$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3762313a3a2f34382d3438203d3e20313938303235.roa File: 326131343a373538303a3762313a3a2f34382d3438203d3e20313938303235.roa (raw, json) Hash identifier: sP4ALEuMKP+lcNFLmbhCvhEWaBDvHpOhmiHGC/KNblA= Subject key identifier: 87:40:5A:DF:85:42:43:AA:44:71:79:CF:0B:5D:C8:47:A5:36:E3:C2 Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Certificate serial: 1242B4C46EE6A402AA94F62540E8DFD0AD644321 Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3762313a3a2f34382d3438203d3e20313938303235.roa Signing time: Tue 19 Aug 2025 18:35:41 +0000 ROA not before: Tue 19 Aug 2025 18:30:41 +0000 ROA not after: Tue 18 Aug 2026 18:35:41 +0000 asID: 198025 IP address blocks: 2a14:7580:7b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:42:b4:c4:6e:e6:a4:02:aa:94:f6:25:40:e8:df:d0:ad:64:43:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Validity Not Before: Aug 19 18:30:41 2025 GMT Not After : Aug 18 18:35:41 2026 GMT Subject: CN=87405ADF854243AA447179CF0B5DC847A536E3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a0:91:8c:b8:88:d3:b7:2b:07:2d:9a:b7:54: 7d:f0:b0:9b:76:ef:9b:1f:63:79:46:00:55:fc:d5: 48:af:a6:86:f4:90:cb:0b:e0:85:c2:cf:80:f0:5a: 44:4b:14:92:2b:29:58:c5:58:67:78:bb:13:c1:8a: 1e:56:68:24:59:af:93:c0:67:7a:80:91:b8:c4:4b: 5c:e2:a7:e3:6d:22:12:d1:08:12:3a:82:e7:c0:95: 5e:ca:f0:49:be:66:39:5a:cc:93:95:a9:88:14:69: 85:c1:a9:62:1a:5c:aa:29:4f:3c:2b:a2:65:aa:7c: 2d:4c:18:fe:66:e7:17:bb:2d:2a:b8:ab:df:4f:fd: df:f7:20:23:29:99:b6:6c:f2:0f:a7:08:48:c5:87: 3a:33:49:9f:ec:33:9c:c2:18:49:e8:da:24:72:dc: de:78:12:26:3a:c2:fb:5c:5d:08:aa:8e:c8:8e:e2: 3a:8e:78:36:c0:7a:e9:cc:5e:26:af:d0:0c:34:a5: f4:d9:d0:96:ad:49:8a:06:0b:a3:a0:a4:8f:6c:6b: 3e:72:cf:26:45:16:35:c6:21:53:0e:fe:e5:b6:77: df:85:c3:e1:cb:86:b9:9c:53:b0:1c:f7:eb:37:77: e3:fd:3a:82:f0:d2:58:6f:7e:71:75:33:85:c6:92: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:40:5A:DF:85:42:43:AA:44:71:79:CF:0B:5D:C8:47:A5:36:E3:C2 X509v3 Authority Key Identifier: keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/326131343a373538303a3762313a3a2f34382d3438203d3e20313938303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:7b1::/48 Signature Algorithm: sha256WithRSAEncryption 40:96:2e:ac:ab:3b:43:47:63:0a:12:b0:83:54:df:01:50:1c: d3:74:13:61:11:56:61:64:ba:7e:33:42:15:be:8c:a6:34:a5: 7a:c8:0f:78:41:91:0e:11:13:39:c8:53:0f:54:e2:af:a7:7a: de:2e:78:d7:e3:e1:e6:f1:98:2d:6e:ce:5c:2d:03:d5:79:b7: 7e:ff:30:e6:18:a5:cf:5f:f0:34:a3:52:c6:de:2b:64:b9:a9: 41:a5:ee:4c:4a:f7:ac:26:75:75:45:1f:9f:82:c9:38:bd:30: 3a:8c:e8:35:83:8b:f8:36:72:30:1f:e4:39:6e:27:40:40:4b: 51:11:39:f9:9a:8e:e5:45:43:2c:97:a9:74:ef:0c:be:dc:76: 3f:d6:dc:e5:77:77:74:30:44:13:85:ed:9c:ba:b2:c3:f1:69: 28:f6:10:d5:8c:1c:f7:7a:bd:e6:3a:47:6e:db:71:6d:a8:da: f3:ca:77:d5:8a:a3:1e:a0:4d:73:5e:eb:51:79:e6:e1:e4:75: 3f:38:d0:95:e5:01:d1:7a:0c:8d:ea:89:b4:71:8b:3b:16:eb: bc:ad:9c:1a:93:2f:52:67:05:06:67:96:ee:ba:0f:51:5c:3a: 44:51:b8:65:dd:08:fa:92:e1:73:0a:f5:a5:b1:07:ab:4d:9c: 40:ae:ee:ef -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUEkK0xG7mpAKqlPYlQOjf0K1kQyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB MDA1M0M3OTAeFw0yNTA4MTkxODMwNDFaFw0yNjA4MTgxODM1NDFaMDMxMTAvBgNV BAMTKDg3NDA1QURGODU0MjQzQUE0NDcxNzlDRjBCNURDODQ3QTUzNkUzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdoJGMuIjTtysHLZq3VH3wsJt2 75sfY3lGAFX81Uivpob0kMsL4IXCz4DwWkRLFJIrKVjFWGd4uxPBih5WaCRZr5PA Z3qAkbjES1zip+NtIhLRCBI6gufAlV7K8Em+ZjlazJOVqYgUaYXBqWIaXKopTzwr omWqfC1MGP5m5xe7LSq4q99P/d/3ICMpmbZs8g+nCEjFhzozSZ/sM5zCGEno2iRy 3N54EiY6wvtcXQiqjsiO4jqOeDbAeunMXiav0Aw0pfTZ0JatSYoGC6OgpI9saz5y zyZFFjXGIVMO/uW2d9+Fw+HLhrmcU7Ac9+s3d+P9OoLw0lhvfnF1M4XGkpPPAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUh0Ba34VCQ6pEcXnPC13IR6U248IwHwYDVR0j BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND QkVFQkQzN0EwMDUzQzc5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9jNmZkNGVhMS1hMjY2LTRkZWEtYjQ4YS0xNWRhMzU0NTIxMDkvMi8zMjYxMzEz NDNhMzczNTM4MzAzYTM3NjIzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzkz ODMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoUdYAHsTANBgkqhkiG9w0BAQsFAAOCAQEAQJYu rKs7Q0djChKwg1TfAVAc03QTYRFWYWS6fjNCFb6MpjSlesgPeEGRDhETOchTD1Ti r6d63i541+Ph5vGYLW7OXC0D1Xm3fv8w5hilz1/wNKNSxt4rZLmpQaXuTEr3rCZ1 dUUfn4LJOL0wOozoNYOL+DZyMB/kOW4nQEBLURE5+ZqO5UVDLJepdO8Mvtx2P9bc 5Xd3dDBEE4XtnLqyw/FpKPYQ1Ywc93q95jpHbttxbaja88p31YqjHqBNc17rUXnm 4eR1PzjQleUB0XoMjeqJtHGLOxbrvK2cGpMvUmcFBmeW7roPUVw6RFG4Zd0I+pLh cwr1pbEHq02cQK7u7w== -----END CERTIFICATE-----Generated at Sat Aug 23 19:48:43 2025 by rpki-client