$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663734303a3a2f34342d3434203d3e203134363138.roa File: 326130353a646663333a663734303a3a2f34342d3434203d3e203134363138.roa (raw, json) Hash identifier: yy7/MVZEAZOPozsGgAvpn22MZFeeZqoJEb/eecpvNmo= Subject key identifier: 4E:A8:11:C3:97:C4:E0:B5:DF:CC:1A:DC:15:01:3A:B9:C0:B6:E6:1B Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 03FE5C1524F4C6E240D2954C5E9DC4BF85AE6617 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663734303a3a2f34342d3434203d3e203134363138.roa Signing time: Thu 12 Jun 2025 12:11:57 +0000 ROA not before: Thu 12 Jun 2025 12:06:57 +0000 ROA not after: Thu 11 Jun 2026 12:11:57 +0000 asID: 14618 IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 13:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fe:5c:15:24:f4:c6:e2:40:d2:95:4c:5e:9d:c4:bf:85:ae:66:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 12 12:06:57 2025 GMT Not After : Jun 11 12:11:57 2026 GMT Subject: CN=4EA811C397C4E0B5DFCC1ADC15013AB9C0B6E61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:33:4a:9b:87:d4:04:6d:04:b9:de:38:65: 29:05:a1:79:eb:2d:7f:d0:8a:b1:ee:6d:76:40:ef: e1:04:d7:63:7d:19:d5:cd:06:84:6d:c1:cc:17:9d: 2a:be:53:73:be:ea:f1:9b:3b:0a:c5:02:c8:bf:0c: e5:7e:f4:67:fd:82:8a:ab:4a:d6:13:ca:75:a3:44: 73:f5:2f:98:ba:b4:d3:b3:b6:a3:ce:d9:2c:51:7a: b4:d8:2c:5a:e9:a0:99:22:a1:04:94:2d:1d:5c:3b: c2:03:3c:c5:ae:5b:61:d5:d4:b5:56:4a:c0:f0:79: 3b:74:2e:41:9f:2c:07:2b:54:db:e3:89:74:00:8e: 90:74:a0:dd:90:20:e0:26:96:3f:36:fb:35:97:f4: 59:5c:02:a3:17:e5:f1:fa:ed:5b:74:78:d9:35:64: 9d:09:15:72:a3:5c:80:70:d5:e8:02:a3:cf:6c:01: 1a:16:3f:d4:58:f3:03:35:2e:92:28:8f:6a:b7:7e: 38:d7:e6:f9:34:ee:06:4a:36:17:b7:c7:ca:4a:2b: 65:51:d6:e4:3a:b1:f5:50:5f:ef:d7:2a:3f:94:c6: 82:1b:6d:ca:2f:14:18:4f:dd:5e:17:e1:e3:4d:d8: ac:fc:5e:81:dd:a4:00:4d:bc:1a:9e:6e:a4:b0:aa: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:11:C3:97:C4:E0:B5:DF:CC:1A:DC:15:01:3A:B9:C0:B6:E6:1B X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130353a646663333a663734303a3a2f34342d3434203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f740::/44 Signature Algorithm: sha256WithRSAEncryption b0:2c:71:84:d9:c2:62:5e:a4:c3:a3:9c:63:ae:59:f0:64:d3: a4:b4:e9:c1:6c:4e:24:05:11:39:07:8d:9b:85:25:9e:a7:14: c7:ef:8e:f6:4f:67:77:cd:92:45:e4:31:74:f4:f8:e7:d3:66: 57:a5:81:30:82:d9:9f:7d:71:0c:a6:56:ff:c1:81:72:43:8e: 31:49:11:bc:18:8d:3b:8e:72:f0:4d:6a:3b:29:96:57:49:ca: cd:64:70:1c:c2:7c:f1:92:0b:c7:ec:0b:a8:68:81:5d:28:bb: af:b4:ea:f2:7d:e8:e0:99:45:e5:27:bf:e9:49:15:be:fa:b4: ea:4f:c4:75:4a:59:5b:cd:76:57:13:34:3f:f2:0f:10:2b:db: d6:7d:e3:2b:f2:58:d5:7e:38:49:de:8e:b0:e8:7f:99:4d:6b: d0:87:f8:e4:ca:eb:ce:0b:fb:46:26:4c:22:e5:14:f5:bd:4d: f3:1c:68:b9:7b:e3:51:a9:5d:bc:86:00:00:85:a3:d0:1b:20: ff:28:0e:cb:63:08:17:64:18:9b:cf:1f:f4:a1:aa:c5:cc:ac: 8d:1f:ca:4c:d7:20:23:a4:5f:b1:c6:08:81:47:d1:da:f9:5e: b4:3d:39:e2:1d:2e:68:ce:20:ca:3c:b8:8c:bc:ec:4e:7e:74: 2d:35:09:18 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUA/5cFST0xuJA0pVMXp3Ev4WuZhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MTIxMjA2NTdaFw0yNjA2MTExMjExNTdaMDMxMTAvBgNV BAMTKDRFQTgxMUMzOTdDNEUwQjVERkNDMUFEQzE1MDEzQUI5QzBCNkU2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRjNKm4fUBG0Eud44ZSkFoXnr LX/QirHubXZA7+EE12N9GdXNBoRtwcwXnSq+U3O+6vGbOwrFAsi/DOV+9Gf9goqr StYTynWjRHP1L5i6tNOztqPO2SxRerTYLFrpoJkioQSULR1cO8IDPMWuW2HV1LVW SsDweTt0LkGfLAcrVNvjiXQAjpB0oN2QIOAmlj82+zWX9FlcAqMX5fH67Vt0eNk1 ZJ0JFXKjXIBw1egCo89sARoWP9RY8wM1LpIoj2q3fjjX5vk07gZKNhe3x8pKK2VR 1uQ6sfVQX+/XKj+UxoIbbcovFBhP3V4X4eNN2Kz8XoHdpABNvBqebqSwqnuNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUTqgRw5fE4LXfzBrcFQE6ucC25hswHwYDVR0j BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwMzUzYTY0NjY2MzMz M2E2NjM3MzQzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMxMzQzNjMxMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQqBd/D90AwDQYJKoZIhvcNAQELBQADggEBALAscYTZwmJepMOjnGOu WfBk06S06cFsTiQFETkHjZuFJZ6nFMfvjvZPZ3fNkkXkMXT0+OfTZlelgTCC2Z99 cQymVv/BgXJDjjFJEbwYjTuOcvBNajsplldJys1kcBzCfPGSC8fsC6hogV0ou6+0 6vJ96OCZReUnv+lJFb76tOpPxHVKWVvNdlcTND/yDxAr29Z94yvyWNV+OEnejrDo f5lNa9CH+OTK684L+0YmTCLlFPW9TfMcaLl741GpXbyGAACFo9AbIP8oDstjCBdk GJvPH/ShqsXMrI0fykzXICOkX7HGCIFH0dr5XrQ9OeIdLmjOIMo8uIy87E5+dC01 CRg= -----END CERTIFICATE-----Generated at Mon Jun 30 16:10:44 2025 by rpki-client