$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa File: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (raw, json) Hash identifier: P72fY8g2wKghQonr1ZCiQ1/0HQ3pwy8QphUMcE76MXQ= Subject key identifier: 9C:50:D1:E7:31:17:55:DD:BA:1B:C6:94:3F:75:B4:CD:F7:0A:18:2E Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 57F7FD7A36A2E3B397F9A46D343996E7CE1B043D Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa Signing time: Fri 08 Aug 2025 06:47:50 +0000 ROA not before: Fri 08 Aug 2025 06:42:50 +0000 ROA not after: Fri 07 Aug 2026 06:47:50 +0000 asID: 9923 IP address blocks: 2a14:7581:6e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f7:fd:7a:36:a2:e3:b3:97:f9:a4:6d:34:39:96:e7:ce:1b:04:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Aug 8 06:42:50 2025 GMT Not After : Aug 7 06:47:50 2026 GMT Subject: CN=9C50D1E7311755DDBA1BC6943F75B4CDF70A182E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:dc:20:76:d9:71:ef:6f:f8:9a:d7:e8:5c: c4:d3:87:b5:41:e6:24:f0:b1:bf:cc:7e:02:a3:36: 4a:c2:27:89:46:d4:63:bd:e3:f2:41:7f:6d:39:1a: 64:4a:b4:7d:a0:12:63:47:fa:48:c9:e4:ad:b5:31: 12:b8:6f:18:a9:bf:53:2a:49:9f:c1:9b:51:b2:3b: 29:3a:fe:e3:10:ec:e7:6d:38:d6:32:14:25:fc:45: 09:61:6a:01:47:97:7e:d6:4e:e7:9c:aa:66:f6:5f: 2c:27:fc:79:32:9d:ce:6e:88:7e:b9:d3:bb:62:21: 77:c2:80:9b:d2:15:8f:6e:ce:ef:01:da:40:3d:bb: 90:8a:ee:44:a0:67:54:62:9f:8d:77:d1:15:e1:79: 3c:3a:ab:7a:42:29:ae:81:6e:0e:64:95:6a:0b:d3: b8:ad:8a:4e:44:44:3f:14:51:70:c2:fd:79:99:5d: 17:82:1e:d8:7b:0d:41:dd:5e:f7:98:c2:a1:9e:e8: 7c:ef:1f:c9:54:18:ff:3b:6b:89:19:e8:d6:bc:b7: d8:80:e4:ab:b8:ff:bc:91:a9:6d:7d:74:11:19:7c: 35:18:2f:5c:13:48:8a:b5:c1:2d:87:7e:ec:30:74: 1a:94:5e:ce:71:36:79:b4:f8:da:56:08:fb:94:0b: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:50:D1:E7:31:17:55:DD:BA:1B:C6:94:3F:75:B4:CD:F7:0A:18:2E X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:6e00::/40 Signature Algorithm: sha256WithRSAEncryption 9c:a2:cc:ac:d2:ac:c6:01:b2:fe:58:a9:74:ec:86:c3:8f:13: 6e:eb:8d:78:9d:12:77:ed:c3:ee:2d:f4:3e:b6:21:44:12:8d: 60:69:83:fb:4b:11:7d:28:8d:28:9d:b6:0e:6a:7a:74:9e:18: 6d:66:59:2f:a0:c3:bc:78:65:ad:1f:08:df:cb:12:23:93:e3: 99:60:21:c3:6d:30:a0:7b:03:e7:0b:f3:8c:ab:5e:69:02:a4: a8:22:34:9a:47:08:7e:79:6f:ad:c7:42:63:cc:6d:b4:45:30: 69:0d:60:55:ea:18:dc:59:55:92:eb:fc:df:55:7d:b4:6f:e8: ae:c2:0c:bf:e8:09:97:34:bf:b8:2a:c6:b8:cd:9c:ad:7f:92: e2:f8:e2:a2:02:07:cf:a1:80:8d:eb:1a:42:77:64:31:8c:f8: 73:b0:14:65:44:13:4a:5c:84:97:f6:af:a2:cb:f3:b6:4e:4d: 0e:9f:cb:1d:57:e0:3c:ce:80:bc:f6:92:17:0d:93:a4:7c:12: 51:84:25:bc:24:b9:d6:47:7d:3c:6a:60:db:77:ac:08:70:ae: ca:62:8f:ab:75:fb:ac:13:dd:46:a9:b1:0f:30:4d:78:43:ec: 46:6a:09:53:dc:c6:19:cd:6e:a2:fb:b9:34:f7:bc:61:36:db: e7:14:6f:89 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIUV/f9ejai47OX+aRtNDmW584bBD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA4MDgwNjQyNTBaFw0yNjA4MDcwNjQ3NTBaMDMxMTAvBgNV BAMTKDlDNTBEMUU3MzExNzU1RERCQTFCQzY5NDNGNzVCNENERjcwQTE4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63Nwgdtlx72/4mtfoXMTTh7VB 5iTwsb/MfgKjNkrCJ4lG1GO94/JBf205GmRKtH2gEmNH+kjJ5K21MRK4bxipv1Mq SZ/Bm1GyOyk6/uMQ7OdtONYyFCX8RQlhagFHl37WTuecqmb2Xywn/Hkync5uiH65 07tiIXfCgJvSFY9uzu8B2kA9u5CK7kSgZ1Rin4130RXheTw6q3pCKa6Bbg5klWoL 07itik5ERD8UUXDC/XmZXReCHth7DUHdXveYwqGe6HzvH8lUGP87a4kZ6Na8t9iA 5Ku4/7yRqW19dBEZfDUYL1wTSIq1wS2HfuwwdBqUXs5xNnm0+NpWCPuUC///AgMB AAGjggKAMIICfDAdBgNVHQ4EFgQUnFDR5zEXVd26G8aUP3W0zfcKGC4wHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84YWNmYTMxOC0yYTVjLTQyNDEtYWZiYi0zODdkNzFlOGM1OTYvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTM2NjUzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzkz OTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgAqFHWBbjANBgkqhkiG9w0BAQsFAAOCAQEAnKLMrNKs xgGy/lipdOyGw48TbuuNeJ0Sd+3D7i30PrYhRBKNYGmD+0sRfSiNKJ22Dmp6dJ4Y bWZZL6DDvHhlrR8I38sSI5PjmWAhw20woHsD5wvzjKteaQKkqCI0mkcIfnlvrcdC Y8xttEUwaQ1gVeoY3FlVkuv831V9tG/orsIMv+gJlzS/uCrGuM2crX+S4vjiogIH z6GAjesaQndkMYz4c7AUZUQTSlyEl/avosvztk5NDp/LHVfgPM6AvPaSFw2TpHwS UYQlvCS51kd9PGpg23esCHCuymKPq3X7rBPdRqmxDzBNeEPsRmoJU9zGGc1uovu5 NPe8YTbb5xRviQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:28 2025 by rpki-client