPwFp+nuKE14Q9uBy5nI/Qaz2kzP3gQnfqdCxAXjQ5M9jH7cbeXYBJ08z 6U4IGpAGnYgUSTWtrY8= -----END CERTIFICATE-----Generated at Sun Jun 29 20:19:10 2025 by rpki-client