$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa File: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (raw, json) Hash identifier: M7xni9tUw4FgGBy+9A8F+8BP803MsR5hQGX9/GC08aM= Subject key identifier: 1A:39:52:BD:AD:6B:9E:67:DC:B6:04:1B:FA:8F:EB:44:38:F8:F4:E4 Certificate issuer: /CN=26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532 Certificate serial: 47965BAA03016FFBA1DE5A9759E7485EED97720B Authority key identifier: 26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa Signing time: Mon 23 Jun 2025 14:58:29 +0000 ROA not before: Mon 23 Jun 2025 14:53:29 +0000 ROA not after: Mon 22 Jun 2026 14:58:29 +0000 asID: 214723 IP address blocks: 2a0a:6044:ba02::/47 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 20:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:96:5b:aa:03:01:6f:fb:a1:de:5a:97:59:e7:48:5e:ed:97:72:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532 Validity Not Before: Jun 23 14:53:29 2025 GMT Not After : Jun 22 14:58:29 2026 GMT Subject: CN=1A3952BDAD6B9E67DCB6041BFA8FEB4438F8F4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:c5:97:a3:b1:28:c2:28:8e:1a:3c:75:aa: 0d:a4:89:5a:81:73:9e:96:a2:8e:01:7b:d5:a6:91: dc:b0:d4:46:f5:d3:ee:c6:ea:c4:72:aa:db:75:64: c3:04:c9:18:87:20:29:e5:74:67:fd:be:9d:27:c4: bb:7f:13:2c:92:04:7d:31:9b:71:02:4d:00:b3:6e: 3f:f7:d4:4e:57:20:e7:9c:c5:8b:fb:0e:55:fe:87: 65:64:69:9f:83:e0:fc:7f:f4:30:df:a2:ec:f7:a3: 9b:d5:f5:ed:e3:b1:d3:ee:17:ae:40:7e:58:3f:73: 2f:e3:fd:67:33:16:82:03:07:b6:21:af:ce:00:17: 11:3b:f5:76:c9:b2:9a:5f:dc:37:ef:a7:57:7b:1c: d2:57:e7:35:41:19:9f:35:a9:bc:41:14:e5:d6:cd: 70:d9:c3:50:34:51:62:df:79:53:14:8d:df:72:b5: e1:6a:bf:92:4e:d6:2a:c7:a6:a4:c1:20:ab:2e:b5: 50:8d:8f:aa:58:2e:ce:bd:d5:c9:b2:e0:7b:c3:80: 83:c9:16:d7:39:77:24:1d:38:fa:32:f4:44:83:5b: 32:e5:6e:56:4d:75:36:d2:c7:1c:81:01:10:c5:48: d8:94:39:d0:f7:62:00:87:47:80:a1:94:65:35:6f: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:39:52:BD:AD:6B:9E:67:DC:B6:04:1B:FA:8F:EB:44:38:F8:F4:E4 X509v3 Authority Key Identifier: keyid:26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba02::/47 Signature Algorithm: sha256WithRSAEncryption 7b:1c:db:be:cd:ad:37:f5:2a:2f:5f:3b:4c:26:19:b2:80:c3: 3e:81:c9:44:eb:83:03:8f:22:4a:f2:66:b2:81:ae:a9:fe:2d: d5:3e:7c:16:b9:9e:11:c0:18:bb:be:d3:c1:ab:7a:79:8b:4f: 83:9e:1d:bc:f3:72:e7:83:eb:a1:5a:9d:7b:7c:49:21:e6:c5: db:f7:e6:a3:f0:94:29:97:32:0b:0f:ae:61:2c:79:9d:47:75: 7a:df:e4:c6:d4:fc:32:d2:3c:ee:ad:6b:1f:f2:e0:c0:70:5f: 1d:0d:18:ac:c6:b6:32:55:e4:cc:75:af:99:78:5c:74:20:15: 2b:93:10:9e:a6:69:d3:16:56:74:2f:b1:19:03:5f:82:70:54: cd:1b:73:e3:dd:62:f0:0f:2b:1c:2e:ae:fa:d3:27:c7:05:63: 87:ae:5c:de:87:1d:a8:ec:bc:5a:5a:31:8c:62:05:99:bb:6d: 1a:49:45:e5:85:39:31:2b:56:d6:a1:d6:9d:9f:b7:c4:5b:26: 2e:48:32:99:df:23:72:f2:ed:f3:e5:db:78:5f:b9:66:73:21: bc:23:cb:8c:13:36:dc:dd:56:b0:f8:ed:f9:48:0d:c4:00:38: 9e:e1:87:39:dc:29:9a:b9:71:39:ce:f9:19:74:7f:77:36:ee: 2d:51:ea:78 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUR5ZbqgMBb/uh3lqXWedIXu2XcgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY4NjBFRUVGQjc4MzRFRDE1REM5QkE3RjJDQThDOEJB NEZBMDUzMjAeFw0yNTA2MjMxNDUzMjlaFw0yNjA2MjIxNDU4MjlaMDMxMTAvBgNV BAMTKDFBMzk1MkJEQUQ2QjlFNjdEQ0I2MDQxQkZBOEZFQjQ0MzhGOEY0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+R8WXo7EowiiOGjx1qg2kiVqB c56Woo4Be9Wmkdyw1Eb10+7G6sRyqtt1ZMMEyRiHICnldGf9vp0nxLt/EyySBH0x m3ECTQCzbj/31E5XIOecxYv7DlX+h2VkaZ+D4Px/9DDfouz3o5vV9e3jsdPuF65A flg/cy/j/WczFoIDB7Yhr84AFxE79XbJsppf3Dfvp1d7HNJX5zVBGZ81qbxBFOXW zXDZw1A0UWLfeVMUjd9yteFqv5JO1irHpqTBIKsutVCNj6pYLs691cmy4HvDgIPJ Ftc5dyQdOPoy9ESDWzLlblZNdTbSxxyBARDFSNiUOdD3YgCHR4ChlGU1b3x1AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGjlSva1rnmfctgQb+o/rRDj49OQwHwYDVR0j BBgwFoAUJoYO7vt4NO0V3Jun8sqMi6T6BTIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzQvMjY4NjBFRUVGQjc4MzRFRDE1REM5QkE3RjJDQThDOEJBNEZBMDUzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8yNjg2MEVFRUZCNzgzNEVEMTVEQzlCQTdG MkNBOEM4QkE0RkEwNTMyLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcvNC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyNjEzMDMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz MTM0MzczMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcBKgpgRLoCMA0GCSqGSIb3DQEBCwUAA4IBAQB7 HNu+za039SovXztMJhmygMM+gclE64MDjyJK8mayga6p/i3VPnwWuZ4RwBi7vtPB q3p5i0+Dnh2883Lng+uhWp17fEkh5sXb9+aj8JQplzILD65hLHmdR3V63+TG1Pwy 0jzurWsf8uDAcF8dDRisxrYyVeTMda+ZeFx0IBUrkxCepmnTFlZ0L7EZA1+CcFTN G3Pj3WLwDyscLq760yfHBWOHrlzehx2o7LxaWjGMYgWZu20aSUXlhTkxK1bWodad n7fEWyYuSDKZ3yNy8u3z5dt4X7lmcyG8I8uMEzbc3Vaw+O35SA3EADie4Yc53Cma uXE5zvkZdH93Nu4tUep4 -----END CERTIFICATE-----Generated at Mon Jun 30 08:04:10 2025 by rpki-client