$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa File: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (raw, json) Hash identifier: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4= Subject key identifier: D9:BF:F9:25:54:11:D2:F6:05:AF:01:12:1F:CA:E9:BB:94:74:0B:FD Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 176E1B08D2D53F947C5F1822250ABD6D5C8A4FBF Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa Signing time: Wed 01 Oct 2025 08:45:15 +0000 ROA not before: Wed 01 Oct 2025 08:40:15 +0000 ROA not after: Wed 30 Sep 2026 08:45:15 +0000 asID: 215242 IP address blocks: 2a0f:85c1:7f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6e:1b:08:d2:d5:3f:94:7c:5f:18:22:25:0a:bd:6d:5c:8a:4f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Oct 1 08:40:15 2025 GMT Not After : Sep 30 08:45:15 2026 GMT Subject: CN=D9BFF9255411D2F605AF01121FCAE9BB94740BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:5b:8c:51:04:3d:4d:f6:82:68:da:07:71: 4a:3d:75:45:b7:63:71:d0:20:4f:e5:53:b6:82:b8: d1:8e:70:89:f1:b6:f3:92:c0:09:97:ae:cb:59:f0: 0c:42:dc:fb:03:5c:f9:51:af:88:62:97:f8:62:d9: ab:b5:80:f9:a0:ce:46:9d:52:01:0f:e8:ac:c3:b3: a7:20:62:6d:56:69:31:a9:5f:c3:25:d0:c1:fd:80: 8a:a9:d7:0c:57:fd:98:34:73:56:69:b9:c9:20:ea: 0d:71:28:1a:b1:e4:7d:f0:7a:42:55:ab:8d:6c:83: 7b:14:43:84:f4:5f:de:90:b6:19:ac:e0:66:c0:01: 3c:cf:5b:bd:82:f0:03:58:fb:e5:e1:1a:e2:c9:06: 23:54:3a:09:a7:13:a6:49:9f:d2:10:d2:50:03:ab: 43:ec:d1:ef:ac:56:cb:39:02:ef:f7:51:79:7d:c6: bb:04:b4:47:00:90:bc:8d:40:76:f3:74:2d:12:5e: 59:96:06:90:ec:3e:71:a1:f1:fa:9f:1b:64:5a:64: 5d:0a:da:01:ee:4a:e2:19:39:da:76:49:c2:c2:a7: 9a:fa:d5:3e:8f:b3:81:e4:1e:83:5a:43:57:4d:ad: 33:f7:2b:dd:5c:02:12:32:b6:1d:9e:0f:29:c7:ee: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BF:F9:25:54:11:D2:F6:05:AF:01:12:1F:CA:E9:BB:94:74:0B:FD X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:7f6::/48 Signature Algorithm: sha256WithRSAEncryption 3e:cf:ee:c8:73:40:ec:91:47:08:8d:56:5a:12:11:50:0c:b4: d5:ca:5e:8d:17:9b:bb:99:ff:db:8b:ca:22:7c:8b:3c:bc:3a: 6a:08:0f:0c:56:9d:34:82:42:72:ac:0c:40:04:32:87:65:46: f8:8f:71:36:38:50:b3:9d:3e:7d:1e:5b:d7:f9:2d:ec:99:21: 11:15:7f:31:8f:fe:bb:c0:08:5c:31:64:0a:db:96:b4:e6:39: 45:2d:72:5d:96:30:92:8e:7b:64:b9:7c:43:73:46:8b:01:eb: cf:a2:c2:97:50:0c:9c:2a:e3:12:4a:05:82:50:c3:cc:5e:d4: 74:a3:55:9f:dc:d3:fd:95:1d:1e:3a:f8:28:ff:56:1d:f3:e9: d3:3c:70:6c:cf:2a:a6:e2:ff:ea:e0:3e:5d:28:b2:63:8f:65: bc:b6:b4:7a:56:e5:97:fa:41:d1:61:bd:f6:1d:71:ca:cb:4a: 86:4e:bb:ec:8d:e3:23:a0:75:d7:0d:50:0b:0b:9a:53:77:57: 9d:37:a0:b7:0f:b5:d8:74:8e:c5:3b:bb:42:98:f3:75:c1:86: d1:6f:f7:1d:46:bb:e5:76:a8:9b:1b:41:aa:82:2d:75:80:ce: a7:a0:96:a2:ea:69:96:d6:8a:62:61:f5:d7:8e:bf:f9:11:b2: 1a:41:03:ed -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUF24bCNLVP5R8XxgiJQq9bVyKT78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTEwMDEwODQwMTVaFw0yNjA5MzAwODQ1MTVaMDMxMTAvBgNV BAMTKEQ5QkZGOTI1NTQxMUQyRjYwNUFGMDExMjFGQ0FFOUJCOTQ3NDBCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBFuMUQQ9TfaCaNoHcUo9dUW3 Y3HQIE/lU7aCuNGOcInxtvOSwAmXrstZ8AxC3PsDXPlRr4hil/hi2au1gPmgzkad UgEP6KzDs6cgYm1WaTGpX8Ml0MH9gIqp1wxX/Zg0c1Zpuckg6g1xKBqx5H3wekJV q41sg3sUQ4T0X96Qthms4GbAATzPW72C8ANY++XhGuLJBiNUOgmnE6ZJn9IQ0lAD q0Ps0e+sVss5Au/3UXl9xrsEtEcAkLyNQHbzdC0SXlmWBpDsPnGh8fqfG2RaZF0K 2gHuSuIZOdp2ScLCp5r61T6Ps4HkHoNaQ1dNrTP3K91cAhIyth2eDynH7ms3AgMB AAGjggKDMIICfzAdBgNVHQ4EFgQU2b/5JVQR0vYFrwESH8rpu5R0C/0wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kMDYzMzNjNi05NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTM3NjYzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEH9jANBgkqhkiG9w0BAQsFAAOCAQEAPs/u yHNA7JFHCI1WWhIRUAy01cpejRebu5n/24vKInyLPLw6aggPDFadNIJCcqwMQAQy h2VG+I9xNjhQs50+fR5b1/kt7JkhERV/MY/+u8AIXDFkCtuWtOY5RS1yXZYwko57 ZLl8Q3NGiwHrz6LCl1AMnCrjEkoFglDDzF7UdKNVn9zT/ZUdHjr4KP9WHfPp0zxw bM8qpuL/6uA+XSiyY49lvLa0elbll/pB0WG99h1xystKhk677I3jI6B11w1QCwua U3dXnTegtw+12HSOxTu7QpjzdcGG0W/3HUa75XaomxtBqoItdYDOp6CWouppltaK YmH1146/+RGyGkED7Q== -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:14 2025 by rpki-client